This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json) Hash identifier: INm5U0CwLfTC/Ih/Qot2ZEHAq5x59ETwCvg/XOtLzPI= Subject key identifier: BB:EA:9A:D6:F3:B1:28:B4:86:5D:B8:59:AB:BA:38:37:5B:01:22:6C Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Certificate serial: 019B7291558F115BCA63A98B77CB1D75E102 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft Manifest number: 17A3 Signing time: Wed 31 Dec 2025 04:01:25 +0000 Manifest this update: Wed 31 Dec 2025 04:01:25 +0000 Manifest next update: Thu 01 Jan 2026 04:01:25 +0000 Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=) 2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: E1BYfaiHjjShFzjQlcfUKwKqj+b91o6qXH+ayNfJeNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:72:91:55:8f:11:5b:ca:63:a9:8b:77:cb:1d:75:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Validity Not Before: Dec 31 04:01:25 2025 GMT Not After : Jan 1 04:01:25 2026 GMT Subject: CN=bbea9ad6f3b128b4865db859abba38375b01226c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:97:73:33:9c:73:bc:9b:0e:fa:6a:b8:86:fb: 01:27:45:7e:b6:3c:32:b9:13:21:60:66:02:43:e6: a2:2a:b2:4a:fe:39:d2:e2:e3:be:7c:17:77:e3:9d: ab:41:f6:e9:09:41:d6:01:5b:4b:89:fd:89:3e:79: 8b:39:bd:ac:5f:bf:35:64:c9:e5:b2:1c:ae:29:7f: b6:9b:ad:80:f1:7d:36:cb:d2:54:55:d4:9d:54:10: ff:96:f1:10:da:6d:58:5d:27:62:35:e0:e7:80:d8: c8:e9:18:ec:f9:35:83:64:68:9e:ab:5a:20:76:e1: 67:80:25:58:03:f2:da:ce:7a:70:a3:8a:1a:8f:87: 1d:e4:f8:27:28:81:49:c8:88:25:c4:8e:3a:5c:01: 3f:7a:e3:bd:c0:cb:86:ce:ef:44:a4:ab:63:de:fb: 59:5a:8a:51:fa:18:ea:c8:32:17:b3:0c:56:33:1d: 87:56:ee:ea:d5:fc:82:fc:06:7b:92:5e:92:90:1a: 07:ce:41:f5:79:6f:ba:2f:a0:a2:2e:50:80:45:8e: 27:cd:dd:a3:e3:97:d4:07:94:9e:0f:a0:55:21:2e: c8:92:57:82:a5:f4:52:bd:22:aa:74:96:d5:5c:ae: f7:eb:b7:7d:8a:d9:5d:2a:4e:03:16:60:d1:fe:48: df:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EA:9A:D6:F3:B1:28:B4:86:5D:B8:59:AB:BA:38:37:5B:01:22:6C X509v3 Authority Key Identifier: keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:2a:d9:10:5a:ee:cc:4d:87:91:2b:32:d3:b4:f0:c5:48:b1: 73:a8:a2:f8:79:0a:b7:20:84:48:ec:21:f8:c1:11:c4:1f:5b: 8f:bf:2c:13:dd:0b:f2:9c:46:30:ac:45:6d:6d:6e:8c:83:4a: d0:ca:fd:b5:9e:3f:47:0f:27:17:8e:e5:34:74:df:79:11:b8: 3d:96:b9:c5:8f:aa:8c:a3:59:fd:00:fb:41:df:62:b1:79:14: 47:e9:49:fb:45:15:6e:f2:79:10:bb:59:e9:15:27:fb:ac:4b: 41:95:f6:4e:fe:aa:1f:41:8b:02:b9:4b:a2:36:ac:02:22:99: 09:a5:df:08:ea:64:99:9d:4d:2a:da:8a:a6:f6:74:fb:68:1c: 51:4c:b5:03:99:23:00:b4:20:30:f9:44:7f:de:17:d1:30:47: 7d:33:c3:9e:59:83:aa:73:bf:62:b7:23:62:2e:6b:84:22:18: e7:7d:58:e3:bc:f9:ae:8a:2e:7c:78:21:17:95:56:bc:f5:14: 25:2e:7c:df:5d:f0:59:46:41:fb:1f:36:c8:90:52:fa:ff:e4: c6:cd:50:db:1b:f4:b4:f1:a5:bb:21:15:ee:76:2e:d7:02:f6: 58:4b:90:3f:e7:ea:6b:c0:88:ea:05:2a:80:c1:39:fa:b1:d8: 2c:dd:98:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtykVWPEVvKY6mLd8sddeECMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi ZDg1N2QwHhcNMjUxMjMxMDQwMTI1WhcNMjYwMTAxMDQwMTI1WjAzMTEwLwYDVQQD EyhiYmVhOWFkNmYzYjEyOGI0ODY1ZGI4NTlhYmJhMzgzNzViMDEyMjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JdzM5xzvJsO+mq4hvsBJ0V+tjwy uRMhYGYCQ+aiKrJK/jnS4uO+fBd3452rQfbpCUHWAVtLif2JPnmLOb2sX781ZMnl shyuKX+2m62A8X02y9JUVdSdVBD/lvEQ2m1YXSdiNeDngNjI6Rjs+TWDZGieq1og duFngCVYA/Laznpwo4oaj4cd5PgnKIFJyIglxI46XAE/euO9wMuGzu9EpKtj3vtZ WopR+hjqyDIXswxWMx2HVu7q1fyC/AZ7kl6SkBoHzkH1eW+6L6CiLlCARY4nzd2j 45fUB5SeD6BVIS7IkleCpfRSvSKqdJbVXK7367d9itldKk4DFmDR/kjf4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvqmtbzsSi0hl24Wau6ODdbASJsMB8GA1UdIwQY MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt NmQ2ZjU1OGE3ZDY1LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1 LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSrZEFru zE2HkSsy07TwxUixc6ii+HkKtyCESOwh+MERxB9bj78sE90L8pxGMKxFbW1ujINK 0Mr9tZ4/Rw8nF47lNHTfeRG4PZa5xY+qjKNZ/QD7Qd9isXkUR+lJ+0UVbvJ5ELtZ 6RUn+6xLQZX2Tv6qH0GLArlLojasAiKZCaXfCOpkmZ1NKtqKpvZ0+2gcUUy1A5kj ALQgMPlEf94X0TBHfTPDnlmDqnO/YrcjYi5rhCIY531Y47z5rooufHghF5VWvPUU JS58313wWUZB+x82yJBS+v/kxs1Q2xv0tPGluyEV7nYu1wL2WEuQP+fqa8CI6gUq gME5+rHYLN2YAw== -----END CERTIFICATE-----Generated at Wed Dec 31 08:00:55 2025 by rpki-client