This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json) Hash identifier: YMx5rFjKnKDTLnxxuLNNlfZuWLS41X2U9gryCfKuxLM= Subject key identifier: 19:E6:36:41:69:5E:F9:B3:5D:74:41:E1:66:A6:D3:FD:BF:64:F4:D3 Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3 Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3 Certificate serial: 019AF1D200B4EDC896F335C960269A109B8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft Manifest number: 12F7 Signing time: Sat 06 Dec 2025 04:01:02 +0000 Manifest this update: Sat 06 Dec 2025 04:01:02 +0000 Manifest next update: Sun 07 Dec 2025 04:01:02 +0000 Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: RWgFeb4c9jAt/7gEzOIrOWrrbKKL0TuQukilKaz8bi8=) 2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:00:b4:ed:c8:96:f3:35:c9:60:26:9a:10:9b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3 Validity Not Before: Dec 6 04:01:02 2025 GMT Not After : Dec 7 04:01:02 2025 GMT Subject: CN=19e63641695ef9b35d7441e166a6d3fdbf64f4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c1:a1:6d:0d:58:22:0e:1c:0f:62:4a:97:4e: 29:c7:d7:57:c8:b9:47:0d:4a:7d:26:2e:8e:25:df: c0:0d:a8:f0:27:60:aa:d3:b5:97:65:5d:ca:1a:5e: 91:a3:4d:b5:5d:8d:a1:8b:cc:4d:6b:b1:9f:0e:c6: 9e:0e:9f:99:e3:5d:d7:58:d0:a6:93:24:99:fa:4a: 36:3c:f6:8e:bd:c5:38:3f:5e:cc:7c:03:db:db:8b: f4:c9:0a:c0:c3:5d:17:fc:3e:57:38:9f:69:6a:85: 14:95:bf:ed:e2:d1:5c:72:58:39:ec:04:44:2f:bb: 55:d0:61:34:82:77:39:ae:b8:8b:f2:85:f8:7e:7a: a8:af:64:eb:ae:82:a2:69:47:23:22:7f:a3:c2:71: c8:73:86:70:e8:08:20:21:17:bd:b7:9a:40:0b:1e: 5d:19:16:d0:72:53:54:46:86:fb:72:29:8e:3f:fd: 99:7d:e6:cf:c5:09:84:76:77:0b:92:da:62:f8:05: b9:a9:3f:47:8a:a6:fd:8b:bd:f6:e3:e3:a2:2d:6b: d4:60:fd:51:dd:1b:d3:b4:ce:3d:67:e8:50:b6:3a: 1b:5e:78:fc:f3:8e:e8:41:22:85:70:f2:ef:29:97: e2:09:8e:92:10:06:68:db:10:5e:3d:d9:cc:80:17: 50:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E6:36:41:69:5E:F9:B3:5D:74:41:E1:66:A6:D3:FD:BF:64:F4:D3 X509v3 Authority Key Identifier: keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:98:bd:c0:38:89:ca:b5:4f:eb:3d:b7:86:de:a6:c9:30:31: 5f:cb:1a:9f:dd:9e:10:2f:c6:9b:ea:db:b1:3c:23:82:d4:43: ca:43:81:d0:81:1f:0c:95:5d:62:1c:30:6a:91:1a:87:8e:82: 98:ec:f3:dd:7f:7e:a4:4b:3b:d8:28:f8:ec:20:54:83:53:b0: b4:08:0a:da:0e:43:48:22:84:70:de:1d:e9:e2:a7:39:66:e4: 56:92:24:3d:86:cf:47:36:3b:63:b9:e3:83:57:02:f2:b2:53: 63:33:7d:61:33:1b:2f:77:2d:25:52:1e:f3:88:50:56:65:b8: 58:d5:b4:6e:8b:fd:67:f7:8b:d7:ed:28:ab:c4:36:c3:70:9d: 4e:1f:0c:66:9d:59:36:49:3e:4d:d3:ea:1e:09:67:ea:ef:0b: 02:c6:63:24:0f:48:cf:0c:5f:28:d6:7f:4d:c2:bf:74:a0:45: 3a:b5:a3:14:9d:43:e0:f5:50:2a:f7:8e:ab:95:51:79:74:4f: c9:22:58:30:9b:99:d6:0c:9c:f5:2b:d0:81:24:b9:fb:31:5a: 3e:27:72:f8:fd:5b:60:a3:bd:2a:ed:c1:97:1d:12:17:64:de: 4b:82:4f:b1:d9:23:c5:5a:76:53:32:3b:dd:66:9d:8b:b0:e9: 02:ce:64:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gC07ciW8zXJYCaaEJuPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOGFmOWU5YzU2NTJiMzU4NDRiMmU1ZDRiNTM3ZTlmY2Q0 NDUyZjMwHhcNMjUxMjA2MDQwMTAyWhcNMjUxMjA3MDQwMTAyWjAzMTEwLwYDVQQD EygxOWU2MzY0MTY5NWVmOWIzNWQ3NDQxZTE2NmE2ZDNmZGJmNjRmNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMGhbQ1YIg4cD2JKl04px9dXyLlH DUp9Ji6OJd/ADajwJ2Cq07WXZV3KGl6Ro021XY2hi8xNa7GfDsaeDp+Z413XWNCm kySZ+ko2PPaOvcU4P17MfAPb24v0yQrAw10X/D5XOJ9paoUUlb/t4tFcclg57ARE L7tV0GE0gnc5rriL8oX4fnqor2TrroKiaUcjIn+jwnHIc4Zw6AggIRe9t5pACx5d GRbQclNURob7cimOP/2ZfebPxQmEdncLktpi+AW5qT9Hiqb9i7324+OiLWvUYP1R 3RvTtM49Z+hQtjobXnj8847oQSKFcPLvKZfiCY6SEAZo2xBePdnMgBdQ/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnmNkFpXvmzXXRB4Wam0/2/ZPTTMB8GA1UdIwQY MBaAFBCK+enFZSs1hEsuXUtTfp/NRFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODIt ZGUyZjZlYTAyMGJhLzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODItZGUyZjZlYTAyMGJh LzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJi9wDiJ yrVP6z23ht6myTAxX8san92eEC/Gm+rbsTwjgtRDykOB0IEfDJVdYhwwapEah46C mOzz3X9+pEs72Cj47CBUg1OwtAgK2g5DSCKEcN4d6eKnOWbkVpIkPYbPRzY7Y7nj g1cC8rJTYzN9YTMbL3ctJVIe84hQVmW4WNW0bov9Z/eL1+0oq8Q2w3CdTh8MZp1Z Nkk+TdPqHgln6u8LAsZjJA9IzwxfKNZ/TcK/dKBFOrWjFJ1D4PVQKveOq5VReXRP ySJYMJuZ1gyc9SvQgSS5+zFaPidy+P1bYKO9Ku3Blx0SF2TeS4JPsdkjxVp2UzI7 3Wadi7DpAs5keA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:05:00 2025 by rpki-client