This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json) Hash identifier: XRrdp6ISsJBuJJpQq7fg6ain+hvWzbVzchozIeDp/c8= Subject key identifier: D7:91:67:6B:95:30:DC:01:DB:9B:46:B4:28:0F:4C:3B:0B:55:27:07 Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Certificate serial: 019B3DFE9C35EB941D48C609D1C2307AFFCF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft Manifest number: A2 Signing time: Sat 20 Dec 2025 23:00:54 +0000 Manifest this update: Sat 20 Dec 2025 23:00:54 +0000 Manifest next update: Sun 21 Dec 2025 23:00:54 +0000 Files and hashes: 1: aenbutlsHdIddYbTr8SaSbe80BI.roa (hash: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=) 2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: ZgFqkYc9V2dqDdtIAj2SPH4NP0MJi3mjR8ZIBcIQpjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:9c:35:eb:94:1d:48:c6:09:d1:c2:30:7a:ff:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Validity Not Before: Dec 20 23:00:54 2025 GMT Not After : Dec 21 23:00:54 2025 GMT Subject: CN=d791676b9530dc01db9b46b4280f4c3b0b552707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ee:88:71:09:85:35:f4:46:f8:d7:4a:21:5f: 4b:93:51:f2:aa:4b:5e:04:0a:27:02:00:43:9e:1e: e8:bb:1e:cf:fb:e1:38:84:a2:77:41:72:76:03:15: f8:97:9f:c4:99:bf:e3:61:09:66:0f:a4:84:89:42: e9:62:fd:c3:52:27:30:d4:39:c8:f4:43:11:33:76: 7c:71:2a:57:2c:a0:05:c4:d2:1c:82:5c:f6:0b:14: b4:f7:08:08:12:aa:a8:69:8e:c0:61:c9:f5:42:cb: ae:f1:04:70:e9:25:82:da:e5:d2:23:02:fa:33:f9: ad:ee:86:94:e2:ba:51:c1:cb:72:3a:89:03:d7:e7: 60:c1:b5:d4:88:57:96:e8:a4:ec:85:a2:f0:09:eb: ae:70:93:dd:b9:6d:1a:24:16:88:56:d4:f9:1d:d9: d1:49:27:59:bf:20:85:ac:f3:bd:c5:03:ab:f0:af: 90:5a:8d:84:63:b7:5d:1b:23:74:15:d8:1b:27:7e: 30:8d:da:c2:61:64:ea:72:b8:d1:84:b5:48:59:95: a1:90:21:24:2e:69:cb:6e:21:cc:2a:cb:14:d3:d0: 9c:76:87:b9:fb:9f:7d:65:ed:0c:9d:3c:93:22:41: 97:b6:63:16:87:b1:44:5e:d9:e7:32:fb:04:0e:35: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:91:67:6B:95:30:DC:01:DB:9B:46:B4:28:0F:4C:3B:0B:55:27:07 X509v3 Authority Key Identifier: keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:82:46:c0:97:33:cb:1c:f4:4c:0e:95:48:1d:9a:32:89:d1: 08:b0:e3:ee:6f:7d:f5:a7:60:1a:fd:48:79:61:0c:0b:6e:10: 84:35:25:bf:c2:d0:de:00:07:81:67:ad:2e:fe:39:7b:72:80: 0c:25:3d:ab:55:59:57:6a:21:eb:e0:e5:fd:29:99:f4:2c:28: 45:48:b3:1f:bf:a0:a7:bd:14:33:79:c1:c7:34:d5:31:30:86: 45:33:ac:ad:c2:b5:43:9e:b6:7a:ae:8e:80:18:5f:56:69:d2: 59:14:44:fc:29:6d:7c:1a:8a:2e:a7:00:90:13:f0:83:5c:b2: 17:a3:be:1d:a7:e8:d6:e5:11:45:76:2d:30:b4:46:2d:a3:cf: e6:ee:5d:23:8a:41:70:c2:63:d9:b0:be:84:79:67:df:4a:fb: e6:cd:e5:d7:7b:d1:3b:d0:1f:0c:48:74:b5:98:00:22:73:2d: cc:41:ee:0c:9e:32:83:d3:92:76:22:d5:79:ae:43:1e:5f:11: 47:14:8e:9e:af:5c:7e:ce:d2:f0:76:fe:f3:65:8d:90:b8:d5: fa:f9:8d:2e:0f:d8:cc:be:9f:0f:ca:eb:80:16:96:1a:dd:18: 4e:36:71:f3:9b:ce:9c:6d:75:8e:a0:93:5b:70:41:94:6a:2b: 37:e2:b7:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/pw165QdSMYJ0cIwev/PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm N2U4NjEwHhcNMjUxMjIwMjMwMDU0WhcNMjUxMjIxMjMwMDU0WjAzMTEwLwYDVQQD EyhkNzkxNjc2Yjk1MzBkYzAxZGI5YjQ2YjQyODBmNGMzYjBiNTUyNzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+6IcQmFNfRG+NdKIV9Lk1Hyqkte BAonAgBDnh7oux7P++E4hKJ3QXJ2AxX4l5/Emb/jYQlmD6SEiULpYv3DUicw1DnI 9EMRM3Z8cSpXLKAFxNIcglz2CxS09wgIEqqoaY7AYcn1Qsuu8QRw6SWC2uXSIwL6 M/mt7oaU4rpRwctyOokD1+dgwbXUiFeW6KTshaLwCeuucJPduW0aJBaIVtT5HdnR SSdZvyCFrPO9xQOr8K+QWo2EY7ddGyN0FdgbJ34wjdrCYWTqcrjRhLVIWZWhkCEk LmnLbiHMKssU09Ccdoe5+599Ze0MnTyTIkGXtmMWh7FEXtnnMvsEDjUDEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeRZ2uVMNwB25tGtCgPTDsLVScHMB8GA1UdIwQY MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt ZjE2YjA3ZjQzMDZmLzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL4JGwJcz yxz0TA6VSB2aMonRCLDj7m999adgGv1IeWEMC24QhDUlv8LQ3gAHgWetLv45e3KA DCU9q1VZV2oh6+Dl/SmZ9CwoRUizH7+gp70UM3nBxzTVMTCGRTOsrcK1Q562eq6O gBhfVmnSWRRE/CltfBqKLqcAkBPwg1yyF6O+Hafo1uURRXYtMLRGLaPP5u5dI4pB cMJj2bC+hHln30r75s3l13vRO9AfDEh0tZgAInMtzEHuDJ4yg9OSdiLVea5DHl8R RxSOnq9cfs7S8Hb+82WNkLjV+vmNLg/YzL6fD8rrgBaWGt0YTjZx85vOnG11jqCT W3BBlGorN+K3EA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:00:41 2025 by rpki-client