This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft File: EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json) Hash identifier: DyJNeHFRy9RiXEWPKGkpW6pymKpqC4o7QSWVtUohvgo= Subject key identifier: 1C:0B:DE:73:9C:BF:C1:A7:52:B9:01:9C:BD:C3:C4:51:48:2C:D9:DD Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 Certificate issuer: /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Certificate serial: 019AF49BFE3EA6205082E7E7DF560BEBA647 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft Manifest number: C7 Signing time: Sat 06 Dec 2025 17:00:55 +0000 Manifest this update: Sat 06 Dec 2025 17:00:55 +0000 Manifest next update: Sun 07 Dec 2025 17:00:55 +0000 Files and hashes: 1: 9rnL1t5Ldor0JB3KN3KrYlnILFc.roa (hash: 00esWyqmIW6yBsmGpeX9QfYrAUi9bLeAI/5cffpcKB8=) 2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: gJfZdp82+A7CeKN9DVet90sJumSduJ6rmpw8t1QDUbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:fe:3e:a6:20:50:82:e7:e7:df:56:0b:eb:a6:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77 Validity Not Before: Dec 6 17:00:55 2025 GMT Not After : Dec 7 17:00:55 2025 GMT Subject: CN=1c0bde739cbfc1a752b9019cbdc3c451482cd9dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:24:c0:86:fa:62:16:96:fc:46:6b:1d:56: 81:64:15:91:49:93:bf:27:1d:c3:12:03:2a:aa:f5: 42:d3:b0:1c:4d:92:e5:eb:ae:f7:ab:e7:21:40:4c: 8f:b8:be:4c:e7:d8:7f:a3:d0:5d:0a:c2:5f:a7:38: fc:25:13:44:f2:76:30:b1:8d:a8:93:28:91:7a:3a: fa:82:3d:62:88:24:f9:e5:22:33:e3:f7:82:30:56: 21:83:dd:d9:1a:dc:4b:d4:6a:94:54:c5:35:f1:ba: 76:ee:40:c1:21:e0:5b:67:9a:f1:69:2a:64:4d:a2: ee:cc:c8:88:bd:e2:ae:0d:53:73:ee:5d:81:b6:51: 27:f3:8f:f7:41:09:0f:6a:be:94:1b:32:36:f1:5f: 5a:41:b8:ea:f8:b8:c8:7c:4b:22:ce:6d:bf:ff:5f: 4d:72:40:f6:6f:5d:7c:5a:6b:b3:87:4f:b9:78:a1: e3:f4:2e:43:c1:5e:64:6c:53:6f:d3:bd:21:ff:a0: 96:63:9c:2f:e9:ed:53:e3:b9:30:08:ec:85:50:84: 62:59:74:34:ad:34:4d:18:f9:f0:a4:65:fd:0d:b2: 21:62:56:91:1a:f2:e1:76:56:3c:b9:de:56:dc:2a: 2f:1a:e7:fe:61:05:dc:52:a9:a3:14:d3:37:f3:7f: 27:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:0B:DE:73:9C:BF:C1:A7:52:B9:01:9C:BD:C3:C4:51:48:2C:D9:DD X509v3 Authority Key Identifier: keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:d6:40:7f:93:3b:97:49:66:dc:8e:9e:b5:fb:9b:6d:8f:34: 62:6f:80:8f:63:f7:2a:a1:11:28:f9:23:c3:bc:5a:8c:ac:6e: 4e:85:f9:ba:47:e6:e2:13:7c:57:a0:8a:8c:8b:20:fc:02:c1: 83:ce:90:de:a3:09:2b:f3:be:e0:33:53:61:9f:82:df:1c:61: 8c:f8:5c:b5:10:02:58:bb:42:96:62:65:33:b6:f4:56:bc:d4: f5:22:19:a2:85:9d:98:0f:b2:bf:c1:a4:0c:6e:d1:62:19:90: 11:23:44:a5:e8:00:ec:5b:a4:1b:78:a6:8b:b9:9e:21:ef:13: d5:dd:ba:0d:e7:79:36:9c:85:a8:f6:1e:27:62:65:2d:2e:64: 07:b1:87:a2:89:64:81:11:2f:dd:07:4a:13:45:a1:7e:a5:62: ee:2d:5c:6c:ae:06:f0:82:06:6c:6d:c7:b0:48:98:e8:ca:6f: 9d:2e:f4:f7:29:69:bd:d5:55:65:dd:90:c4:55:0d:a5:e2:ec: 8c:94:92:d2:de:47:6d:94:c7:dd:c4:cc:51:12:39:1f:2e:c0: 2e:18:05:7a:c4:b3:d5:9a:6d:57:a2:85:2a:52:fe:b3:13:7c: 54:16:c3:8c:ed:99:f0:82:b4:fa:9d:cd:ac:19:5e:a0:f9:79: ef:36:17:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m/4+piBQgufn31YL66ZHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTA1ZGFiYmNmMTRkNTMwMTVhYjhmZjFlNGJkNzI5N2Fj YjBlNzcwHhcNMjUxMjA2MTcwMDU1WhcNMjUxMjA3MTcwMDU1WjAzMTEwLwYDVQQD EygxYzBiZGU3MzljYmZjMWE3NTJiOTAxOWNiZGMzYzQ1MTQ4MmNkOWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BUkwIb6YhaW/EZrHVaBZBWRSZO/ Jx3DEgMqqvVC07AcTZLl6673q+chQEyPuL5M59h/o9BdCsJfpzj8JRNE8nYwsY2o kyiRejr6gj1iiCT55SIz4/eCMFYhg93ZGtxL1GqUVMU18bp27kDBIeBbZ5rxaSpk TaLuzMiIveKuDVNz7l2BtlEn84/3QQkPar6UGzI28V9aQbjq+LjIfEsizm2//19N ckD2b118Wmuzh0+5eKHj9C5DwV5kbFNv070h/6CWY5wv6e1T47kwCOyFUIRiWXQ0 rTRNGPnwpGX9DbIhYlaRGvLhdlY8ud5W3CovGuf+YQXcUqmjFNM3838nFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwL3nOcv8GnUrkBnL3DxFFILNndMB8GA1UdIwQY MBaAFBDgXau88U1TAVq4/x5L1yl6yw53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEt ZTYyM2Q1M2Y4YmIxLzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9hYTRmNGUtMmUwMS00NmVjLTgxZDEtZTYyM2Q1M2Y4YmIx LzEvRU9CZHE3enhUVk1CV3JqX0hrdlhLWHJMRG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhtZAf5M7 l0lm3I6etfubbY80Ym+Aj2P3KqERKPkjw7xajKxuToX5ukfm4hN8V6CKjIsg/ALB g86Q3qMJK/O+4DNTYZ+C3xxhjPhctRACWLtClmJlM7b0VrzU9SIZooWdmA+yv8Gk DG7RYhmQESNEpegA7FukG3imi7meIe8T1d26Ded5NpyFqPYeJ2JlLS5kB7GHoolk gREv3QdKE0WhfqVi7i1cbK4G8IIGbG3HsEiY6MpvnS709ylpvdVVZd2QxFUNpeLs jJSS0t5HbZTH3cTMURI5Hy7ALhgFesSz1ZptV6KFKlL+sxN8VBbDjO2Z8IK0+p3N rBleoPl57zYXEQ== -----END CERTIFICATE-----Generated at Sat Dec 6 22:54:36 2025 by rpki-client