This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft File: eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft (raw, json) Hash identifier: nnm/St9WXKtPUPlA+xeZZySlbdlTAcHwewfU67Vv/Bk= Subject key identifier: 04:50:DF:E0:07:72:4A:44:69:71:BF:AC:24:A9:8D:03:EF:3C:C8:42 Authority key identifier: 7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D Certificate issuer: /CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Certificate serial: 019AF12D6713ED41B0FA38CD7F8A0E557127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:01:15 +0000 Manifest this update: Sat 06 Dec 2025 01:01:15 +0000 Manifest next update: Sun 07 Dec 2025 01:01:15 +0000 Files and hashes: 1: 0xD3QLVX-qA3FCr0U1Jkwk4eicg.roa (hash: DgMhk8OacC8J3+2qO2tKPU1mCaj5HskLKduZIM0dEVI=) 2: eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl (hash: avoXi3AwPxAcIi5rMEMRNSNVXmTDhJ1e4SDqpTnJKO8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:67:13:ed:41:b0:fa:38:cd:7f:8a:0e:55:71:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a867d2c1a2905d54321f01a710b21ed7abd857d Validity Not Before: Dec 6 01:01:15 2025 GMT Not After : Dec 7 01:01:15 2025 GMT Subject: CN=0450dfe007724a446971bfac24a98d03ef3cc842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:50:a5:f2:61:ab:7d:e9:32:de:0f:4c:6f:63: 7c:ba:4a:72:9f:c1:ff:9a:c4:80:e5:40:36:2f:0b: d1:c5:26:d1:81:6d:eb:a4:22:9a:22:4b:5c:55:d0: 0c:0b:a4:bf:e4:ec:85:81:27:c2:e3:2e:72:08:41: 63:fc:67:5b:ae:7a:ab:4f:2d:7e:df:ec:c7:bc:3b: 87:29:37:1b:41:de:ed:9e:91:f5:92:93:e9:db:41: 69:7b:a0:dc:10:a7:ae:bd:1a:50:7a:8f:86:93:e2: 56:c9:9b:13:2b:c6:5d:71:32:5d:37:55:60:80:7c: f1:64:58:ae:99:ff:df:44:34:37:97:2b:b0:fb:f3: 68:36:66:db:c4:56:6a:34:61:5c:54:b4:94:b9:7e: b4:df:07:90:6f:49:e8:0f:92:d4:54:76:a0:f2:b3: 71:42:bb:ab:27:50:2b:6e:e2:30:2d:69:d5:73:57: 83:36:07:21:99:ef:85:cd:df:47:06:cb:d1:92:fb: 9d:cc:df:94:cb:37:60:17:77:86:11:b3:8f:81:3e: 8f:fd:d4:4c:99:d3:8a:40:5c:62:d5:cf:77:f2:ec: 6f:a3:09:39:32:81:8b:2b:02:ca:f8:fc:3b:ad:f6: 60:27:00:ea:b3:2c:13:17:2b:ac:ea:66:92:50:cd: ce:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:50:DF:E0:07:72:4A:44:69:71:BF:AC:24:A9:8D:03:EF:3C:C8:42 X509v3 Authority Key Identifier: keyid:7A:86:7D:2C:1A:29:05:D5:43:21:F0:1A:71:0B:21:ED:7A:BD:85:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoZ9LBopBdVDIfAacQsh7Xq9hX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/2a773b-efa0-4b40-9861-6d6f558a7d65/1/eoZ9LBopBdVDIfAacQsh7Xq9hX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:9e:ce:b3:df:93:1a:93:a6:e5:49:1b:43:74:ca:3c:e8:3e: 1f:11:aa:9c:02:a2:23:c2:b7:cb:41:32:b8:a2:4c:c0:0f:64: 7f:1d:bc:8d:b6:0c:12:24:5a:65:9f:ae:c8:ac:02:d2:59:61: fa:0b:57:31:12:3f:8c:7c:75:65:3e:38:2d:f4:4c:0c:a1:80: 19:67:76:b2:e1:dc:2d:4d:13:5e:a2:3f:8e:9c:07:a3:78:c7: be:45:27:98:f2:00:17:ac:59:c3:f1:8b:7f:c9:5d:b5:00:b3: e4:97:09:15:93:d1:93:9d:1d:0d:90:63:ae:6e:ba:11:37:eb: bb:ef:be:34:e2:38:27:5e:07:56:fe:83:d8:b0:84:a8:37:a7: a7:92:93:d3:c9:8e:a9:12:74:e2:5e:af:79:31:2b:bb:cf:5d: 34:1c:1f:75:d5:1b:56:ad:85:d1:bd:17:c6:bc:56:4e:90:66: 4e:4c:1c:e7:c0:38:0e:07:e2:77:f2:8d:77:8b:b5:53:fb:3c: a4:9f:1f:bd:cc:11:5c:50:0e:53:f0:61:02:cd:d8:e0:b0:35: c0:5a:cf:44:9b:17:af:c1:2f:5f:be:7d:92:e9:5d:99:a8:1f: fc:cf:3c:93:7c:e3:6c:ae:df:aa:03:d5:56:84:cf:e1:56:f8: 89:c3:b9:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLWcT7UGw+jjNf4oOVXEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODY3ZDJjMWEyOTA1ZDU0MzIxZjAxYTcxMGIyMWVkN2Fi ZDg1N2QwHhcNMjUxMjA2MDEwMTE1WhcNMjUxMjA3MDEwMTE1WjAzMTEwLwYDVQQD EygwNDUwZGZlMDA3NzI0YTQ0Njk3MWJmYWMyNGE5OGQwM2VmM2NjODQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVCl8mGrfeky3g9Mb2N8ukpyn8H/ msSA5UA2LwvRxSbRgW3rpCKaIktcVdAMC6S/5OyFgSfC4y5yCEFj/GdbrnqrTy1+ 3+zHvDuHKTcbQd7tnpH1kpPp20Fpe6DcEKeuvRpQeo+Gk+JWyZsTK8ZdcTJdN1Vg gHzxZFiumf/fRDQ3lyuw+/NoNmbbxFZqNGFcVLSUuX603weQb0noD5LUVHag8rNx QrurJ1ArbuIwLWnVc1eDNgchme+Fzd9HBsvRkvudzN+UyzdgF3eGEbOPgT6P/dRM mdOKQFxi1c938uxvowk5MoGLKwLK+Pw7rfZgJwDqsywTFyus6maSUM3OxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARQ3+AHckpEaXG/rCSpjQPvPMhCMB8GA1UdIwQY MBaAFHqGfSwaKQXVQyHwGnELIe16vYV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEt NmQ2ZjU1OGE3ZDY1LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8yYTc3M2ItZWZhMC00YjQwLTk4NjEtNmQ2ZjU1OGE3ZDY1 LzEvZW9aOUxCb3BCZFZESWZBYWNRc2g3WHE5aFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJ7Os9+T GpOm5UkbQ3TKPOg+HxGqnAKiI8K3y0EyuKJMwA9kfx28jbYMEiRaZZ+uyKwC0llh +gtXMRI/jHx1ZT44LfRMDKGAGWd2suHcLU0TXqI/jpwHo3jHvkUnmPIAF6xZw/GL f8ldtQCz5JcJFZPRk50dDZBjrm66ETfru+++NOI4J14HVv6D2LCEqDenp5KT08mO qRJ04l6veTEru89dNBwfddUbVq2F0b0XxrxWTpBmTkwc58A4Dgfid/KNd4u1U/s8 pJ8fvcwRXFAOU/BhAs3Y4LA1wFrPRJsXr8EvX759kuldmagf/M88k3zjbK7fqgPV VoTP4Vb4icO5qQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:10:41 2025 by rpki-client