This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft File: eP0LaXd70F3N_JiULu3vuwaBKC8.mft (raw, json) Hash identifier: n3zHdTeA/adzPxBrlAebNYWF53MesDEu03OLKEOafeI= Subject key identifier: 6E:18:B4:04:95:47:C3:28:F1:46:3F:89:4F:E0:DA:9A:51:04:D2:55 Authority key identifier: 78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F Certificate issuer: /CN=78fd0b69777bd05dcdfc98942eedefbb0681282f Certificate serial: 019AF276870758EA3F3D3FD86BF4E8D888AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft Manifest number: 0EEF Signing time: Sat 06 Dec 2025 07:00:45 +0000 Manifest this update: Sat 06 Dec 2025 07:00:45 +0000 Manifest next update: Sun 07 Dec 2025 07:00:45 +0000 Files and hashes: 1: eP0LaXd70F3N_JiULu3vuwaBKC8.crl (hash: u1dmsPuSDl8/4o754ems0bUzfIOq3VAVBG1xWw2WPyI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:87:07:58:ea:3f:3d:3f:d8:6b:f4:e8:d8:88:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fd0b69777bd05dcdfc98942eedefbb0681282f Validity Not Before: Dec 6 07:00:45 2025 GMT Not After : Dec 7 07:00:45 2025 GMT Subject: CN=6e18b4049547c328f1463f894fe0da9a5104d255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ee:1d:45:61:18:08:dc:9a:15:06:aa:78:c1: 7d:ea:b4:c7:4b:e2:98:db:ce:a4:dc:a9:07:28:16: 68:be:e8:f9:35:32:64:26:df:f2:cc:03:01:33:6f: a8:45:2e:1e:06:81:6d:01:a3:4a:46:e8:27:26:db: df:fe:c7:0b:1e:ad:3d:f3:57:fb:fa:17:67:de:72: 69:2d:5b:33:fe:01:53:ba:f5:8b:b8:42:01:12:3d: 02:96:88:6e:7e:22:5a:5b:09:12:8e:ed:58:8b:99: d3:22:e3:b3:3c:bc:72:b4:25:60:d0:9e:35:2c:ea: a5:7b:8f:bf:f1:b5:6f:23:06:70:da:8f:70:68:0e: c2:1a:ac:cf:00:58:c9:4c:bf:a3:b3:15:62:a0:8e: d8:9a:11:00:d7:80:69:a6:b8:f4:e5:6e:43:71:50: 5d:3e:cf:ef:f4:b5:b3:e4:70:8c:21:04:8a:da:d1: dd:3e:30:1e:88:18:0e:bd:29:aa:c4:8a:53:c3:a5: e1:c5:f3:55:1f:6b:67:10:14:be:ad:67:5a:8b:20: 9d:84:cc:e6:fc:9c:27:3a:df:4c:72:d5:c0:51:e9: 24:c1:c5:62:2f:e1:e9:85:60:88:dd:27:43:b6:97: 0a:dc:4b:d6:8a:f9:da:b3:08:ca:38:cc:dd:c4:12: 29:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:18:B4:04:95:47:C3:28:F1:46:3F:89:4F:E0:DA:9A:51:04:D2:55 X509v3 Authority Key Identifier: keyid:78:FD:0B:69:77:7B:D0:5D:CD:FC:98:94:2E:ED:EF:BB:06:81:28:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP0LaXd70F3N_JiULu3vuwaBKC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3d3e70-3f88-4698-ba41-95e8728a2577/1/eP0LaXd70F3N_JiULu3vuwaBKC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d6:23:5f:33:40:4a:7d:c7:f5:69:58:2e:5d:fb:14:be:d4: 54:fd:e1:46:4c:e8:eb:5d:8e:26:88:ef:f7:95:ea:65:7b:5c: 26:2a:f4:92:9a:81:6c:35:83:82:ff:2e:2e:67:a0:f9:da:6c: 19:ec:2a:1e:ce:f7:ef:b3:e2:a1:78:ac:74:4c:09:94:c5:1f: 92:c9:1f:05:a0:b9:80:79:5e:51:9a:f2:3f:b5:e4:1b:d6:76: fd:14:2b:2b:9a:ed:df:0c:e0:89:81:96:25:8b:48:5b:92:dc: ef:ff:22:c0:eb:4b:71:dd:5f:fb:51:c6:68:05:34:87:63:02: fc:aa:3b:ce:af:42:5d:ee:7f:a0:79:73:31:e0:96:22:38:6e: bb:cb:41:d9:54:62:a7:45:c3:f3:19:15:47:37:61:88:fa:a5: da:c4:f5:9e:f4:9f:fd:08:8c:7e:81:b2:3c:f9:8e:f3:ae:9d: 58:48:db:de:68:0b:62:c3:21:a8:cd:14:a3:77:25:1c:cd:8c: da:0e:c2:0b:f1:69:d4:ab:d2:55:64:39:dc:b3:f8:42:80:52: ea:9a:ca:8b:98:e4:49:f8:b4:8b:03:42:d4:37:97:03:3c:e7: 5e:87:4b:e0:ad:96:3e:63:a4:78:5f:f7:a7:55:20:1d:48:5a: 87:91:c5:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydocHWOo/PT/Ya/To2IisMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmQwYjY5Nzc3YmQwNWRjZGZjOTg5NDJlZWRlZmJiMDY4 MTI4MmYwHhcNMjUxMjA2MDcwMDQ1WhcNMjUxMjA3MDcwMDQ1WjAzMTEwLwYDVQQD Eyg2ZTE4YjQwNDk1NDdjMzI4ZjE0NjNmODk0ZmUwZGE5YTUxMDRkMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO4dRWEYCNyaFQaqeMF96rTHS+KY 286k3KkHKBZovuj5NTJkJt/yzAMBM2+oRS4eBoFtAaNKRugnJtvf/scLHq0981f7 +hdn3nJpLVsz/gFTuvWLuEIBEj0ClohufiJaWwkSju1Yi5nTIuOzPLxytCVg0J41 LOqle4+/8bVvIwZw2o9waA7CGqzPAFjJTL+jsxVioI7YmhEA14Bpprj05W5DcVBd Ps/v9LWz5HCMIQSK2tHdPjAeiBgOvSmqxIpTw6XhxfNVH2tnEBS+rWdaiyCdhMzm /JwnOt9MctXAUekkwcViL+HphWCI3SdDtpcK3EvWivnaswjKOMzdxBIpAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4YtASVR8Mo8UY/iU/g2ppRBNJVMB8GA1UdIwQY MBaAFHj9C2l3e9BdzfyYlC7t77sGgSgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEt OTVlODcyOGEyNTc3LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zZDNlNzAtM2Y4OC00Njk4LWJhNDEtOTVlODcyOGEyNTc3 LzEvZVAwTGFYZDcwRjNOX0ppVUx1M3Z1d2FCS0M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNYjXzNA Sn3H9WlYLl37FL7UVP3hRkzo612OJojv95XqZXtcJir0kpqBbDWDgv8uLmeg+dps GewqHs7377PioXisdEwJlMUfkskfBaC5gHleUZryP7XkG9Z2/RQrK5rt3wzgiYGW JYtIW5Lc7/8iwOtLcd1f+1HGaAU0h2MC/Ko7zq9CXe5/oHlzMeCWIjhuu8tB2VRi p0XD8xkVRzdhiPql2sT1nvSf/QiMfoGyPPmO866dWEjb3mgLYsMhqM0Uo3clHM2M 2g7CC/Fp1KvSVWQ53LP4QoBS6prKi5jkSfi0iwNC1DeXAzznXodL4K2WPmOkeF/3 p1UgHUhah5HFzg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:53:29 2025 by rpki-client