This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft File: eOe6jAiFO-VUxZTe0VammD66EFU.mft (raw, json) Hash identifier: 0wBhQu9nEOv/Isjgl9LrgJiIIXc3/hRCdnycdezkJCE= Subject key identifier: BE:AB:3F:03:E8:27:65:DE:6D:B0:BE:98:DF:37:CC:7A:31:33:1F:EF Authority key identifier: 78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 Certificate issuer: /CN=78e7ba8c08853be554c594ded156a6983eba1055 Certificate serial: 019AF540BE8160812111F9D18212B8FE5324 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft Manifest number: 1400 Signing time: Sat 06 Dec 2025 20:00:52 +0000 Manifest this update: Sat 06 Dec 2025 20:00:52 +0000 Manifest next update: Sun 07 Dec 2025 20:00:52 +0000 Files and hashes: 1: PBFDNtiQmYI8zGG7kl8kQ6QSo3w.roa (hash: Zn4dyGMYJbfaJjvxLWrM7du9HmyBjKhPRokK9xNb0s0=) 2: eOe6jAiFO-VUxZTe0VammD66EFU.crl (hash: kdB+irK3D5ad61yOyIAi+V42EtRfNP7OIUWO19yr2EU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:be:81:60:81:21:11:f9:d1:82:12:b8:fe:53:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78e7ba8c08853be554c594ded156a6983eba1055 Validity Not Before: Dec 6 20:00:52 2025 GMT Not After : Dec 7 20:00:52 2025 GMT Subject: CN=beab3f03e82765de6db0be98df37cc7a31331fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4a:d8:8b:ea:46:83:fc:d9:2d:a1:d5:a6:36: 7c:1a:e6:c5:25:56:2e:f1:55:c8:e2:3c:9a:61:e5: a3:fa:55:c4:db:1a:cb:3a:a6:8d:04:e2:34:80:62: 29:3a:6b:a8:4c:6b:3b:eb:ed:5f:20:36:22:f6:af: 79:69:77:cf:48:95:57:54:e3:95:a5:92:3b:3c:ab: e9:0b:22:e6:05:41:76:7d:c4:0c:77:da:b0:d0:72: 2e:de:d2:ab:b6:83:7f:1d:ed:0d:ba:b3:8a:fc:42: b0:90:12:72:d7:86:e3:25:1a:49:6e:c3:5a:48:d2: b2:b2:9b:a1:d3:f3:5a:ff:03:bf:52:bb:c9:d7:59: 51:f1:f4:7f:95:f0:1b:c8:00:db:ec:da:e4:1a:cc: ce:0a:7c:ca:26:c5:c5:bc:ae:1d:87:d0:2b:9d:ef: cb:33:2c:e5:ae:ea:02:e2:d0:e6:22:bc:50:83:6f: d7:50:b8:3f:f9:14:ec:4c:e1:b6:b4:f3:d3:69:13: 27:7a:90:9d:14:0d:15:8a:b0:a2:8b:30:93:2e:35: 4f:a9:1e:4a:75:7f:88:fe:47:e0:37:6a:8b:75:d0: 7f:1d:b8:0c:6c:a3:3a:d1:9b:d3:b5:c9:71:93:3d: 1b:63:d9:f6:d4:16:51:05:fc:2c:a1:8d:76:31:0b: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AB:3F:03:E8:27:65:DE:6D:B0:BE:98:DF:37:CC:7A:31:33:1F:EF X509v3 Authority Key Identifier: keyid:78:E7:BA:8C:08:85:3B:E5:54:C5:94:DE:D1:56:A6:98:3E:BA:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOe6jAiFO-VUxZTe0VammD66EFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/325481-5ce6-456e-94a2-5eaf9e10d85c/1/eOe6jAiFO-VUxZTe0VammD66EFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:57:6d:06:0b:b6:7f:92:00:07:e4:68:d8:12:e5:f6:02:b7: 05:94:80:e5:2b:c5:6b:76:27:08:ab:36:14:b5:d5:cc:aa:17: ab:5a:d1:b6:9a:6e:96:a7:10:6a:c9:ae:50:c0:39:70:28:4e: 08:a5:33:f7:31:d0:07:99:7b:0b:b1:78:bb:90:1d:87:e0:7e: dd:25:ff:89:e7:bf:50:f7:eb:75:cf:eb:a5:a5:e2:a6:0d:55: b4:7a:a3:e3:d5:41:3c:57:4d:1f:e6:16:eb:6a:3b:b6:69:01: c2:e3:95:3f:81:87:b2:d4:c5:4a:91:27:32:2b:e7:85:8f:f5: 3c:ca:d6:e4:95:fb:f4:5f:16:3a:c7:c0:af:a5:0a:cc:35:5f: 71:e9:cc:6b:ab:14:0d:5f:b3:be:a3:2b:b8:27:c3:34:28:cd: 94:18:2b:43:01:87:4f:96:87:a4:33:a2:a5:f9:93:c0:40:65: 4f:62:00:09:aa:3c:87:85:d8:58:d9:c9:e9:56:d8:f3:6b:3f: 12:ce:c9:29:16:c6:17:66:af:b5:ca:d9:c6:e2:96:7a:34:a5: 07:e9:3b:6d:6e:3b:b8:20:7a:78:d7:a1:b8:8c:5a:95:c5:5f: a1:50:30:71:79:d9:b6:b6:3d:98:5e:02:bf:28:bd:31:d3:d9: a1:50:11:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QL6BYIEhEfnRghK4/lMkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZTdiYThjMDg4NTNiZTU1NGM1OTRkZWQxNTZhNjk4M2Vi YTEwNTUwHhcNMjUxMjA2MjAwMDUyWhcNMjUxMjA3MjAwMDUyWjAzMTEwLwYDVQQD EyhiZWFiM2YwM2U4Mjc2NWRlNmRiMGJlOThkZjM3Y2M3YTMxMzMxZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUrYi+pGg/zZLaHVpjZ8GubFJVYu 8VXI4jyaYeWj+lXE2xrLOqaNBOI0gGIpOmuoTGs76+1fIDYi9q95aXfPSJVXVOOV pZI7PKvpCyLmBUF2fcQMd9qw0HIu3tKrtoN/He0NurOK/EKwkBJy14bjJRpJbsNa SNKyspuh0/Na/wO/UrvJ11lR8fR/lfAbyADb7NrkGszOCnzKJsXFvK4dh9Arne/L MyzlruoC4tDmIrxQg2/XULg/+RTsTOG2tPPTaRMnepCdFA0VirCiizCTLjVPqR5K dX+I/kfgN2qLddB/HbgMbKM60ZvTtclxkz0bY9n21BZRBfwsoY12MQupLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6rPwPoJ2XebbC+mN83zHoxMx/vMB8GA1UdIwQY MBaAFHjnuowIhTvlVMWU3tFWppg+uhBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTIt NWVhZjllMTBkODVjLzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zMjU0ODEtNWNlNi00NTZlLTk0YTItNWVhZjllMTBkODVj LzEvZU9lNmpBaUZPLVZVeFpUZTBWYW1tRDY2RUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1dtBgu2 f5IAB+Ro2BLl9gK3BZSA5SvFa3YnCKs2FLXVzKoXq1rRtppulqcQasmuUMA5cChO CKUz9zHQB5l7C7F4u5Adh+B+3SX/iee/UPfrdc/rpaXipg1VtHqj49VBPFdNH+YW 62o7tmkBwuOVP4GHstTFSpEnMivnhY/1PMrW5JX79F8WOsfAr6UKzDVfcenMa6sU DV+zvqMruCfDNCjNlBgrQwGHT5aHpDOipfmTwEBlT2IACao8h4XYWNnJ6VbY82s/ Es7JKRbGF2avtcrZxuKWejSlB+k7bW47uCB6eNehuIxalcVfoVAwcXnZtrY9mF4C vyi9MdPZoVAR3g== -----END CERTIFICATE-----Generated at Sun Dec 7 06:06:43 2025 by rpki-client