This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft File: eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json) Hash identifier: jLhytkWaCpYcdebbPd/uUenrJT1IiohPmWPMIGTyBlA= Subject key identifier: 30:CC:8C:C0:3A:DF:2B:35:9D:B5:6D:D2:DB:7A:25:85:59:36:EE:AA Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A Certificate issuer: /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a Certificate serial: 019B4F29341FBCBFF55C3C424C5F97219EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft Manifest number: 07C5 Signing time: Wed 24 Dec 2025 07:00:58 +0000 Manifest this update: Wed 24 Dec 2025 07:00:58 +0000 Manifest next update: Thu 25 Dec 2025 07:00:58 +0000 Files and hashes: 1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: PGcjFi/Tug0jwEdtJJYzKArVmgB9o/6AGUV/Vb+4N+U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:34:1f:bc:bf:f5:5c:3c:42:4c:5f:97:21:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a Validity Not Before: Dec 24 07:00:58 2025 GMT Not After : Dec 25 07:00:58 2025 GMT Subject: CN=30cc8cc03adf2b359db56dd2db7a25855936eeaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3b:48:a4:69:57:17:c6:58:a0:ed:e0:c6:f7: d5:e0:db:bf:9d:2e:dc:63:0a:e2:c9:ee:82:ba:a2: de:ca:a4:8c:d5:f2:6b:35:96:d9:c4:65:a4:b9:61: e2:5d:76:d4:1c:8e:95:1d:7e:2b:e8:a9:62:f3:2d: b3:ea:e4:0f:06:74:90:8a:f3:29:f0:21:f9:c0:39: a6:1b:50:54:26:b5:0a:02:87:88:4d:9d:54:ee:b7: a5:df:02:46:db:8a:d0:73:4e:15:1b:0f:94:0f:3b: 1c:9d:42:ac:af:de:e5:09:48:6e:b7:3f:ec:ad:cf: 81:e2:35:84:aa:f7:e0:f0:96:fb:4a:93:22:43:ef: 7c:e0:77:22:13:ab:61:a5:ae:7e:a2:eb:eb:6b:06: 8b:3a:53:83:48:32:fc:61:36:9a:ee:8d:d8:54:ad: 9b:f5:5b:00:f8:44:d7:75:11:3e:03:0e:56:84:d2: 94:29:b0:1f:01:ba:fe:4b:ba:6e:0c:85:64:44:f8: 57:c8:f6:b6:d1:9c:f1:fa:52:b0:78:bd:ec:64:25: e7:fc:9b:d9:ef:a1:c0:f4:fc:83:f5:77:49:00:23: 70:78:12:70:03:dd:7c:02:fe:f0:5b:5a:95:84:8a: ab:06:d0:9a:3b:db:ad:0a:84:94:8f:6f:c0:f2:06: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:8C:C0:3A:DF:2B:35:9D:B5:6D:D2:DB:7A:25:85:59:36:EE:AA X509v3 Authority Key Identifier: keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:21:5e:60:eb:5e:d6:58:d6:1a:e3:c9:ce:50:a3:5f:33:3e: 00:b7:bc:89:74:af:f5:9a:ea:ca:59:75:59:9f:0b:3a:f9:d5: 97:f8:ba:60:9d:34:1e:af:13:39:66:4f:b5:ee:d0:34:33:ee: 1a:42:f3:3d:06:73:b1:6c:31:e7:94:14:60:9c:db:c0:91:a3: 98:93:d7:e9:c3:5f:e8:ab:1a:c6:22:79:04:76:a4:14:f3:d7: e2:d5:93:63:c5:1f:4f:4d:13:16:04:c2:e6:5f:db:3a:e3:9f: 93:ba:52:e9:f0:48:bb:6d:0f:1f:48:1f:f2:ba:43:95:01:22: 4a:a1:4b:23:2b:45:c8:25:08:e4:81:86:25:ac:8c:0c:d1:fc: 75:fa:b6:aa:61:61:54:8a:bc:5f:9b:ee:d5:28:e2:d7:b9:c0: f1:81:6a:e3:57:cb:3e:1c:d7:0b:06:3a:87:70:75:4e:cf:4a: 1c:d9:4f:79:2f:f3:15:cd:14:aa:f9:22:bc:62:d1:1e:75:ef: d4:b7:fe:49:af:58:54:62:31:d2:65:c9:55:bd:5d:40:81:dd: 30:bc:00:2f:1a:c4:7f:0e:f7:43:3b:a3:99:53:c5:69:0e:14: bb:91:75:b3:67:be:82:82:f2:2a:d3:c3:72:e2:cc:25:33:a9: cc:f4:a3:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKTQfvL/1XDxCTF+XIZ7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMjBhODdiODJmNjk4YmJlOTQ5MGE0MjFhM2QxYjQxNjE4 NTVmNWEwHhcNMjUxMjI0MDcwMDU4WhcNMjUxMjI1MDcwMDU4WjAzMTEwLwYDVQQD EygzMGNjOGNjMDNhZGYyYjM1OWRiNTZkZDJkYjdhMjU4NTU5MzZlZWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsztIpGlXF8ZYoO3gxvfV4Nu/nS7c Ywriye6CuqLeyqSM1fJrNZbZxGWkuWHiXXbUHI6VHX4r6Kli8y2z6uQPBnSQivMp 8CH5wDmmG1BUJrUKAoeITZ1U7rel3wJG24rQc04VGw+UDzscnUKsr97lCUhutz/s rc+B4jWEqvfg8Jb7SpMiQ+984HciE6thpa5+ouvrawaLOlODSDL8YTaa7o3YVK2b 9VsA+ETXdRE+Aw5WhNKUKbAfAbr+S7puDIVkRPhXyPa20Zzx+lKweL3sZCXn/JvZ 76HA9PyD9XdJACNweBJwA918Av7wW1qVhIqrBtCaO9utCoSUj2/A8gbOpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDDMjMA63ys1nbVt0tt6JYVZNu6qMB8GA1UdIwQY MBaAFHogqHuC9pi76UkKQho9G0FhhV9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMt MDFlMTgzYTkyZjA4LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMtMDFlMTgzYTkyZjA4 LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlCFeYOte 1ljWGuPJzlCjXzM+ALe8iXSv9Zrqyll1WZ8LOvnVl/i6YJ00Hq8TOWZPte7QNDPu GkLzPQZzsWwx55QUYJzbwJGjmJPX6cNf6KsaxiJ5BHakFPPX4tWTY8UfT00TFgTC 5l/bOuOfk7pS6fBIu20PH0gf8rpDlQEiSqFLIytFyCUI5IGGJayMDNH8dfq2qmFh VIq8X5vu1Sji17nA8YFq41fLPhzXCwY6h3B1Ts9KHNlPeS/zFc0UqvkivGLRHnXv 1Lf+Sa9YVGIx0mXJVb1dQIHdMLwALxrEfw73QzujmVPFaQ4Uu5F1s2e+goLyKtPD cuLMJTOpzPSjqA== -----END CERTIFICATE-----Generated at Wed Dec 24 13:08:51 2025 by rpki-client