This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft File: EQhLfTeLmTxfXnSfajRN4j5FrQA.mft (raw, json) Hash identifier: vz+6z/HHjXclwx0h+oFYsKhmI8Pfwb0BXq7jzVwM3To= Subject key identifier: DD:5E:25:28:A7:44:A9:59:0F:61:3C:16:49:6C:1B:0F:AE:DF:1C:B1 Authority key identifier: 11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 Certificate issuer: /CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Certificate serial: 019AF12D5171451CEA6A76961790F706C2A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft Manifest number: 0E3F Signing time: Sat 06 Dec 2025 01:01:10 +0000 Manifest this update: Sat 06 Dec 2025 01:01:10 +0000 Manifest next update: Sun 07 Dec 2025 01:01:10 +0000 Files and hashes: 1: EQhLfTeLmTxfXnSfajRN4j5FrQA.crl (hash: Ic6/aWEuYjJIHwjMx/vH6ys0q3KIN/5InKg9H8CuDrQ=) 2: sr7Y9_0vrufLFByKjpTwDpWOODI.roa (hash: p+V05XFve48eyskXSquTUKbCo+1z52AfwaKROL12RpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:51:71:45:1c:ea:6a:76:96:17:90:f7:06:c2:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11084b7d378b993c5f5e749f6a344de23e45ad00 Validity Not Before: Dec 6 01:01:10 2025 GMT Not After : Dec 7 01:01:10 2025 GMT Subject: CN=dd5e2528a744a9590f613c16496c1b0faedf1cb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:e7:06:38:aa:df:58:96:ee:92:87:f5:17: d7:2a:82:30:b6:ab:47:36:17:3e:07:40:89:27:1f: 8d:c0:5b:d3:34:05:9f:b5:af:d6:62:4c:80:50:8c: 25:42:98:dd:ee:22:b7:e0:c5:b1:f3:6c:5c:9f:e6: eb:bd:84:77:4f:0f:94:14:b3:ea:30:ab:64:ab:bc: 92:55:2f:6d:0e:61:5d:d7:82:31:00:2f:68:4d:6b: db:4e:ce:74:6d:6a:fc:b2:ae:bb:27:82:bc:8d:36: 53:0a:16:f3:74:b2:24:cd:8c:78:87:3d:8e:f7:96: 1f:e7:3f:cd:df:3f:24:80:92:8f:9d:b6:d7:44:d0: 35:41:fb:95:3e:f0:93:fa:d6:8b:c8:d0:e2:29:25: a0:17:81:bd:54:f6:93:f2:ce:06:9e:00:57:47:e9: 6c:2c:c6:58:48:01:af:ea:d1:20:b9:ff:c2:9f:6a: d1:25:80:61:d6:67:15:a7:8a:e4:1f:c4:7a:39:d2: 82:4e:12:34:68:b1:b4:33:e8:46:20:8c:02:ba:35: 24:2c:b4:2b:3e:8b:43:d1:e0:0d:d7:5e:f1:e8:53: 4d:61:26:3e:17:d6:b7:a7:be:9a:0b:ea:40:77:1e: 8c:0b:d9:33:c4:74:c8:a9:39:12:b3:7d:7d:a6:f3: e5:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:5E:25:28:A7:44:A9:59:0F:61:3C:16:49:6C:1B:0F:AE:DF:1C:B1 X509v3 Authority Key Identifier: keyid:11:08:4B:7D:37:8B:99:3C:5F:5E:74:9F:6A:34:4D:E2:3E:45:AD:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQhLfTeLmTxfXnSfajRN4j5FrQA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/bbfcc4-a277-4b43-b25c-a24d68e36705/1/EQhLfTeLmTxfXnSfajRN4j5FrQA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:23:01:c8:13:bc:ed:0d:d0:2d:7a:06:10:b5:c9:76:04:2a: 95:2e:0c:b7:bf:42:30:d0:ba:65:e2:c7:45:32:b5:72:eb:b3: 9a:d1:c9:fb:68:6d:73:01:78:b1:c8:a9:33:d7:90:9c:52:8d: 01:f7:1b:68:b9:47:06:f2:13:5b:95:a4:f4:46:66:6d:c3:9d: a5:d2:b9:93:31:45:2c:26:b7:be:82:ab:75:30:83:7f:9b:38: 95:02:77:74:dc:43:f4:42:20:c0:93:e3:dd:ec:c9:a9:c8:58: 28:b7:49:e4:15:2a:8e:b6:7f:88:17:cc:2b:92:c0:9a:7a:be: 69:b0:82:9b:75:6b:34:a8:bf:3e:26:c7:ad:d8:e0:a9:53:f3: 2f:f6:ce:4c:02:b2:90:c5:f3:7e:1b:bf:d0:a0:2d:d8:19:6b: 22:94:ca:20:ce:2d:7f:7b:5c:cd:2d:7c:0d:fd:74:bc:8e:db: de:a0:47:8c:24:50:62:db:df:95:4c:3a:9b:33:b0:a4:90:5f: 20:7e:af:32:5f:37:d4:fb:38:56:86:3b:0b:87:c7:22:c8:29: 6a:77:32:aa:16:b3:2f:10:33:fa:93:72:52:30:d7:20:45:60: 76:be:7c:7d:c0:d1:d4:cf:e0:02:12:e4:b3:ba:d3:2a:3f:3f: fd:ab:95:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLVFxRRzqanaWF5D3BsKhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDg0YjdkMzc4Yjk5M2M1ZjVlNzQ5ZjZhMzQ0ZGUyM2U0 NWFkMDAwHhcNMjUxMjA2MDEwMTEwWhcNMjUxMjA3MDEwMTEwWjAzMTEwLwYDVQQD EyhkZDVlMjUyOGE3NDRhOTU5MGY2MTNjMTY0OTZjMWIwZmFlZGYxY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXPnBjiq31iW7pKH9RfXKoIwtqtH Nhc+B0CJJx+NwFvTNAWfta/WYkyAUIwlQpjd7iK34MWx82xcn+brvYR3Tw+UFLPq MKtkq7ySVS9tDmFd14IxAC9oTWvbTs50bWr8sq67J4K8jTZTChbzdLIkzYx4hz2O 95Yf5z/N3z8kgJKPnbbXRNA1QfuVPvCT+taLyNDiKSWgF4G9VPaT8s4GngBXR+ls LMZYSAGv6tEguf/Cn2rRJYBh1mcVp4rkH8R6OdKCThI0aLG0M+hGIIwCujUkLLQr PotD0eAN117x6FNNYSY+F9a3p76aC+pAdx6MC9kzxHTIqTkSs319pvPlnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1eJSinRKlZD2E8FklsGw+u3xyxMB8GA1UdIwQY MBaAFBEIS303i5k8X150n2o0TeI+Ra0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMt YTI0ZDY4ZTM2NzA1LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9iYmZjYzQtYTI3Ny00YjQzLWIyNWMtYTI0ZDY4ZTM2NzA1 LzEvRVFoTGZUZUxtVHhmWG5TZmFqUk40ajVGclFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCMByBO8 7Q3QLXoGELXJdgQqlS4Mt79CMNC6ZeLHRTK1cuuzmtHJ+2htcwF4scipM9eQnFKN AfcbaLlHBvITW5Wk9EZmbcOdpdK5kzFFLCa3voKrdTCDf5s4lQJ3dNxD9EIgwJPj 3ezJqchYKLdJ5BUqjrZ/iBfMK5LAmnq+abCCm3VrNKi/PibHrdjgqVPzL/bOTAKy kMXzfhu/0KAt2BlrIpTKIM4tf3tczS18Df10vI7b3qBHjCRQYtvflUw6mzOwpJBf IH6vMl831Ps4VoY7C4fHIsgpancyqhazLxAz+pNyUjDXIEVgdr58fcDR1M/gAhLk s7rTKj8//auVjw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:43:38 2025 by rpki-client