This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft File: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json) Hash identifier: ispw3uJopG/px++5vDk4MEUvCcHkNB5bNl9JccJNqwg= Subject key identifier: 60:ED:75:0C:F9:B3:68:5F:05:3D:D8:BB:DD:B9:B8:F1:8B:D3:2D:D2 Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A Certificate issuer: /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Certificate serial: 019B3F111CBF62FAF199409AD07703242354 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 04:00:44 +0000 Manifest this update: Sun 21 Dec 2025 04:00:44 +0000 Manifest next update: Mon 22 Dec 2025 04:00:44 +0000 Files and hashes: 1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: fKNzxhbMHIA+g9D7a9Q4b5PkKXurl+PsDibm8b5KhLo=) 2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:1c:bf:62:fa:f1:99:40:9a:d0:77:03:24:23:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Validity Not Before: Dec 21 04:00:44 2025 GMT Not After : Dec 22 04:00:44 2025 GMT Subject: CN=60ed750cf9b3685f053dd8bbddb9b8f18bd32dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:5b:e8:60:8f:a1:13:f7:b3:44:ba:52:a8: d2:cc:38:a2:2b:88:fe:ea:b8:3e:da:60:3b:bd:e7: 02:1d:39:c1:0f:3b:fb:d4:00:52:2e:46:e3:06:19: 88:df:ed:30:cd:7f:b8:50:30:97:8d:3d:aa:46:34: 6d:ec:41:2b:05:a2:3e:20:88:53:6a:8b:7c:93:73: b0:c6:9e:e9:23:7e:8d:07:ac:4a:85:8a:f8:25:e3: be:da:1c:75:ef:87:74:aa:a3:79:a8:0e:17:fc:28: 71:93:f0:a8:d2:82:2f:68:9c:8a:15:d3:4c:2e:31: a3:70:57:58:91:30:e4:16:23:24:c3:49:4f:eb:ae: fc:41:69:8a:f5:ae:d2:c7:fe:17:35:d1:95:0c:e6: 67:1e:4d:e9:65:4a:00:b3:86:e3:70:53:76:bb:59: e4:fb:82:a6:08:29:f9:75:13:1e:d5:94:ee:e2:e2: 83:81:a5:26:ff:82:c4:63:81:26:83:a0:79:a8:a0: ab:ff:98:25:ff:67:f3:01:dd:3a:07:7f:26:2c:76: a0:43:89:5d:ed:03:bc:0c:ed:3a:1e:69:3c:46:31: af:7d:e0:a3:7b:f3:71:24:a7:1a:2b:db:a4:53:6e: 08:23:91:3b:c5:10:09:e4:08:76:de:df:6e:22:09: 4a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:75:0C:F9:B3:68:5F:05:3D:D8:BB:DD:B9:B8:F1:8B:D3:2D:D2 X509v3 Authority Key Identifier: keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:6f:28:d2:31:87:5f:ca:5c:c6:37:95:1e:d1:2f:28:5e:f1: ca:33:b8:d6:ef:f6:40:e6:2c:dd:10:f1:2b:cc:fd:29:77:53: f9:f7:74:37:08:da:a8:3c:a4:ae:5d:c2:5c:c4:cf:77:8c:ca: a5:b6:e1:a4:23:3b:c9:3a:60:46:99:ca:e7:b3:1a:bd:c7:17: 2f:07:f0:e2:d7:5b:69:b3:9a:0f:76:0f:73:20:c0:8e:c0:a2: 23:6c:a0:04:6e:82:13:38:ed:38:67:2a:27:ca:35:73:71:3b: f0:3e:a0:39:8d:b8:ac:6f:c5:aa:c2:a8:60:27:fb:8b:ed:cc: ed:0a:59:5a:10:d5:a3:f8:46:68:e8:6f:2b:0b:74:31:e0:d0: b5:1f:0d:71:62:3a:2b:61:f4:03:49:24:d8:e6:97:a0:4f:fb: 99:3a:c1:19:d8:33:80:26:b8:0b:7a:f5:6a:48:5a:79:51:0b: d1:66:3e:db:66:8e:26:0d:d1:dc:12:0f:27:90:21:43:78:08: aa:00:34:f7:85:43:f6:57:68:d6:0f:72:c6:c0:55:ff:91:71: 07:eb:8d:4f:91:b0:49:fb:13:14:d3:e1:26:f7:46:ac:85:5b: 14:bc:b4:f9:80:1c:42:33:41:6c:d3:bc:86:34:82:f6:9c:d3: 42:5b:cc:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERy/YvrxmUCa0HcDJCNUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMmJkZmViZTQ1OTIyMWRkYTM1ZjUyYzVhMzk5NTAyMGU0 ZmJiN2EwHhcNMjUxMjIxMDQwMDQ0WhcNMjUxMjIyMDQwMDQ0WjAzMTEwLwYDVQQD Eyg2MGVkNzUwY2Y5YjM2ODVmMDUzZGQ4YmJkZGI5YjhmMThiZDMyZGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv1b6GCPoRP3s0S6UqjSzDiiK4j+ 6rg+2mA7vecCHTnBDzv71ABSLkbjBhmI3+0wzX+4UDCXjT2qRjRt7EErBaI+IIhT aot8k3Owxp7pI36NB6xKhYr4JeO+2hx174d0qqN5qA4X/Chxk/Co0oIvaJyKFdNM LjGjcFdYkTDkFiMkw0lP6678QWmK9a7Sx/4XNdGVDOZnHk3pZUoAs4bjcFN2u1nk +4KmCCn5dRMe1ZTu4uKDgaUm/4LEY4Emg6B5qKCr/5gl/2fzAd06B38mLHagQ4ld 7QO8DO06Hmk8RjGvfeCje/NxJKcaK9ukU24II5E7xRAJ5Ah23t9uIglKCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDtdQz5s2hfBT3Yu925uPGL0y3SMB8GA1UdIwQY MBaAFHsr3+vkWSId2jX1LFo5lQIOT7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEt MzRjNzZkOTc1NmRkLzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEtMzRjNzZkOTc1NmRk LzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlW8o0jGH X8pcxjeVHtEvKF7xyjO41u/2QOYs3RDxK8z9KXdT+fd0NwjaqDykrl3CXMTPd4zK pbbhpCM7yTpgRpnK57MavccXLwfw4tdbabOaD3YPcyDAjsCiI2ygBG6CEzjtOGcq J8o1c3E78D6gOY24rG/FqsKoYCf7i+3M7QpZWhDVo/hGaOhvKwt0MeDQtR8NcWI6 K2H0A0kk2OaXoE/7mTrBGdgzgCa4C3r1akhaeVEL0WY+22aOJg3R3BIPJ5AhQ3gI qgA094VD9ldo1g9yxsBV/5FxB+uNT5GwSfsTFNPhJvdGrIVbFLy0+YAcQjNBbNO8 hjSC9pzTQlvMEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:45:44 2025 by rpki-client