This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft File: EeB1VsGRhnrdkBAVgOz11bdClnE.mft (raw, json) Hash identifier: ztYGFr8qHq70WHwYioD7rQvCRzZYe44JgTq11TU0aWI= Subject key identifier: BE:A5:51:F3:79:EA:10:02:77:9D:F9:3B:1B:6C:F4:BA:61:19:19:C6 Authority key identifier: 11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 Certificate issuer: /CN=11e07556c191867add90101580ecf5d5b7429671 Certificate serial: 019AF352A6046040E6DAC5E34D6357A68E02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft Manifest number: 126C Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: EeB1VsGRhnrdkBAVgOz11bdClnE.crl (hash: lTShKbLgjCRfMdqiq5kQTogXDg8JYl8Skwf74hIzlVI=) 2: jfKlhf7Z2FYXHGCxpIFV4H7KtVw.roa (hash: M0IA4ol4QEDMaHvnBk/xSvh7Vb38bMiYrIeleD4pqMI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a6:04:60:40:e6:da:c5:e3:4d:63:57:a6:8e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e07556c191867add90101580ecf5d5b7429671 Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=bea551f379ea1002779df93b1b6cf4ba611919c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:28:ee:0c:32:24:43:65:99:69:20:51:cc:ac: 38:2a:57:a5:fa:d9:18:e5:89:d0:7e:11:d7:42:a2: a7:67:4c:98:d0:27:ee:64:fc:e9:34:03:0f:e8:b4: c0:de:22:7a:d3:d5:f7:8f:95:27:6e:37:7f:4e:1c: eb:40:22:aa:77:8a:83:ed:10:db:db:ca:01:13:ab: e6:30:26:10:2e:30:39:e1:3b:e7:df:0b:b7:63:f9: f3:6e:90:a6:8b:66:80:96:25:05:4f:bd:2a:19:23: 2e:88:b4:4f:67:a8:4f:98:f2:c8:bf:5d:98:a4:83: a9:f0:4c:0e:c8:76:a7:11:b0:3c:a6:d5:ba:82:3d: f6:74:bf:f7:95:97:2f:b0:93:00:b9:19:3a:ff:07: 28:59:be:83:ac:ef:f6:4e:c8:77:0f:bb:26:7d:18: 7a:b8:f7:19:33:7d:95:4f:72:a6:c4:7e:2b:41:2e: 8a:88:2b:c6:8c:ac:3e:0e:08:05:e0:57:54:40:68: b3:fe:93:a4:b9:cf:75:f4:28:22:20:7c:07:bb:77: dc:7f:bb:a0:1d:5c:d5:81:0f:fc:fb:a0:e3:58:e8: 8a:52:9b:0b:bf:ee:95:9e:d2:f7:c3:4c:18:38:19: c8:0f:2a:7e:7a:d6:2a:84:83:e5:d4:b6:4e:84:52: b7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A5:51:F3:79:EA:10:02:77:9D:F9:3B:1B:6C:F4:BA:61:19:19:C6 X509v3 Authority Key Identifier: keyid:11:E0:75:56:C1:91:86:7A:DD:90:10:15:80:EC:F5:D5:B7:42:96:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EeB1VsGRhnrdkBAVgOz11bdClnE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ae2929-674d-4946-8053-a4368a1b5f63/1/EeB1VsGRhnrdkBAVgOz11bdClnE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:2f:26:7c:6e:ec:fb:62:4f:86:8d:85:9a:c6:47:6e:55:48: ee:be:36:58:d0:78:ea:35:55:63:48:1f:35:17:a7:37:3d:14: 8e:42:9f:69:e1:ac:05:97:18:e2:cf:68:4d:be:90:11:d4:65: d2:e0:f7:5f:24:6a:4e:1a:0f:45:57:8d:ca:85:4b:13:01:69: 21:c0:a1:87:da:03:be:93:5e:af:b7:41:f3:37:b3:d5:59:24: ba:8b:d6:c9:9a:87:87:d9:22:38:8b:d5:66:ba:b2:94:90:01: f0:6d:ff:47:2e:eb:5e:22:4f:33:a2:09:53:b4:fc:e9:01:dc: c8:74:eb:b7:04:f2:7d:91:7b:50:80:d0:f9:89:62:7f:ea:7b: bb:f4:df:1a:19:46:61:6d:a5:ca:72:2b:62:a5:07:e4:32:04: 03:67:3d:fd:8e:ad:bd:fa:16:65:07:f7:09:a1:a1:2c:f6:d9: 85:0f:d4:8c:61:63:f4:f8:ce:fb:a7:9e:69:7d:1c:b4:6c:21: ca:c4:c6:0c:3e:8f:0a:dd:fd:c7:49:c0:06:d0:c2:76:d8:58: 39:64:e1:ed:78:50:dc:b1:72:6f:b9:84:b3:6d:44:67:99:de: dd:54:6f:97:2e:6c:dc:5d:ab:cb:c2:47:f8:f9:72:e2:23:e1: bb:f9:75:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqYEYEDm2sXjTWNXpo4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTA3NTU2YzE5MTg2N2FkZDkwMTAxNTgwZWNmNWQ1Yjc0 Mjk2NzEwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EyhiZWE1NTFmMzc5ZWExMDAyNzc5ZGY5M2IxYjZjZjRiYTYxMTkxOWM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApijuDDIkQ2WZaSBRzKw4Klel+tkY 5YnQfhHXQqKnZ0yY0CfuZPzpNAMP6LTA3iJ609X3j5Unbjd/ThzrQCKqd4qD7RDb 28oBE6vmMCYQLjA54Tvn3wu3Y/nzbpCmi2aAliUFT70qGSMuiLRPZ6hPmPLIv12Y pIOp8EwOyHanEbA8ptW6gj32dL/3lZcvsJMAuRk6/wcoWb6DrO/2Tsh3D7smfRh6 uPcZM32VT3KmxH4rQS6KiCvGjKw+DggF4FdUQGiz/pOkuc919CgiIHwHu3fcf7ug HVzVgQ/8+6DjWOiKUpsLv+6VntL3w0wYOBnIDyp+etYqhIPl1LZOhFK3yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6lUfN56hACd535Oxts9LphGRnGMB8GA1UdIwQY MBaAFBHgdVbBkYZ63ZAQFYDs9dW3QpZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMt YTQzNjhhMWI1ZjYzLzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9hZTI5MjktNjc0ZC00OTQ2LTgwNTMtYTQzNjhhMWI1ZjYz LzEvRWVCMVZzR1JobnJka0JBVmdPejExYmRDbG5FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGS8mfG7s +2JPho2FmsZHblVI7r42WNB46jVVY0gfNRenNz0UjkKfaeGsBZcY4s9oTb6QEdRl 0uD3XyRqThoPRVeNyoVLEwFpIcChh9oDvpNer7dB8zez1VkkuovWyZqHh9kiOIvV ZrqylJAB8G3/Ry7rXiJPM6IJU7T86QHcyHTrtwTyfZF7UIDQ+Ylif+p7u/TfGhlG YW2lynIrYqUH5DIEA2c9/Y6tvfoWZQf3CaGhLPbZhQ/UjGFj9PjO+6eeaX0ctGwh ysTGDD6PCt39x0nABtDCdthYOWTh7XhQ3LFyb7mEs21EZ5ne3VRvly5s3F2ry8JH +Ply4iPhu/l1vw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:33:01 2025 by rpki-client