This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft File: eVBSIUjSaDdshFMMXS2lPjm_Gso.mft (raw, json) Hash identifier: AdSQKcZusSOMr+wj+P2EE/CJ/oIoEUJs3QnGp5aPC1M= Subject key identifier: E5:21:D5:FC:12:59:BD:23:C0:00:9E:AA:36:C2:3E:3C:8D:09:F3:72 Authority key identifier: 79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA Certificate issuer: /CN=7950522148d268376c84530c5d2da53e39bf1aca Certificate serial: 019AF509C159F7AC42CE51CF57D07AD86F4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft Manifest number: 0634 Signing time: Sat 06 Dec 2025 19:00:48 +0000 Manifest this update: Sat 06 Dec 2025 19:00:48 +0000 Manifest next update: Sun 07 Dec 2025 19:00:48 +0000 Files and hashes: 1: eVBSIUjSaDdshFMMXS2lPjm_Gso.crl (hash: qQZv6EEH6K47RMO3a7V9v6yln/Ji5/qSMhs10W5aKPA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:c1:59:f7:ac:42:ce:51:cf:57:d0:7a:d8:6f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7950522148d268376c84530c5d2da53e39bf1aca Validity Not Before: Dec 6 19:00:48 2025 GMT Not After : Dec 7 19:00:48 2025 GMT Subject: CN=e521d5fc1259bd23c0009eaa36c23e3c8d09f372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c5:95:5d:af:25:14:eb:f7:24:8f:5e:e8:8e: 0b:4c:02:56:2c:6a:82:9e:d3:ba:30:73:ca:9a:6b: d5:0c:f3:33:cd:a5:3f:dc:f0:f8:14:26:fa:80:81: a6:18:8d:ca:89:d5:30:06:bd:18:e1:c5:b8:66:d8: ab:08:91:bf:8f:7d:d4:11:5c:b6:ba:c4:30:67:34: 4c:ab:0a:6e:8f:fc:97:8f:7c:47:27:4b:7f:d6:71: 4a:e8:53:97:d7:bf:8d:9b:70:74:dd:91:86:c8:1b: f4:4e:4a:1b:40:8d:55:1c:28:6c:0c:ab:8c:ac:44: fc:34:76:c6:7f:ab:27:86:7b:69:26:30:da:6c:db: fd:9d:96:cd:2a:ae:0d:35:62:64:5d:56:7a:a1:8a: 14:7d:66:a4:29:d7:df:a6:ce:78:70:5f:97:ba:e0: ad:48:7d:55:25:02:69:5e:41:af:57:73:e5:6c:91: 62:ba:0f:42:02:77:6b:84:85:c7:b8:ec:f7:4c:ac: d3:6c:a8:66:72:6a:45:66:cb:89:fc:31:1e:5e:a6: 12:f8:43:29:7c:2d:9b:56:9c:ce:24:ea:9a:f5:47: 39:d8:1a:fe:cd:e1:1c:75:59:d3:27:de:fa:b9:1a: 7c:18:b0:ca:f2:c2:9f:3e:58:24:03:ae:92:95:81: fd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:21:D5:FC:12:59:BD:23:C0:00:9E:AA:36:C2:3E:3C:8D:09:F3:72 X509v3 Authority Key Identifier: keyid:79:50:52:21:48:D2:68:37:6C:84:53:0C:5D:2D:A5:3E:39:BF:1A:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eVBSIUjSaDdshFMMXS2lPjm_Gso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/cd15fb-aa32-4c88-b603-cc347ecb0421/1/eVBSIUjSaDdshFMMXS2lPjm_Gso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:5d:90:7a:63:59:29:2b:6b:a9:1f:b3:1e:30:04:92:a8:58: 24:00:24:5b:f5:43:4d:72:36:31:fd:e0:5a:50:d1:9f:ac:31: b8:5d:0d:e4:5d:14:7b:0e:87:7e:91:17:87:a7:3a:e8:ed:87: 2e:c6:7a:42:9e:0c:13:93:b9:05:d1:1c:46:96:7a:f3:5c:a1: 1e:b1:df:be:a8:34:f3:b6:80:27:a0:85:c4:9a:97:f2:21:53: 45:be:23:97:ee:08:bc:e8:ca:06:26:2a:c0:d8:0e:46:9b:02: 93:5f:4b:de:6a:78:08:df:57:f8:6e:4a:f3:67:d1:62:a4:38: 6a:bd:09:6f:34:be:25:05:f1:de:a1:12:7f:c2:99:0f:1e:02: c0:c9:ee:7f:08:5a:0b:4c:d9:58:1f:36:bf:66:3f:c9:4a:8d: 4e:8d:71:0e:92:a9:5b:70:21:5c:50:24:d8:4e:0a:ba:af:63: 29:1b:61:59:b4:60:46:93:43:e0:f7:96:6a:19:22:19:f0:d1: a6:43:a9:16:b5:d6:cf:a1:d3:88:92:06:9c:d6:9c:51:2e:19: 22:d3:17:c4:5b:3c:24:d8:20:ca:76:3c:19:f6:cb:90:cf:49: 0a:ce:d6:2f:5a:d3:ca:6e:d5:d8:7f:8b:a4:37:a3:14:7d:4e: 17:b8:ed:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CcFZ96xCzlHPV9B62G9PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NTA1MjIxNDhkMjY4Mzc2Yzg0NTMwYzVkMmRhNTNlMzli ZjFhY2EwHhcNMjUxMjA2MTkwMDQ4WhcNMjUxMjA3MTkwMDQ4WjAzMTEwLwYDVQQD EyhlNTIxZDVmYzEyNTliZDIzYzAwMDllYWEzNmMyM2UzYzhkMDlmMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsWVXa8lFOv3JI9e6I4LTAJWLGqC ntO6MHPKmmvVDPMzzaU/3PD4FCb6gIGmGI3KidUwBr0Y4cW4ZtirCJG/j33UEVy2 usQwZzRMqwpuj/yXj3xHJ0t/1nFK6FOX17+Nm3B03ZGGyBv0TkobQI1VHChsDKuM rET8NHbGf6snhntpJjDabNv9nZbNKq4NNWJkXVZ6oYoUfWakKdffps54cF+XuuCt SH1VJQJpXkGvV3PlbJFiug9CAndrhIXHuOz3TKzTbKhmcmpFZsuJ/DEeXqYS+EMp fC2bVpzOJOqa9Uc52Br+zeEcdVnTJ976uRp8GLDK8sKfPlgkA66SlYH9LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUh1fwSWb0jwACeqjbCPjyNCfNyMB8GA1UdIwQY MBaAFHlQUiFI0mg3bIRTDF0tpT45vxrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9jZDE1ZmItYWEzMi00Yzg4LWI2MDMt Y2MzNDdlY2IwNDIxLzEvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9jZDE1ZmItYWEzMi00Yzg4LWI2MDMtY2MzNDdlY2IwNDIx LzEvZVZCU0lValNhRGRzaEZNTVhTMmxQam1fR3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYF2QemNZ KStrqR+zHjAEkqhYJAAkW/VDTXI2Mf3gWlDRn6wxuF0N5F0Uew6HfpEXh6c66O2H LsZ6Qp4ME5O5BdEcRpZ681yhHrHfvqg087aAJ6CFxJqX8iFTRb4jl+4IvOjKBiYq wNgORpsCk19L3mp4CN9X+G5K82fRYqQ4ar0JbzS+JQXx3qESf8KZDx4CwMnufwha C0zZWB82v2Y/yUqNTo1xDpKpW3AhXFAk2E4Kuq9jKRthWbRgRpND4PeWahkiGfDR pkOpFrXWz6HTiJIGnNacUS4ZItMXxFs8JNggynY8GfbLkM9JCs7WL1rTym7V2H+L pDejFH1OF7jt2w== -----END CERTIFICATE-----Generated at Sat Dec 6 21:41:31 2025 by rpki-client