This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json) Hash identifier: cpC9m6Jjm3hg1vul/AKt98SgUT0h3Ng3II/YlFInBoU= Subject key identifier: 28:08:82:ED:9A:84:B6:B6:3C:3B:B3:B6:16:4A:39:0A:A9:BB:1E:21 Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519 Certificate serial: 019AF23FC1D83CFE147DB926EE36D80B5D0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 06:00:55 +0000 Manifest this update: Sat 06 Dec 2025 06:00:55 +0000 Manifest next update: Sun 07 Dec 2025 06:00:55 +0000 Files and hashes: 1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: E47lu6dQfbiz1KMXIqXZGptjkLxXZRj56bKA1ZL1OIs=) 2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:c1:d8:3c:fe:14:7d:b9:26:ee:36:d8:0b:5d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519 Validity Not Before: Dec 6 06:00:55 2025 GMT Not After : Dec 7 06:00:55 2025 GMT Subject: CN=280882ed9a84b6b63c3bb3b6164a390aa9bb1e21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:49:ef:0e:c0:31:79:0d:db:71:54:be:a0:39: 1c:1e:28:bc:ce:82:c4:3e:a0:42:2c:7f:22:71:54: ee:4b:6c:56:3a:9c:73:c7:02:03:16:af:0e:6a:5d: 93:69:8a:b2:be:74:a6:62:09:57:c9:a9:57:f4:bb: 93:b2:6b:4e:fb:36:e7:72:15:b8:56:8d:ec:77:bb: c4:6b:4d:dd:72:4c:ad:6a:a9:e1:52:76:c3:72:cb: 41:a8:d2:e0:69:41:d6:e5:ec:f6:15:b2:16:55:f5: 22:68:c3:c4:5d:c1:f8:eb:61:b5:b2:32:e8:fb:7a: 8e:f3:20:92:7a:4d:85:52:98:a8:44:fb:eb:db:88: 9a:a9:cb:e9:24:8f:4e:27:31:52:2c:5b:2c:52:15: 5f:a8:10:dd:f0:e0:37:db:7b:1c:ab:b4:27:92:25: 07:cb:78:24:f1:66:3f:05:cf:6b:f3:ea:6d:18:c8: 68:28:65:0f:67:f3:38:fc:8d:ee:eb:88:2c:cb:0e: 89:65:04:64:54:5d:34:a3:38:1a:ba:17:99:b9:97: 63:22:de:72:37:e4:99:15:60:2b:b9:e5:9f:00:e7: e4:75:cc:66:ba:6d:2c:aa:fc:57:c3:bd:a7:5c:da: 26:0a:ad:c3:c3:c9:0d:90:4d:93:6f:0e:dd:2b:b5: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:08:82:ED:9A:84:B6:B6:3C:3B:B3:B6:16:4A:39:0A:A9:BB:1E:21 X509v3 Authority Key Identifier: keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:5d:be:ff:c6:70:2e:00:74:7b:bf:65:06:94:26:df:f1:72: b8:1a:56:99:1c:6e:d2:22:f0:c8:a0:f1:1b:22:ca:e6:d6:63: 8b:da:c2:a5:aa:5c:e4:ca:e1:ff:a5:10:75:82:e3:17:e5:a5: 80:bb:a5:af:0b:17:26:b2:eb:3a:af:4d:cb:aa:4e:41:47:c7: 60:68:e5:3c:f1:7c:aa:10:0f:33:ab:aa:67:d0:b6:d4:e8:d4: ab:7c:b2:b6:6d:ad:16:c7:dc:39:2f:dd:81:ab:2f:6f:10:34: e1:c6:84:66:38:ed:f0:d6:75:a6:d0:57:ea:90:ee:75:0d:49: c3:e6:da:f5:b2:83:5c:bd:8f:29:dc:3b:9b:9a:3d:3a:5b:34: d7:c5:59:33:50:60:76:a5:53:b3:2a:df:b8:44:28:b4:81:11: 41:b9:98:41:72:5a:8a:d8:a6:53:c6:3d:17:0b:84:ad:ca:20: d4:3f:10:78:fc:b5:de:d4:0e:4e:69:34:d7:8f:78:fb:29:34: e5:0f:1c:3c:a6:74:58:b0:82:e8:27:75:a4:21:6a:70:c4:58: 64:bc:c8:cf:37:fa:28:99:db:91:07:16:d8:87:a8:3b:15:c3: 66:e1:64:25:ba:11:ea:f0:7a:51:49:49:41:69:ce:7d:47:25: 67:9a:9f:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP8HYPP4Ufbkm7jbYC10NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGI4NWI1MWUzM2RmMGM2OTRkYmQ3N2JjOGMyYmEzZWFi NGQ1MTkwHhcNMjUxMjA2MDYwMDU1WhcNMjUxMjA3MDYwMDU1WjAzMTEwLwYDVQQD EygyODA4ODJlZDlhODRiNmI2M2MzYmIzYjYxNjRhMzkwYWE5YmIxZTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6EnvDsAxeQ3bcVS+oDkcHii8zoLE PqBCLH8icVTuS2xWOpxzxwIDFq8Oal2TaYqyvnSmYglXyalX9LuTsmtO+zbnchW4 Vo3sd7vEa03dckytaqnhUnbDcstBqNLgaUHW5ez2FbIWVfUiaMPEXcH462G1sjLo +3qO8yCSek2FUpioRPvr24iaqcvpJI9OJzFSLFssUhVfqBDd8OA323scq7QnkiUH y3gk8WY/Bc9r8+ptGMhoKGUPZ/M4/I3u64gsyw6JZQRkVF00ozgauheZuZdjIt5y N+SZFWArueWfAOfkdcxmum0sqvxXw72nXNomCq3Dw8kNkE2Tbw7dK7WeYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgIgu2ahLa2PDuzthZKOQqpux4hMB8GA1UdIwQY MBaAFHmLhbUeM98MaU29d7yMK6PqtNUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEt OTQwZGZiOTYxNjMwLzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEtOTQwZGZiOTYxNjMw LzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdF2+/8Zw LgB0e79lBpQm3/FyuBpWmRxu0iLwyKDxGyLK5tZji9rCpapc5Mrh/6UQdYLjF+Wl gLulrwsXJrLrOq9Ny6pOQUfHYGjlPPF8qhAPM6uqZ9C21OjUq3yytm2tFsfcOS/d gasvbxA04caEZjjt8NZ1ptBX6pDudQ1Jw+ba9bKDXL2PKdw7m5o9Ols018VZM1Bg dqVTsyrfuEQotIERQbmYQXJaitimU8Y9FwuErcog1D8QePy13tQOTmk01494+yk0 5Q8cPKZ0WLCC6Cd1pCFqcMRYZLzIzzf6KJnbkQcW2IeoOxXDZuFkJboR6vB6UUlJ QWnOfUclZ5qf6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:55 2025 by rpki-client