This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft File: eYCaQAStlYNQpkbViavLPP3z7S4.mft (raw, json) Hash identifier: CwMzu/tIc8QhcWTYR9A5DU+xWo2BiavBYu4KtxJ0bCU= Subject key identifier: E8:2F:2E:07:9B:71:22:46:C1:80:38:21:86:29:79:D9:38:66:4B:91 Authority key identifier: 79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E Certificate issuer: /CN=79809a4004ad958350a646d589abcb3cfdf3ed2e Certificate serial: 019B3D5976CFA066B9858D4BA6ECAE0EF96E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft Manifest number: 090B Signing time: Sat 20 Dec 2025 20:00:31 +0000 Manifest this update: Sat 20 Dec 2025 20:00:31 +0000 Manifest next update: Sun 21 Dec 2025 20:00:31 +0000 Files and hashes: 1: eYCaQAStlYNQpkbViavLPP3z7S4.crl (hash: Znvw/QxPqv/ds2JOHvbnYcSFp1a8/R8zel7eQk/M+4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:76:cf:a0:66:b9:85:8d:4b:a6:ec:ae:0e:f9:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79809a4004ad958350a646d589abcb3cfdf3ed2e Validity Not Before: Dec 20 20:00:31 2025 GMT Not After : Dec 21 20:00:31 2025 GMT Subject: CN=e82f2e079b712246c1803821862979d938664b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:74:fa:96:d0:65:3b:cc:dc:5a:31:e7:b5:91: 53:e9:34:15:69:cf:f8:74:77:80:4c:b5:66:cc:b5: 94:a5:e1:c1:37:1a:d4:e2:f2:cc:c8:78:6a:11:fb: 79:1c:5b:9f:24:9c:2b:fd:a5:d2:31:fa:7e:1f:db: 5b:ca:7c:5c:e7:31:d5:68:c4:a6:15:be:83:95:7e: ba:e4:a0:dc:4e:fd:89:56:0c:88:f2:ec:d5:2b:c7: 01:fa:e9:80:77:3a:d7:81:87:bf:18:c1:bc:25:1a: 07:2a:a3:7e:ba:f9:ad:36:36:78:94:05:23:8d:bd: 0e:d4:eb:bd:ad:fc:fc:5e:aa:d9:63:15:70:5f:26: d2:04:fa:bd:91:3f:d3:e2:18:75:47:1d:a1:ad:56: f4:db:b7:ba:92:8c:e5:c1:32:96:ce:e5:92:de:ac: 9c:75:c3:29:57:84:52:7a:da:e3:84:21:e1:8c:16: 6b:d9:4a:a0:61:00:44:1f:64:0c:83:fa:8a:f9:a0: 7a:f9:3d:45:0f:06:60:50:1d:c1:55:bc:ee:e5:87: 62:39:f1:7b:68:91:d0:54:80:12:02:d4:cd:bc:63: d9:a9:37:5b:87:e1:c5:a5:a8:5a:19:f7:0e:63:4f: f9:db:54:ee:2f:f0:85:6d:f1:c6:92:f2:0e:ec:0c: 8e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:2F:2E:07:9B:71:22:46:C1:80:38:21:86:29:79:D9:38:66:4B:91 X509v3 Authority Key Identifier: keyid:79:80:9A:40:04:AD:95:83:50:A6:46:D5:89:AB:CB:3C:FD:F3:ED:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYCaQAStlYNQpkbViavLPP3z7S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5b45f8-9a30-41d3-b611-d5aa6477efde/1/eYCaQAStlYNQpkbViavLPP3z7S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:df:a9:4f:5a:a0:f3:5d:8e:a1:9c:ed:0d:ca:ed:24:1d:de: 89:17:f6:08:50:29:c2:a7:8c:31:5b:fd:7d:01:98:45:27:7a: ad:b9:2d:6d:8d:67:76:78:00:27:28:8b:da:31:b2:ab:d0:75: 1d:ff:08:2f:70:55:d1:96:6d:11:d6:60:45:62:55:1d:d6:d9: 93:03:76:61:e8:da:e2:db:a7:9c:30:f8:28:45:0b:0d:4f:70: 56:24:d0:59:da:83:85:a1:c6:db:50:25:3e:7e:fe:12:c4:69: f9:27:79:dd:4e:82:f7:11:c3:29:88:12:63:28:c7:69:ad:59: 6f:8a:02:5b:39:0a:64:7b:f9:79:6c:8a:6a:7d:90:bb:37:a6: f2:07:80:e3:d6:86:5c:d2:7d:c8:2a:36:44:c0:3b:01:0c:6b: f2:5c:73:5e:ba:2e:63:3b:52:3a:30:74:1f:ae:be:3a:f2:46: e5:f0:f5:54:60:f9:12:6c:bb:59:b6:1d:a4:7c:6f:d3:1d:fb: 67:8a:8b:df:f7:1d:5b:f2:6f:7b:59:cf:39:b1:3d:ec:a4:2f: 4d:97:79:4b:00:4f:e9:4a:59:73:b4:47:1a:8e:1b:8f:46:a5: fc:09:8b:c8:2d:33:f3:d0:1d:d8:47:94:c2:b6:44:c7:f9:b7: 2c:90:76:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9WXbPoGa5hY1LpuyuDvluMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODA5YTQwMDRhZDk1ODM1MGE2NDZkNTg5YWJjYjNjZmRm M2VkMmUwHhcNMjUxMjIwMjAwMDMxWhcNMjUxMjIxMjAwMDMxWjAzMTEwLwYDVQQD EyhlODJmMmUwNzliNzEyMjQ2YzE4MDM4MjE4NjI5NzlkOTM4NjY0YjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03T6ltBlO8zcWjHntZFT6TQVac/4 dHeATLVmzLWUpeHBNxrU4vLMyHhqEft5HFufJJwr/aXSMfp+H9tbynxc5zHVaMSm Fb6DlX665KDcTv2JVgyI8uzVK8cB+umAdzrXgYe/GMG8JRoHKqN+uvmtNjZ4lAUj jb0O1Ou9rfz8XqrZYxVwXybSBPq9kT/T4hh1Rx2hrVb027e6kozlwTKWzuWS3qyc dcMpV4RSetrjhCHhjBZr2UqgYQBEH2QMg/qK+aB6+T1FDwZgUB3BVbzu5YdiOfF7 aJHQVIASAtTNvGPZqTdbh+HFpahaGfcOY0/521TuL/CFbfHGkvIO7AyOBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgvLgebcSJGwYA4IYYpedk4ZkuRMB8GA1UdIwQY MBaAFHmAmkAErZWDUKZG1Ymryzz98+0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlDYVFBU3RsWU5RcGtiVmlhdkxQUDN6N1M0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YjQ1ZjgtOWEzMC00MWQzLWI2MTEt ZDVhYTY0NzdlZmRlLzEvZVlDYVFBU3RsWU5RcGtiVmlhdkxQUDN6N1M0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC81YjQ1ZjgtOWEzMC00MWQzLWI2MTEtZDVhYTY0NzdlZmRl LzEvZVlDYVFBU3RsWU5RcGtiVmlhdkxQUDN6N1M0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9+pT1qg 812OoZztDcrtJB3eiRf2CFApwqeMMVv9fQGYRSd6rbktbY1ndngAJyiL2jGyq9B1 Hf8IL3BV0ZZtEdZgRWJVHdbZkwN2Yeja4tunnDD4KEULDU9wViTQWdqDhaHG21Al Pn7+EsRp+Sd53U6C9xHDKYgSYyjHaa1Zb4oCWzkKZHv5eWyKan2Quzem8geA49aG XNJ9yCo2RMA7AQxr8lxzXrouYztSOjB0H66+OvJG5fD1VGD5Emy7WbYdpHxv0x37 Z4qL3/cdW/Jve1nPObE97KQvTZd5SwBP6UpZc7RHGo4bj0al/AmLyC0z89Ad2EeU wrZEx/m3LJB2kA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:04:59 2025 by rpki-client