This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json) Hash identifier: hZuBk7SkoC6WOlK9kWdC8eKRHtybP1+8AfslZTgiIhU= Subject key identifier: 32:11:4F:BA:D1:A6:92:FF:79:46:83:DF:D3:74:48:B5:83:0B:08:8E Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Certificate serial: 019B3AC6EFB337E9C4335354676A67780A56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft Manifest number: 0456 Signing time: Sat 20 Dec 2025 08:01:14 +0000 Manifest this update: Sat 20 Dec 2025 08:01:14 +0000 Manifest next update: Sun 21 Dec 2025 08:01:14 +0000 Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: JgBqly3QfNK0SVnzSjsvQrPJrXtWFdw6WHdnCD7RGZQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:ef:b3:37:e9:c4:33:53:54:67:6a:67:78:0a:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Validity Not Before: Dec 20 08:01:14 2025 GMT Not After : Dec 21 08:01:14 2025 GMT Subject: CN=32114fbad1a692ff794683dfd37448b5830b088e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:23:b4:80:a8:6e:51:6a:b7:77:41:a7:2f:92: 89:d5:db:e1:8c:3a:5e:d9:91:7a:8a:a9:90:94:af: 4d:63:a2:6b:b9:d3:95:84:38:e1:6e:be:05:0f:32: a0:76:32:4e:e8:ca:d0:ba:2f:bc:bf:30:36:14:f6: f6:41:33:69:ed:8e:08:f4:f9:90:c1:ba:76:d1:22: 5d:a1:cf:f5:21:e7:41:fe:68:47:98:5e:5e:e2:7a: 34:33:a4:b9:46:18:80:26:b9:48:29:0b:75:e8:6a: 08:99:df:8f:d8:22:76:a3:a3:2f:aa:b6:84:bf:d6: 95:51:ea:be:3c:74:06:db:cd:d5:ef:df:b7:72:f2: 77:aa:1b:0e:c9:49:71:3b:89:1f:fe:3e:53:26:35: c2:c1:7d:52:db:90:84:29:33:ea:14:4a:5b:4c:f5: e9:72:a5:1d:f2:6c:c5:a7:a6:92:e3:e2:fd:71:1f: 6c:33:1b:c3:21:4d:bf:0d:0c:5a:c2:ce:79:30:16: 8c:28:28:03:0e:f5:8b:b6:dc:18:71:f6:64:4d:9e: 24:52:1f:31:d7:0d:43:12:e6:3c:07:ad:fc:ad:5f: 97:e6:30:ba:1d:53:d3:ef:a9:dc:17:2c:f8:ae:48: 2f:f9:eb:59:ca:0f:38:d8:1f:bf:bc:67:a1:8a:76: e5:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:11:4F:BA:D1:A6:92:FF:79:46:83:DF:D3:74:48:B5:83:0B:08:8E X509v3 Authority Key Identifier: keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:79:4b:34:53:e9:d4:6f:9b:53:dc:30:88:14:c4:13:a1:5a: 6d:10:96:3f:77:31:e5:c3:40:29:2f:b3:b5:98:89:c4:4c:bd: 53:51:a9:6c:d9:95:1e:60:b0:5b:bd:30:1e:45:54:26:2f:7c: 60:b3:bb:0a:66:0e:fc:b0:44:1f:93:3b:08:bc:93:66:d3:18: 7c:9d:df:77:f5:68:ff:a3:0e:a9:51:8c:fb:4e:49:8b:6d:09: 12:4e:72:89:ac:41:26:ab:d5:41:0f:2f:90:d9:aa:af:96:17: 7c:df:58:3a:e1:ed:e7:75:2e:01:84:dd:3a:06:42:52:82:06: a9:9d:99:f0:39:80:9f:43:37:7e:f4:c1:1f:51:94:7f:48:aa: a3:28:cb:b5:1c:06:24:41:aa:99:a5:5f:9c:a9:55:80:43:47: af:55:5d:8e:f1:24:e0:51:59:72:4c:e4:52:31:bc:a3:ad:f5: 41:11:2b:7c:3b:6b:e5:5b:de:16:49:3b:2c:f0:c4:c6:14:c9: c6:8f:82:bf:ac:c2:49:d4:86:50:04:cc:8c:2b:c7:57:32:d2: 05:53:aa:dc:f8:5b:fb:cc:72:5f:84:85:8a:b8:0f:d3:eb:f7: 87:c8:bf:67:e1:d8:88:9a:5f:e7:f2:85:96:f1:d8:b8:32:f4: c7:fa:f1:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xu+zN+nEM1NUZ2pneApWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh N2M0ZTUwHhcNMjUxMjIwMDgwMTE0WhcNMjUxMjIxMDgwMTE0WjAzMTEwLwYDVQQD EygzMjExNGZiYWQxYTY5MmZmNzk0NjgzZGZkMzc0NDhiNTgzMGIwODhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSO0gKhuUWq3d0GnL5KJ1dvhjDpe 2ZF6iqmQlK9NY6JrudOVhDjhbr4FDzKgdjJO6MrQui+8vzA2FPb2QTNp7Y4I9PmQ wbp20SJdoc/1IedB/mhHmF5e4no0M6S5RhiAJrlIKQt16GoImd+P2CJ2o6MvqraE v9aVUeq+PHQG283V79+3cvJ3qhsOyUlxO4kf/j5TJjXCwX1S25CEKTPqFEpbTPXp cqUd8mzFp6aS4+L9cR9sMxvDIU2/DQxaws55MBaMKCgDDvWLttwYcfZkTZ4kUh8x 1w1DEuY8B638rV+X5jC6HVPT76ncFyz4rkgv+etZyg842B+/vGehinbljwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIRT7rRppL/eUaD39N0SLWDCwiOMB8GA1UdIwQY MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1 LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInlLNFPp 1G+bU9wwiBTEE6FabRCWP3cx5cNAKS+ztZiJxEy9U1GpbNmVHmCwW70wHkVUJi98 YLO7CmYO/LBEH5M7CLyTZtMYfJ3fd/Vo/6MOqVGM+05Ji20JEk5yiaxBJqvVQQ8v kNmqr5YXfN9YOuHt53UuAYTdOgZCUoIGqZ2Z8DmAn0M3fvTBH1GUf0iqoyjLtRwG JEGqmaVfnKlVgENHr1VdjvEk4FFZckzkUjG8o631QRErfDtr5VveFkk7LPDExhTJ xo+Cv6zCSdSGUATMjCvHVzLSBVOq3Phb+8xyX4SFirgP0+v3h8i/Z+HYiJpf5/KF lvHYuDL0x/rx9w== -----END CERTIFICATE-----Generated at Sat Dec 20 16:45:12 2025 by rpki-client