This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json) Hash identifier: o8ZkExuGK0WPuKfhaZIvZUHPYP4KvCWcIcIrMER/FRg= Subject key identifier: FD:C7:85:FC:6D:FB:FD:DD:50:F1:85:3C:12:62:92:D0:92:76:CB:CD Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Certificate serial: 019B70A2AFEF7702D0FF829D24460C9F236E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 19:01:08 +0000 Manifest this update: Tue 30 Dec 2025 19:01:08 +0000 Manifest next update: Wed 31 Dec 2025 19:01:08 +0000 Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=) 2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: dq9mLqS8hySW5dMjQ3c0oI46g7CPQUNZ81YCABAf1XM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:af:ef:77:02:d0:ff:82:9d:24:46:0c:9f:23:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Validity Not Before: Dec 30 19:01:08 2025 GMT Not After : Dec 31 19:01:08 2025 GMT Subject: CN=fdc785fc6dfbfddd50f1853c126292d09276cbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:bc:74:bd:e9:97:5a:b0:17:d7:b4:25:8a: 58:10:2e:12:6d:e8:e1:60:ba:7c:36:4a:bf:71:f8: ba:3a:ef:93:17:75:9f:e0:c8:20:fb:68:af:48:96: 87:e1:56:da:84:58:29:11:68:d0:57:e5:3e:ba:63: de:de:b2:73:18:bb:ba:a0:cf:3b:80:a4:f1:2c:cd: 51:b6:b8:b2:a2:28:cd:23:44:43:e2:fd:9b:9e:51: bc:95:90:8f:48:79:40:3e:26:49:0e:4a:81:3e:c6: ef:34:c2:f6:7e:5b:f9:f6:4e:62:db:34:ee:51:41: 96:ec:19:ab:3a:34:2f:c2:14:96:3a:0d:37:6c:ec: d3:7f:f2:bf:8b:0b:8b:5c:eb:75:49:5d:d8:e4:20: 45:ac:f5:39:70:0d:f3:17:f2:fa:03:cf:d4:92:54: 91:6e:01:73:51:41:db:72:80:0b:51:d7:98:8d:2c: f5:e4:30:4b:f6:06:f5:dd:b2:cb:7f:28:88:26:3a: 30:fb:7b:f0:70:e6:d2:ac:42:7c:8f:d6:43:ec:de: 82:cd:8f:5f:12:f2:93:e8:76:e4:e2:c4:e9:cc:e8: c0:6a:a5:55:c7:41:6e:a3:3e:b6:d8:ed:f0:8c:54: cc:d1:cd:00:4c:6f:4a:30:4e:4e:3a:f6:c3:da:d1: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:C7:85:FC:6D:FB:FD:DD:50:F1:85:3C:12:62:92:D0:92:76:CB:CD X509v3 Authority Key Identifier: keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:5c:d1:e6:c3:56:2a:85:d4:62:4c:a3:03:40:f7:c7:af:e6: 35:90:92:b2:07:cd:5e:d2:33:13:c4:c9:f4:c4:3d:0d:2a:79: 6e:d3:73:17:50:c3:13:2c:69:4f:3f:d2:40:4a:b1:86:0c:31: ae:ff:a8:ab:d5:42:5f:0e:39:3e:a9:cc:9e:a1:2c:63:90:c8: cd:0d:6e:f2:7f:e0:bc:f9:11:46:f9:7f:90:af:05:d9:47:c7: 11:dd:60:5b:b2:81:54:53:32:5f:2d:c2:26:80:8e:2c:78:86: 2a:c3:af:34:22:7c:2a:7c:94:54:e2:10:15:02:b3:03:a9:4f: 01:f1:b8:15:38:b1:42:d2:8c:1b:24:6b:61:16:70:e8:8d:45: 12:54:e6:7f:4a:67:dd:6f:6a:74:6d:6f:42:ad:e2:b3:49:e1: 81:33:af:74:fc:95:ac:65:a0:e7:05:3c:3d:18:f0:c3:43:4c: 6a:0b:73:34:b0:b2:50:6b:24:b2:17:12:80:64:b8:9b:c2:b3: 69:8c:d5:e9:db:52:55:84:c1:96:a1:ec:ad:ba:17:fe:12:c2: 08:b8:cd:32:9c:64:e9:98:0a:22:23:9a:62:cf:37:cd:e4:ef: 5b:5d:88:c1:9f:ab:36:21:97:3b:13:f3:0c:1b:c4:17:e7:18: 5e:81:05:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwoq/vdwLQ/4KdJEYMnyNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi ZDg1N2QwHhcNMjUxMjMwMTkwMTA4WhcNMjUxMjMxMTkwMTA4WjAzMTEwLwYDVQQD EyhmZGM3ODVmYzZkZmJmZGRkNTBmMTg1M2MxMjYyOTJkMDkyNzZjYmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4G8dL3pl1qwF9e0JYpYEC4Sbejh YLp8Nkq/cfi6Ou+TF3Wf4Mgg+2ivSJaH4VbahFgpEWjQV+U+umPe3rJzGLu6oM87 gKTxLM1RtriyoijNI0RD4v2bnlG8lZCPSHlAPiZJDkqBPsbvNML2flv59k5i2zTu UUGW7BmrOjQvwhSWOg03bOzTf/K/iwuLXOt1SV3Y5CBFrPU5cA3zF/L6A8/UklSR bgFzUUHbcoALUdeYjSz15DBL9gb13bLLfyiIJjow+3vwcObSrEJ8j9ZD7N6CzY9f EvKT6Hbk4sTpzOjAaqVVx0Fuoz622O3wjFTM0c0ATG9KME5OOvbD2tGgTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3Hhfxt+/3dUPGFPBJiktCSdsvNMB8GA1UdIwQY MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt NmQ2ZjU1OGE3ZDY1LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1 LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW1zR5sNW KoXUYkyjA0D3x6/mNZCSsgfNXtIzE8TJ9MQ9DSp5btNzF1DDEyxpTz/SQEqxhgwx rv+oq9VCXw45PqnMnqEsY5DIzQ1u8n/gvPkRRvl/kK8F2UfHEd1gW7KBVFMyXy3C JoCOLHiGKsOvNCJ8KnyUVOIQFQKzA6lPAfG4FTixQtKMGyRrYRZw6I1FElTmf0pn 3W9qdG1vQq3is0nhgTOvdPyVrGWg5wU8PRjww0NMagtzNLCyUGskshcSgGS4m8Kz aYzV6dtSVYTBlqHsrboX/hLCCLjNMpxk6ZgKIiOaYs83zeTvW12IwZ+rNiGXOxPz DBvEF+cYXoEF7A== -----END CERTIFICATE-----Generated at Tue Dec 30 21:59:53 2025 by rpki-client