This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft File: eWnEvYdneAvsFhoq1hKic128q_0.mft (raw, json) Hash identifier: S02+QGc6EheugE35D/QKnuOEjl6SCoWlvOHOO/KROaQ= Subject key identifier: 18:6F:C1:1E:A4:AE:9A:A7:62:06:41:B3:B5:D5:A5:F6:2F:AA:71:96 Authority key identifier: 79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD Certificate issuer: /CN=7969c4bd8767780bec161a2ad612a2735dbcabfd Certificate serial: 019AF31C99D4E6A900BA2B5BBB13F212D4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft Manifest number: 123D Signing time: Sat 06 Dec 2025 10:02:09 +0000 Manifest this update: Sat 06 Dec 2025 10:02:09 +0000 Manifest next update: Sun 07 Dec 2025 10:02:09 +0000 Files and hashes: 1: EmeWi0SzQb-gJRM1r5HwQ3UJcDY.roa (hash: ZzQ14mR92kysB2/wX3mb4gE3HrBKm2PB/GvS5M1eQpQ=) 2: eWnEvYdneAvsFhoq1hKic128q_0.crl (hash: Vt5Bid1kxiij9Itw5VbmfroRxSH2rrJHlHufuY/d2M0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:99:d4:e6:a9:00:ba:2b:5b:bb:13:f2:12:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7969c4bd8767780bec161a2ad612a2735dbcabfd Validity Not Before: Dec 6 10:02:09 2025 GMT Not After : Dec 7 10:02:09 2025 GMT Subject: CN=186fc11ea4ae9aa7620641b3b5d5a5f62faa7196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:75:ac:cd:ea:c6:7d:67:86:5d:30:f2:29:0c: 38:a0:b3:a1:e8:0e:6d:81:a8:51:2c:af:93:19:f7: 27:2f:fb:2f:a3:ed:1b:05:ff:e2:8b:e4:a0:70:5f: ba:95:a1:20:9f:cd:34:bc:b4:35:99:fa:36:0b:ce: 22:fc:38:5f:9c:2a:9d:bb:13:11:78:19:a8:d7:4a: 82:36:65:ea:22:90:e3:94:e7:5b:0f:b6:2a:ce:ba: a4:85:82:31:f2:05:d3:02:c8:9b:d1:c4:d2:3f:8b: 90:48:80:9a:32:eb:9c:0b:75:a5:67:19:2b:3a:a7: 83:4a:a4:5f:eb:9a:75:66:1a:86:21:d4:bb:74:7f: 9a:4d:a0:45:01:93:79:e7:9d:90:2a:14:e0:94:51: 9b:f0:c7:a5:b5:65:dd:e4:d7:ab:dc:38:5b:2e:42: f2:c2:df:18:c1:7d:53:9f:e9:a5:85:2c:0f:33:63: e4:cf:ee:f3:45:b3:8c:2c:95:c0:28:1a:b3:ce:dd: 32:63:d0:ff:76:f2:fc:10:a9:2e:f5:f8:8c:13:7d: a2:62:2b:93:26:80:41:2f:93:40:18:bd:0c:39:67: d4:a3:1c:d9:ad:a6:95:6b:06:72:fe:58:b6:8e:bb: a2:2a:0c:8d:04:0f:ea:18:13:b8:97:0a:67:56:2c: da:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:6F:C1:1E:A4:AE:9A:A7:62:06:41:B3:B5:D5:A5:F6:2F:AA:71:96 X509v3 Authority Key Identifier: keyid:79:69:C4:BD:87:67:78:0B:EC:16:1A:2A:D6:12:A2:73:5D:BC:AB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eWnEvYdneAvsFhoq1hKic128q_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/de388b-9bea-48e9-965f-0e8ddd691f63/1/eWnEvYdneAvsFhoq1hKic128q_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:d3:52:8d:cb:fb:bc:55:8d:e7:b6:3c:c0:c0:5f:db:3d:e0: ec:8b:9f:44:e7:39:86:ca:4c:d3:02:b9:e9:23:a4:85:d4:bd: 03:13:01:bf:e0:9d:ab:4f:6a:d5:19:52:c4:ef:46:b4:82:65: 36:af:04:b9:3b:40:2c:ae:24:7c:86:be:ec:15:3b:e3:5b:63: 06:0b:53:10:96:a6:92:4e:3f:eb:29:db:48:ef:49:f8:9f:d8: 31:23:b3:2f:9b:39:1e:b5:29:6d:1f:23:80:25:50:7d:ca:df: df:79:92:11:ee:17:12:5d:0e:94:7a:3a:6c:65:61:a4:90:41: 21:37:16:ff:e4:42:d4:21:e1:47:dd:0f:67:ee:2d:f9:f7:6c: dd:44:a6:25:db:18:e1:4e:3b:9e:c3:7e:9f:50:8c:19:2e:f6: fb:b1:50:4d:6b:c3:d2:01:b7:d7:56:0c:6d:bb:fc:46:af:97: 6d:c2:8d:49:86:b8:4f:44:e9:f1:7a:71:f9:ca:98:9d:19:11: b5:d0:1d:0c:52:d2:f1:56:d1:fa:9d:72:80:44:57:fa:f5:9f: 3b:0f:47:08:56:b5:34:aa:0e:21:a7:a8:23:a0:32:19:c0:f9: d8:10:b9:82:9c:65:c5:17:36:b4:57:a5:4a:b5:e9:aa:f0:91: df:2f:28:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHJnU5qkAuitbuxPyEtSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NjljNGJkODc2Nzc4MGJlYzE2MWEyYWQ2MTJhMjczNWRi Y2FiZmQwHhcNMjUxMjA2MTAwMjA5WhcNMjUxMjA3MTAwMjA5WjAzMTEwLwYDVQQD EygxODZmYzExZWE0YWU5YWE3NjIwNjQxYjNiNWQ1YTVmNjJmYWE3MTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHWszerGfWeGXTDyKQw4oLOh6A5t gahRLK+TGfcnL/svo+0bBf/ii+SgcF+6laEgn800vLQ1mfo2C84i/DhfnCqduxMR eBmo10qCNmXqIpDjlOdbD7YqzrqkhYIx8gXTAsib0cTSP4uQSICaMuucC3WlZxkr OqeDSqRf65p1ZhqGIdS7dH+aTaBFAZN5552QKhTglFGb8MeltWXd5Ner3DhbLkLy wt8YwX1Tn+mlhSwPM2Pkz+7zRbOMLJXAKBqzzt0yY9D/dvL8EKku9fiME32iYiuT JoBBL5NAGL0MOWfUoxzZraaVawZy/li2jruiKgyNBA/qGBO4lwpnVizaLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBhvwR6krpqnYgZBs7XVpfYvqnGWMB8GA1UdIwQY MBaAFHlpxL2HZ3gL7BYaKtYSonNdvKv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYt MGU4ZGRkNjkxZjYzLzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9kZTM4OGItOWJlYS00OGU5LTk2NWYtMGU4ZGRkNjkxZjYz LzEvZVduRXZZZG5lQXZzRmhvcTFoS2ljMTI4cV8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEActNSjcv7 vFWN57Y8wMBf2z3g7IufROc5hspM0wK56SOkhdS9AxMBv+Cdq09q1RlSxO9GtIJl Nq8EuTtALK4kfIa+7BU741tjBgtTEJamkk4/6ynbSO9J+J/YMSOzL5s5HrUpbR8j gCVQfcrf33mSEe4XEl0OlHo6bGVhpJBBITcW/+RC1CHhR90PZ+4t+fds3USmJdsY 4U47nsN+n1CMGS72+7FQTWvD0gG311YMbbv8Rq+XbcKNSYa4T0Tp8Xpx+cqYnRkR tdAdDFLS8VbR+p1ygERX+vWfOw9HCFa1NKoOIaeoI6AyGcD52BC5gpxlxRc2tFel SrXpqvCR3y8oDg== -----END CERTIFICATE-----Generated at Sat Dec 6 15:55:08 2025 by rpki-client