This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft File: eYvLVDKkXyWwQQOWerQDwp0NQwo.mft (raw, json) Hash identifier: 827odqVDCebXdpxC+JiKrECSFSI3rI7PZIqYeZTBEA0= Subject key identifier: 88:B0:CA:50:9A:53:46:AE:C8:4B:8A:7A:E0:E6:55:B6:EF:1E:EE:29 Authority key identifier: 79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A Certificate issuer: /CN=798bcb5432a45f25b04103967ab403c29d0d430a Certificate serial: 019AF3F721D7CB7F9C4A11617DA12AC6198A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft Manifest number: 0E4F Signing time: Sat 06 Dec 2025 14:00:50 +0000 Manifest this update: Sat 06 Dec 2025 14:00:50 +0000 Manifest next update: Sun 07 Dec 2025 14:00:50 +0000 Files and hashes: 1: ZroDUdT1fuQ3WJuqAnfF9aNVGrI.roa (hash: Mh4/Y9uJkP+Ip56RhAVyLWpJhLDGtNZ4uot6+n77F9U=) 2: eYvLVDKkXyWwQQOWerQDwp0NQwo.crl (hash: VT0jTxpoBNXDxuhdlq6K511YDqL5RXyPHzxTP6IAfBs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:21:d7:cb:7f:9c:4a:11:61:7d:a1:2a:c6:19:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798bcb5432a45f25b04103967ab403c29d0d430a Validity Not Before: Dec 6 14:00:50 2025 GMT Not After : Dec 7 14:00:50 2025 GMT Subject: CN=88b0ca509a5346aec84b8a7ae0e655b6ef1eee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:25:a4:88:97:5e:cc:50:fa:2a:ff:53:e5:e3: 7d:6d:f8:05:0e:9d:27:e7:db:23:47:84:ad:88:3e: 24:00:1e:e4:f3:2e:20:6e:e7:31:be:3d:e9:84:29: 76:26:ab:a5:1e:1f:68:b1:a1:be:24:82:87:ae:12: 62:4c:dc:66:14:ab:c4:4c:dc:e2:53:b6:f5:93:b6: 7e:e3:4e:ee:ef:77:3c:69:ab:7d:cb:52:42:37:03: 5e:6e:31:94:22:ef:20:91:cc:c5:60:1b:81:07:f6: 3f:2e:12:90:a7:55:69:be:69:66:f1:ee:00:21:2a: 3b:f3:0e:ec:3f:f5:cd:f9:ea:50:78:4d:51:39:b7: 8a:96:a2:dd:2e:48:b6:2a:14:ab:e7:9d:94:01:ba: 2f:ea:17:66:68:16:dd:52:6e:c3:3a:65:be:e9:30: 2d:c7:e0:6a:c4:55:55:be:39:49:ac:75:e8:4d:77: 9d:d0:12:b2:d7:26:8d:e0:1c:89:ef:a2:23:75:29: 80:f0:68:4f:f3:8e:a3:17:3e:67:fc:74:1d:ea:b9: 25:64:35:38:a9:12:49:64:0c:03:4d:63:01:e0:0c: a7:21:8e:06:25:35:5b:9a:53:7f:8b:85:4b:b1:32: 91:a7:8a:5e:68:59:2b:4b:18:df:ca:98:e2:bc:e4: 58:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B0:CA:50:9A:53:46:AE:C8:4B:8A:7A:E0:E6:55:B6:EF:1E:EE:29 X509v3 Authority Key Identifier: keyid:79:8B:CB:54:32:A4:5F:25:B0:41:03:96:7A:B4:03:C2:9D:0D:43:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYvLVDKkXyWwQQOWerQDwp0NQwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/5d0fbb-ad7d-4a9a-b174-11b29052528d/1/eYvLVDKkXyWwQQOWerQDwp0NQwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:f0:2d:e7:f8:5a:07:d9:21:be:0b:69:87:54:6e:da:f8:f0: 82:8c:6f:98:54:dd:9a:8e:90:65:b0:22:61:9e:03:a1:26:dc: 73:9d:95:f1:72:ce:26:e4:fe:ac:01:24:e7:5d:63:0a:ba:0a: 0b:41:b0:73:26:9d:dc:07:39:84:05:30:01:23:bb:56:e0:10: de:0d:16:b1:d6:2b:04:57:e3:d0:78:1a:b7:ca:39:65:db:21: e7:b9:31:21:63:2f:12:74:15:7b:f4:bf:85:b7:f3:87:ba:7a: 7b:ff:5e:78:27:7a:46:67:76:52:a8:41:c1:c0:a7:5f:88:b8: 3c:f9:74:d6:43:6b:16:15:45:99:d8:58:4c:84:32:d0:fc:64: 6e:5f:09:46:78:18:49:b5:21:b9:42:3c:4b:f2:78:60:a3:8c: 0c:7b:49:e6:d8:55:8a:36:95:11:be:0f:bf:83:87:e0:cf:59: 45:85:86:f7:76:b5:ce:33:e0:73:b3:35:36:70:2f:c5:de:52: 81:76:8c:bd:00:24:45:ac:07:ee:37:bc:80:fa:1c:e2:11:ea: 06:d0:5a:ff:50:6b:c0:9c:79:ff:4a:27:46:ac:19:04:20:97: 68:8c:d7:53:0b:6c:1c:07:90:0a:6e:29:ae:88:c7:42:bc:15: 97:d3:28:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yHXy3+cShFhfaEqxhmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGJjYjU0MzJhNDVmMjViMDQxMDM5NjdhYjQwM2MyOWQw ZDQzMGEwHhcNMjUxMjA2MTQwMDUwWhcNMjUxMjA3MTQwMDUwWjAzMTEwLwYDVQQD Eyg4OGIwY2E1MDlhNTM0NmFlYzg0YjhhN2FlMGU2NTViNmVmMWVlZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCWkiJdezFD6Kv9T5eN9bfgFDp0n 59sjR4StiD4kAB7k8y4gbucxvj3phCl2JqulHh9osaG+JIKHrhJiTNxmFKvETNzi U7b1k7Z+407u73c8aat9y1JCNwNebjGUIu8gkczFYBuBB/Y/LhKQp1Vpvmlm8e4A ISo78w7sP/XN+epQeE1RObeKlqLdLki2KhSr552UAbov6hdmaBbdUm7DOmW+6TAt x+BqxFVVvjlJrHXoTXed0BKy1yaN4ByJ76IjdSmA8GhP846jFz5n/HQd6rklZDU4 qRJJZAwDTWMB4AynIY4GJTVbmlN/i4VLsTKRp4peaFkrSxjfypjivORYFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIiwylCaU0auyEuKeuDmVbbvHu4pMB8GA1UdIwQY MBaAFHmLy1QypF8lsEEDlnq0A8KdDUMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQt MTFiMjkwNTI1MjhkLzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC81ZDBmYmItYWQ3ZC00YTlhLWIxNzQtMTFiMjkwNTI1Mjhk LzEvZVl2TFZES2tYeVd3UVFPV2VyUUR3cDBOUXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/At5/ha B9khvgtph1Ru2vjwgoxvmFTdmo6QZbAiYZ4DoSbcc52V8XLOJuT+rAEk511jCroK C0Gwcyad3Ac5hAUwASO7VuAQ3g0WsdYrBFfj0Hgat8o5Zdsh57kxIWMvEnQVe/S/ hbfzh7p6e/9eeCd6Rmd2UqhBwcCnX4i4PPl01kNrFhVFmdhYTIQy0Pxkbl8JRngY SbUhuUI8S/J4YKOMDHtJ5thVijaVEb4Pv4OH4M9ZRYWG93a1zjPgc7M1NnAvxd5S gXaMvQAkRawH7je8gPoc4hHqBtBa/1BrwJx5/0onRqwZBCCXaIzXUwtsHAeQCm4p rojHQrwVl9Mo0g== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:25 2025 by rpki-client