This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft File: eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft (raw, json) Hash identifier: L92sxHE/u7Iotk8UBBDihynGom73UQO1z4I7tGxiPwM= Subject key identifier: 71:D4:29:EA:35:08:BD:0F:6C:39:4D:97:16:AF:CB:4F:E3:FA:AF:70 Authority key identifier: 7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1 Certificate issuer: /CN=7a80fe5635e6d65cede93b23d4e101d4075337a1 Certificate serial: 019AF352C819F53DE8ED366E2E1AC1A64D39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft Manifest number: 0202 Signing time: Sat 06 Dec 2025 11:01:19 +0000 Manifest this update: Sat 06 Dec 2025 11:01:19 +0000 Manifest next update: Sun 07 Dec 2025 11:01:19 +0000 Files and hashes: 1: 6UgRSurDsC4U_Z-coy4m9ck_PTE.roa (hash: Gc7vGClKENwmv400RX8IX+GSl1SNec8S1cBZiJZAltM=) 2: eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl (hash: AlM1bRZtxi3YZFvOxwupfMj+1RRscJ3xat70Djpo6VM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c8:19:f5:3d:e8:ed:36:6e:2e:1a:c1:a6:4d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a80fe5635e6d65cede93b23d4e101d4075337a1 Validity Not Before: Dec 6 11:01:19 2025 GMT Not After : Dec 7 11:01:19 2025 GMT Subject: CN=71d429ea3508bd0f6c394d9716afcb4fe3faaf70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a5:8c:de:3d:b7:c1:48:5d:ae:56:3d:d6:85: 78:53:48:09:de:9d:69:f4:bc:0e:13:ac:2c:59:70: 96:b3:27:ed:71:d6:5a:3b:f3:4b:b2:c8:a6:61:dc: 26:4a:4b:a2:b7:12:a0:b3:cc:51:39:ed:67:86:a8: ee:4d:c9:d4:49:26:63:1f:34:8c:a5:74:19:79:87: 86:6c:f7:3b:42:8f:fc:ff:5d:fb:e2:de:c9:24:51: 02:bb:76:0b:5a:75:98:2e:c9:0b:ab:6a:4f:cd:77: ca:d8:91:66:71:32:82:6b:83:fb:da:c8:51:c6:2b: 67:be:fa:02:97:15:ea:9b:d4:41:00:cf:c0:da:44: f0:38:c8:2f:b9:e0:92:66:79:e6:87:d1:45:c1:a7: 33:50:62:46:c1:93:a5:a3:6c:a9:f6:e8:39:1e:c5: d1:4a:d4:a9:51:f5:76:0b:e8:df:05:6e:11:1f:0f: 6d:6c:6d:47:33:89:a9:4e:63:61:76:17:47:61:80: 94:e9:b7:52:7e:b6:2a:3f:03:e6:bc:a6:ce:88:a0: 0b:4d:75:6f:ba:0a:02:28:42:6b:05:ef:18:dd:a5: 8e:c9:04:48:98:cf:08:b5:8b:c2:bc:64:26:2e:6c: 38:27:37:5d:7c:21:3c:38:1c:62:db:25:9b:c0:c5: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D4:29:EA:35:08:BD:0F:6C:39:4D:97:16:AF:CB:4F:E3:FA:AF:70 X509v3 Authority Key Identifier: keyid:7A:80:FE:56:35:E6:D6:5C:ED:E9:3B:23:D4:E1:01:D4:07:53:37:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/6f08a7-3d2c-4f83-9861-3281c0e8e9fe/1/eoD-VjXm1lzt6Tsj1OEB1AdTN6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:ee:b9:d3:ce:db:38:a2:d5:50:5b:81:d2:81:78:e1:26:be: ac:b6:ae:e3:69:c4:08:1c:95:cf:a6:91:69:26:ed:19:15:18: 1d:2e:96:cc:69:fe:d4:5d:f9:02:c1:96:cb:f4:89:c8:55:e1: dd:13:fe:6e:3b:a5:6b:e8:ab:00:7f:a5:fe:7d:5e:ed:f1:3b: d2:85:4b:3e:f9:fc:31:fd:dd:75:d3:68:4d:69:c2:91:82:96: 08:9a:d0:51:86:4d:92:56:66:e5:8b:94:76:62:13:93:aa:ed: ec:67:02:45:49:ac:22:30:71:68:c6:f1:8b:15:06:78:fa:c9: ac:1b:92:55:31:28:20:ca:21:73:19:86:c0:56:81:d1:86:cc: 56:33:37:56:01:32:1f:2d:cb:ad:8e:5c:76:5c:58:db:42:40: 0e:47:1b:2f:80:b9:25:b1:ec:a0:10:02:8d:d1:7f:c7:b0:b8: 01:32:f9:1b:d9:a1:04:ce:0d:b0:77:38:f3:cf:4b:6c:ad:0f: d7:18:7e:4a:9f:2d:64:d7:ad:88:45:37:7f:ef:99:18:47:8c: 0c:e2:2f:d7:5d:16:4b:04:db:e6:ca:1c:0c:06:55:fb:3b:d1: 57:78:2c:fc:ab:38:e2:38:f6:da:d2:64:eb:3f:ff:70:14:a6: 5a:f9:5e:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsgZ9T3o7TZuLhrBpk05MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODBmZTU2MzVlNmQ2NWNlZGU5M2IyM2Q0ZTEwMWQ0MDc1 MzM3YTEwHhcNMjUxMjA2MTEwMTE5WhcNMjUxMjA3MTEwMTE5WjAzMTEwLwYDVQQD Eyg3MWQ0MjllYTM1MDhiZDBmNmMzOTRkOTcxNmFmY2I0ZmUzZmFhZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKWM3j23wUhdrlY91oV4U0gJ3p1p 9LwOE6wsWXCWsyftcdZaO/NLssimYdwmSkuitxKgs8xROe1nhqjuTcnUSSZjHzSM pXQZeYeGbPc7Qo/8/1374t7JJFECu3YLWnWYLskLq2pPzXfK2JFmcTKCa4P72shR xitnvvoClxXqm9RBAM/A2kTwOMgvueCSZnnmh9FFwaczUGJGwZOlo2yp9ug5HsXR StSpUfV2C+jfBW4RHw9tbG1HM4mpTmNhdhdHYYCU6bdSfrYqPwPmvKbOiKALTXVv ugoCKEJrBe8Y3aWOyQRImM8ItYvCvGQmLmw4JzddfCE8OBxi2yWbwMV3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHUKeo1CL0PbDlNlxavy0/j+q9wMB8GA1UdIwQY MBaAFHqA/lY15tZc7ek7I9ThAdQHUzehMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEt MzI4MWMwZThlOWZlLzEvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS82ZjA4YTctM2QyYy00ZjgzLTk4NjEtMzI4MWMwZThlOWZl LzEvZW9ELVZqWG0xbHp0NlRzajFPRUIxQWRUTjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO65087b OKLVUFuB0oF44Sa+rLau42nECByVz6aRaSbtGRUYHS6WzGn+1F35AsGWy/SJyFXh 3RP+bjula+irAH+l/n1e7fE70oVLPvn8Mf3dddNoTWnCkYKWCJrQUYZNklZm5YuU dmITk6rt7GcCRUmsIjBxaMbxixUGePrJrBuSVTEoIMohcxmGwFaB0YbMVjM3VgEy Hy3LrY5cdlxY20JADkcbL4C5JbHsoBACjdF/x7C4ATL5G9mhBM4NsHc4889LbK0P 1xh+Sp8tZNetiEU3f++ZGEeMDOIv110WSwTb5socDAZV+zvRV3gs/Ks44jj22tJk 6z//cBSmWvleHg== -----END CERTIFICATE-----Generated at Sat Dec 6 21:06:21 2025 by rpki-client