This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft File: eQvBn9eSZsoIqdwjhAoAQgX06GU.mft (raw, json) Hash identifier: gw2qmvVtJtucgb0cQY8toVJrghlsUrXkIzMQWQ8tQFA= Subject key identifier: 0B:2E:E5:67:70:1C:5A:95:22:CF:9C:6F:60:B2:AE:B3:D1:02:3E:80 Authority key identifier: 79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65 Certificate issuer: /CN=790bc19fd79266ca08a9dc23840a004205f4e865 Certificate serial: 019AF31C6611D016F9FC86A00E8EBED26B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft Manifest number: 0F79 Signing time: Sat 06 Dec 2025 10:01:55 +0000 Manifest this update: Sat 06 Dec 2025 10:01:55 +0000 Manifest next update: Sun 07 Dec 2025 10:01:55 +0000 Files and hashes: 1: eQvBn9eSZsoIqdwjhAoAQgX06GU.crl (hash: tNMppg15VQWFg2OBHED5JQy7SFoYIAHybymhQqPb2zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:66:11:d0:16:f9:fc:86:a0:0e:8e:be:d2:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790bc19fd79266ca08a9dc23840a004205f4e865 Validity Not Before: Dec 6 10:01:55 2025 GMT Not After : Dec 7 10:01:55 2025 GMT Subject: CN=0b2ee567701c5a9522cf9c6f60b2aeb3d1023e80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:be:36:7d:b2:ce:4c:d9:c0:ba:71:0c:f1:d8: 72:50:5c:b0:ac:4b:85:7d:b6:10:f8:12:53:9d:84: 5d:13:f3:c7:27:57:a2:26:62:f9:f2:ec:6e:0d:b1: cc:92:e3:6a:68:6e:fe:9f:e2:53:4d:52:d0:03:ba: 1f:c9:ff:8c:59:e0:84:e9:be:68:3f:84:e0:cf:ed: 01:d3:c3:00:bb:31:95:23:d5:66:06:ba:28:47:0b: 6a:e1:7b:16:0e:d8:17:3a:34:2b:b5:d3:bb:6c:b1: c5:18:2b:bc:15:5f:66:3a:7e:21:44:fd:23:a9:70: c7:ee:16:7a:5a:57:b5:af:56:a8:3f:71:af:31:3d: 81:14:b6:0c:38:bb:09:32:2c:85:a7:92:29:67:6c: 58:35:bc:77:36:dc:2a:ec:77:01:7b:80:58:2c:1f: 4f:bc:33:d9:00:15:62:ef:56:03:d8:79:6e:99:84: 2e:dc:64:5b:86:ea:1e:97:74:1c:ed:e9:96:89:14: 3d:ca:b3:73:ba:04:80:f3:2f:2f:ff:16:ce:70:f4: 8b:72:a3:63:23:e8:6c:69:94:ff:f2:07:62:9c:06: 60:59:9d:88:28:1c:1d:2f:64:db:88:e6:47:42:c5: a0:d5:c4:93:fe:e4:f5:ff:59:34:b8:bc:2e:58:da: 66:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2E:E5:67:70:1C:5A:95:22:CF:9C:6F:60:B2:AE:B3:D1:02:3E:80 X509v3 Authority Key Identifier: keyid:79:0B:C1:9F:D7:92:66:CA:08:A9:DC:23:84:0A:00:42:05:F4:E8:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQvBn9eSZsoIqdwjhAoAQgX06GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/b63ca7-1703-4cfd-846f-09edc2d56201/1/eQvBn9eSZsoIqdwjhAoAQgX06GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:3c:ac:39:ff:5e:18:0b:96:c0:24:ec:ca:02:69:0b:b3:2b: fb:36:22:0f:b1:d7:08:6f:c9:2c:07:20:c9:e9:7f:07:e2:30: b1:64:33:2b:c2:c9:a6:9a:f3:07:72:fa:92:ba:16:32:32:d7: c6:55:ca:9b:5d:26:08:43:76:b3:aa:6a:bd:2c:fc:dc:77:14: ea:86:1a:71:95:75:7a:fc:b2:55:36:39:74:fd:70:ec:29:ae: 8e:58:f2:c1:d6:6b:a1:8e:da:1d:18:06:fd:bc:89:e9:bc:bf: 56:6f:8c:a0:58:19:4c:9b:45:8c:3d:57:82:79:34:40:a0:5e: c7:1e:bd:18:87:01:6d:4f:ba:b2:8c:a9:5f:c1:5c:70:ec:1f: 4a:1c:33:f0:e7:cc:f4:53:27:4c:2d:48:65:16:2e:57:d6:2c: 3d:19:50:da:9f:44:e9:78:87:da:41:a3:6b:df:0f:99:7f:49: 74:9a:f2:6e:b3:2a:02:df:a6:3e:85:4c:14:77:39:c3:9b:45: e6:63:38:56:0a:c4:e4:72:c9:61:5e:57:41:cf:75:ee:19:d2: f7:04:9a:11:a0:71:32:dd:f8:8a:a0:2e:b5:57:74:29:cb:5b: 9b:53:26:ff:b8:6b:59:ae:67:5b:0f:00:33:fc:0b:ba:3b:31: 1d:de:6b:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGYR0Bb5/IagDo6+0ms/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGJjMTlmZDc5MjY2Y2EwOGE5ZGMyMzg0MGEwMDQyMDVm NGU4NjUwHhcNMjUxMjA2MTAwMTU1WhcNMjUxMjA3MTAwMTU1WjAzMTEwLwYDVQQD EygwYjJlZTU2NzcwMWM1YTk1MjJjZjljNmY2MGIyYWViM2QxMDIzZTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb42fbLOTNnAunEM8dhyUFywrEuF fbYQ+BJTnYRdE/PHJ1eiJmL58uxuDbHMkuNqaG7+n+JTTVLQA7ofyf+MWeCE6b5o P4Tgz+0B08MAuzGVI9VmBrooRwtq4XsWDtgXOjQrtdO7bLHFGCu8FV9mOn4hRP0j qXDH7hZ6Wle1r1aoP3GvMT2BFLYMOLsJMiyFp5IpZ2xYNbx3Ntwq7HcBe4BYLB9P vDPZABVi71YD2HlumYQu3GRbhuoel3Qc7emWiRQ9yrNzugSA8y8v/xbOcPSLcqNj I+hsaZT/8gdinAZgWZ2IKBwdL2TbiOZHQsWg1cST/uT1/1k0uLwuWNpmbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsu5WdwHFqVIs+cb2CyrrPRAj6AMB8GA1UdIwQY MBaAFHkLwZ/XkmbKCKncI4QKAEIF9OhlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9iNjNjYTctMTcwMy00Y2ZkLTg0NmYt MDllZGMyZDU2MjAxLzEvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS9iNjNjYTctMTcwMy00Y2ZkLTg0NmYtMDllZGMyZDU2MjAx LzEvZVF2Qm45ZVNac29JcWR3amhBb0FRZ1gwNkdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzysOf9e GAuWwCTsygJpC7Mr+zYiD7HXCG/JLAcgyel/B+IwsWQzK8LJpprzB3L6kroWMjLX xlXKm10mCEN2s6pqvSz83HcU6oYacZV1evyyVTY5dP1w7CmujljywdZroY7aHRgG /byJ6by/Vm+MoFgZTJtFjD1Xgnk0QKBexx69GIcBbU+6soypX8FccOwfShwz8OfM 9FMnTC1IZRYuV9YsPRlQ2p9E6XiH2kGja98PmX9JdJrybrMqAt+mPoVMFHc5w5tF 5mM4VgrE5HLJYV5XQc917hnS9wSaEaBxMt34iqAutVd0Kctbm1Mm/7hrWa5nWw8A M/wLujsxHd5rSA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:19 2025 by rpki-client