This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json) Hash identifier: Ju+fCCSomah0wzO3m0/lQSM90ZuUPdOE+bidUh+mxbo= Subject key identifier: 5A:1C:A3:98:D5:96:51:90:A7:2A:87:35:3A:01:27:33:EE:2D:A5:F8 Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1 Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1 Certificate serial: 019AF72F1630FCA9D60B010CC023FC96ABD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft Manifest number: 1764 Signing time: Sun 07 Dec 2025 05:00:49 +0000 Manifest this update: Sun 07 Dec 2025 05:00:49 +0000 Manifest next update: Mon 08 Dec 2025 05:00:49 +0000 Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=) 2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: Wxnob84BKixP+UP4oshF+lUH6WD8ebtvBSges1T/jYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:16:30:fc:a9:d6:0b:01:0c:c0:23:fc:96:ab:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1 Validity Not Before: Dec 7 05:00:49 2025 GMT Not After : Dec 8 05:00:49 2025 GMT Subject: CN=5a1ca398d5965190a72a87353a012733ee2da5f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:2d:5b:6e:f2:b0:e4:0e:7e:8a:c1:e2:ef:3b: 7b:90:c1:e0:12:d3:a3:70:4c:27:59:90:c8:7b:b0: e5:96:34:f8:22:de:63:c2:9b:b8:51:6e:63:de:7f: 12:89:36:b2:da:67:dc:7d:5e:05:74:8e:00:a7:95: 40:d9:eb:a4:74:1a:ff:8b:5b:42:c9:28:8e:19:02: a2:f4:ac:d4:3b:ee:ab:fc:4a:dc:4d:a7:1b:6c:05: 79:52:2c:0d:71:4c:2b:cc:35:95:a5:7c:dd:b2:ed: 9e:8b:80:4c:93:e0:eb:8b:34:8c:22:9b:39:68:23: 8c:26:ff:fd:28:b7:35:7b:d2:7d:28:42:11:a8:a2: 14:31:6d:d1:f5:f9:50:d3:04:43:2b:16:44:49:a6: 10:59:19:71:4d:90:2c:21:ad:09:2f:bd:74:b5:b2: b5:82:99:3e:85:f2:50:34:38:a9:3f:dc:0a:51:c7: 34:31:1d:f0:65:93:81:6e:70:fc:60:12:49:96:0f: bc:61:64:27:78:ed:b4:0b:b7:66:3d:70:c7:d2:ad: ef:aa:ef:92:3f:b3:13:4c:9c:c9:7e:a1:d4:0f:b1: 90:e6:e5:67:69:8c:73:a7:0a:2f:b4:fd:99:9c:0b: b0:76:66:2d:23:90:82:fa:40:c8:18:90:6c:9d:db: 31:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:1C:A3:98:D5:96:51:90:A7:2A:87:35:3A:01:27:33:EE:2D:A5:F8 X509v3 Authority Key Identifier: keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:1b:1b:e3:4c:27:2e:fc:8c:af:39:22:59:80:01:50:98:b9: 4c:b9:71:b0:68:53:bb:f4:1f:1b:91:bd:f8:cf:77:a1:6e:ba: 45:11:fb:6e:0f:98:44:0b:82:bd:45:51:88:65:fa:49:57:df: c5:4b:de:5b:d4:67:1d:b5:c2:be:ac:77:ef:a1:0e:ef:08:54: dd:06:e6:2a:e5:d4:62:79:d8:89:e7:32:04:0f:fe:80:36:30: 1a:e6:f6:e9:1d:3d:ec:5b:8e:7f:95:cc:cf:63:d5:27:92:42: 9a:ca:e6:34:54:6c:00:73:27:20:19:d4:2e:5b:3c:7b:0d:7e: 66:39:fc:c0:e1:05:34:01:81:f5:8e:d1:d9:4f:fd:0a:11:ee: b0:48:b4:bf:f4:9d:a6:0c:2d:8e:f0:70:a9:cb:57:42:f1:8f: cf:0c:36:c3:d6:0d:f9:c1:36:e9:cb:f7:c8:54:c9:26:a6:4d: c4:a2:1f:48:32:b5:2c:60:2f:d1:86:29:fd:fb:fc:34:d1:0e: 83:36:21:3d:a1:95:4e:b0:e7:a3:4a:45:2e:ff:3a:86:bc:d4: e7:9e:21:5c:41:94:a7:aa:73:ca:db:dc:15:bb:ca:eb:c0:ac: 6c:d6:38:ff:2a:f3:7b:b7:c1:ae:9a:b9:22:a9:f4:7f:70:5f: 00:53:b6:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3LxYw/KnWCwEMwCP8lqvXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi ZjY1YjEwHhcNMjUxMjA3MDUwMDQ5WhcNMjUxMjA4MDUwMDQ5WjAzMTEwLwYDVQQD Eyg1YTFjYTM5OGQ1OTY1MTkwYTcyYTg3MzUzYTAxMjczM2VlMmRhNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4S1bbvKw5A5+isHi7zt7kMHgEtOj cEwnWZDIe7DlljT4It5jwpu4UW5j3n8SiTay2mfcfV4FdI4Ap5VA2eukdBr/i1tC ySiOGQKi9KzUO+6r/ErcTacbbAV5UiwNcUwrzDWVpXzdsu2ei4BMk+DrizSMIps5 aCOMJv/9KLc1e9J9KEIRqKIUMW3R9flQ0wRDKxZESaYQWRlxTZAsIa0JL710tbK1 gpk+hfJQNDipP9wKUcc0MR3wZZOBbnD8YBJJlg+8YWQneO20C7dmPXDH0q3vqu+S P7MTTJzJfqHUD7GQ5uVnaYxzpwovtP2ZnAuwdmYtI5CC+kDIGJBsndsx0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoco5jVllGQpyqHNToBJzPuLaX4MB8GA1UdIwQY MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt MGQ3YzUyMTU0MTgzLzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRsb40wn LvyMrzkiWYABUJi5TLlxsGhTu/QfG5G9+M93oW66RRH7bg+YRAuCvUVRiGX6SVff xUveW9RnHbXCvqx376EO7whU3QbmKuXUYnnYiecyBA/+gDYwGub26R097FuOf5XM z2PVJ5JCmsrmNFRsAHMnIBnULls8ew1+Zjn8wOEFNAGB9Y7R2U/9ChHusEi0v/Sd pgwtjvBwqctXQvGPzww2w9YN+cE26cv3yFTJJqZNxKIfSDK1LGAv0YYp/fv8NNEO gzYhPaGVTrDno0pFLv86hrzU554hXEGUp6pzytvcFbvK68CsbNY4/yrze7fBrpq5 Iqn0f3BfAFO2uw== -----END CERTIFICATE-----Generated at Sun Dec 7 06:52:57 2025 by rpki-client