This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft File: EA5EySrUkxGKStK6gRRfHTShi8o.mft (raw, json) Hash identifier: BopcDTjgpCuVfDvZvIJYM0qlSoczu7BAGPTp/F/Ybq0= Subject key identifier: C7:B8:EF:06:28:65:A6:9B:42:49:71:10:58:CD:FA:4D:18:C9:61:11 Authority key identifier: 10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA Certificate issuer: /CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Certificate serial: 019AF208E3F1367B10F286C0A672DA207A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft Manifest number: 1129 Signing time: Sat 06 Dec 2025 05:01:00 +0000 Manifest this update: Sat 06 Dec 2025 05:01:00 +0000 Manifest next update: Sun 07 Dec 2025 05:01:00 +0000 Files and hashes: 1: 9ltoRvF8IrCagfv5cCrEK7BRKu0.roa (hash: YJOxESLE8nePOUhojbtV7GmOsBKkJt32JlcUp20ccWw=) 2: EA5EySrUkxGKStK6gRRfHTShi8o.crl (hash: xXVHsXBhXBi3QLQ8GvMk2c0qYK/friqyv1Um1oQ5XEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:e3:f1:36:7b:10:f2:86:c0:a6:72:da:20:7a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=100e44c92ad493118a4ad2ba81145f1d34a18bca Validity Not Before: Dec 6 05:01:00 2025 GMT Not After : Dec 7 05:01:00 2025 GMT Subject: CN=c7b8ef062865a69b4249711058cdfa4d18c96111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:20:7a:9a:45:07:ea:7f:17:48:f7:30:98:ee: d9:be:05:80:db:5d:67:23:10:fa:24:e4:0f:cc:b3: 7b:e9:e9:65:83:15:04:9e:da:70:02:84:d8:4a:40: 27:03:9f:0b:68:60:49:0c:5a:2e:29:49:a2:2f:ce: 16:90:d8:94:0c:2a:50:26:f6:99:89:a3:7b:b6:04: ad:fc:26:28:73:04:4c:da:a8:c9:46:cb:9f:dc:47: 0b:1f:eb:5c:fc:da:a3:19:d4:b3:38:e2:dd:69:c2: 48:e0:1c:f7:df:35:4f:86:5e:79:17:26:46:f9:5c: 47:6d:1e:c4:14:c4:d4:5f:f4:9e:91:5e:7b:e8:ac: 14:dc:75:e4:4b:25:4c:f8:70:ef:4e:61:2b:37:2b: 18:c7:73:17:fd:47:a5:f4:01:6e:bc:78:31:be:a8: d7:86:9c:64:a0:c2:4f:7b:29:72:dc:e0:90:73:a2: 0a:f1:67:e4:e7:b8:64:8e:fe:85:6b:53:e4:e1:9f: 2a:26:41:3d:59:84:9e:c1:ee:bf:cf:f0:a2:06:17: 21:12:49:ff:74:b9:9b:4d:32:80:a2:d2:ff:26:27: eb:7c:4d:24:d1:af:16:b7:be:3c:01:38:22:22:52: 07:66:1d:23:a2:ab:cc:47:67:36:6b:0a:e6:f6:0d: 09:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B8:EF:06:28:65:A6:9B:42:49:71:10:58:CD:FA:4D:18:C9:61:11 X509v3 Authority Key Identifier: keyid:10:0E:44:C9:2A:D4:93:11:8A:4A:D2:BA:81:14:5F:1D:34:A1:8B:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EA5EySrUkxGKStK6gRRfHTShi8o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/e1ab57-9c25-4b8f-b56e-4f5212290769/1/EA5EySrUkxGKStK6gRRfHTShi8o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:51:a9:db:46:02:09:31:be:16:c7:bd:35:36:84:c7:4d:8c: aa:fc:da:2c:9d:1f:8c:1e:20:f6:c7:a9:c4:87:e0:8d:fe:42: 8e:12:02:d3:49:2b:fb:17:26:c5:de:e8:fc:27:f7:c6:a5:15: 34:6e:c8:cb:26:a2:b4:b5:1b:ea:f1:13:b4:4e:ae:31:99:79: dc:7c:34:ab:a8:6c:d6:7a:27:db:a2:09:e3:c5:40:d5:28:67: 30:88:0d:e0:58:c8:a4:66:b9:8c:c0:1d:4a:06:fa:d1:8b:54: f1:14:93:69:43:c3:92:c0:76:d2:16:b7:0c:6a:3f:4a:1b:67: cc:f3:27:53:9a:1a:5c:13:4c:07:04:1d:56:f9:5c:67:ec:ea: 71:b7:de:e6:78:5b:1f:0b:f5:a9:83:fa:11:8d:fa:ac:db:3f: 3f:86:28:7e:fb:f0:de:6c:ea:66:b2:5b:fc:96:04:bf:f8:85: 82:48:8f:ee:ea:a2:1f:26:67:57:40:97:95:59:21:32:65:e5: 74:bf:f5:66:95:df:ac:46:6d:88:5d:25:14:3f:cf:ad:10:8f: cf:4e:30:70:63:3a:82:3e:aa:99:92:1a:14:9a:b4:3d:40:49: 48:b7:4c:3d:95:de:13:21:37:10:4e:ba:6a:f4:e2:70:e9:de: ea:db:7c:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCOPxNnsQ8obApnLaIHoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMGU0NGM5MmFkNDkzMTE4YTRhZDJiYTgxMTQ1ZjFkMzRh MThiY2EwHhcNMjUxMjA2MDUwMTAwWhcNMjUxMjA3MDUwMTAwWjAzMTEwLwYDVQQD EyhjN2I4ZWYwNjI4NjVhNjliNDI0OTcxMTA1OGNkZmE0ZDE4Yzk2MTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SB6mkUH6n8XSPcwmO7ZvgWA211n IxD6JOQPzLN76ellgxUEntpwAoTYSkAnA58LaGBJDFouKUmiL84WkNiUDCpQJvaZ iaN7tgSt/CYocwRM2qjJRsuf3EcLH+tc/NqjGdSzOOLdacJI4Bz33zVPhl55FyZG +VxHbR7EFMTUX/SekV576KwU3HXkSyVM+HDvTmErNysYx3MX/Uel9AFuvHgxvqjX hpxkoMJPeyly3OCQc6IK8Wfk57hkjv6Fa1Pk4Z8qJkE9WYSewe6/z/CiBhchEkn/ dLmbTTKAotL/JifrfE0k0a8Wt748ATgiIlIHZh0joqvMR2c2awrm9g0JPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMe47wYoZaabQklxEFjN+k0YyWERMB8GA1UdIwQY MBaAFBAORMkq1JMRikrSuoEUXx00oYvKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUt NGY1MjEyMjkwNzY5LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My9lMWFiNTctOWMyNS00YjhmLWI1NmUtNGY1MjEyMjkwNzY5 LzEvRUE1RXlTclVreEdLU3RLNmdSUmZIVFNoaThvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfFGp20YC CTG+Fse9NTaEx02MqvzaLJ0fjB4g9sepxIfgjf5CjhIC00kr+xcmxd7o/Cf3xqUV NG7IyyaitLUb6vETtE6uMZl53Hw0q6hs1non26IJ48VA1ShnMIgN4FjIpGa5jMAd Sgb60YtU8RSTaUPDksB20ha3DGo/ShtnzPMnU5oaXBNMBwQdVvlcZ+zqcbfe5nhb Hwv1qYP6EY36rNs/P4Yofvvw3mzqZrJb/JYEv/iFgkiP7uqiHyZnV0CXlVkhMmXl dL/1ZpXfrEZtiF0lFD/PrRCPz04wcGM6gj6qmZIaFJq0PUBJSLdMPZXeEyE3EE66 avTicOne6tt8zQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:40:23 2025 by rpki-client