This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft File: eA3hbu6UewqMdXFPxdpqAlnKG5A.mft (raw, json) Hash identifier: cTnOWc2Zp12/ful+EF3gKEG3vokWGs+e1d+sNpM1Mg4= Subject key identifier: 83:9A:F3:3E:5D:55:E5:EA:01:54:AF:BC:A8:AE:30:97:28:89:3F:43 Authority key identifier: 78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90 Certificate issuer: /CN=780de16eee947b0a8c75714fc5da6a0259ca1b90 Certificate serial: 019B3E6C3856A0366B141CBC73697196850F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 01:00:38 +0000 Manifest this update: Sun 21 Dec 2025 01:00:38 +0000 Manifest next update: Mon 22 Dec 2025 01:00:38 +0000 Files and hashes: 1: KV3y67WzUL1dd636tV-tGwBKS6Y.roa (hash: BJK7UzSsG4bIRgy/oUjNbXPmO5iJK9tZClLQ8IpL8JQ=) 2: X9Fijkz-_wqcxXki_ZgW942-ey4.roa (hash: 6GLvc6dX34tOpcs0+RseJCW6ZD873+Ny/2OET9fAl0I=) 3: eA3hbu6UewqMdXFPxdpqAlnKG5A.crl (hash: ZcLxCD2Z+rSK0w9UuJ872GuZvLSZu/9S2q8ac1WtUdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:38:56:a0:36:6b:14:1c:bc:73:69:71:96:85:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=780de16eee947b0a8c75714fc5da6a0259ca1b90 Validity Not Before: Dec 21 01:00:38 2025 GMT Not After : Dec 22 01:00:38 2025 GMT Subject: CN=839af33e5d55e5ea0154afbca8ae309728893f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ac:da:69:be:01:11:1a:c8:23:17:4c:1c:94: 31:f1:9f:c3:b8:fc:fe:df:44:d1:1d:7a:a3:c3:a6: 25:b0:db:f9:35:f7:54:a1:15:c3:7d:18:01:cb:3b: b5:d3:32:5c:86:52:01:47:2d:15:a7:23:d4:ea:4d: 57:b6:b4:ca:02:c7:d6:9b:1b:b2:6e:a1:0c:4d:ba: 92:58:3b:1d:c2:ea:07:6d:eb:da:c9:f0:a7:d6:76: b6:ea:10:46:43:68:b9:cf:bf:4b:17:ad:eb:a5:50: 62:c3:d5:d5:6c:8c:61:eb:67:d8:05:2a:fe:bd:8a: 05:d2:ff:71:72:58:33:53:f4:3a:c5:09:99:60:24: af:ad:fb:fd:0c:8f:e4:c7:ed:19:ef:44:45:85:a1: 65:94:23:a1:af:c4:86:b2:d0:62:06:ab:fb:a2:e7: fd:48:64:14:f3:1a:31:2f:df:96:af:d3:d0:c4:14: fd:b3:a7:ea:38:bf:01:70:6a:b5:6a:b3:b7:e1:b0: 6f:dc:b0:a6:c3:9c:b1:80:45:29:46:da:43:3d:8b: 08:0a:d4:f6:1f:36:1e:9a:74:d4:95:f3:b6:5d:11: 31:3c:5d:3e:09:b9:be:0f:06:cf:51:09:bd:53:d4: e8:51:0d:c9:bc:13:a4:c9:02:8b:68:41:03:96:c9: 42:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:F3:3E:5D:55:E5:EA:01:54:AF:BC:A8:AE:30:97:28:89:3F:43 X509v3 Authority Key Identifier: keyid:78:0D:E1:6E:EE:94:7B:0A:8C:75:71:4F:C5:DA:6A:02:59:CA:1B:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eA3hbu6UewqMdXFPxdpqAlnKG5A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/107195-cc51-471b-8da2-e005543f0374/1/eA3hbu6UewqMdXFPxdpqAlnKG5A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:ae:3e:dd:9e:a7:ee:ae:e3:83:fa:d9:0b:9b:22:36:35:05: 66:1c:0b:08:d0:90:cc:1b:76:e6:a9:d0:ea:2b:ac:66:0e:da: 9d:50:1e:ec:72:d4:3f:88:b8:f6:67:1b:a2:ae:29:ac:f1:49: fd:f0:13:ed:75:fd:5f:a8:14:31:c2:28:1f:3d:de:1a:fd:ab: 12:c4:b4:c2:d0:6f:58:8c:a8:1b:23:62:98:37:34:c0:fc:d7: dc:b2:51:5b:b9:d5:66:b9:60:17:95:9d:3f:1a:02:a4:d0:35: 71:13:05:62:c3:25:49:3b:69:aa:9f:d3:b3:00:b6:d2:64:b6: e7:7c:19:0b:9a:74:56:73:9d:13:f3:6f:81:54:b3:f5:50:db: 0e:58:5a:c4:72:3c:10:b9:9c:37:bc:d4:09:31:b1:4d:18:0f: 68:88:7d:b3:ac:54:5f:3e:02:09:52:27:cf:ae:36:7c:c7:9b: 4f:39:62:79:1c:ef:36:70:07:62:ce:16:41:e0:13:c2:5c:36: d0:79:03:d1:0d:0f:c0:39:9c:92:23:ac:df:1c:fd:5d:31:b7: 05:c4:b9:6d:44:63:2f:a6:f3:9b:5b:df:7a:7c:da:2c:a5:cc: f9:c4:16:7e:b1:4e:22:3d:a5:f4:27:3d:0e:36:b6:fb:df:2f: 69:5c:6a:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bDhWoDZrFBy8c2lxloUPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MGRlMTZlZWU5NDdiMGE4Yzc1NzE0ZmM1ZGE2YTAyNTlj YTFiOTAwHhcNMjUxMjIxMDEwMDM4WhcNMjUxMjIyMDEwMDM4WjAzMTEwLwYDVQQD Eyg4MzlhZjMzZTVkNTVlNWVhMDE1NGFmYmNhOGFlMzA5NzI4ODkzZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqzaab4BERrIIxdMHJQx8Z/DuPz+ 30TRHXqjw6YlsNv5NfdUoRXDfRgByzu10zJchlIBRy0VpyPU6k1XtrTKAsfWmxuy bqEMTbqSWDsdwuoHbevayfCn1na26hBGQ2i5z79LF63rpVBiw9XVbIxh62fYBSr+ vYoF0v9xclgzU/Q6xQmZYCSvrfv9DI/kx+0Z70RFhaFllCOhr8SGstBiBqv7ouf9 SGQU8xoxL9+Wr9PQxBT9s6fqOL8BcGq1arO34bBv3LCmw5yxgEUpRtpDPYsICtT2 HzYemnTUlfO2XRExPF0+Cbm+DwbPUQm9U9ToUQ3JvBOkyQKLaEEDlslCEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIOa8z5dVeXqAVSvvKiuMJcoiT9DMB8GA1UdIwQY MBaAFHgN4W7ulHsKjHVxT8XaagJZyhuQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTIt ZTAwNTU0M2YwMzc0LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8xMDcxOTUtY2M1MS00NzFiLThkYTItZTAwNTU0M2YwMzc0 LzEvZUEzaGJ1NlVld3FNZFhGUHhkcHFBbG5LRzVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1K4+3Z6n 7q7jg/rZC5siNjUFZhwLCNCQzBt25qnQ6iusZg7anVAe7HLUP4i49mcboq4prPFJ /fAT7XX9X6gUMcIoHz3eGv2rEsS0wtBvWIyoGyNimDc0wPzX3LJRW7nVZrlgF5Wd PxoCpNA1cRMFYsMlSTtpqp/TswC20mS253wZC5p0VnOdE/NvgVSz9VDbDlhaxHI8 ELmcN7zUCTGxTRgPaIh9s6xUXz4CCVInz642fMebTzlieRzvNnAHYs4WQeATwlw2 0HkD0Q0PwDmckiOs3xz9XTG3BcS5bURjL6bzm1vfenzaLKXM+cQWfrFOIj2l9Cc9 Dja2+98vaVxqIg== -----END CERTIFICATE-----Generated at Sun Dec 21 03:01:50 2025 by rpki-client