This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft File: eEOlOB3OKHe7w1GmhO_OzdYT46o.mft (raw, json) Hash identifier: VlIpxDkurVIv3vCiKt/hDv/B3BzW5j1b6KNjSEXpmRY= Subject key identifier: AB:E7:29:89:8F:09:B5:F1:6D:CB:2B:D9:B0:B9:AC:20:7C:7E:E9:AE Authority key identifier: 78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA Certificate issuer: /CN=7843a5381dce2877bbc351a684efcecdd613e3aa Certificate serial: 019AF3894DE3FCD9BA6C5AC8BE50463B0650 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft Manifest number: 12D2 Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: bb6nncvAhni078ZU5RtarugpVvQ.roa (hash: 6TYoEFu0AnfEraFXjdNI1tT+tX9iNJhtz1VPH2GMI28=) 2: eEOlOB3OKHe7w1GmhO_OzdYT46o.crl (hash: RTzB8FgUjCc4z4wrGTI1Al95Z3ssTipgyIbwvzOY9pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4d:e3:fc:d9:ba:6c:5a:c8:be:50:46:3b:06:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7843a5381dce2877bbc351a684efcecdd613e3aa Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=abe729898f09b5f16dcb2bd9b0b9ac207c7ee9ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c6:17:71:e8:f5:c0:4a:8e:18:19:e1:e7:10: f7:a7:97:35:39:ae:c2:d2:0b:a3:fa:61:c4:ce:fb: 12:1a:b4:ca:9e:e5:2b:32:a8:ec:fe:65:da:a4:dd: 4c:37:bf:b6:eb:a7:7c:1c:60:e5:96:24:58:fe:a5: d0:d4:a6:37:89:82:20:73:23:5a:8a:57:05:c3:f9: e5:fc:7c:fc:92:cd:b4:dd:02:2c:14:d3:b4:19:97: ac:e2:26:e4:8b:08:b0:cd:23:54:0c:16:76:e4:f7: b7:4d:f1:cd:f2:ea:ba:de:31:16:a2:cc:c0:fb:6d: 16:c4:97:17:21:73:f4:6d:25:e2:33:8d:b1:f6:09: 72:ff:68:ed:b0:35:e6:e7:94:01:e7:22:29:f9:e5: 52:b6:ba:7a:36:e1:fd:52:94:6d:67:29:a4:1f:de: a5:f8:4c:15:4b:ad:ba:3a:10:bc:85:f2:f5:57:66: ab:e1:8c:bb:d8:a9:b6:30:a0:02:c7:66:c1:38:b5: b3:66:0d:d3:8f:49:01:be:79:81:3e:1c:5b:20:75: 31:81:a5:b1:0b:9e:a9:38:01:0c:4b:6c:6d:50:c4: 77:da:90:ef:4b:21:10:29:00:69:d3:98:8a:9a:d6: 8f:ea:a2:92:62:f2:4d:f9:b7:ca:12:24:20:63:2f: 0b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:E7:29:89:8F:09:B5:F1:6D:CB:2B:D9:B0:B9:AC:20:7C:7E:E9:AE X509v3 Authority Key Identifier: keyid:78:43:A5:38:1D:CE:28:77:BB:C3:51:A6:84:EF:CE:CD:D6:13:E3:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eEOlOB3OKHe7w1GmhO_OzdYT46o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/de4d0f-7f8e-4d7e-bbb0-07319c728ca2/1/eEOlOB3OKHe7w1GmhO_OzdYT46o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:b3:b0:a9:f2:99:a4:2b:68:ab:1b:bb:e3:7e:88:fe:0a:b9: 38:3c:b2:02:63:25:0c:50:74:52:2a:dd:81:11:53:ef:98:fc: 3f:4f:6b:ad:92:80:21:1c:81:b6:76:af:f9:8c:7d:73:66:0c: 28:a3:10:e8:2b:05:d9:5f:1b:93:16:bc:67:0a:96:c0:b9:67: 83:97:49:19:4e:a3:a6:fe:e1:c2:21:b3:22:01:7b:cc:e4:4f: 9f:83:9b:75:3a:5d:b8:30:7b:4a:cc:f7:41:8f:f8:18:49:9d: cf:1a:2a:9f:0d:4a:0d:2a:5c:77:30:6b:56:80:9b:df:d0:e0: 2a:23:fc:ab:7b:27:b9:a0:2b:88:a4:b3:5c:70:13:ac:01:76: e2:b9:07:46:65:94:db:2d:53:63:d0:72:d9:b8:30:61:83:d8: 3f:cc:6b:67:1e:c0:be:1f:6d:4d:07:64:33:43:f4:e2:35:82: 94:1a:98:56:76:25:70:25:9a:e0:41:79:49:42:68:c1:82:b4: 68:a8:6e:0f:7c:02:66:d6:f8:bb:e4:62:a6:c1:ff:86:0d:38: 5f:ba:54:7c:13:fc:2c:54:0d:1e:39:ed:99:2d:5d:f2:b2:bd: 3e:2e:c2:eb:b4:8c:68:21:42:16:7b:f9:28:a0:2e:92:05:d5: f8:61:a7:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziU3j/Nm6bFrIvlBGOwZQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NDNhNTM4MWRjZTI4NzdiYmMzNTFhNjg0ZWZjZWNkZDYx M2UzYWEwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EyhhYmU3Mjk4OThmMDliNWYxNmRjYjJiZDliMGI5YWMyMDdjN2VlOWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusYXcej1wEqOGBnh5xD3p5c1Oa7C 0guj+mHEzvsSGrTKnuUrMqjs/mXapN1MN7+266d8HGDlliRY/qXQ1KY3iYIgcyNa ilcFw/nl/Hz8ks203QIsFNO0GZes4ibkiwiwzSNUDBZ25Pe3TfHN8uq63jEWoszA +20WxJcXIXP0bSXiM42x9gly/2jtsDXm55QB5yIp+eVStrp6NuH9UpRtZymkH96l +EwVS626OhC8hfL1V2ar4Yy72Km2MKACx2bBOLWzZg3Tj0kBvnmBPhxbIHUxgaWx C56pOAEMS2xtUMR32pDvSyEQKQBp05iKmtaP6qKSYvJN+bfKEiQgYy8LTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvnKYmPCbXxbcsr2bC5rCB8fumuMB8GA1UdIwQY MBaAFHhDpTgdzih3u8NRpoTvzs3WE+OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAt MDczMTljNzI4Y2EyLzEvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9kZTRkMGYtN2Y4ZS00ZDdlLWJiYjAtMDczMTljNzI4Y2Ey LzEvZUVPbE9CM09LSGU3dzFHbWhPX096ZFlUNDZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbOwqfKZ pCtoqxu7436I/gq5ODyyAmMlDFB0UirdgRFT75j8P09rrZKAIRyBtnav+Yx9c2YM KKMQ6CsF2V8bkxa8ZwqWwLlng5dJGU6jpv7hwiGzIgF7zORPn4ObdTpduDB7Ssz3 QY/4GEmdzxoqnw1KDSpcdzBrVoCb39DgKiP8q3snuaAriKSzXHATrAF24rkHRmWU 2y1TY9By2bgwYYPYP8xrZx7Avh9tTQdkM0P04jWClBqYVnYlcCWa4EF5SUJowYK0 aKhuD3wCZtb4u+RipsH/hg04X7pUfBP8LFQNHjntmS1d8rK9Pi7C67SMaCFCFnv5 KKAukgXV+GGnIg== -----END CERTIFICATE-----Generated at Sat Dec 6 18:51:58 2025 by rpki-client