This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft File: r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft (raw, json) Hash identifier: +k0Vj+JEI2RUURSCLtwH/5G+DPDNasBx1wzgx/AcZLg= Subject key identifier: 1C:8F:E2:2D:8C:8E:2E:82:5A:AA:7F:88:9C:56:14:1D:25:4D:F7:3C Authority key identifier: AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 Certificate issuer: /CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Certificate serial: 019AF27679BBE95213848E9CEEB45FC78BF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 07:00:41 +0000 Manifest this update: Sat 06 Dec 2025 07:00:41 +0000 Manifest next update: Sun 07 Dec 2025 07:00:41 +0000 Files and hashes: 1: 5ocobjXAQN7qODPTjOuuWzc3Drk.roa (hash: 14+OU8AbCkgUWRx9CUz2j/OQprhkWMpdBdWPi/5l58Y=) 2: r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl (hash: gVdFUpXK9e5zaiG1nNcjhVFU08eXXPlUzghW+Z0jBRc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:79:bb:e9:52:13:84:8e:9c:ee:b4:5f:c7:8b:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe79e8f63e991ddf13e6def27e008999d4d4ad9 Validity Not Before: Dec 6 07:00:41 2025 GMT Not After : Dec 7 07:00:41 2025 GMT Subject: CN=1c8fe22d8c8e2e825aaa7f889c56141d254df73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b1:58:69:f1:3a:d2:c4:44:49:eb:01:3b:a9: f6:3f:2c:4d:db:6f:a0:1d:a7:a3:3c:7b:7d:a8:f4: 64:c4:72:22:3b:56:f2:04:a7:62:ca:cb:46:b1:13: 09:90:dd:ea:80:1c:d9:0c:39:b0:99:91:1e:38:ed: 41:a1:ec:f0:fd:f8:84:34:64:b2:a0:97:44:78:72: 54:bc:24:d8:3d:5c:73:79:4f:e9:8f:c6:34:f4:aa: b2:fc:2c:b5:42:99:de:84:e9:97:db:a7:7e:60:37: e8:bb:88:a3:f8:2d:f6:50:ed:16:e1:db:49:d9:8d: 4b:cb:3a:4b:1c:51:c4:0f:c8:dd:84:14:5c:fa:49: e5:73:f1:f8:b9:fa:75:11:e0:8d:62:af:9e:fb:f3: 79:e8:16:98:6a:bf:f0:6c:42:a4:3c:87:c1:64:18: b8:67:aa:4b:cb:e1:9d:07:23:b9:53:77:20:9b:cf: 4a:02:2e:5e:a4:20:df:94:40:33:29:2b:28:36:1a: 18:df:df:1e:b2:d9:2e:c6:49:4f:5d:26:8c:e5:4f: 41:00:17:cd:93:94:28:20:06:be:50:03:7c:b2:b2: 77:16:70:b5:8c:cf:1a:38:6b:66:f0:f7:3f:33:55: d8:e8:69:a8:e3:e3:73:be:44:75:fa:07:6d:dc:31: f0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:8F:E2:2D:8C:8E:2E:82:5A:AA:7F:88:9C:56:14:1D:25:4D:F7:3C X509v3 Authority Key Identifier: keyid:AF:E7:9E:8F:63:E9:91:DD:F1:3E:6D:EF:27:E0:08:99:9D:4D:4A:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-eej2Ppkd3xPm3vJ-AImZ1NStk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b8bce4-3142-46d8-bf8d-4ca7b4c02be9/1/r-eej2Ppkd3xPm3vJ-AImZ1NStk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:12:92:4d:3d:ec:6c:1f:24:f2:ef:d3:39:14:be:e9:a2:67: 50:b9:63:50:23:0f:cc:c1:db:23:4b:7e:e5:27:62:a5:0f:e2: 67:95:93:d9:59:37:88:89:57:36:2b:9d:19:cb:f5:1f:9d:68: 52:e8:b3:ed:ff:cd:e0:aa:97:35:a5:15:b4:2f:c3:ab:57:67: ea:26:e5:22:8c:f1:70:50:15:b3:79:30:81:9c:20:75:7f:46: 16:b5:89:e6:10:bf:f1:16:e5:66:f0:d9:2f:02:e9:ea:54:de: 22:af:d0:56:3f:6c:54:65:8f:a8:4f:8a:b8:ea:e3:24:76:1d: 60:63:45:b5:ef:8a:3b:a3:ee:fd:65:5f:d9:e0:af:50:f0:6f: 0c:09:2d:70:8b:91:49:23:9a:da:66:0a:cc:90:6b:fe:84:83: 93:95:e2:11:9c:66:7a:ca:57:7d:50:93:43:af:15:73:b0:f5: 0a:82:cc:a9:08:07:93:5d:0b:1d:60:5d:7a:01:91:6f:ae:c5: aa:5a:34:19:f2:26:b8:46:b3:08:1f:14:25:7d:7f:b3:c2:72: 65:68:6b:1c:65:1e:d7:90:23:53:af:27:6a:93:7b:63:17:68: 0c:16:36:d4:ad:f7:87:61:1c:ad:9b:f5:32:b7:2b:56:0f:48: 9f:04:19:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnm76VIThI6c7rRfx4v3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTc5ZThmNjNlOTkxZGRmMTNlNmRlZjI3ZTAwODk5OWQ0 ZDRhZDkwHhcNMjUxMjA2MDcwMDQxWhcNMjUxMjA3MDcwMDQxWjAzMTEwLwYDVQQD EygxYzhmZTIyZDhjOGUyZTgyNWFhYTdmODg5YzU2MTQxZDI1NGRmNzNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbFYafE60sRESesBO6n2PyxN22+g HaejPHt9qPRkxHIiO1byBKdiystGsRMJkN3qgBzZDDmwmZEeOO1Boezw/fiENGSy oJdEeHJUvCTYPVxzeU/pj8Y09Kqy/Cy1QpnehOmX26d+YDfou4ij+C32UO0W4dtJ 2Y1LyzpLHFHED8jdhBRc+knlc/H4ufp1EeCNYq+e+/N56BaYar/wbEKkPIfBZBi4 Z6pLy+GdByO5U3cgm89KAi5epCDflEAzKSsoNhoY398estkuxklPXSaM5U9BABfN k5QoIAa+UAN8srJ3FnC1jM8aOGtm8Pc/M1XY6Gmo4+NzvkR1+gdt3DHwoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFByP4i2Mji6CWqp/iJxWFB0lTfc8MB8GA1UdIwQY MBaAFK/nno9j6ZHd8T5t7yfgCJmdTUrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQt NGNhN2I0YzAyYmU5LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9iOGJjZTQtMzE0Mi00NmQ4LWJmOGQtNGNhN2I0YzAyYmU5 LzEvci1lZWoyUHBrZDN4UG0zdkotQUltWjFOU3RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRKSTT3s bB8k8u/TORS+6aJnULljUCMPzMHbI0t+5SdipQ/iZ5WT2Vk3iIlXNiudGcv1H51o Uuiz7f/N4KqXNaUVtC/Dq1dn6iblIozxcFAVs3kwgZwgdX9GFrWJ5hC/8RblZvDZ LwLp6lTeIq/QVj9sVGWPqE+KuOrjJHYdYGNFte+KO6Pu/WVf2eCvUPBvDAktcIuR SSOa2mYKzJBr/oSDk5XiEZxmespXfVCTQ68Vc7D1CoLMqQgHk10LHWBdegGRb67F qlo0GfImuEazCB8UJX1/s8JyZWhrHGUe15AjU68napN7YxdoDBY21K33h2EcrZv1 MrcrVg9InwQZbg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:37:38 2025 by rpki-client