This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft File: eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json) Hash identifier: MuN8uWHQINccXOs5uLYQTo6M2SsK/jIcFc2TffvQseI= Subject key identifier: 89:1D:89:CC:51:AE:72:03:82:2C:E7:0D:DC:66:31:5C:9C:00:74:FF Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10 Certificate issuer: /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210 Certificate serial: 019B60C15118AE99DB371CF04E09301D006C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft Manifest number: 0343 Signing time: Sat 27 Dec 2025 17:00:40 +0000 Manifest this update: Sat 27 Dec 2025 17:00:40 +0000 Manifest next update: Sun 28 Dec 2025 17:00:40 +0000 Files and hashes: 1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: ySoGcz0YZJIWEbZ1dDCA/nykladm6y4k8SAQeBrERBE=) 2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:c1:51:18:ae:99:db:37:1c:f0:4e:09:30:1d:00:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210 Validity Not Before: Dec 27 17:00:40 2025 GMT Not After : Dec 28 17:00:40 2025 GMT Subject: CN=891d89cc51ae7203822ce70ddc66315c9c0074ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:84:77:15:d7:b0:40:69:a9:c9:72:c9:da:ff: fe:a5:90:f6:b5:be:af:be:8e:cf:bf:a6:ed:5f:a1: 9b:c1:fb:f9:5c:47:46:22:e8:24:77:76:93:63:ba: 1b:b8:b1:45:0a:83:34:53:f2:05:99:7a:67:5d:12: c4:b1:e2:f2:45:29:66:98:d9:51:5a:8e:be:af:ed: fe:21:f6:b1:12:d5:ce:d6:03:9c:2c:54:b3:1f:b9: 97:c6:6c:b2:26:e5:1b:d9:32:dc:eb:73:4c:54:0a: 71:b2:65:2a:cc:2f:02:a2:67:f7:5f:95:34:ce:40: e8:4b:28:33:7a:cb:9e:9d:ea:63:dd:8c:49:60:d5: 27:27:1e:c9:30:9e:e7:61:27:66:bb:e9:1c:e7:39: 47:57:64:7f:7a:e3:42:d2:ab:9f:e6:5c:e3:9e:d7: ab:23:fb:6a:52:e9:df:8d:d7:88:14:38:a0:de:12: 2c:ff:b5:a6:a4:5c:ab:90:c9:ff:ce:16:e7:b4:1e: e9:3e:87:ef:04:1e:8d:de:8d:c9:98:1c:9d:10:f2: 9e:ac:4c:2f:11:49:02:91:12:bb:57:36:42:99:ad: 4f:66:20:39:6d:a2:fb:dc:a3:26:d5:2e:c4:7a:9e: 74:15:02:29:31:58:da:d5:12:d0:fa:35:48:5b:d9: 89:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1D:89:CC:51:AE:72:03:82:2C:E7:0D:DC:66:31:5C:9C:00:74:FF X509v3 Authority Key Identifier: keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:16:6d:1f:e4:bb:23:4c:9e:46:fb:85:16:9f:39:87:4b:09: 3e:2b:f1:46:fb:eb:16:6e:04:81:b5:2c:9e:42:16:24:5b:a8: de:95:02:1f:e7:b0:e4:45:60:48:52:24:41:17:9d:6e:ba:1b: b3:9b:6d:a8:4a:bf:6d:3c:da:e3:cd:0d:a8:b5:e2:24:7f:6a: 10:95:96:1f:04:99:7c:4a:d2:9b:37:60:cc:b5:b5:7f:46:89: f0:c2:fa:2d:21:93:71:58:d7:74:1a:85:c5:40:70:87:eb:55: 64:31:62:e4:1a:78:57:be:0e:84:43:bd:52:c1:7b:a5:ff:84: df:cd:3d:56:b7:b1:e2:fd:f3:2e:af:f9:c5:23:10:38:fa:59: 34:15:de:04:7a:6f:76:b9:f9:6d:13:04:aa:ea:c2:33:7b:4a: fa:5c:61:d1:78:f7:7b:29:03:28:9c:89:65:07:7e:17:d5:93: e2:2a:36:03:18:91:fc:fe:40:f4:7b:18:ac:c9:23:e7:a7:bd: 85:2d:98:09:24:ab:cb:7f:3a:8f:c3:73:2f:5c:59:b9:8e:32: 0c:a7:81:39:48:19:66:14:f8:88:df:2f:8f:74:3b:0b:14:64: 43:4d:3f:d7:ac:e7:0f:17:09:e3:5e:09:d3:02:85:1f:5e:5b: bb:92:e9:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgwVEYrpnbNxzwTgkwHQBsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTZhOGM3ZTliYTA5ZDJmMWQ0NDg2MzY3MGJlMjEzZmMw Y2EyMTAwHhcNMjUxMjI3MTcwMDQwWhcNMjUxMjI4MTcwMDQwWjAzMTEwLwYDVQQD Eyg4OTFkODljYzUxYWU3MjAzODIyY2U3MGRkYzY2MzE1YzljMDA3NGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYR3FdewQGmpyXLJ2v/+pZD2tb6v vo7Pv6btX6Gbwfv5XEdGIugkd3aTY7obuLFFCoM0U/IFmXpnXRLEseLyRSlmmNlR Wo6+r+3+IfaxEtXO1gOcLFSzH7mXxmyyJuUb2TLc63NMVApxsmUqzC8Comf3X5U0 zkDoSygzesuenepj3YxJYNUnJx7JMJ7nYSdmu+kc5zlHV2R/euNC0quf5lzjnter I/tqUunfjdeIFDig3hIs/7WmpFyrkMn/zhbntB7pPofvBB6N3o3JmBydEPKerEwv EUkCkRK7VzZCma1PZiA5baL73KMm1S7Eep50FQIpMVja1RLQ+jVIW9mJNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkdicxRrnIDgiznDdxmMVycAHT/MB8GA1UdIwQY MBaAFHiWqMfpugnS8dRIY2cL4hP8DKIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMt NjE3OGRiZmZmNTU1LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMtNjE3OGRiZmZmNTU1 LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIxZtH+S7 I0yeRvuFFp85h0sJPivxRvvrFm4EgbUsnkIWJFuo3pUCH+ew5EVgSFIkQRedbrob s5ttqEq/bTza480NqLXiJH9qEJWWHwSZfErSmzdgzLW1f0aJ8ML6LSGTcVjXdBqF xUBwh+tVZDFi5Bp4V74OhEO9UsF7pf+E3809Vrex4v3zLq/5xSMQOPpZNBXeBHpv drn5bRMEqurCM3tK+lxh0Xj3eykDKJyJZQd+F9WT4io2AxiR/P5A9HsYrMkj56e9 hS2YCSSry386j8NzL1xZuY4yDKeBOUgZZhT4iN8vj3Q7CxRkQ00/16znDxcJ414J 0wKFH15bu5LpYw== -----END CERTIFICATE-----Generated at Sun Dec 28 03:18:15 2025 by rpki-client