This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft File: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json) Hash identifier: BoRrd3nD0mKAancSYKJxTLpnT2+0Vfq6ym85kaSmErg= Subject key identifier: 02:F7:62:37:B9:00:BA:27:23:5C:7D:6D:27:86:49:CE:4D:B3:5D:52 Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 Certificate issuer: /CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Certificate serial: 019B4AA810F179AC7B5F5AD5CFA7099E9FDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 10:01:26 +0000 Manifest this update: Tue 23 Dec 2025 10:01:26 +0000 Manifest next update: Wed 24 Dec 2025 10:01:26 +0000 Files and hashes: 1: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: AwHZYByaeYX2I4GlDBVeZ+dUP3ruduEsfANIkPkU3Bk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 10:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:a8:10:f1:79:ac:7b:5f:5a:d5:cf:a7:09:9e:9f:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Validity Not Before: Dec 23 10:01:26 2025 GMT Not After : Dec 24 10:01:26 2025 GMT Subject: CN=02f76237b900ba27235c7d6d278649ce4db35d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:51:71:79:51:7e:28:0c:e6:04:ac:2b:bc:eb: ed:d3:0f:5e:6c:94:fb:83:46:c2:be:fa:f7:ca:ca: 47:d4:c4:3f:da:a2:19:28:d4:b1:35:b0:28:f4:a7: 64:7a:03:e1:4e:70:6a:0c:32:07:8d:2f:73:c2:5d: 86:51:9f:a9:ad:02:ce:d6:4e:9b:0d:93:69:60:d0: 1b:2e:6d:83:94:22:d6:ca:12:10:c9:74:a6:7e:1c: b5:29:94:b2:76:0c:94:19:39:2e:33:60:b8:81:9d: 01:d7:44:12:a7:bf:53:a2:31:0c:80:11:55:b1:8e: 3b:1c:90:a5:35:7c:d0:37:7c:4d:6e:d3:b6:e2:5e: ab:e4:e3:05:0e:21:95:11:78:8e:e9:d1:3e:88:0c: dc:ae:d3:90:6a:70:e2:19:ea:10:24:30:14:1c:66: 7c:f4:d1:de:8d:20:0f:63:8c:e7:6a:ac:69:2a:f4: a5:1e:bf:8e:63:b7:32:91:0d:41:42:4a:b7:5a:eb: 9c:13:b5:14:c2:b1:23:92:76:5a:c6:1f:e0:d2:2b: 28:d5:82:a3:07:22:a0:58:e0:35:66:ce:ee:3f:be: d9:c0:6d:ba:ff:11:61:ff:0a:91:18:8c:f8:f3:4a: c6:86:36:fd:68:da:ca:de:93:a1:a7:72:c1:e3:21: 4e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:62:37:B9:00:BA:27:23:5C:7D:6D:27:86:49:CE:4D:B3:5D:52 X509v3 Authority Key Identifier: keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:81:8c:39:dd:22:cd:e0:55:5b:d8:93:f1:af:2c:eb:64:a4: 74:13:fe:c6:66:cf:3f:95:1b:47:b4:24:fe:25:ab:50:6c:f4: 6f:19:0c:f2:43:72:26:83:8e:85:86:e8:cf:e9:8e:06:03:96: a0:c5:a2:03:89:44:1b:9d:2b:21:f0:7c:76:11:20:c2:41:25: ae:f7:e7:21:b0:81:b6:ac:dd:d6:50:49:28:5d:b1:e6:7a:f1: f1:56:4d:64:08:5d:54:f0:6d:24:1f:d7:bf:62:68:57:6b:51: a4:2a:e4:a0:96:aa:23:ba:bc:bd:b7:59:a7:72:36:54:eb:1e: ff:1d:2c:2b:90:27:8d:a9:07:fa:31:3a:4e:6b:61:25:e5:59: 58:01:d2:9c:3e:9a:0f:a7:32:31:1e:9d:93:fc:64:d2:3d:df: f0:0a:4e:ea:a9:f3:70:cc:d3:49:66:8d:5a:88:46:46:c3:b3: 4f:d4:72:b9:81:55:bf:9e:70:04:95:cd:ec:e7:c2:5d:22:be: 71:d6:29:82:99:7a:38:40:25:e3:83:a6:8a:55:75:31:ae:5d: 03:8f:3b:a3:57:0a:b4:14:6b:bb:0b:ab:e0:05:ad:e8:d2:7b: 66:ec:a3:a6:22:43:8f:c2:cd:1d:c6:12:76:4d:77:58:10:be: 25:a0:2d:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKqBDxeax7X1rVz6cJnp/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4 MWI3ZDIwHhcNMjUxMjIzMTAwMTI2WhcNMjUxMjI0MTAwMTI2WjAzMTEwLwYDVQQD EygwMmY3NjIzN2I5MDBiYTI3MjM1YzdkNmQyNzg2NDljZTRkYjM1ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5lFxeVF+KAzmBKwrvOvt0w9ebJT7 g0bCvvr3yspH1MQ/2qIZKNSxNbAo9KdkegPhTnBqDDIHjS9zwl2GUZ+prQLO1k6b DZNpYNAbLm2DlCLWyhIQyXSmfhy1KZSydgyUGTkuM2C4gZ0B10QSp79TojEMgBFV sY47HJClNXzQN3xNbtO24l6r5OMFDiGVEXiO6dE+iAzcrtOQanDiGeoQJDAUHGZ8 9NHejSAPY4znaqxpKvSlHr+OY7cykQ1BQkq3WuucE7UUwrEjknZaxh/g0iso1YKj ByKgWOA1Zs7uP77ZwG26/xFh/wqRGIz480rGhjb9aNrK3pOhp3LB4yFO7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAL3Yje5ALonI1x9bSeGSc5Ns11SMB8GA1UdIwQY MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt YzBlMzNiYmY1MjM4LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4 LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKoGMOd0i zeBVW9iT8a8s62SkdBP+xmbPP5UbR7Qk/iWrUGz0bxkM8kNyJoOOhYboz+mOBgOW oMWiA4lEG50rIfB8dhEgwkElrvfnIbCBtqzd1lBJKF2x5nrx8VZNZAhdVPBtJB/X v2JoV2tRpCrkoJaqI7q8vbdZp3I2VOse/x0sK5AnjakH+jE6TmthJeVZWAHSnD6a D6cyMR6dk/xk0j3f8ApO6qnzcMzTSWaNWohGRsOzT9RyuYFVv55wBJXN7OfCXSK+ cdYpgpl6OEAl44OmilV1Ma5dA487o1cKtBRruwur4AWt6NJ7ZuyjpiJDj8LNHcYS dk13WBC+JaAtUQ== -----END CERTIFICATE-----Generated at Tue Dec 23 18:34:22 2025 by rpki-client