This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft File: eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json) Hash identifier: d3EeHrj58IZ/4Ev0Af6ZVNqi4XKBHm1izwpFXuE1Vs8= Subject key identifier: B0:E3:51:8B:26:73:76:52:FB:FD:AA:E2:8E:CA:61:F0:60:28:7E:4C Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee Certificate serial: 019B5D8978CB31CDB0191478A5DC5ECB5A89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft Manifest number: 1799 Signing time: Sat 27 Dec 2025 02:00:49 +0000 Manifest this update: Sat 27 Dec 2025 02:00:49 +0000 Manifest next update: Sun 28 Dec 2025 02:00:49 +0000 Files and hashes: 1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=) 2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: 85kO5SkPNC0GqoC0j+DtPeuqmtniycJUhavEt0bfrIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5d:89:78:cb:31:cd:b0:19:14:78:a5:dc:5e:cb:5a:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee Validity Not Before: Dec 27 02:00:49 2025 GMT Not After : Dec 28 02:00:49 2025 GMT Subject: CN=b0e3518b26737652fbfdaae28eca61f060287e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ca:bc:cf:de:57:a1:0c:81:f0:b0:3b:cc:b0: d7:b7:43:eb:e0:cd:b2:04:ed:20:72:18:6c:e7:4d: 8d:8d:d2:28:b7:54:ab:8d:9f:82:d1:92:aa:69:33: bf:a4:0f:91:db:5a:39:d1:37:4e:d3:06:b0:dd:64: fa:ce:ff:90:14:3d:23:4c:c5:4b:c8:bb:4b:fd:35: d9:46:85:e0:c0:21:95:7e:74:f0:54:35:a6:b1:86: 34:18:f4:f9:94:e9:6e:aa:88:53:c3:18:01:43:70: d8:52:08:d9:46:4b:b6:50:2c:3d:8c:29:83:82:04: f4:06:34:77:b0:77:c4:9e:d2:af:7b:05:1d:81:92: ec:fc:11:f1:ed:c0:01:04:d1:2b:9b:20:2e:86:05: 41:e3:dc:45:93:b1:29:89:ee:0d:78:6c:5d:b7:6e: 15:d7:be:1b:1b:c1:4f:cd:b4:62:d1:86:4e:4c:c0: 6a:f3:c2:32:d9:01:36:b1:96:b6:23:23:3e:b9:2f: 62:0f:e3:61:81:19:40:7b:37:06:ac:6d:35:b0:dc: e5:d4:98:15:d5:5e:3b:60:12:25:a5:1c:94:f7:32: 7b:f7:0e:0e:e5:a4:aa:bc:c4:ac:53:d2:3e:94:51: ca:43:d4:96:6b:16:e9:b5:7d:cd:a9:95:59:ff:b8: dd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:E3:51:8B:26:73:76:52:FB:FD:AA:E2:8E:CA:61:F0:60:28:7E:4C X509v3 Authority Key Identifier: keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:67:ab:4d:6d:bd:ac:0a:35:da:03:e9:a8:b2:5e:34:4a:ee: 89:d0:22:6a:52:09:cf:25:1e:c7:09:2c:d9:b2:28:d5:fd:45: 3f:ec:af:9c:29:d9:ab:d3:88:36:0a:dc:3f:a4:3e:f1:21:18: 7a:74:7a:9e:c7:ba:ac:24:f9:7d:ba:1a:a2:0d:a8:4c:44:4c: 38:44:66:c4:57:4e:81:34:81:a8:83:e9:b8:7d:9d:94:5a:72: 04:d6:bb:6d:8a:c5:52:c4:59:c0:3a:35:fd:6d:81:bb:a9:28: 46:12:74:7d:df:18:60:91:35:43:53:72:c9:a1:da:fd:c9:b6: 93:a4:ed:5d:9e:32:7f:86:7a:84:ee:b7:83:5a:28:c8:8f:0a: 10:64:87:f7:72:d8:e2:8f:6b:ae:d5:a2:57:fe:b0:15:74:43: 3e:e9:bd:9e:69:18:80:9e:7e:e4:89:60:8c:b1:b9:92:db:d8: e1:0a:69:1c:37:87:e0:2d:12:1d:58:c0:03:b7:9f:6a:11:31: 7f:66:05:11:52:1b:45:c6:3b:b8:01:c2:1a:f5:30:0d:97:79: ff:d7:f7:85:86:4b:fb:47:71:c8:41:8a:14:3f:62:65:26:ff: 0f:d5:43:b2:1b:b1:27:c0:ca:1a:5d:cd:8b:36:f2:8d:0b:37: c0:e0:28:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtdiXjLMc2wGRR4pdxey1qJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODI4MDJjZTcxODMwNTkwYjI2YWJhOTk3MWUxMmY2YWUx OGRjZWUwHhcNMjUxMjI3MDIwMDQ5WhcNMjUxMjI4MDIwMDQ5WjAzMTEwLwYDVQQD EyhiMGUzNTE4YjI2NzM3NjUyZmJmZGFhZTI4ZWNhNjFmMDYwMjg3ZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0cq8z95XoQyB8LA7zLDXt0Pr4M2y BO0gchhs502NjdIot1SrjZ+C0ZKqaTO/pA+R21o50TdO0waw3WT6zv+QFD0jTMVL yLtL/TXZRoXgwCGVfnTwVDWmsYY0GPT5lOluqohTwxgBQ3DYUgjZRku2UCw9jCmD ggT0BjR3sHfEntKvewUdgZLs/BHx7cABBNErmyAuhgVB49xFk7Epie4NeGxdt24V 174bG8FPzbRi0YZOTMBq88Iy2QE2sZa2IyM+uS9iD+NhgRlAezcGrG01sNzl1JgV 1V47YBIlpRyU9zJ79w4O5aSqvMSsU9I+lFHKQ9SWaxbptX3NqZVZ/7jduwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDjUYsmc3ZS+/2q4o7KYfBgKH5MMB8GA1UdIwQY MBaAFHmCgCznGDBZCyarqZceEvauGNzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUt ZGNkZjI0NDE0OTg5LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUtZGNkZjI0NDE0OTg5 LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcGerTW29 rAo12gPpqLJeNEruidAialIJzyUexwks2bIo1f1FP+yvnCnZq9OINgrcP6Q+8SEY enR6nse6rCT5fboaog2oTERMOERmxFdOgTSBqIPpuH2dlFpyBNa7bYrFUsRZwDo1 /W2Bu6koRhJ0fd8YYJE1Q1NyyaHa/cm2k6TtXZ4yf4Z6hO63g1ooyI8KEGSH93LY 4o9rrtWiV/6wFXRDPum9nmkYgJ5+5IlgjLG5ktvY4QppHDeH4C0SHVjAA7efahEx f2YFEVIbRcY7uAHCGvUwDZd5/9f3hYZL+0dxyEGKFD9iZSb/D9VDshuxJ8DKGl3N izbyjQs3wOAoSA== -----END CERTIFICATE-----Generated at Sat Dec 27 05:38:40 2025 by rpki-client