This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft File: EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft (raw, json) Hash identifier: SaVRvZg24kwi1PmWSNgozYs9PEZvmf8S6iaTvGJiNcI= Subject key identifier: D6:14:3F:19:8A:4D:03:6D:DF:E1:7D:67:A6:93:A7:DB:F0:16:87:7A Authority key identifier: 11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86 Certificate issuer: /CN=110274b45d8fed463ed1e766ed71770ffd899186 Certificate serial: 019B435C490F170642ED1D98F486CA102850 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft Manifest number: DE Signing time: Mon 22 Dec 2025 00:01:20 +0000 Manifest this update: Mon 22 Dec 2025 00:01:20 +0000 Manifest next update: Tue 23 Dec 2025 00:01:20 +0000 Files and hashes: 1: EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl (hash: ylf5QuazPOMaz+LAthci2bZKfb7EHUjDNED+HCVaet4=) 2: FO2yOCStuvN-G30wp_1YO7jAtJQ.roa (hash: 86zJ2vb8NETGOzpiOhgBq69QPVqk1M4tQ+6yHOa0RZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 00:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:49:0f:17:06:42:ed:1d:98:f4:86:ca:10:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110274b45d8fed463ed1e766ed71770ffd899186 Validity Not Before: Dec 22 00:01:20 2025 GMT Not After : Dec 23 00:01:20 2025 GMT Subject: CN=d6143f198a4d036ddfe17d67a693a7dbf016877a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ef:69:dd:cc:57:2a:ca:61:cf:8b:7a:ea:c0: d8:d6:06:4f:cb:ea:93:ae:10:c5:44:81:6b:ae:2c: 74:77:33:7f:6a:ae:28:54:47:11:18:da:ce:11:8f: c6:1b:7b:f7:8b:12:fb:fe:bc:94:7a:ec:f0:a8:65: bd:e4:58:f9:ab:02:2b:56:28:10:94:4b:20:00:b7: 40:fc:ad:f5:04:f6:35:b5:16:cb:05:24:89:8c:32: a9:8e:42:1e:2c:15:8f:73:c1:41:7d:ab:ad:cc:98: d7:0f:8b:a7:0d:47:b2:ec:15:d7:83:ab:1b:37:15: a4:45:7b:0d:a9:34:a3:75:ca:a8:36:ea:51:81:3b: 70:27:09:8b:56:20:ef:8c:b4:2a:9e:9f:57:90:ac: d3:9a:f4:5d:4a:7d:f1:68:4f:0c:df:d8:64:29:87: 71:26:6d:55:a7:be:41:c2:53:3e:5c:36:79:18:66: 8e:d4:bb:a0:bb:c4:e9:65:af:bf:3a:3b:11:d1:e6: 24:6b:ba:c0:38:e3:2a:d8:30:33:0a:bb:95:a5:a2: aa:6a:ec:99:ee:bb:97:eb:6d:76:fe:f1:f3:b8:3c: 9d:ea:c7:63:ce:42:26:ba:fb:c2:1a:ac:d9:02:c1: e4:b7:9a:ae:89:ef:08:65:a9:24:fd:28:79:8e:74: 25:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:14:3F:19:8A:4D:03:6D:DF:E1:7D:67:A6:93:A7:DB:F0:16:87:7A X509v3 Authority Key Identifier: keyid:11:02:74:B4:5D:8F:ED:46:3E:D1:E7:66:ED:71:77:0F:FD:89:91:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQJ0tF2P7UY-0edm7XF3D_2JkYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/377b97-3830-4067-b0bf-f807fd67b54f/1/EQJ0tF2P7UY-0edm7XF3D_2JkYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:27:f5:55:e6:3a:09:a2:c1:e7:85:f1:e5:94:60:5b:f3:25: 3b:3a:6c:93:63:a0:62:48:30:f0:d0:4c:ca:48:a1:ca:fc:ef: 2d:00:25:33:40:f7:42:ac:6b:c2:77:45:e0:c0:2f:ba:80:7e: 74:51:c5:46:e6:69:42:a7:8b:ee:d6:04:8c:04:59:45:e4:cd: c6:5c:b5:c1:8d:d8:83:88:16:71:9c:da:04:52:74:7c:5a:86: f2:8d:9d:98:ed:de:c6:e0:86:be:dd:19:ad:14:ca:2e:41:a2: 71:98:56:3b:74:77:0a:41:d8:04:ee:37:8f:b2:f4:c9:9f:be: 24:6a:39:be:e9:e8:d3:db:4d:9e:d5:89:75:b2:27:eb:b7:27: e2:26:85:14:53:b3:a5:d5:6c:18:48:20:28:09:4d:5a:1b:1c: c1:2b:1d:97:cb:2b:7d:d6:93:ce:2d:b4:69:60:3f:77:7f:f6: ca:8f:0a:ee:9e:43:6f:53:2a:6e:86:72:eb:da:74:6f:00:a8: ae:85:29:4c:dc:a2:cc:54:ac:c7:ce:d5:c8:5c:34:34:f3:ae: 99:12:44:ef:8d:d8:cf:d6:fb:5a:12:b5:4a:5c:bd:24:4e:84: b8:08:dc:c2:79:80:0b:9c:9b:0f:86:7c:a8:74:d9:1a:29:57: 56:62:0a:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXEkPFwZC7R2Y9IbKEChQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDI3NGI0NWQ4ZmVkNDYzZWQxZTc2NmVkNzE3NzBmZmQ4 OTkxODYwHhcNMjUxMjIyMDAwMTIwWhcNMjUxMjIzMDAwMTIwWjAzMTEwLwYDVQQD EyhkNjE0M2YxOThhNGQwMzZkZGZlMTdkNjdhNjkzYTdkYmYwMTY4NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAru9p3cxXKsphz4t66sDY1gZPy+qT rhDFRIFrrix0dzN/aq4oVEcRGNrOEY/GG3v3ixL7/ryUeuzwqGW95Fj5qwIrVigQ lEsgALdA/K31BPY1tRbLBSSJjDKpjkIeLBWPc8FBfautzJjXD4unDUey7BXXg6sb NxWkRXsNqTSjdcqoNupRgTtwJwmLViDvjLQqnp9XkKzTmvRdSn3xaE8M39hkKYdx Jm1Vp75BwlM+XDZ5GGaO1Lugu8TpZa+/OjsR0eYka7rAOOMq2DAzCruVpaKqauyZ 7ruX6212/vHzuDyd6sdjzkImuvvCGqzZAsHkt5quie8IZakk/Sh5jnQlTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNYUPxmKTQNt3+F9Z6aTp9vwFod6MB8GA1UdIwQY MBaAFBECdLRdj+1GPtHnZu1xdw/9iZGGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFKMHRGMlA3VVktMGVkbTdYRjNEXzJKa1lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8zNzdiOTctMzgzMC00MDY3LWIwYmYt ZjgwN2ZkNjdiNTRmLzEvRVFKMHRGMlA3VVktMGVkbTdYRjNEXzJKa1lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS8zNzdiOTctMzgzMC00MDY3LWIwYmYtZjgwN2ZkNjdiNTRm LzEvRVFKMHRGMlA3VVktMGVkbTdYRjNEXzJKa1lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyf1VeY6 CaLB54Xx5ZRgW/MlOzpsk2OgYkgw8NBMykihyvzvLQAlM0D3QqxrwndF4MAvuoB+ dFHFRuZpQqeL7tYEjARZReTNxly1wY3Yg4gWcZzaBFJ0fFqG8o2dmO3exuCGvt0Z rRTKLkGicZhWO3R3CkHYBO43j7L0yZ++JGo5vuno09tNntWJdbIn67cn4iaFFFOz pdVsGEggKAlNWhscwSsdl8srfdaTzi20aWA/d3/2yo8K7p5Db1MqboZy69p0bwCo roUpTNyizFSsx87VyFw0NPOumRJE743Yz9b7WhK1Sly9JE6EuAjcwnmAC5ybD4Z8 qHTZGilXVmIKAw== -----END CERTIFICATE-----Generated at Mon Dec 22 08:50:47 2025 by rpki-client