This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft File: eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft (raw, json) Hash identifier: Rqi6tlzedeY36h3LbgIpjViVCTXQgJlQtM9yhyQ25+0= Subject key identifier: 01:11:3C:C7:FF:DA:B4:5D:47:46:F4:84:BF:10:C8:64:2C:2E:3B:0F Authority key identifier: 7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 Certificate issuer: /CN=7b243b732e564690482cc825199f8b591b01f6f2 Certificate serial: 019AF31C4993CC7298F9C3B9BF4A4B455533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft Manifest number: 1305 Signing time: Sat 06 Dec 2025 10:01:48 +0000 Manifest this update: Sat 06 Dec 2025 10:01:48 +0000 Manifest next update: Sun 07 Dec 2025 10:01:48 +0000 Files and hashes: 1: eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl (hash: sjXH6YG806xp0x+pNfM6xcwRb4XAIo7yLKWg9uCRQMQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:49:93:cc:72:98:f9:c3:b9:bf:4a:4b:45:55:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b243b732e564690482cc825199f8b591b01f6f2 Validity Not Before: Dec 6 10:01:48 2025 GMT Not After : Dec 7 10:01:48 2025 GMT Subject: CN=01113cc7ffdab45d4746f484bf10c8642c2e3b0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a8:6d:4d:aa:49:6c:2b:96:65:5b:38:d5:20: 70:b3:bb:ac:91:d6:1d:7c:ca:c7:68:0d:48:90:f3: 63:a8:d4:d7:ff:2b:fe:7f:fc:d5:97:04:2f:db:c5: 84:f5:14:51:36:50:3f:12:a9:2d:ab:ac:a5:ba:15: f6:76:2c:6f:50:c6:fd:79:fd:e7:2a:9b:09:15:f7: fd:12:8d:89:9f:2c:7e:7c:2e:b8:ff:66:d3:29:6e: 7a:a6:b5:e7:74:96:63:60:5c:0f:ba:a1:32:3a:57: 03:c0:00:59:cb:97:06:de:9e:e1:74:48:a7:b6:77: 50:af:cb:c4:b2:c9:94:77:86:42:f2:5d:c8:d1:a2: d8:47:59:f5:c7:28:d7:78:09:f1:19:36:4a:49:78: 06:9f:8d:a0:5f:38:09:a9:73:b4:a8:80:0f:96:47: fa:cf:07:97:30:bc:8a:3b:69:6e:e2:ec:e6:0a:7d: de:80:67:4f:86:97:90:85:1d:7d:f3:db:a7:f9:2e: d4:23:87:f8:a3:27:4b:21:51:fd:94:ad:1f:f3:cd: 18:5d:01:7f:3b:c2:dc:16:d1:9e:35:fd:3e:88:d4: ee:ca:31:c1:9c:6e:2a:24:ae:50:9c:52:fd:ee:c1: f5:26:3b:ad:b7:85:f1:1a:80:a7:06:65:04:48:6f: 73:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:11:3C:C7:FF:DA:B4:5D:47:46:F4:84:BF:10:C8:64:2C:2E:3B:0F X509v3 Authority Key Identifier: keyid:7B:24:3B:73:2E:56:46:90:48:2C:C8:25:19:9F:8B:59:1B:01:F6:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ7cy5WRpBILMglGZ-LWRsB9vI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/5b2d2c-a78c-4c47-9785-3b9a282e763e/1/eyQ7cy5WRpBILMglGZ-LWRsB9vI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:4c:6b:c0:6e:25:ac:16:90:52:c7:34:71:20:d0:0d:39:e3: 9a:e6:75:66:53:86:89:49:22:71:0d:03:ff:cb:e6:7d:66:5c: 5c:4f:49:1b:5b:2e:50:9a:3b:d2:e5:af:ea:2a:d5:ae:02:08: 0c:a5:89:3a:b0:8e:35:bf:2f:2e:2f:20:61:8c:23:93:3d:5c: b8:86:42:b6:26:58:f4:d9:7a:03:54:34:55:b2:19:d0:f2:87: 73:4c:97:d0:bf:7d:22:6d:07:1b:c7:2c:4f:16:00:be:26:36: 1e:fc:a1:63:0b:8f:f0:cf:37:b4:cc:48:b9:cb:21:5a:f3:6e: 6e:ca:e1:c3:a7:1d:52:73:72:15:88:2d:8c:8e:e8:7c:9d:91: 92:e1:8f:34:1e:b5:72:95:58:c2:ab:0a:0c:2c:8c:89:2b:27: ea:d4:46:8b:18:34:93:05:52:9b:8a:15:d0:9a:85:86:a8:7b: e6:88:f5:20:9d:e4:80:57:f7:46:cb:b1:29:b8:c9:55:fe:e9: 92:07:21:d3:ee:a0:d2:13:8e:d0:9b:43:4b:0e:79:4a:71:a1: d1:b2:8d:b0:df:64:5f:92:4b:f8:ec:67:bd:f9:14:c6:b3:9e: 31:29:2c:fd:38:6b:8a:fe:b4:d8:bc:be:fa:c6:1d:42:c7:53: 17:a1:35:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHEmTzHKY+cO5v0pLRVUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjQzYjczMmU1NjQ2OTA0ODJjYzgyNTE5OWY4YjU5MWIw MWY2ZjIwHhcNMjUxMjA2MTAwMTQ4WhcNMjUxMjA3MTAwMTQ4WjAzMTEwLwYDVQQD EygwMTExM2NjN2ZmZGFiNDVkNDc0NmY0ODRiZjEwYzg2NDJjMmUzYjBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKhtTapJbCuWZVs41SBws7uskdYd fMrHaA1IkPNjqNTX/yv+f/zVlwQv28WE9RRRNlA/Eqktq6yluhX2dixvUMb9ef3n KpsJFff9Eo2Jnyx+fC64/2bTKW56prXndJZjYFwPuqEyOlcDwABZy5cG3p7hdEin tndQr8vEssmUd4ZC8l3I0aLYR1n1xyjXeAnxGTZKSXgGn42gXzgJqXO0qIAPlkf6 zweXMLyKO2lu4uzmCn3egGdPhpeQhR1989un+S7UI4f4oydLIVH9lK0f880YXQF/ O8LcFtGeNf0+iNTuyjHBnG4qJK5QnFL97sH1Jjutt4XxGoCnBmUESG9z1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAERPMf/2rRdR0b0hL8QyGQsLjsPMB8GA1UdIwQY MBaAFHskO3MuVkaQSCzIJRmfi1kbAfbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUt M2I5YTI4MmU3NjNlLzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS81YjJkMmMtYTc4Yy00YzQ3LTk3ODUtM2I5YTI4MmU3NjNl LzEvZXlRN2N5NVdScEJJTE1nbEdaLUxXUnNCOXZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUxrwG4l rBaQUsc0cSDQDTnjmuZ1ZlOGiUkicQ0D/8vmfWZcXE9JG1suUJo70uWv6irVrgII DKWJOrCONb8vLi8gYYwjkz1cuIZCtiZY9Nl6A1Q0VbIZ0PKHc0yX0L99Im0HG8cs TxYAviY2HvyhYwuP8M83tMxIucshWvNubsrhw6cdUnNyFYgtjI7ofJ2RkuGPNB61 cpVYwqsKDCyMiSsn6tRGixg0kwVSm4oV0JqFhqh75oj1IJ3kgFf3RsuxKbjJVf7p kgch0+6g0hOO0JtDSw55SnGh0bKNsN9kX5JL+OxnvfkUxrOeMSks/Thriv602Ly+ +sYdQsdTF6E1Kg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:48:08 2025 by rpki-client