This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json) Hash identifier: E8YxIssL/lm55HJxUf3nxHrQyU/Luy7alhKmK28V8h4= Subject key identifier: 29:77:B5:A0:21:CE:79:D9:D9:8A:A9:0E:A5:BD:DF:74:69:D2:E9:E4 Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Certificate serial: 019B3DFE3D9D46255B8CF02F43BB43050994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 23:00:30 +0000 Manifest this update: Sat 20 Dec 2025 23:00:30 +0000 Manifest next update: Sun 21 Dec 2025 23:00:30 +0000 Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: H5tw/0JtMp/xdaXBLR7C1d6dZCsG8nU6XcVHHqArJus=) 2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:3d:9d:46:25:5b:8c:f0:2f:43:bb:43:05:09:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Validity Not Before: Dec 20 23:00:30 2025 GMT Not After : Dec 21 23:00:30 2025 GMT Subject: CN=2977b5a021ce79d9d98aa90ea5bddf7469d2e9e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:5f:58:bd:7c:8c:56:be:86:47:64:c2:28: 05:bb:0b:b6:2e:c2:4e:56:21:39:5e:fa:b6:f1:34: 75:76:ad:fd:a1:36:1e:97:55:4d:97:e4:3e:ef:83: 51:01:e1:92:e3:9d:3f:09:c4:d1:36:f6:10:90:61: 7e:27:f4:3c:a3:2b:df:8b:8d:e3:d1:9a:5e:9d:35: e0:04:3e:d6:40:80:6f:28:4b:fb:d9:3d:5a:ca:8f: bc:22:17:a0:31:09:11:6f:37:88:9e:6d:be:b8:89: b7:d7:66:33:db:a9:76:2d:68:7b:96:49:35:ba:ef: df:af:0c:28:25:ce:22:8d:4d:1e:9c:86:4e:85:62: 2f:2c:cf:7a:82:6b:23:9c:a6:95:dd:96:4d:ec:cb: 7e:39:4d:6c:94:47:92:4a:e1:b8:99:5d:ca:f9:8b: 59:9a:5c:c6:e3:6f:38:60:51:f8:00:a0:8b:1d:de: 72:45:83:ea:37:a6:7b:98:a9:96:02:be:9a:04:62: 02:6c:55:b0:b2:2b:00:25:ca:95:57:72:6d:9e:c9: b7:18:ec:80:22:c6:56:ba:78:16:90:df:30:4a:41: 05:0f:d7:9e:f8:33:4f:19:91:55:b1:a5:6f:4d:47: 0b:2f:1a:d5:44:9b:70:4d:a1:02:29:09:17:72:aa: 61:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:77:B5:A0:21:CE:79:D9:D9:8A:A9:0E:A5:BD:DF:74:69:D2:E9:E4 X509v3 Authority Key Identifier: keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:5a:8b:33:80:47:81:0a:d1:93:55:7c:d3:a2:0f:55:e1:ab: 24:fa:3f:a3:fa:62:42:8a:4a:ff:e0:21:34:65:dd:de:eb:c2: bb:3e:31:48:b8:35:8e:59:1b:33:44:10:a4:07:fc:da:14:10: 1f:e7:5d:73:79:12:7a:dd:b0:64:5d:3a:d5:42:74:a1:b1:60: 23:8b:08:ce:d0:e7:3f:bc:f3:bf:d1:c2:ae:76:cc:87:1b:05: ac:fc:bf:a7:e1:7f:48:7e:0f:44:e4:37:28:05:d0:05:f3:45: ee:ff:46:f3:bd:2c:3d:e5:1f:c8:27:bf:48:0a:84:87:d8:26: af:63:46:77:c5:38:81:b2:d3:dd:11:7f:e4:09:0a:61:dd:9e: c4:a2:4c:55:ea:94:bd:c7:d0:3b:00:8c:38:13:9b:2d:9e:30: b4:2f:9a:99:a9:e9:3e:52:65:08:67:75:e5:95:30:1b:b8:9b: 9c:63:de:1b:a2:15:7f:f7:70:05:79:f0:d1:9f:bd:37:fb:88: 7a:b8:20:32:7a:04:4e:47:9d:13:be:05:53:5c:7a:73:a7:80: b5:21:bd:c8:b6:c4:3c:6c:9c:a0:8c:be:71:94:f4:9f:0e:51: 26:44:19:e2:a6:06:d3:32:65:9e:14:dd:28:68:72:e0:97:9b: 32:51:b0:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/j2dRiVbjPAvQ7tDBQmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZThkYTg0MDdmOWY3NDhlODFmZTlkYTllYjA2YjNiMTdk MDY3ZGQwHhcNMjUxMjIwMjMwMDMwWhcNMjUxMjIxMjMwMDMwWjAzMTEwLwYDVQQD EygyOTc3YjVhMDIxY2U3OWQ5ZDk4YWE5MGVhNWJkZGY3NDY5ZDJlOWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcBfWL18jFa+hkdkwigFuwu2LsJO ViE5Xvq28TR1dq39oTYel1VNl+Q+74NRAeGS450/CcTRNvYQkGF+J/Q8oyvfi43j 0ZpenTXgBD7WQIBvKEv72T1ayo+8IhegMQkRbzeInm2+uIm312Yz26l2LWh7lkk1 uu/frwwoJc4ijU0enIZOhWIvLM96gmsjnKaV3ZZN7Mt+OU1slEeSSuG4mV3K+YtZ mlzG4284YFH4AKCLHd5yRYPqN6Z7mKmWAr6aBGICbFWwsisAJcqVV3Jtnsm3GOyA IsZWungWkN8wSkEFD9ee+DNPGZFVsaVvTUcLLxrVRJtwTaECKQkXcqph1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCl3taAhznnZ2YqpDqW933Rp0unkMB8GA1UdIwQY MBaAFBDo2oQH+fdI6B/p2p6wazsX0GfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUt MmNlZWE1Y2FmM2EwLzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUtMmNlZWE1Y2FmM2Ew LzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVqLM4BH gQrRk1V806IPVeGrJPo/o/piQopK/+AhNGXd3uvCuz4xSLg1jlkbM0QQpAf82hQQ H+ddc3kSet2wZF061UJ0obFgI4sIztDnP7zzv9HCrnbMhxsFrPy/p+F/SH4PROQ3 KAXQBfNF7v9G870sPeUfyCe/SAqEh9gmr2NGd8U4gbLT3RF/5AkKYd2exKJMVeqU vcfQOwCMOBObLZ4wtC+amanpPlJlCGd15ZUwG7ibnGPeG6IVf/dwBXnw0Z+9N/uI erggMnoETkedE74FU1x6c6eAtSG9yLbEPGycoIy+cZT0nw5RJkQZ4qYG0zJlnhTd KGhy4JebMlGwYA== -----END CERTIFICATE-----Generated at Sun Dec 21 08:18:58 2025 by rpki-client