This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft File: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json) Hash identifier: 0gxxnT56rH6IH16BHh2Vdyo9k+I9QXC7A3b6HTpoZNE= Subject key identifier: EB:FC:BF:7B:AB:EB:78:14:48:7D:8F:62:75:60:F4:82:B9:D1:BF:9B Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 Certificate issuer: /CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Certificate serial: 019B6CFC6277B9BB80A40017A7BED6673CF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft Manifest number: 17A3 Signing time: Tue 30 Dec 2025 02:00:38 +0000 Manifest this update: Tue 30 Dec 2025 02:00:38 +0000 Manifest next update: Wed 31 Dec 2025 02:00:38 +0000 Files and hashes: 1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: WVKqtjRxK/EXP+BxIyR+K4o5Out0FfENVH+6RnTENXw=) 2: RA2Fj5XNpBEGqwtLV7JPBiXXhZ0.roa (hash: BNo8QMwK2CvmHYQFxYebo4KjKZTrRv5gh0bqfDREWd8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6c:fc:62:77:b9:bb:80:a4:00:17:a7:be:d6:67:3c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994 Validity Not Before: Dec 30 02:00:38 2025 GMT Not After : Dec 31 02:00:38 2025 GMT Subject: CN=ebfcbf7babeb7814487d8f627560f482b9d1bf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:b3:1f:13:88:bd:47:aa:d7:8e:b5:02:59: a1:99:ab:eb:30:06:fb:1b:a9:5e:7f:63:07:da:f6: 57:89:f2:d7:7d:24:cd:44:d3:a6:23:bb:a9:1b:1e: 5c:0e:84:11:8d:12:63:b3:84:08:01:d9:c3:66:cf: d2:33:47:25:38:fa:5c:9b:41:5d:dd:d2:4e:c6:30: 82:a7:2b:04:df:0c:92:94:ef:41:1b:ec:1e:9a:3f: 7c:6c:09:72:32:f6:49:01:ae:6a:e7:8e:4f:87:b1: d1:91:e9:36:8b:48:ea:4e:51:1c:a0:10:1d:7b:3f: 82:72:5f:c9:60:6d:22:f2:5c:de:34:b6:84:f1:99: 20:fc:b3:33:9f:a1:44:4c:1e:59:5e:63:42:57:d3: 26:2f:7a:85:81:82:84:d4:b9:6d:28:2a:8c:79:20: d1:21:7e:0d:9b:06:d4:aa:6f:76:b0:55:18:42:12: 42:e5:4d:ff:34:4f:72:55:8e:1a:18:62:aa:3a:36: 42:c1:74:42:59:dd:e7:ab:97:0a:36:e3:cf:d1:9d: d2:b8:c0:f1:06:a3:89:45:6a:fe:4a:bc:79:43:47: d2:17:24:c7:7d:21:1f:d0:e5:33:4b:48:5f:c5:a6: d7:86:29:f7:e4:2d:81:6e:4a:ed:12:26:db:19:4a: 83:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:FC:BF:7B:AB:EB:78:14:48:7D:8F:62:75:60:F4:82:B9:D1:BF:9B X509v3 Authority Key Identifier: keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:f9:55:5a:ef:7c:78:41:5f:8e:a5:ac:9a:05:58:8b:cd:01: af:f6:5b:35:41:77:e1:87:01:71:fe:bd:ea:b2:63:85:14:71: c9:f3:4a:12:6a:0b:93:14:a2:e3:44:4c:28:9b:42:39:c0:85: 76:92:6b:dd:28:b6:ae:f8:e1:95:4f:17:87:4c:e3:7d:b6:8e: 21:83:d1:bc:e0:ba:a0:ba:09:61:55:9e:c4:8c:6d:7b:c2:47: 5f:22:65:59:13:7d:9b:4c:42:97:8b:b0:f0:d8:e1:1d:d1:6d: 92:33:e9:75:96:f5:ae:94:22:a1:d3:f1:9e:cf:16:b3:0c:36: 9b:c5:c6:be:27:9a:43:20:eb:40:4c:db:e2:7b:78:d1:26:4f: c4:32:e3:ee:1d:df:31:15:39:bf:a1:84:0f:18:f9:95:fc:4a: ab:83:b9:9f:40:81:75:cf:ba:3d:c3:37:e1:ec:6d:70:a7:3d: 3d:e3:1c:13:bb:c7:d4:a0:94:c8:a3:76:b6:d1:d1:e5:59:fb: 85:fb:7e:ec:57:7e:7c:67:1e:2a:42:08:0f:71:f3:04:61:2c: 82:2d:c1:26:ad:3f:f3:7e:28:14:ef:5c:0a:e3:3a:14:b5:f8: 99:da:bb:d3:29:99:ac:99:4e:40:d4:82:61:5c:d1:0c:d9:55: 03:57:f0:96 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZts/GJ3ubuApAAXp77WZzz3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZTAyNTdkMDY3ZWY4Yjg1ZjYyMGM2NzIyMGNmOTc3ZGRk ZTM5OTQwHhcNMjUxMjMwMDIwMDM4WhcNMjUxMjMxMDIwMDM4WjAzMTEwLwYDVQQD EyhlYmZjYmY3YmFiZWI3ODE0NDg3ZDhmNjI3NTYwZjQ4MmI5ZDFiZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqumzHxOIvUeq1461AlmhmavrMAb7 G6lef2MH2vZXifLXfSTNRNOmI7upGx5cDoQRjRJjs4QIAdnDZs/SM0clOPpcm0Fd 3dJOxjCCpysE3wySlO9BG+wemj98bAlyMvZJAa5q545Ph7HRkek2i0jqTlEcoBAd ez+Ccl/JYG0i8lzeNLaE8Zkg/LMzn6FETB5ZXmNCV9MmL3qFgYKE1LltKCqMeSDR IX4NmwbUqm92sFUYQhJC5U3/NE9yVY4aGGKqOjZCwXRCWd3nq5cKNuPP0Z3SuMDx BqOJRWr+Srx5Q0fSFyTHfSEf0OUzS0hfxabXhin35C2BbkrtEibbGUqD8QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOv8v3ur63gUSH2PYnVg9IK50b+bMB8GA1UdIwQY MBaAFPngJX0Gfvi4X2IMZyIM+Xfd3jmUMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1lQWxmUVotLUxoZllneG5JZ3o1ZDkzZU9aUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWIvNjkxOTRhLTQ1YTAtNDhlZi05OWJm LThlMDQ4ODdjMGFiZi8xLzEtZUFsZlFaLS1MaGZZZ3huSWd6NWQ5M2VPWlEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2ViLzY5MTk0YS00NWEwLTQ4ZWYtOTliZi04ZTA0ODg3YzBh YmYvMS8xLWVBbGZRWi0tTGhmWWd4bklnejVkOTNlT1pRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPlV Wu98eEFfjqWsmgVYi80Br/ZbNUF34YcBcf696rJjhRRxyfNKEmoLkxSi40RMKJtC OcCFdpJr3Si2rvjhlU8Xh0zjfbaOIYPRvOC6oLoJYVWexIxte8JHXyJlWRN9m0xC l4uw8NjhHdFtkjPpdZb1rpQiodPxns8Wsww2m8XGvieaQyDrQEzb4nt40SZPxDLj 7h3fMRU5v6GEDxj5lfxKq4O5n0CBdc+6PcM34extcKc9PeMcE7vH1KCUyKN2ttHR 5Vn7hft+7Fd+fGceKkIID3HzBGEsgi3BJq0/834oFO9cCuM6FLX4mdq70ymZrJlO QNSCYVzRDNlVA1fwlg== -----END CERTIFICATE-----Generated at Tue Dec 30 06:20:50 2025 by rpki-client