This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json) Hash identifier: FsjOfCksU3fs6IoqHn0m5Kj8S0vCT/nj5ZKUbaFaaww= Subject key identifier: F5:AD:9C:F2:1E:54:E1:7F:90:53:35:6B:81:84:72:82:25:25:C9:BC Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Certificate serial: 019B46CAC9493FD486563DEA9E0755C0A258 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft Manifest number: 178B Signing time: Mon 22 Dec 2025 16:00:53 +0000 Manifest this update: Mon 22 Dec 2025 16:00:53 +0000 Manifest next update: Tue 23 Dec 2025 16:00:53 +0000 Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: pNwyaKrGULQu/qNp3+V8rQ0EZvZqZM4xjvcp3vHczxo=) 2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 15:30:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:ca:c9:49:3f:d4:86:56:3d:ea:9e:07:55:c0:a2:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Validity Not Before: Dec 22 16:00:53 2025 GMT Not After : Dec 23 16:00:53 2025 GMT Subject: CN=f5ad9cf21e54e17f9053356b818472822525c9bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:0a:26:dc:09:0f:df:14:01:0b:4c:39:b6: 7e:71:6a:58:42:3f:9a:99:f8:1b:dc:11:61:52:f8: fd:92:c9:ae:ff:ec:bb:87:3d:73:a7:25:43:79:dd: 94:11:8a:c6:1f:33:5c:90:10:87:f1:d5:a0:f7:8e: 2a:46:18:cd:c1:0f:ef:c7:19:36:71:15:46:13:cf: e9:0e:5a:4c:d0:8e:d4:8c:65:2f:b8:4e:69:a8:00: 53:b1:22:c0:32:94:6f:cf:cd:d6:a1:a4:d7:74:b2: 28:52:83:b8:44:c7:67:fa:de:d0:35:3e:d8:9e:c5: a7:ef:a4:28:81:a8:51:6c:e5:fb:3f:2a:8d:27:cd: e8:22:59:9f:2d:e7:ec:48:4d:4b:67:45:a4:a3:69: c9:b0:88:ef:a9:61:e8:ab:53:53:8c:c8:85:88:fd: 1b:5e:dd:d6:db:9a:ba:53:b3:56:03:8c:01:57:50: 6d:b8:5d:35:5b:bb:10:49:fb:f7:fe:29:d6:e6:6e: 4f:40:63:07:a6:68:0d:a2:74:3c:97:89:b2:5c:1f: ac:71:83:5f:75:87:6b:2e:37:c1:cf:f2:1a:08:01: 7e:45:7b:c3:73:72:cb:61:ee:c8:b2:9c:0d:03:bc: 00:68:4c:d7:16:81:bf:31:61:d6:2c:56:1d:09:0e: d8:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AD:9C:F2:1E:54:E1:7F:90:53:35:6B:81:84:72:82:25:25:C9:BC X509v3 Authority Key Identifier: keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:6a:fd:4e:85:23:5f:9d:f0:d1:4f:2d:87:43:35:20:a0:6d: 38:a6:78:05:65:10:73:95:25:38:6b:e1:74:bc:39:16:c7:82: d1:a7:65:45:86:d9:ee:a9:19:f9:a2:de:01:70:36:e8:62:a8: 98:90:81:bb:c2:79:79:07:64:08:8d:5d:b9:fe:0d:5d:c1:4e: 93:ff:ab:e4:c8:fd:76:96:e6:18:47:e9:44:89:91:cd:57:04: a3:88:a9:3d:bc:70:82:be:dc:fb:ad:91:04:9b:96:ce:5c:29: 92:ff:6a:69:e8:70:64:48:2b:ca:9c:99:df:88:20:f2:6c:6c: 8f:92:24:1a:29:a2:fe:0a:52:c2:c4:9e:37:18:f5:49:0e:a4: 13:00:e7:a2:4a:b8:42:fd:24:4f:ab:6f:5a:4c:db:25:ad:96: 71:16:d8:ab:1a:a7:bd:41:5f:33:32:78:3c:43:59:59:1a:d0: 66:2d:cb:48:27:fb:99:75:1e:97:ab:f8:46:4a:00:17:d9:fb: db:ff:39:e7:5c:00:7f:2f:80:b7:97:65:f6:44:7b:8f:e8:72: b2:6a:f6:94:df:82:69:32:80:1d:95:34:d0:fc:90:40:72:43: 49:f5:03:1a:21:b8:e7:11:48:a1:76:0e:6b:9a:4d:a1:fc:d8: 4e:50:51:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGyslJP9SGVj3qngdVwKJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy ZTkwODYwHhcNMjUxMjIyMTYwMDUzWhcNMjUxMjIzMTYwMDUzWjAzMTEwLwYDVQQD EyhmNWFkOWNmMjFlNTRlMTdmOTA1MzM1NmI4MTg0NzI4MjI1MjVjOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg4KJtwJD98UAQtMObZ+cWpYQj+a mfgb3BFhUvj9ksmu/+y7hz1zpyVDed2UEYrGHzNckBCH8dWg944qRhjNwQ/vxxk2 cRVGE8/pDlpM0I7UjGUvuE5pqABTsSLAMpRvz83WoaTXdLIoUoO4RMdn+t7QNT7Y nsWn76QogahRbOX7PyqNJ83oIlmfLefsSE1LZ0Wko2nJsIjvqWHoq1NTjMiFiP0b Xt3W25q6U7NWA4wBV1BtuF01W7sQSfv3/inW5m5PQGMHpmgNonQ8l4myXB+scYNf dYdrLjfBz/IaCAF+RXvDc3LLYe7IspwNA7wAaEzXFoG/MWHWLFYdCQ7YwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWtnPIeVOF/kFM1a4GEcoIlJcm8MB8GA1UdIwQY MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0 LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArWr9ToUj X53w0U8th0M1IKBtOKZ4BWUQc5UlOGvhdLw5FseC0adlRYbZ7qkZ+aLeAXA26GKo mJCBu8J5eQdkCI1duf4NXcFOk/+r5Mj9dpbmGEfpRImRzVcEo4ipPbxwgr7c+62R BJuWzlwpkv9qaehwZEgrypyZ34gg8mxsj5IkGimi/gpSwsSeNxj1SQ6kEwDnokq4 Qv0kT6tvWkzbJa2WcRbYqxqnvUFfMzJ4PENZWRrQZi3LSCf7mXUel6v4RkoAF9n7 2/8551wAfy+At5dl9kR7j+hysmr2lN+CaTKAHZU00PyQQHJDSfUDGiG45xFIoXYO a5pNofzYTlBR9w== -----END CERTIFICATE-----Generated at Mon Dec 22 18:58:05 2025 by rpki-client