This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft File: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft (raw, json) Hash identifier: hNGdDTkyQN8g6+MCDPZV5DKy/nQjUX9Dmev5BPUXyAs= Subject key identifier: 42:1C:87:17:24:94:41:B6:C7:5A:1F:70:88:BB:17:11:95:A9:3A:B6 Authority key identifier: 12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 Certificate issuer: /CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Certificate serial: 019B3EDAA94259921D5751ABB51E35C8F334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:01:16 +0000 Manifest this update: Sun 21 Dec 2025 03:01:16 +0000 Manifest next update: Mon 22 Dec 2025 03:01:16 +0000 Files and hashes: 1: Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl (hash: l37JJ08qLSWIzVSpW/XEUnNjHEct84CSiWpLknoeJF0=) 2: fLHIwzW8_cNrLeapZHuAdIZBYcw.roa (hash: F9/ou7Gahs7dJNLzKSXF7urkWawKPkOsFDiFbBFZxLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:a9:42:59:92:1d:57:51:ab:b5:1e:35:c8:f3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128fde2bfc63efe3d132ddac7837e15c7f4b49f4 Validity Not Before: Dec 21 03:01:16 2025 GMT Not After : Dec 22 03:01:16 2025 GMT Subject: CN=421c8717249441b6c75a1f7088bb171195a93ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:f3:0e:45:07:9d:df:34:5d:1f:a6:e6:82: 1b:85:c0:de:5c:83:9b:70:72:e6:ee:d4:fc:d5:3f: 4b:c8:05:44:42:80:42:52:c0:f4:68:dd:c3:60:83: 3c:e7:7c:da:96:c5:42:a4:d8:bb:97:3d:79:be:9f: 71:9e:f8:e2:f4:2e:8f:8c:0e:aa:09:67:b0:28:09: c2:b5:b9:d4:46:68:9b:98:0d:e3:f8:57:60:9b:d8: 45:18:b3:67:83:61:f4:a6:e1:2f:48:10:1a:ad:a5: 81:a8:08:08:1c:c6:c0:ea:55:f9:6d:e2:a4:6e:82: 06:b1:49:47:3e:c3:74:c7:a4:8a:3b:18:5b:91:df: 0a:68:3a:27:c9:3d:2b:88:01:0a:a2:50:28:a2:78: 0b:cd:78:a7:dc:c3:b6:b7:03:88:6e:df:e0:74:ff: 99:84:3a:f7:b2:4b:fd:b8:50:51:c2:71:96:84:23: 45:a2:ee:53:c9:0b:fe:ca:33:bc:81:be:58:71:78: 2c:0f:cf:eb:fc:26:91:a0:2c:c7:ca:df:98:75:59: d2:1e:e0:d5:ef:e2:41:e1:f6:51:0b:9e:61:1b:6f: 03:96:8e:ef:9b:f0:4f:b6:7f:24:26:03:81:6d:f4: 5c:d2:bc:b3:dd:94:4a:bb:3c:be:75:08:3d:61:ee: 79:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:1C:87:17:24:94:41:B6:C7:5A:1F:70:88:BB:17:11:95:A9:3A:B6 X509v3 Authority Key Identifier: keyid:12:8F:DE:2B:FC:63:EF:E3:D1:32:DD:AC:78:37:E1:5C:7F:4B:49:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/a9f81e-79b2-4c2e-9f3e-7c24ef0259db/1/Eo_eK_xj7-PRMt2seDfhXH9LSfQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:98:db:ab:69:e0:78:8e:84:53:2c:4d:d1:7a:5d:af:c8:8e: a5:cb:48:40:aa:0f:cf:4e:71:0f:4d:32:4d:8b:9c:9c:16:bc: fc:eb:a7:bc:09:f4:7b:a7:9d:d2:88:99:8e:f1:0f:b2:f2:15: ff:c1:fd:af:53:06:37:ce:e8:29:9f:83:59:89:49:37:62:33: 4f:c2:3c:09:f7:0f:ee:5c:1e:ed:ef:df:81:d8:6a:98:c2:f9: a0:33:16:15:53:5b:75:14:26:48:a5:9a:3b:5d:0e:ef:cf:eb: d8:b4:70:e0:f9:85:3d:9e:9c:03:05:cc:6c:ba:0c:58:ab:11: 5b:ab:86:37:55:f9:0b:5d:35:20:a7:1e:03:de:fb:3f:27:97: 93:3a:55:ff:cb:de:ba:98:56:c0:ab:b8:c7:28:30:a5:6f:55: 07:bd:18:d7:1c:d8:be:69:f0:99:09:2a:4e:8f:b1:b2:97:c1: f9:10:07:dd:21:e1:c4:d1:fa:30:86:9d:f1:27:23:72:8b:a5: d1:a6:bd:69:2b:d6:fc:43:d3:a6:32:ef:8f:3d:aa:d6:7e:1d: 75:d7:e4:a9:15:30:8e:94:a0:f9:e1:a7:3f:43:fa:a8:9d:60: 91:16:a9:53:5a:22:7d:2c:fc:34:e0:d2:23:e8:8e:76:e5:2d: 89:56:8e:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2qlCWZIdV1GrtR41yPM0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGZkZTJiZmM2M2VmZTNkMTMyZGRhYzc4MzdlMTVjN2Y0 YjQ5ZjQwHhcNMjUxMjIxMDMwMTE2WhcNMjUxMjIyMDMwMTE2WjAzMTEwLwYDVQQD Eyg0MjFjODcxNzI0OTQ0MWI2Yzc1YTFmNzA4OGJiMTcxMTk1YTkzYWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAombzDkUHnd80XR+m5oIbhcDeXIOb cHLm7tT81T9LyAVEQoBCUsD0aN3DYIM853zalsVCpNi7lz15vp9xnvji9C6PjA6q CWewKAnCtbnURmibmA3j+Fdgm9hFGLNng2H0puEvSBAaraWBqAgIHMbA6lX5beKk boIGsUlHPsN0x6SKOxhbkd8KaDonyT0riAEKolAoongLzXin3MO2twOIbt/gdP+Z hDr3skv9uFBRwnGWhCNFou5TyQv+yjO8gb5YcXgsD8/r/CaRoCzHyt+YdVnSHuDV 7+JB4fZRC55hG28Dlo7vm/BPtn8kJgOBbfRc0ryz3ZRKuzy+dQg9Ye55vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIchxcklEG2x1ofcIi7FxGVqTq2MB8GA1UdIwQY MBaAFBKP3iv8Y+/j0TLdrHg34Vx/S0n0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2Ut N2MyNGVmMDI1OWRiLzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My9hOWY4MWUtNzliMi00YzJlLTlmM2UtN2MyNGVmMDI1OWRi LzEvRW9fZUtfeGo3LVBSTXQyc2VEZmhYSDlMU2ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABJjbq2ng eI6EUyxN0Xpdr8iOpctIQKoPz05xD00yTYucnBa8/OunvAn0e6ed0oiZjvEPsvIV /8H9r1MGN87oKZ+DWYlJN2IzT8I8CfcP7lwe7e/fgdhqmML5oDMWFVNbdRQmSKWa O10O78/r2LRw4PmFPZ6cAwXMbLoMWKsRW6uGN1X5C101IKceA977PyeXkzpV/8ve uphWwKu4xygwpW9VB70Y1xzYvmnwmQkqTo+xspfB+RAH3SHhxNH6MIad8Scjcoul 0aa9aSvW/EPTpjLvjz2q1n4dddfkqRUwjpSg+eGnP0P6qJ1gkRapU1oifSz8NODS I+iOduUtiVaOAA== -----END CERTIFICATE-----Generated at Sun Dec 21 04:56:11 2025 by rpki-client