This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft File: cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft (raw, json) Hash identifier: K+QQsCaW92fJ36pbjH1treBSAF98zh7HVYDg/jRwDRc= Subject key identifier: B9:4D:CE:56:D1:DF:36:05:68:74:59:9B:C2:42:FB:13:AE:14:23:9E Authority key identifier: 70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05 Certificate issuer: /CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105 Certificate serial: 019B4393188F579B9D0E7DA8BA6E89EE734D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft Manifest number: EB Signing time: Mon 22 Dec 2025 01:01:12 +0000 Manifest this update: Mon 22 Dec 2025 01:01:12 +0000 Manifest next update: Tue 23 Dec 2025 01:01:12 +0000 Files and hashes: 1: cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl (hash: 46LC3BQcQAD+Tqk6yHAW6CFiWaiP6TfE7jvh/etmgno=) 2: omvCiSbxGXEhWKYhV7yrIAYOUDI.roa (hash: k4kgxjvCMp/F7A0raOIajUVdScRBgP5O5bB2FqC6UMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:93:18:8f:57:9b:9d:0e:7d:a8:ba:6e:89:ee:73:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70378e3cd8f3a59bda5233ff6e9a9c99648d7105 Validity Not Before: Dec 22 01:01:12 2025 GMT Not After : Dec 23 01:01:12 2025 GMT Subject: CN=b94dce56d1df36056874599bc242fb13ae14239e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6b:ec:f8:f6:62:f8:85:12:b5:17:0e:91:36: b1:4f:c6:3b:3c:cd:dc:b0:16:56:6c:be:79:71:a4: 47:8b:26:66:18:33:de:7f:41:e7:7b:71:d4:37:11: 5b:9e:1e:a0:07:96:45:f0:93:a9:c9:83:df:f9:a5: a1:c6:58:3f:2f:c0:4e:d2:b8:fa:39:97:1c:a9:41: 1f:2b:82:f3:9d:70:5b:d2:84:ce:8c:b0:24:d3:9c: 3a:21:b1:49:4b:dc:1d:cb:6b:a1:2b:68:6c:11:e7: 3a:35:78:56:a0:43:d7:96:60:5f:66:ca:b9:a0:37: 9f:52:5a:44:b7:bc:c8:0d:ef:e9:cc:dd:4b:54:f8: 00:ae:6b:cd:ef:6b:4a:2a:56:ad:5b:b8:76:2f:44: 9e:92:a7:2e:f4:d5:3c:92:29:35:29:75:8f:a8:18: 51:23:9b:bf:bf:e8:d8:b9:44:41:05:31:75:fe:44: e7:f6:6b:0f:87:0a:85:3a:e0:58:13:f8:b4:95:2f: f7:72:e4:72:33:2e:0c:00:c3:c0:99:68:a6:92:49: 2c:68:60:3f:02:ba:1a:02:c8:ae:31:4c:13:14:1c: 3b:66:ee:e1:c1:3e:ba:90:f1:61:e0:6a:30:7a:84: 29:5c:b6:63:4a:c3:aa:cf:5d:8a:aa:fd:a2:11:6e: 02:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:4D:CE:56:D1:DF:36:05:68:74:59:9B:C2:42:FB:13:AE:14:23:9E X509v3 Authority Key Identifier: keyid:70:37:8E:3C:D8:F3:A5:9B:DA:52:33:FF:6E:9A:9C:99:64:8D:71:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeOPNjzpZvaUjP_bpqcmWSNcQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eb7394-9d9f-457e-b368-80973b3c0627/1/cDeOPNjzpZvaUjP_bpqcmWSNcQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:53:e2:03:aa:ac:78:70:5d:94:70:8c:bf:2f:4c:61:48:55: c4:19:0b:f5:d2:60:b8:33:31:17:e3:1b:ff:0f:28:72:10:d2: 5a:f2:7e:2e:ff:bc:95:88:9a:f0:30:e9:77:21:5d:74:99:ea: 3f:bd:b7:d2:23:d9:75:61:d6:64:80:20:62:7c:2f:a0:70:8a: c0:d9:04:6f:0e:23:de:8e:ca:02:d4:32:ae:a9:19:cb:f4:b6: e3:05:2d:9f:88:5d:5f:68:14:42:43:4a:f2:5d:b8:77:5f:e4: 3c:70:3d:22:23:35:83:7c:ac:78:c7:0c:4f:40:ae:3c:1d:0b: 22:8e:79:66:d6:de:bd:59:de:2d:b4:e2:16:7f:3f:a7:fa:d9: 85:19:2a:e3:dd:3f:57:80:49:fa:5d:f3:28:60:fa:29:ef:88: 4e:4c:d0:1d:0b:0d:87:03:77:89:e1:51:96:63:5e:30:5f:8d: 15:8b:6d:5f:40:ef:68:84:6f:90:a4:57:f0:dc:4b:77:2d:fa: ee:0c:9b:f4:4f:c0:b3:53:07:28:ca:7f:06:16:b7:61:7e:60: a1:b8:e2:ed:5e:50:fb:d2:11:6f:4d:f2:c4:40:b8:40:6b:68: e8:9c:27:b4:53:3b:d6:c3:54:7e:c7:12:70:bf:67:99:9d:6d: f2:0f:d4:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkxiPV5udDn2oum6J7nNNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzc4ZTNjZDhmM2E1OWJkYTUyMzNmZjZlOWE5Yzk5NjQ4 ZDcxMDUwHhcNMjUxMjIyMDEwMTEyWhcNMjUxMjIzMDEwMTEyWjAzMTEwLwYDVQQD EyhiOTRkY2U1NmQxZGYzNjA1Njg3NDU5OWJjMjQyZmIxM2FlMTQyMzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGvs+PZi+IUStRcOkTaxT8Y7PM3c sBZWbL55caRHiyZmGDPef0Hne3HUNxFbnh6gB5ZF8JOpyYPf+aWhxlg/L8BO0rj6 OZccqUEfK4LznXBb0oTOjLAk05w6IbFJS9wdy2uhK2hsEec6NXhWoEPXlmBfZsq5 oDefUlpEt7zIDe/pzN1LVPgArmvN72tKKlatW7h2L0Sekqcu9NU8kik1KXWPqBhR I5u/v+jYuURBBTF1/kTn9msPhwqFOuBYE/i0lS/3cuRyMy4MAMPAmWimkkksaGA/ AroaAsiuMUwTFBw7Zu7hwT66kPFh4GoweoQpXLZjSsOqz12Kqv2iEW4CVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLlNzlbR3zYFaHRZm8JC+xOuFCOeMB8GA1UdIwQY MBaAFHA3jjzY86Wb2lIz/26anJlkjXEFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RlT1BOanpwWnZhVWpQX2JwcWNtV1NOY1FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9lYjczOTQtOWQ5Zi00NTdlLWIzNjgt ODA5NzNiM2MwNjI3LzEvY0RlT1BOanpwWnZhVWpQX2JwcWNtV1NOY1FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC9lYjczOTQtOWQ5Zi00NTdlLWIzNjgtODA5NzNiM2MwNjI3 LzEvY0RlT1BOanpwWnZhVWpQX2JwcWNtV1NOY1FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVPiA6qs eHBdlHCMvy9MYUhVxBkL9dJguDMxF+Mb/w8ochDSWvJ+Lv+8lYia8DDpdyFddJnq P7230iPZdWHWZIAgYnwvoHCKwNkEbw4j3o7KAtQyrqkZy/S24wUtn4hdX2gUQkNK 8l24d1/kPHA9IiM1g3yseMcMT0CuPB0LIo55ZtbevVneLbTiFn8/p/rZhRkq490/ V4BJ+l3zKGD6Ke+ITkzQHQsNhwN3ieFRlmNeMF+NFYttX0DvaIRvkKRX8NxLdy36 7gyb9E/As1MHKMp/Bha3YX5gobji7V5Q+9IRb03yxEC4QGto6JwntFM71sNUfscS cL9nmZ1t8g/U8g== -----END CERTIFICATE-----Generated at Mon Dec 22 04:18:52 2025 by rpki-client