This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft File: i0eqCfLGEPb0S051wc2dzTiE5V0.mft (raw, json) Hash identifier: dIs72T0m4LMYCPXUsfUTH3vLjSU13D+WMHCHM9y3Cq4= Subject key identifier: A9:80:11:4B:DF:AC:23:A6:90:B5:3D:01:AD:51:E3:45:5F:1C:7F:4D Authority key identifier: 8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D Certificate issuer: /CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Certificate serial: 019B3B351AEE67034C807397EE2F13D8464C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft Manifest number: 07EA Signing time: Sat 20 Dec 2025 10:01:34 +0000 Manifest this update: Sat 20 Dec 2025 10:01:34 +0000 Manifest next update: Sun 21 Dec 2025 10:01:34 +0000 Files and hashes: 1: 1N4Y-cxz_J8zvyVIPn4xaQ56W2I.roa (hash: LqNoYMeIHUvi7e8ZqSiPD8gSQPNLvRqFi/MU8NW82NY=) 2: 59PndGiGSGsbZj2RG0Ycf2mhgxQ.roa (hash: 4mRCrakJ34q1MdXD9vBIYWH6H5pZIK2v8drs+brvjAI=) 3: 6WgYdehy91JaGiXTQ4-mtet9hKA.roa (hash: k18cYqD3ZZMZ5W+a0Kjw8aqcJhfy210LAE8xFma2X2Y=) 4: 92bun2tsOlqTzcyAib4vRWOWAJI.roa (hash: qog6NgchB+Qp5J4zX/jN9xXAIWVyWEQCgqHENX4xl4I=) 5: TI__S_5wBSs76T2sPdddnNR3NI4.roa (hash: 1cgm9AfaKeKcFrBAUFYpRgSienV4cq0Pog28Pn4vsBo=) 6: _ITSv8iuWxYF6Xi3_Ud63eugcVA.roa (hash: e1oaUiU/1FwcsXzZfTfjISFOH22WsphA6YVaiUR+Z3Y=) 7: clWNFKcGPCSVI8IczoLVlzymSwE.roa (hash: kwC3djRgAXxGmhjo7j0gZC7YajpIcaKz89NjkpuMd6c=) 8: d_GmJYSiWtstngRCp4D-3Nytktc.roa (hash: b5QdQbGkypzupkHkl6NURfR0Tou888+YLeKDY72J/ww=) 9: i0eqCfLGEPb0S051wc2dzTiE5V0.crl (hash: Nqme0f4ex1/4emWmqMUnVz889QYK23YE2qZR51ZHbHU=) 10: qGFUGJuxspgWAhMTwEHWda1tK4I.roa (hash: kE0iH6eXvZqbSdSc8x4s8TfLFvAMHZpfdERWbyCEcBY=) 11: xCwC0ruPjNW76bEQ25__qiX8bTI.roa (hash: /PNuMEC0HX9r4nNg0Hwe56qDotvTcrptdJE+VRq+wv0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:35:1a:ee:67:03:4c:80:73:97:ee:2f:13:d8:46:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b47aa09f2c610f6f44b4e75c1cd9dcd3884e55d Validity Not Before: Dec 20 10:01:34 2025 GMT Not After : Dec 21 10:01:34 2025 GMT Subject: CN=a980114bdfac23a690b53d01ad51e3455f1c7f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:43:78:02:17:83:2a:97:11:cb:8c:78:83:9c: 6d:f5:ae:f2:cf:6b:18:9f:f7:da:ac:ed:68:48:67: b8:7d:d8:df:a4:b2:89:0c:8e:ad:b4:85:88:3e:f7: 46:b8:0a:89:46:ba:2d:50:58:b9:37:18:4d:67:f7: 6a:02:5e:7e:ce:75:e1:4f:10:e8:a9:4b:bb:ca:fe: 26:43:df:50:bf:36:4b:fe:2c:b2:dd:49:ba:c7:99: 0d:56:de:3a:d7:8c:43:db:a5:fa:fc:bf:8d:7d:00: 61:e2:25:ec:e1:f7:43:4c:ef:54:84:79:01:1f:8b: 7e:48:e6:9e:dd:5e:5d:a1:c8:f6:31:ef:df:1b:3d: 23:41:e3:db:3c:b6:dc:b7:44:a1:86:09:ae:5c:0f: 1e:28:e2:2e:5a:51:c7:94:39:4d:f5:8c:0e:30:2b: 53:3b:71:8a:68:29:cf:80:e5:8f:a0:ac:91:65:bc: c0:05:9c:ec:91:02:9b:d5:6f:e5:83:ce:01:70:b5: af:61:d2:c9:68:08:b7:05:14:73:f6:d9:5b:c3:79: f3:ce:a5:54:b6:ee:85:18:06:c2:d6:a5:c5:16:30: 09:83:a1:e6:d1:c7:8c:8c:70:51:dc:26:b9:ac:72: 7e:78:b9:c0:15:09:8b:04:23:4f:12:5d:b4:6d:7e: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:80:11:4B:DF:AC:23:A6:90:B5:3D:01:AD:51:E3:45:5F:1C:7F:4D X509v3 Authority Key Identifier: keyid:8B:47:AA:09:F2:C6:10:F6:F4:4B:4E:75:C1:CD:9D:CD:38:84:E5:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i0eqCfLGEPb0S051wc2dzTiE5V0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/f560e1-7840-4951-ab78-5001539d7185/1/i0eqCfLGEPb0S051wc2dzTiE5V0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:48:fc:aa:44:3d:86:0e:9c:8b:40:ae:33:77:c8:c6:28: 32:6d:30:19:d6:49:7d:e9:ac:34:dc:c8:10:fe:69:ff:5d:5c: b3:6b:d8:b3:42:9d:b5:04:dd:6b:95:ad:bf:1c:b0:3a:b6:a3: 79:12:14:f4:c9:f7:90:5a:bc:13:65:75:a6:12:b2:30:b0:cd: 1a:cf:62:c7:ed:9f:aa:5a:8c:77:fa:7f:53:2e:53:87:34:bc: 5b:d5:56:63:49:43:7d:7d:27:33:b7:ea:03:74:e9:e4:6e:58: f4:5c:e9:72:c1:89:da:39:3a:7b:4b:6a:44:0d:f9:2e:0a:31: 69:03:5c:3b:66:ac:41:f0:0b:55:a8:05:eb:ef:7f:d2:b5:74: 95:93:aa:a7:ff:7f:ab:f7:f7:d4:c4:90:8d:79:6b:9d:89:5b: 45:ef:55:56:02:ed:30:1a:ce:fe:12:44:0f:15:5c:cc:90:fe: 12:2a:98:b6:83:6f:0a:63:99:2d:04:9f:1d:10:c1:12:4d:50: d7:11:dd:e1:3d:81:75:ad:4a:a1:c6:f6:35:fd:7a:73:99:6f: 6e:5b:97:41:5b:04:78:0e:32:d5:6c:e3:19:b4:04:d7:87:ad: f9:f8:ae:e7:f5:ca:d8:81:bd:20:1c:d0:2c:fb:ea:64:ef:a7: 9b:09:7e:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NRruZwNMgHOX7i8T2EZMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiNDdhYTA5ZjJjNjEwZjZmNDRiNGU3NWMxY2Q5ZGNkMzg4 NGU1NWQwHhcNMjUxMjIwMTAwMTM0WhcNMjUxMjIxMTAwMTM0WjAzMTEwLwYDVQQD EyhhOTgwMTE0YmRmYWMyM2E2OTBiNTNkMDFhZDUxZTM0NTVmMWM3ZjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kN4AheDKpcRy4x4g5xt9a7yz2sY n/farO1oSGe4fdjfpLKJDI6ttIWIPvdGuAqJRrotUFi5NxhNZ/dqAl5+znXhTxDo qUu7yv4mQ99QvzZL/iyy3Um6x5kNVt4614xD26X6/L+NfQBh4iXs4fdDTO9UhHkB H4t+SOae3V5docj2Me/fGz0jQePbPLbct0ShhgmuXA8eKOIuWlHHlDlN9YwOMCtT O3GKaCnPgOWPoKyRZbzABZzskQKb1W/lg84BcLWvYdLJaAi3BRRz9tlbw3nzzqVU tu6FGAbC1qXFFjAJg6Hm0ceMjHBR3Ca5rHJ+eLnAFQmLBCNPEl20bX7MpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmAEUvfrCOmkLU9Aa1R40VfHH9NMB8GA1UdIwQY MBaAFItHqgnyxhD29EtOdcHNnc04hOVdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgt NTAwMTUzOWQ3MTg1LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mNTYwZTEtNzg0MC00OTUxLWFiNzgtNTAwMTUzOWQ3MTg1 LzEvaTBlcUNmTEdFUGIwUzA1MXdjMmR6VGlFNVYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPstI/KpE PYYOnItArjN3yMYoMm0wGdZJfemsNNzIEP5p/11cs2vYs0KdtQTda5WtvxywOraj eRIU9Mn3kFq8E2V1phKyMLDNGs9ix+2fqlqMd/p/Uy5ThzS8W9VWY0lDfX0nM7fq A3Tp5G5Y9FzpcsGJ2jk6e0tqRA35LgoxaQNcO2asQfALVagF6+9/0rV0lZOqp/9/ q/f31MSQjXlrnYlbRe9VVgLtMBrO/hJEDxVczJD+EiqYtoNvCmOZLQSfHRDBEk1Q 1xHd4T2Bda1Kocb2Nf16c5lvbluXQVsEeA4y1WzjGbQE14et+fiu5/XK2IG9IBzQ LPvqZO+nmwl+zw== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:53 2025 by rpki-client