This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft File: eJaox-m6CdLx1EhjZwviE_wMohA.mft (raw, json) Hash identifier: LchJNaRNIYj/1sdwiHsEM7XGY9thJSjlg5H7YX0QqKc= Subject key identifier: 33:5B:62:40:7D:FF:89:84:6D:09:C3:35:08:3D:5B:32:E2:5B:61:FD Authority key identifier: 78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10 Certificate issuer: /CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210 Certificate serial: 019AF0BEEA3D5D19C13FBBC22596C8E6CB2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft Manifest number: 0309 Signing time: Fri 05 Dec 2025 23:00:34 +0000 Manifest this update: Fri 05 Dec 2025 23:00:34 +0000 Manifest next update: Sat 06 Dec 2025 23:00:34 +0000 Files and hashes: 1: eJaox-m6CdLx1EhjZwviE_wMohA.crl (hash: oRzQWXkurfK4gntRXcbKkbGmXaXu9oXMgliHGetdD+0=) 2: wduzAoCV3X_HT3SwkAkhVbUpjvk.roa (hash: xcQexB5syiRJfDRPxaM63gktKvSVatGww4DJIDGRPJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:be:ea:3d:5d:19:c1:3f:bb:c2:25:96:c8:e6:cb:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7896a8c7e9ba09d2f1d44863670be213fc0ca210 Validity Not Before: Dec 5 23:00:34 2025 GMT Not After : Dec 6 23:00:34 2025 GMT Subject: CN=335b62407dff89846d09c335083d5b32e25b61fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:82:dd:71:75:fa:ef:fe:d7:f3:ba:a9:8c: fd:6f:58:ec:09:a9:e6:27:8e:97:ed:5f:c8:48:bb: 04:b3:b5:70:b6:1b:bd:db:a1:cc:7a:e3:3a:b5:62: 4d:c1:9e:5e:0d:79:1f:e5:c6:c3:72:c9:79:42:5b: 2c:b4:96:a2:ad:38:75:2c:b9:cc:69:27:16:e2:68: 06:f8:53:7e:0b:b2:fd:f8:d1:2f:09:3d:cd:51:dc: c6:6a:5e:7d:bf:b0:bb:4e:c8:7a:75:fa:aa:1c:20: 09:3a:6e:da:2b:7a:7d:8e:e7:e6:4e:8e:2e:b0:89: 8f:7b:42:5a:1b:f5:0e:1a:19:10:3a:0b:a2:87:d7: 03:bd:8d:2d:f4:71:08:bf:d5:4e:7f:d0:40:49:e7: 88:1a:56:f0:bb:92:1f:a6:2f:a4:fd:a7:33:5a:3a: ff:85:fd:31:cc:b7:5f:06:06:62:2d:ba:59:0a:6a: f4:bd:ec:eb:49:73:49:61:51:4a:a1:a5:d6:e9:d0: 08:db:74:23:b5:3a:82:e0:4a:6f:34:cb:ab:f6:a5: 88:a9:7f:70:a1:47:c6:6e:be:43:0e:51:d0:0e:40: 8b:7d:cc:48:c8:78:6c:fa:34:b1:bf:76:9f:3d:53: a2:ce:97:f3:cd:f4:6b:64:d4:57:20:72:f4:96:87: c9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:5B:62:40:7D:FF:89:84:6D:09:C3:35:08:3D:5B:32:E2:5B:61:FD X509v3 Authority Key Identifier: keyid:78:96:A8:C7:E9:BA:09:D2:F1:D4:48:63:67:0B:E2:13:FC:0C:A2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJaox-m6CdLx1EhjZwviE_wMohA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/090d42-b5f7-4cfe-bd6c-6178dbfff555/1/eJaox-m6CdLx1EhjZwviE_wMohA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:76:d5:8b:a3:a1:d1:24:2d:d4:8c:4f:f8:1a:f1:18:90:14: 27:c4:ec:23:47:15:23:12:e2:9c:d4:ff:56:c4:21:2f:aa:36: 38:aa:83:e9:29:7c:33:a0:b6:2a:f8:c6:6c:14:5a:91:d7:4b: 3d:48:34:19:e5:31:ed:76:04:89:03:62:37:d5:05:06:dc:9c: 14:d4:4d:6b:8b:1b:fa:70:aa:2f:5e:54:38:23:52:8d:0f:42: f2:16:02:e1:89:d5:a7:38:bb:82:5e:51:1e:fd:68:8f:c6:7f: eb:d0:f4:3c:43:74:85:cc:b2:39:76:52:14:62:e2:cf:dd:0a: 88:9f:86:79:4e:1b:38:61:1a:22:3b:7e:51:23:a9:7b:22:25: b9:b5:c9:c3:cc:ef:e2:94:50:56:0b:97:b4:6d:41:63:74:db: 94:b9:cc:e8:96:ae:b7:4f:b2:54:3e:81:f4:f3:67:5a:2b:67: b7:54:ad:9e:03:39:fc:ee:67:8a:f8:ab:c4:76:b1:61:93:2f: f4:a8:37:1f:29:b7:bd:62:14:24:bc:fb:79:b7:5d:8f:a5:f9: 13:a4:27:4d:26:fd:8d:49:86:8f:d7:9a:db:33:15:e1:ab:83: fa:d8:6f:a6:0e:f4:d2:ac:31:5a:9c:cd:30:cb:5e:7a:0b:8e: dd:44:c7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvuo9XRnBP7vCJZbI5ssuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTZhOGM3ZTliYTA5ZDJmMWQ0NDg2MzY3MGJlMjEzZmMw Y2EyMTAwHhcNMjUxMjA1MjMwMDM0WhcNMjUxMjA2MjMwMDM0WjAzMTEwLwYDVQQD EygzMzViNjI0MDdkZmY4OTg0NmQwOWMzMzUwODNkNWIzMmUyNWI2MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzciC3XF1+u/+1/O6qYz9b1jsCanm J46X7V/ISLsEs7Vwthu926HMeuM6tWJNwZ5eDXkf5cbDcsl5QlsstJairTh1LLnM aScW4mgG+FN+C7L9+NEvCT3NUdzGal59v7C7Tsh6dfqqHCAJOm7aK3p9jufmTo4u sImPe0JaG/UOGhkQOguih9cDvY0t9HEIv9VOf9BASeeIGlbwu5Ifpi+k/aczWjr/ hf0xzLdfBgZiLbpZCmr0vezrSXNJYVFKoaXW6dAI23QjtTqC4EpvNMur9qWIqX9w oUfGbr5DDlHQDkCLfcxIyHhs+jSxv3afPVOizpfzzfRrZNRXIHL0lofJ5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNbYkB9/4mEbQnDNQg9WzLiW2H9MB8GA1UdIwQY MBaAFHiWqMfpugnS8dRIY2cL4hP8DKIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMt NjE3OGRiZmZmNTU1LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8wOTBkNDItYjVmNy00Y2ZlLWJkNmMtNjE3OGRiZmZmNTU1 LzEvZUphb3gtbTZDZEx4MUVoalp3dmlFX3dNb2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvnbVi6Oh 0SQt1IxP+BrxGJAUJ8TsI0cVIxLinNT/VsQhL6o2OKqD6Sl8M6C2KvjGbBRakddL PUg0GeUx7XYEiQNiN9UFBtycFNRNa4sb+nCqL15UOCNSjQ9C8hYC4YnVpzi7gl5R Hv1oj8Z/69D0PEN0hcyyOXZSFGLiz90KiJ+GeU4bOGEaIjt+USOpeyIlubXJw8zv 4pRQVguXtG1BY3TblLnM6Jaut0+yVD6B9PNnWitnt1StngM5/O5nivirxHaxYZMv 9Kg3Hym3vWIUJLz7ebddj6X5E6QnTSb9jUmGj9ea2zMV4auD+thvpg700qwxWpzN MMteeguO3UTHQg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:00:41 2025 by rpki-client