This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json) Hash identifier: 1GikqiyRkR0Q5Cjqa4bkor/pIXssCImm//rxaZ1Kaok= Subject key identifier: 74:06:EB:D6:44:F8:EE:E6:C8:07:35:74:13:81:8A:69:79:55:8E:0B Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Certificate serial: 019B34C4E826B04DBBBBBF229887E3D5BF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft Manifest number: 0592 Signing time: Fri 19 Dec 2025 04:01:18 +0000 Manifest this update: Fri 19 Dec 2025 04:01:18 +0000 Manifest next update: Sat 20 Dec 2025 04:01:18 +0000 Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: Vjc+XGucQGXtfDN2YcsREqEcQlczEysXKdHRpiF7pz8=) 2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:e8:26:b0:4d:bb:bb:bf:22:98:87:e3:d5:bf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Validity Not Before: Dec 19 04:01:18 2025 GMT Not After : Dec 20 04:01:18 2025 GMT Subject: CN=7406ebd644f8eee6c807357413818a6979558e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ba:79:d5:9b:ce:7e:1a:03:42:c5:31:9e:5e: 54:9d:43:fc:33:13:ce:4a:be:46:06:91:11:cb:8c: a3:77:23:dd:7e:87:f9:da:26:a7:49:41:df:13:5c: 90:5d:63:75:ea:78:11:c0:a1:80:5d:b0:fd:80:0f: f9:af:19:6e:74:63:d8:f6:cc:6e:34:79:0c:f9:49: 99:ba:68:0d:26:e4:7a:2e:1d:72:fb:aa:4f:79:45: 46:e3:d1:7a:56:d7:d6:7e:22:2c:57:09:16:86:a2: b0:41:4a:d9:2f:e2:4e:88:ad:a2:90:98:9b:7c:de: 2f:d4:33:e9:ec:34:70:0e:9d:0e:82:98:b5:90:43: ec:4d:d6:89:9a:8e:b0:e8:63:95:7b:bc:88:1e:96: 92:29:3b:9f:6d:3f:30:16:22:5e:ca:3e:ff:79:a3: d1:c5:fe:a2:50:b6:be:b1:70:34:ae:c5:db:4b:54: 76:7a:e5:a4:54:1d:3c:e0:f2:04:82:a9:82:1f:c8: 80:08:05:8f:9e:1b:e2:7d:f5:cd:6d:11:e4:6c:f3: a3:26:a4:45:db:39:2b:70:9a:7f:ff:f4:2d:05:1c: 27:76:d4:51:f3:19:f7:4b:9c:05:d0:4b:f5:08:fb: f4:23:7b:7e:09:f1:20:07:5c:05:33:33:8c:0b:5c: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:06:EB:D6:44:F8:EE:E6:C8:07:35:74:13:81:8A:69:79:55:8E:0B X509v3 Authority Key Identifier: keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:5a:8e:91:ec:d2:4a:2b:1f:b1:66:a7:00:97:5a:65:eb:86: 85:95:20:4f:10:40:83:8d:49:a0:25:e8:08:8b:b4:01:ba:a6: 61:e1:65:5c:38:cb:98:59:c8:76:f2:86:a4:0f:3f:30:8a:3c: 71:d3:a9:92:7a:80:0e:dd:c5:db:ed:1b:ab:26:8b:93:ef:48: 8d:03:13:e2:9f:a4:47:a5:c4:52:68:2a:61:8b:f6:ff:b3:0f: a9:21:ab:c7:90:08:6a:88:fd:aa:5c:04:85:81:d0:4a:d3:9d: 5d:dd:f6:6a:37:da:20:75:f1:0b:81:d2:47:ac:f2:08:9c:dc: 7d:e7:69:a8:f4:b4:df:72:08:31:9c:b3:cd:67:68:40:41:96: 66:14:bc:e8:e2:9d:e1:37:c8:ca:ce:3f:7c:d7:ed:02:5e:4e: 9a:de:41:7e:f5:aa:0c:48:93:b5:c2:16:33:26:52:61:5f:81: 37:2d:07:5d:b6:8a:87:ff:50:00:c8:ab:2c:9d:fd:c6:f7:7f: 97:0d:6d:92:11:19:02:d5:54:72:96:d6:49:cb:8e:61:4b:18: a0:0d:8b:65:da:ab:82:c5:e2:ec:9f:37:4e:c6:cd:6b:04:9b: a3:32:46:82:6b:a3:f8:ab:fc:aa:62:00:cd:82:51:7f:a6:b9: 5d:b0:d3:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xOgmsE27u78imIfj1b+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw ZjgwZTkwHhcNMjUxMjE5MDQwMTE4WhcNMjUxMjIwMDQwMTE4WjAzMTEwLwYDVQQD Eyg3NDA2ZWJkNjQ0ZjhlZWU2YzgwNzM1NzQxMzgxOGE2OTc5NTU4ZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrp51ZvOfhoDQsUxnl5UnUP8MxPO Sr5GBpERy4yjdyPdfof52ianSUHfE1yQXWN16ngRwKGAXbD9gA/5rxludGPY9sxu NHkM+UmZumgNJuR6Lh1y+6pPeUVG49F6VtfWfiIsVwkWhqKwQUrZL+JOiK2ikJib fN4v1DPp7DRwDp0Ogpi1kEPsTdaJmo6w6GOVe7yIHpaSKTufbT8wFiJeyj7/eaPR xf6iULa+sXA0rsXbS1R2euWkVB084PIEgqmCH8iACAWPnhviffXNbRHkbPOjJqRF 2zkrcJp///QtBRwndtRR8xn3S5wF0Ev1CPv0I3t+CfEgB1wFMzOMC1y/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQG69ZE+O7myAc1dBOBiml5VY4LMB8GA1UdIwQY MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVqOkezS SisfsWanAJdaZeuGhZUgTxBAg41JoCXoCIu0AbqmYeFlXDjLmFnIdvKGpA8/MIo8 cdOpknqADt3F2+0bqyaLk+9IjQMT4p+kR6XEUmgqYYv2/7MPqSGrx5AIaoj9qlwE hYHQStOdXd32ajfaIHXxC4HSR6zyCJzcfedpqPS033IIMZyzzWdoQEGWZhS86OKd 4TfIys4/fNftAl5Omt5BfvWqDEiTtcIWMyZSYV+BNy0HXbaKh/9QAMirLJ39xvd/ lw1tkhEZAtVUcpbWScuOYUsYoA2LZdqrgsXi7J83TsbNawSbozJGgmuj+Kv8qmIA zYJRf6a5XbDTFA== -----END CERTIFICATE-----Generated at Fri Dec 19 08:22:53 2025 by rpki-client