This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft File: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft (raw, json) Hash identifier: UG7Oboc81kJrc5r8aFDCtIbOW5W4LOp48JXh4hlCat0= Subject key identifier: 73:C0:22:E6:34:7C:F6:B7:5A:73:57:B0:DF:2C:98:E8:68:09:9F:30 Authority key identifier: D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 Certificate issuer: /CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Certificate serial: 019AF1646E39510FF7AB59A908EB61E980F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft Manifest number: 0E22 Signing time: Sat 06 Dec 2025 02:01:22 +0000 Manifest this update: Sat 06 Dec 2025 02:01:22 +0000 Manifest next update: Sun 07 Dec 2025 02:01:22 +0000 Files and hashes: 1: 0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl (hash: N4bZ9U7Ky+2MeS4mV5nZvjcU6ES/plql6nCOhJSmkio=) 2: C6VvOJhQ6LO3CnHxJ6KuDcvQH2c.roa (hash: SLDEqSk+tN+j+2o7yXrUPF3ZHKKAK2CSYSuFTkFJRpI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:6e:39:51:0f:f7:ab:59:a9:08:eb:61:e9:80:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d048afb72fc98326773c5ee1fb4052fe7d9f0c68 Validity Not Before: Dec 6 02:01:22 2025 GMT Not After : Dec 7 02:01:22 2025 GMT Subject: CN=73c022e6347cf6b75a7357b0df2c98e868099f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:bf:2d:32:3c:62:e6:40:69:10:22:63:91:36: 14:87:96:a3:91:2e:51:dc:fa:5b:65:13:84:16:6f: 7a:c5:69:ab:63:2c:26:28:6b:3c:5f:ec:97:4e:78: 8c:60:4e:78:26:28:8e:10:4b:8b:bd:ca:62:a2:b7: 62:48:11:0a:27:0a:0f:91:09:ee:43:12:1f:5e:fc: 1b:51:0a:86:c0:24:e1:47:ae:be:46:8f:70:ec:9c: 16:fe:56:2b:b2:3f:c1:8c:de:2c:a2:ed:7f:4f:2b: 56:ec:5e:98:42:61:6d:0e:5f:0f:da:5b:de:51:19: bf:ee:fd:dc:ab:78:65:51:b8:25:24:3f:a2:e9:41: 14:41:3c:ad:fa:31:a6:fd:71:82:6e:a9:06:cd:00: 3f:ec:ac:76:a5:f4:65:10:0c:d9:30:ee:b5:34:7d: 49:39:a0:a7:95:ec:e1:de:25:c5:2c:9c:64:fc:68: 18:a2:7e:0b:ff:2c:2f:94:14:63:55:ba:15:7f:b4: 2a:b6:dd:24:84:60:e5:59:82:2a:66:0d:c1:16:9d: 2f:fb:4b:5f:21:14:88:26:a0:e8:f6:c8:75:ad:e3: 4a:a7:80:fc:fd:83:97:f0:20:ec:ae:55:45:bb:1f: 5e:c9:53:bc:13:64:30:76:75:c7:57:30:d8:d7:74: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:22:E6:34:7C:F6:B7:5A:73:57:B0:DF:2C:98:E8:68:09:9F:30 X509v3 Authority Key Identifier: keyid:D0:48:AF:B7:2F:C9:83:26:77:3C:5E:E1:FB:40:52:FE:7D:9F:0C:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Eivty_JgyZ3PF7h-0BS_n2fDGg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/065f76-0382-42a4-8607-77922b785fd2/1/0Eivty_JgyZ3PF7h-0BS_n2fDGg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5f:70:20:b7:d4:73:65:5b:cc:83:59:e3:45:b3:96:c7:d1: 2b:ec:89:69:4e:5d:ea:bf:b2:45:c6:79:db:aa:be:5f:9e:e5: 51:5d:f2:35:8d:37:a4:3c:b0:f4:ef:8c:cd:74:69:ae:2c:fc: 2b:af:07:2b:74:4c:dd:52:dc:55:73:dc:d3:52:f6:ce:9f:75: 87:51:01:0c:10:ea:e9:d4:21:68:b7:42:f2:ba:4d:0a:85:31: 0b:aa:33:d7:ac:2f:66:22:8f:e7:48:9b:01:9d:c1:d1:29:9a: fd:77:28:d5:d7:9b:25:d5:e9:59:44:c6:33:74:ba:3f:6e:93: 33:b8:c8:4e:9c:88:c9:14:d3:b0:80:a4:27:d8:04:ba:5d:80: d5:09:b7:b9:f7:c9:49:73:b1:4e:e1:8b:61:b1:65:48:e2:94: 33:e0:8a:94:10:f1:75:1d:b3:9f:78:cc:fe:fb:2e:72:05:33: 2c:ea:0b:38:50:1f:21:59:71:1d:bf:55:ea:68:71:06:5b:cc: 8e:d7:ad:e7:62:2a:98:4d:7d:1f:55:14:5f:02:95:5c:d3:a0: 57:38:49:0d:8d:10:1e:8f:84:ed:80:2e:fa:cb:da:5d:cc:c2: 7d:c1:16:da:23:ef:c3:15:19:9d:31:f0:77:c7:32:68:bf:b2: 82:5f:40:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZG45UQ/3q1mpCOth6YD1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNDhhZmI3MmZjOTgzMjY3NzNjNWVlMWZiNDA1MmZlN2Q5 ZjBjNjgwHhcNMjUxMjA2MDIwMTIyWhcNMjUxMjA3MDIwMTIyWjAzMTEwLwYDVQQD Eyg3M2MwMjJlNjM0N2NmNmI3NWE3MzU3YjBkZjJjOThlODY4MDk5ZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjr8tMjxi5kBpECJjkTYUh5ajkS5R 3PpbZROEFm96xWmrYywmKGs8X+yXTniMYE54JiiOEEuLvcpiordiSBEKJwoPkQnu QxIfXvwbUQqGwCThR66+Ro9w7JwW/lYrsj/BjN4sou1/TytW7F6YQmFtDl8P2lve URm/7v3cq3hlUbglJD+i6UEUQTyt+jGm/XGCbqkGzQA/7Kx2pfRlEAzZMO61NH1J OaCnlezh3iXFLJxk/GgYon4L/ywvlBRjVboVf7Qqtt0khGDlWYIqZg3BFp0v+0tf IRSIJqDo9sh1reNKp4D8/YOX8CDsrlVFux9eyVO8E2QwdnXHVzDY13StXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPAIuY0fPa3WnNXsN8smOhoCZ8wMB8GA1UdIwQY MBaAFNBIr7cvyYMmdzxe4ftAUv59nwxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDct Nzc5MjJiNzg1ZmQyLzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi8wNjVmNzYtMDM4Mi00MmE0LTg2MDctNzc5MjJiNzg1ZmQy LzEvMEVpdnR5X0pneVozUEY3aC0wQlNfbjJmREdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF9wILfU c2VbzINZ40WzlsfRK+yJaU5d6r+yRcZ526q+X57lUV3yNY03pDyw9O+MzXRpriz8 K68HK3RM3VLcVXPc01L2zp91h1EBDBDq6dQhaLdC8rpNCoUxC6oz16wvZiKP50ib AZ3B0Sma/Xco1debJdXpWUTGM3S6P26TM7jITpyIyRTTsICkJ9gEul2A1Qm3uffJ SXOxTuGLYbFlSOKUM+CKlBDxdR2zn3jM/vsucgUzLOoLOFAfIVlxHb9V6mhxBlvM jtet52IqmE19H1UUXwKVXNOgVzhJDY0QHo+E7YAu+svaXczCfcEW2iPvwxUZnTHw d8cyaL+ygl9Amw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:32:37 2025 by rpki-client