This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft File: kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json) Hash identifier: jmFONJz12AuQbltxBf1Hyi67IovLmH8CrJfC4NT8S3Y= Subject key identifier: B9:7D:2C:36:95:5E:24:D9:68:B9:A6:D7:BC:B7:89:08:D0:C8:A6:ED Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7 Certificate serial: 019B446EBB1CDE7942F0869CE7ACCDD14A22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft Manifest number: 178F Signing time: Mon 22 Dec 2025 05:01:06 +0000 Manifest this update: Mon 22 Dec 2025 05:01:06 +0000 Manifest next update: Tue 23 Dec 2025 05:01:06 +0000 Files and hashes: 1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: hb13K4iJnrUyWamTN5XydWaWQ04vHW5VzeIBlYA7HaE=) 2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:bb:1c:de:79:42:f0:86:9c:e7:ac:cd:d1:4a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7 Validity Not Before: Dec 22 05:01:06 2025 GMT Not After : Dec 23 05:01:06 2025 GMT Subject: CN=b97d2c36955e24d968b9a6d7bcb78908d0c8a6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:88:05:67:bf:db:e7:54:b5:3c:75:3c:62:f5: e9:7d:39:98:20:77:8b:1b:8a:1b:d1:ca:f3:b5:39: d4:7d:be:61:67:87:97:b9:2c:88:d2:4a:d4:9e:29: 16:89:f7:03:20:81:9f:fb:02:8c:e4:eb:1c:55:fa: c9:2e:2d:06:e8:14:1e:4d:7e:0c:d7:a1:0d:96:e4: 83:22:7d:51:bf:d8:8f:25:74:83:74:9c:df:d6:2e: 86:54:3f:92:d6:b0:31:53:9e:a8:cd:5c:ca:32:83: 91:4c:b1:5a:d1:59:a3:a5:87:ed:a2:07:d2:53:7d: 26:c2:88:fc:7b:da:17:de:50:0a:6f:e1:70:01:5c: 45:aa:5e:5e:16:b8:5d:69:df:f2:aa:b1:fd:83:fc: c4:ed:dd:72:84:35:eb:93:b7:94:6c:d1:d2:2f:85: 2d:6c:55:93:fb:4f:07:c9:d7:cc:28:e0:bf:a8:df: e1:5f:47:3d:97:08:0d:9f:cc:55:d6:a7:82:72:cf: 9d:1e:6b:d7:5d:f2:0c:61:cb:c3:ab:1c:15:59:29: df:71:57:da:f9:a4:95:f8:8f:51:ae:fe:c9:b4:23: 2e:e8:b9:cb:b8:c2:a7:49:83:f9:a7:4e:aa:6f:a4: 3e:d3:ce:f4:7c:1d:ac:88:cf:5b:68:f3:b8:e3:91: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:2C:36:95:5E:24:D9:68:B9:A6:D7:BC:B7:89:08:D0:C8:A6:ED X509v3 Authority Key Identifier: keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e5:e8:5b:1d:a8:b4:68:49:38:ec:fd:ac:b2:72:a8:32:bb: 16:2f:29:b0:9e:b7:61:7f:03:8f:23:4c:a4:f7:a2:56:6c:4f: a7:2a:e1:eb:66:c6:71:b5:8d:98:e2:4e:8e:9f:18:52:7b:a1: f5:dc:40:6c:ac:ab:07:6d:d3:a4:a2:c2:ca:6f:6b:79:eb:95: 0e:92:f5:f9:97:da:57:93:97:d9:00:53:ed:ec:a2:57:04:62: 1a:38:79:6a:73:86:b8:94:6f:d3:cd:7f:91:d3:d4:19:cd:72: 7f:18:9f:e8:3f:58:60:3d:54:c7:c3:99:e2:d7:2b:c7:10:f9: f2:38:55:ad:70:e3:08:9e:35:d1:54:85:9f:cb:13:8a:1b:91: d8:8e:25:d9:d2:16:bf:c1:74:70:27:cb:84:65:67:b7:fe:a2: 32:85:47:1e:09:7b:e6:26:e9:13:be:0d:7b:87:2c:08:6f:00: 20:fc:f0:2a:23:73:3b:8d:e9:02:5f:86:be:48:9b:63:f6:49: 04:3c:26:b9:fc:44:15:43:8f:86:4c:27:a4:8c:f5:cb:2c:85: 40:f0:5c:5b:34:d8:43:ea:f5:58:0f:26:e5:9d:17:59:fb:d8: 91:90:5c:ee:02:d9:a7:aa:af:8c:7e:a6:a6:39:d7:80:cc:eb: fa:ed:a4:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbrsc3nlC8Iac56zN0UoiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl MjNkYjcwHhcNMjUxMjIyMDUwMTA2WhcNMjUxMjIzMDUwMTA2WjAzMTEwLwYDVQQD EyhiOTdkMmMzNjk1NWUyNGQ5NjhiOWE2ZDdiY2I3ODkwOGQwYzhhNmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4gFZ7/b51S1PHU8YvXpfTmYIHeL G4ob0crztTnUfb5hZ4eXuSyI0krUnikWifcDIIGf+wKM5OscVfrJLi0G6BQeTX4M 16ENluSDIn1Rv9iPJXSDdJzf1i6GVD+S1rAxU56ozVzKMoORTLFa0VmjpYftogfS U30mwoj8e9oX3lAKb+FwAVxFql5eFrhdad/yqrH9g/zE7d1yhDXrk7eUbNHSL4Ut bFWT+08HydfMKOC/qN/hX0c9lwgNn8xV1qeCcs+dHmvXXfIMYcvDqxwVWSnfcVfa +aSV+I9Rrv7JtCMu6LnLuMKnSYP5p06qb6Q+0870fB2siM9baPO445HTjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl9LDaVXiTZaLmm17y3iQjQyKbtMB8GA1UdIwQY MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2 LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApuXoWx2o tGhJOOz9rLJyqDK7Fi8psJ63YX8DjyNMpPeiVmxPpyrh62bGcbWNmOJOjp8YUnuh 9dxAbKyrB23TpKLCym9reeuVDpL1+ZfaV5OX2QBT7eyiVwRiGjh5anOGuJRv081/ kdPUGc1yfxif6D9YYD1Ux8OZ4tcrxxD58jhVrXDjCJ410VSFn8sTihuR2I4l2dIW v8F0cCfLhGVnt/6iMoVHHgl75ibpE74Ne4csCG8AIPzwKiNzO43pAl+GvkibY/ZJ BDwmufxEFUOPhkwnpIz1yyyFQPBcWzTYQ+r1WA8m5Z0XWfvYkZBc7gLZp6qvjH6m pjnXgMzr+u2kAQ== -----END CERTIFICATE-----Generated at Mon Dec 22 08:06:46 2025 by rpki-client