This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft File: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json) Hash identifier: 4XYD5L3W6iUFGlZaOe/XmtdHlpHbtrUcuFKy3PZ8HGM= Subject key identifier: 74:02:BE:70:E0:D9:7C:B7:AE:6C:61:71:4E:5B:1C:61:FD:FF:C4:74 Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 Certificate issuer: /CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Certificate serial: 019B5261236C980A43BA103AA476B96C6B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 22:00:56 +0000 Manifest this update: Wed 24 Dec 2025 22:00:56 +0000 Manifest next update: Thu 25 Dec 2025 22:00:56 +0000 Files and hashes: 1: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: oPZxUMygxKq1o+ypDhafhOreBUVuyeZoPAE4Q4LYj9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:61:23:6c:98:0a:43:ba:10:3a:a4:76:b9:6c:6b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Validity Not Before: Dec 24 22:00:56 2025 GMT Not After : Dec 25 22:00:56 2025 GMT Subject: CN=7402be70e0d97cb7ae6c61714e5b1c61fdffc474 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5d:d6:73:36:e1:5b:d7:da:f4:d2:55:d4:70: 33:a1:cf:f6:d4:c7:f5:23:a9:20:21:d4:bc:d4:d8: 20:39:48:67:fa:be:7b:4e:c1:1c:70:a3:1c:07:bb: 5e:d7:3b:f2:d6:15:7c:52:7f:09:37:5c:86:d8:e9: 05:ed:7b:96:04:e5:64:a0:33:75:93:f2:9a:69:85: 4f:d7:66:fc:97:ca:86:0d:f1:33:2f:48:53:fe:5e: 9d:01:e4:63:74:bc:b3:7b:b9:8e:70:f6:05:c7:1c: 5f:15:0d:b0:9a:26:b8:89:12:73:5a:4d:fc:26:08: fe:b8:2b:7c:4f:50:77:06:c6:1b:02:a0:aa:55:19: fa:96:3e:37:73:3d:28:05:c3:9b:4c:3c:a7:b1:46: 35:c4:bb:88:6d:e0:14:5c:c9:2f:cc:f2:94:33:80: d9:3e:be:56:85:31:ee:6b:d1:87:2f:9d:f4:f5:9f: 8e:65:5e:53:d4:d6:11:e5:b3:3e:0b:a9:a4:0f:44: ed:e8:60:bf:21:09:1c:bd:82:8d:8d:b6:2f:03:a6: d9:13:60:11:c7:b1:70:32:84:47:d3:49:3a:79:c3: 4a:ab:c9:49:ae:a1:cc:d3:8e:80:e9:34:19:09:8b: f3:5c:80:ee:b6:22:ac:b8:d4:60:81:7e:98:6e:6b: 59:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:02:BE:70:E0:D9:7C:B7:AE:6C:61:71:4E:5B:1C:61:FD:FF:C4:74 X509v3 Authority Key Identifier: keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:f7:fa:ec:12:e2:8b:6e:f1:f8:a0:af:2b:f5:39:82:96:ff: 09:60:84:ab:a8:cb:92:60:08:58:33:e1:6b:9e:04:35:dd:ae: f4:75:39:99:4c:d2:98:1c:6b:00:9b:15:65:93:c6:8d:90:41: 71:a9:71:e9:1f:db:28:5d:d2:ef:6e:ae:65:32:2b:cc:39:de: b8:18:0c:61:7a:f3:41:e0:02:3e:bc:83:f8:2c:7a:8f:e7:e4: 70:2a:c2:7d:c9:65:6b:9a:00:b0:38:5b:eb:93:69:d0:57:01: 84:2a:ae:79:d5:f5:fb:46:4a:3c:42:49:d9:ee:9c:5a:5a:74: 32:01:45:66:71:92:c8:70:9f:0b:30:51:5a:fa:b2:15:04:b0: a1:d6:93:0a:2b:56:ec:48:3b:b8:ba:d4:fd:b3:61:9c:31:54: 79:71:c7:e8:15:12:b5:7e:c3:a1:da:5a:84:17:ae:b1:8d:3e: c7:97:71:aa:82:a8:1f:2a:2c:73:5e:89:48:b6:25:02:ed:37: fe:e8:e5:d3:f2:ed:93:57:2f:8b:1f:63:13:0f:a8:88:63:fc: f4:a5:16:43:20:d1:99:7a:f6:d3:7c:7a:75:0e:42:b1:59:4d: 5f:33:86:6b:f5:23:de:a5:f5:7f:be:d2:ba:10:58:83:f7:e4: df:bd:d0:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSYSNsmApDuhA6pHa5bGt7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4 MWI3ZDIwHhcNMjUxMjI0MjIwMDU2WhcNMjUxMjI1MjIwMDU2WjAzMTEwLwYDVQQD Eyg3NDAyYmU3MGUwZDk3Y2I3YWU2YzYxNzE0ZTViMWM2MWZkZmZjNDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV3WczbhW9fa9NJV1HAzoc/21Mf1 I6kgIdS81NggOUhn+r57TsEccKMcB7te1zvy1hV8Un8JN1yG2OkF7XuWBOVkoDN1 k/KaaYVP12b8l8qGDfEzL0hT/l6dAeRjdLyze7mOcPYFxxxfFQ2wmia4iRJzWk38 Jgj+uCt8T1B3BsYbAqCqVRn6lj43cz0oBcObTDynsUY1xLuIbeAUXMkvzPKUM4DZ Pr5WhTHua9GHL5309Z+OZV5T1NYR5bM+C6mkD0Tt6GC/IQkcvYKNjbYvA6bZE2AR x7FwMoRH00k6ecNKq8lJrqHM046A6TQZCYvzXIDutiKsuNRggX6YbmtZNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQCvnDg2Xy3rmxhcU5bHGH9/8R0MB8GA1UdIwQY MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt YzBlMzNiYmY1MjM4LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4 LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANPf67BLi i27x+KCvK/U5gpb/CWCEq6jLkmAIWDPha54ENd2u9HU5mUzSmBxrAJsVZZPGjZBB calx6R/bKF3S726uZTIrzDneuBgMYXrzQeACPryD+Cx6j+fkcCrCfclla5oAsDhb 65Np0FcBhCquedX1+0ZKPEJJ2e6cWlp0MgFFZnGSyHCfCzBRWvqyFQSwodaTCitW 7Eg7uLrU/bNhnDFUeXHH6BUStX7DodpahBeusY0+x5dxqoKoHyosc16JSLYlAu03 /ujl0/Ltk1cvix9jEw+oiGP89KUWQyDRmXr203x6dQ5CsVlNXzOGa/Uj3qX1f77S uhBYg/fk373QTw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:15:08 2025 by rpki-client