This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft File: 1eglbE9iHYxMFwZl6HjqiOy7P1E.mft (raw, json) Hash identifier: uhGe9k2193thxgC64y0iXy48sO0H3ySP8VEtQk+IVSg= Subject key identifier: E4:E3:1F:30:1E:86:F6:1C:47:79:A4:78:CF:48:69:44:2C:B4:3A:80 Authority key identifier: D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 Certificate issuer: /CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Certificate serial: 019B6C57A925C24368361C4F0519CCC04343 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 23:00:42 +0000 Manifest this update: Mon 29 Dec 2025 23:00:42 +0000 Manifest next update: Tue 30 Dec 2025 23:00:42 +0000 Files and hashes: 1: 1eglbE9iHYxMFwZl6HjqiOy7P1E.crl (hash: 4V4WdTCKetIv5Vq6a7Z822Y7XdKRFtvoJzpqKO5J1l8=) 2: s19cTegZPcgfvMn79U7vcydThPE.roa (hash: V3xH7pf/IllOyz6AG2kCqa1+TkH2gfpLo44RkSGpMGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:57:a9:25:c2:43:68:36:1c:4f:05:19:cc:c0:43:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5e8256c4f621d8c4c170665e878ea88ecbb3f51 Validity Not Before: Dec 29 23:00:42 2025 GMT Not After : Dec 30 23:00:42 2025 GMT Subject: CN=e4e31f301e86f61c4779a478cf4869442cb43a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:dd:2e:01:be:72:c8:69:05:b6:cd:cc:96: ac:21:68:86:63:68:81:c0:17:1e:6a:bf:9a:17:27: 8c:9c:6e:02:86:d4:eb:08:e8:f0:53:ce:25:5c:93: 1a:65:88:2b:45:8c:a9:a1:3b:42:50:0a:3a:33:79: f5:fb:71:80:39:37:6c:d0:2c:aa:6c:04:00:0d:c2: 65:97:79:30:0a:0c:e8:ee:46:f6:fe:bc:eb:4b:6b: 7b:ea:b3:71:1f:1c:6d:55:5b:d3:68:f9:ed:df:da: c5:ed:c0:49:61:02:1b:49:ed:e3:75:2d:24:70:67: 7e:05:d1:3a:ab:b5:36:1b:33:13:94:f2:f7:ba:43: f7:59:7c:7a:f5:a3:c7:bb:1b:0c:e8:0d:ff:e6:b7: f5:9d:8d:3f:00:7a:2c:aa:7f:1e:5d:38:31:98:5f: 58:bb:65:68:af:ff:69:29:58:49:39:01:60:08:aa: a3:44:e5:c4:b7:5e:15:7d:87:b7:3a:f3:20:80:6f: c3:11:59:9f:06:63:7e:b2:91:ad:f9:5e:a9:3b:16: c2:00:b8:ee:71:3f:ff:81:44:96:4a:4a:a2:63:dc: 38:d7:52:57:db:9b:bd:35:c0:2d:8a:04:20:96:f8: 2d:fe:11:db:9c:46:89:5e:5d:b3:af:8d:d2:70:30: 9c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E3:1F:30:1E:86:F6:1C:47:79:A4:78:CF:48:69:44:2C:B4:3A:80 X509v3 Authority Key Identifier: keyid:D5:E8:25:6C:4F:62:1D:8C:4C:17:06:65:E8:78:EA:88:EC:BB:3F:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eglbE9iHYxMFwZl6HjqiOy7P1E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/eaf2b4-dd12-4b94-be3b-dcb3f8ac755e/1/1eglbE9iHYxMFwZl6HjqiOy7P1E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:e4:7f:09:a9:55:a0:c7:4d:aa:92:b9:44:54:b1:f5:9b:d6: dd:92:2b:ac:24:c3:fc:70:a6:bb:89:45:d7:98:b8:58:10:56: 8a:18:4b:d7:88:a7:27:c8:88:5e:d5:fa:90:67:7d:90:3c:0f: 07:65:10:7d:be:3a:cf:a3:0b:1b:2f:03:03:57:2c:7e:ec:22: 6c:69:77:1f:fd:f8:a1:9b:1a:11:f0:bc:3e:f3:29:84:ff:36: cd:c5:ef:39:90:64:14:e6:88:63:ca:46:8f:bf:bc:9d:52:22: 7a:e0:4c:08:e9:bb:4c:ad:29:38:4b:c9:93:c3:7f:35:3c:b2: 87:c4:f1:aa:02:52:6a:09:0c:23:84:76:22:a8:5f:9c:36:a3: d9:4d:54:54:ef:3f:75:b4:91:df:27:89:39:c7:cf:c1:78:ca: 6c:8a:35:5e:8c:4d:3b:14:ee:c3:7f:29:86:68:a2:e3:c7:a5: 15:a4:02:4b:c9:0c:78:b2:8e:4e:1e:dc:d9:af:d5:28:cb:6d: d0:73:4e:01:2d:70:f1:4c:27:41:36:eb:eb:5f:47:0c:83:ea: 5d:02:f5:36:f8:48:0d:00:75:14:d8:6e:d1:38:f7:4d:e5:af: 22:33:39:4a:d8:a7:70:14:e0:2a:ba:5f:9b:0b:87:a5:1c:7d: 43:d4:0c:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtsV6klwkNoNhxPBRnMwENDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZTgyNTZjNGY2MjFkOGM0YzE3MDY2NWU4NzhlYTg4ZWNi YjNmNTEwHhcNMjUxMjI5MjMwMDQyWhcNMjUxMjMwMjMwMDQyWjAzMTEwLwYDVQQD EyhlNGUzMWYzMDFlODZmNjFjNDc3OWE0NzhjZjQ4Njk0NDJjYjQzYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2XdLgG+cshpBbbNzJasIWiGY2iB wBcear+aFyeMnG4ChtTrCOjwU84lXJMaZYgrRYypoTtCUAo6M3n1+3GAOTds0Cyq bAQADcJll3kwCgzo7kb2/rzrS2t76rNxHxxtVVvTaPnt39rF7cBJYQIbSe3jdS0k cGd+BdE6q7U2GzMTlPL3ukP3WXx69aPHuxsM6A3/5rf1nY0/AHosqn8eXTgxmF9Y u2Vor/9pKVhJOQFgCKqjROXEt14VfYe3OvMggG/DEVmfBmN+spGt+V6pOxbCALju cT//gUSWSkqiY9w411JX25u9NcAtigQglvgt/hHbnEaJXl2zr43ScDCcWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTjHzAehvYcR3mkeM9IaUQstDqAMB8GA1UdIwQY MBaAFNXoJWxPYh2MTBcGZeh46ojsuz9RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2It ZGNiM2Y4YWM3NTVlLzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lYWYyYjQtZGQxMi00Yjk0LWJlM2ItZGNiM2Y4YWM3NTVl LzEvMWVnbGJFOWlIWXhNRndabDZIanFpT3k3UDFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuR/CalV oMdNqpK5RFSx9ZvW3ZIrrCTD/HCmu4lF15i4WBBWihhL14inJ8iIXtX6kGd9kDwP B2UQfb46z6MLGy8DA1csfuwibGl3H/34oZsaEfC8PvMphP82zcXvOZBkFOaIY8pG j7+8nVIieuBMCOm7TK0pOEvJk8N/NTyyh8TxqgJSagkMI4R2IqhfnDaj2U1UVO8/ dbSR3yeJOcfPwXjKbIo1XoxNOxTuw38phmii48elFaQCS8kMeLKOTh7c2a/VKMtt 0HNOAS1w8UwnQTbr619HDIPqXQL1NvhIDQB1FNhu0Tj3TeWvIjM5StincBTgKrpf mwuHpRx9Q9QMRg== -----END CERTIFICATE-----Generated at Tue Dec 30 07:14:18 2025 by rpki-client