This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json) Hash identifier: QOqjpdnEhnYxJ+58W1lhe5E6xWEiMAypcNUAnaT6x30= Subject key identifier: 7D:A5:B6:CF:AE:6F:A5:FD:45:27:09:0E:C7:DD:B9:C8:9F:80:02:6D Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a Certificate serial: 019B620AF401036B5BEA3C195F2B16FE3BC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft Manifest number: 0E88 Signing time: Sat 27 Dec 2025 23:00:43 +0000 Manifest this update: Sat 27 Dec 2025 23:00:43 +0000 Manifest next update: Sun 28 Dec 2025 23:00:43 +0000 Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=) 2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: i0lDufMxxs9YfMgpmZM63M/rirH+aowQhCKd09N5Q+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 23:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:0a:f4:01:03:6b:5b:ea:3c:19:5f:2b:16:fe:3b:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a Validity Not Before: Dec 27 23:00:43 2025 GMT Not After : Dec 28 23:00:43 2025 GMT Subject: CN=7da5b6cfae6fa5fd4527090ec7ddb9c89f80026d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a9:6a:a1:99:4e:d8:97:cf:a5:cd:57:5d:4a: 6b:3b:07:2b:4d:f9:6b:fc:95:4f:f1:56:f1:e6:97: e5:cd:4a:96:39:22:18:5d:41:9f:c4:f4:bd:1b:9b: 65:dd:b1:35:80:05:e6:68:45:ea:44:30:9c:1b:dc: c6:5f:35:24:f7:ed:9b:9c:e7:3c:59:eb:c5:0a:f8: 5c:97:6c:23:24:91:d4:5c:d7:fa:6d:8a:ea:52:4a: d3:fd:d5:bb:b1:09:46:94:27:5f:99:60:d9:f6:ad: 4a:8f:ea:6f:35:f5:dd:6f:e0:e6:0c:7e:37:b3:5e: 21:6c:e6:2e:d1:de:22:06:4f:db:fe:15:d3:49:32: 28:21:30:b1:a7:68:9e:f0:68:63:96:0b:1e:b3:a9: f4:31:59:34:9d:40:36:f1:cc:99:78:4f:38:b2:e7: b1:d9:36:a4:03:f9:cd:f3:31:b8:99:2a:60:9e:aa: b3:dc:e1:7b:dc:2f:ae:fd:68:f9:09:07:5a:d7:96: a1:0e:ba:87:d6:77:87:1a:11:56:5d:ae:5b:5f:15: bf:b1:1f:43:85:b3:3e:43:dd:ef:07:c4:b4:d5:76: f8:2b:e4:b6:96:58:cb:a5:b0:17:4a:e8:50:67:ef: 03:ab:d2:31:d0:d2:50:13:8d:2c:4e:e5:7c:9b:d7: fe:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A5:B6:CF:AE:6F:A5:FD:45:27:09:0E:C7:DD:B9:C8:9F:80:02:6D X509v3 Authority Key Identifier: keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:ed:53:90:77:84:74:1c:e0:a3:51:80:59:0d:63:4d:e6:02: da:d0:29:dd:bd:04:ac:bf:da:97:d0:9d:5e:a7:7b:69:37:67: 21:1c:f9:66:67:82:ce:4a:f5:e9:b6:1e:c3:27:be:6d:68:3b: 4a:12:52:eb:95:82:87:2d:97:75:8d:b3:d8:cb:02:61:a1:5e: 88:b7:9d:cc:3b:c8:cb:06:57:8a:51:60:1c:73:96:6a:a9:71: 9c:ff:e5:5f:90:29:a7:f9:ba:a3:76:11:55:0e:40:e8:cc:12: 18:9d:0a:1f:75:74:da:88:e6:3b:26:4a:b4:45:29:77:e4:6a: 37:79:04:43:a0:2b:46:9f:d9:e0:fe:68:0b:bb:be:70:cf:2b: c4:04:d7:1a:b8:e8:6a:07:c3:5a:ad:70:03:e1:75:c1:e9:fe: 66:33:d9:aa:1c:d0:e6:e7:5c:94:34:3b:93:24:f8:83:e9:4f: 83:94:31:ff:06:22:28:d3:2f:d7:d7:c6:13:0c:6b:00:c6:c1: 37:b3:c7:86:cc:ab:17:46:06:aa:2d:c1:e3:39:5f:3f:30:7c: e7:82:e2:99:02:b1:fd:59:34:29:88:68:c1:70:07:bd:e3:a6: ec:c4:be:ed:fa:f5:61:fd:35:49:a4:3f:de:42:c4:28:e1:e8: dc:1e:56:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtiCvQBA2tb6jwZXysW/jvJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGJjYjU0MzJhNDVmMjViMDQxMDM5NjdhYjQwM2MyOWQw ZDQzMGEwHhcNMjUxMjI3MjMwMDQzWhcNMjUxMjI4MjMwMDQzWjAzMTEwLwYDVQQD Eyg3ZGE1YjZjZmFlNmZhNWZkNDUyNzA5MGVjN2RkYjljODlmODAwMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKlqoZlO2JfPpc1XXUprOwcrTflr /JVP8Vbx5pflzUqWOSIYXUGfxPS9G5tl3bE1gAXmaEXqRDCcG9zGXzUk9+2bnOc8 WevFCvhcl2wjJJHUXNf6bYrqUkrT/dW7sQlGlCdfmWDZ9q1Kj+pvNfXdb+DmDH43 s14hbOYu0d4iBk/b/hXTSTIoITCxp2ie8Ghjlgses6n0MVk0nUA28cyZeE84suex 2TakA/nN8zG4mSpgnqqz3OF73C+u/Wj5CQda15ahDrqH1neHGhFWXa5bXxW/sR9D hbM+Q93vB8S01Xb4K+S2lljLpbAXSuhQZ+8Dq9Ix0NJQE40sTuV8m9f+YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2lts+ub6X9RScJDsfducifgAJtMB8GA1UdIwQY MBaAFHmLy1QypF8lsEEDlnq0A8KdDUMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQt MTFiMjkwNTI1MjhkLzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQtMTFiMjkwNTI1Mjhk LzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAte1TkHeE dBzgo1GAWQ1jTeYC2tAp3b0ErL/al9CdXqd7aTdnIRz5ZmeCzkr16bYewye+bWg7 ShJS65WChy2XdY2z2MsCYaFeiLedzDvIywZXilFgHHOWaqlxnP/lX5App/m6o3YR VQ5A6MwSGJ0KH3V02ojmOyZKtEUpd+RqN3kEQ6ArRp/Z4P5oC7u+cM8rxATXGrjo agfDWq1wA+F1wen+ZjPZqhzQ5udclDQ7kyT4g+lPg5Qx/wYiKNMv19fGEwxrAMbB N7PHhsyrF0YGqi3B4zlfPzB854LimQKx/Vk0KYhowXAHveOm7MS+7fr1Yf01SaQ/ 3kLEKOHo3B5WMQ== -----END CERTIFICATE-----Generated at Sun Dec 28 09:07:02 2025 by rpki-client