This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft File: ECeophKZuAo-cdGpgUJ-wAuEnRc.mft (raw, json) Hash identifier: f6s1nkRa0ABaZrNmhASOc2sv4j7er/HaNoC/YvAqFLo= Subject key identifier: 70:D2:D0:58:E3:AA:51:91:81:A2:8D:78:A0:80:94:6C:D4:06:5F:38 Authority key identifier: 10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 Certificate issuer: /CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Certificate serial: 019B3FED5660BC071852EDA1D2E6F24C110B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft Manifest number: 06DB Signing time: Sun 21 Dec 2025 08:01:17 +0000 Manifest this update: Sun 21 Dec 2025 08:01:17 +0000 Manifest next update: Mon 22 Dec 2025 08:01:17 +0000 Files and hashes: 1: 2EE5sI-lHxPW-m95GPnlbkqBGKw.roa (hash: rZX0WbnFMbiHv4Iw7Uo3xd9gD2qfAlVmi5TezkAjKms=) 2: 2j0K4TBmylww5994wq6h52DnC4Q.roa (hash: V4EC4v+tPx02lsB25vziwHKMaEgUW7sf5nc1OVwIXxE=) 3: ECeophKZuAo-cdGpgUJ-wAuEnRc.crl (hash: 9wIdcndbXwo2Xd3ugFOmmJ3roRAN1pGnHptEQpLcEpc=) 4: GLpitTLoKfeAEOHv7sg-N2mDyyM.roa (hash: DLCIbqmbMU+kzJKE291B9CWch8SKbQOfjzg4SB+dJMs=) 5: JksIp8plt8XHk157IJ1eE1-tvto.roa (hash: wgY/0YYKwrZFlsYl68IwR2OteHvDDcA3JQTOM7ecfhk=) 6: UohPfLpYQFWq1aE3FZr-DrIx55E.roa (hash: KnJXUEOwlaB/y/AXpGglu/TyZvgBRRpzdQU4qGeto24=) 7: wGte5Are8NpBD8KTHQ531vUjpFs.roa (hash: G9rpZQy7UTdVZ8RG/8ciW3S8lvdFNXdVuqbWWEiXC7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ed:56:60:bc:07:18:52:ed:a1:d2:e6:f2:4c:11:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1027a8a61299b80a3e71d1a981427ec00b849d17 Validity Not Before: Dec 21 08:01:17 2025 GMT Not After : Dec 22 08:01:17 2025 GMT Subject: CN=70d2d058e3aa519181a28d78a080946cd4065f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8c:96:68:09:28:e0:54:f6:4b:b3:77:c9:02: 20:61:be:9b:bf:a1:b2:7f:d2:12:95:a1:1c:17:9a: 62:23:29:94:83:d1:6f:52:98:a9:30:07:43:50:fe: ef:fa:35:e1:4a:f4:de:20:13:5e:fd:47:ad:d2:56: 31:67:94:ec:4a:f0:86:b5:db:48:e1:ee:0e:4a:45: 1b:36:00:54:cb:ce:be:aa:44:fd:2f:63:42:b7:71: 01:2d:59:c7:0d:1f:d2:4a:29:d0:8c:0f:82:0b:3a: f4:9d:1e:46:c4:ca:0b:89:3f:a3:4b:16:14:d4:e7: de:06:60:28:04:9a:d7:de:4a:d3:6e:3c:6b:7f:ac: 08:bd:c3:a4:5f:c8:47:36:19:93:04:d5:80:31:ef: 3f:47:d5:88:fc:ef:eb:39:17:95:f5:63:a8:84:47: 74:3e:97:4f:94:c5:8c:0f:a9:b0:d3:32:06:6f:da: da:63:50:17:90:1c:27:0d:34:3e:7e:f9:34:c4:12: 9e:11:db:6c:65:13:65:eb:4e:b6:c4:29:9b:14:90: e6:c9:70:2d:d6:e8:dd:11:5e:1f:c9:24:27:32:93: 8a:f3:f9:aa:6f:54:f6:2c:3d:a8:0f:0e:9e:70:2f: fe:3a:99:9f:00:f5:0d:8c:eb:34:d4:3a:04:ea:a4: 15:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D2:D0:58:E3:AA:51:91:81:A2:8D:78:A0:80:94:6C:D4:06:5F:38 X509v3 Authority Key Identifier: keyid:10:27:A8:A6:12:99:B8:0A:3E:71:D1:A9:81:42:7E:C0:0B:84:9D:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECeophKZuAo-cdGpgUJ-wAuEnRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ba9d13-8ca6-4577-a59c-9dd997eef4ef/1/ECeophKZuAo-cdGpgUJ-wAuEnRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:a0:67:5b:0b:b8:35:ed:b2:fe:b5:7b:8d:23:d8:2f:c6: af:b5:b5:63:13:e3:9a:0a:6f:7c:71:10:74:71:22:c5:a8:bf: ab:bc:f4:65:ed:fe:1a:96:39:41:c9:80:21:02:7f:90:89:e6: 74:87:60:1e:f3:39:c4:57:b0:49:f7:92:47:62:a2:9b:19:d5: 2d:cf:2d:4b:db:40:b6:ef:64:f9:a6:6c:15:c4:5a:bc:9f:22: 67:4e:a4:47:3a:fb:26:e8:0e:75:35:98:48:68:9c:51:52:d2: 73:f8:01:fa:6b:ac:73:c7:e5:ee:cb:ac:32:6f:c1:f3:eb:19: 66:f7:9b:16:9a:0b:ba:17:7e:3f:41:76:cd:d3:ce:2a:01:c9: 5d:96:35:ec:ea:ca:27:3b:51:4c:06:6f:72:2e:12:41:38:3f: d4:00:c9:4c:43:b4:bd:86:f4:d9:cb:8f:b8:fe:35:94:a3:22: 11:5c:e7:3f:02:bf:6e:af:2e:55:f5:ad:d8:15:37:71:cb:07: 9f:a0:1d:8f:ca:47:ff:94:30:cf:f6:74:b9:38:1f:a5:fb:c5: 83:0d:e8:98:f4:c1:5c:21:ae:a3:73:90:98:2e:15:5f:36:30: 1e:7b:2d:3c:4f:56:3a:64:ca:70:14:29:f9:cd:16:14:20:60: 31:03:a6:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7VZgvAcYUu2h0ubyTBELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjdhOGE2MTI5OWI4MGEzZTcxZDFhOTgxNDI3ZWMwMGI4 NDlkMTcwHhcNMjUxMjIxMDgwMTE3WhcNMjUxMjIyMDgwMTE3WjAzMTEwLwYDVQQD Eyg3MGQyZDA1OGUzYWE1MTkxODFhMjhkNzhhMDgwOTQ2Y2Q0MDY1ZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IyWaAko4FT2S7N3yQIgYb6bv6Gy f9ISlaEcF5piIymUg9FvUpipMAdDUP7v+jXhSvTeIBNe/Uet0lYxZ5TsSvCGtdtI 4e4OSkUbNgBUy86+qkT9L2NCt3EBLVnHDR/SSinQjA+CCzr0nR5GxMoLiT+jSxYU 1OfeBmAoBJrX3krTbjxrf6wIvcOkX8hHNhmTBNWAMe8/R9WI/O/rOReV9WOohEd0 PpdPlMWMD6mw0zIGb9raY1AXkBwnDTQ+fvk0xBKeEdtsZRNl6062xCmbFJDmyXAt 1ujdEV4fySQnMpOK8/mqb1T2LD2oDw6ecC/+OpmfAPUNjOs01DoE6qQViwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDS0FjjqlGRgaKNeKCAlGzUBl84MB8GA1UdIwQY MBaAFBAnqKYSmbgKPnHRqYFCfsALhJ0XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMt OWRkOTk3ZWVmNGVmLzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9iYTlkMTMtOGNhNi00NTc3LWE1OWMtOWRkOTk3ZWVmNGVm LzEvRUNlb3BoS1p1QW8tY2RHcGdVSi13QXVFblJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjxKgZ1sL uDXtsv61e40j2C/Gr7W1YxPjmgpvfHEQdHEixai/q7z0Ze3+GpY5QcmAIQJ/kInm dIdgHvM5xFewSfeSR2KimxnVLc8tS9tAtu9k+aZsFcRavJ8iZ06kRzr7JugOdTWY SGicUVLSc/gB+musc8fl7susMm/B8+sZZvebFpoLuhd+P0F2zdPOKgHJXZY17OrK JztRTAZvci4SQTg/1ADJTEO0vYb02cuPuP41lKMiEVznPwK/bq8uVfWt2BU3ccsH n6Adj8pH/5Qwz/Z0uTgfpfvFgw3omPTBXCGuo3OQmC4VXzYwHnstPE9WOmTKcBQp +c0WFCBgMQOmxA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:19:02 2025 by rpki-client