This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft File: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json) Hash identifier: 7GTxNTcZrpaOnjqqrXyJcFqhPPZN9JzJx9i6slPjrC8= Subject key identifier: 26:B1:DF:97:91:45:6E:7A:29:E3:60:D3:6C:46:94:EE:EC:74:D2:30 Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A Certificate issuer: /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Certificate serial: 019B3945F6B8B4DD34E9841098B79D6138E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 01:00:45 +0000 Manifest this update: Sat 20 Dec 2025 01:00:45 +0000 Manifest next update: Sun 21 Dec 2025 01:00:45 +0000 Files and hashes: 1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: gv1nhDrxl6Q86rCMkfBpAXUt+UBgM5FU48P2/ovsU3c=) 2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:45:f6:b8:b4:dd:34:e9:84:10:98:b7:9d:61:38:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Validity Not Before: Dec 20 01:00:45 2025 GMT Not After : Dec 21 01:00:45 2025 GMT Subject: CN=26b1df9791456e7a29e360d36c4694eeec74d230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:b1:3b:38:cd:88:31:82:c7:06:41:4a:79:cf: ce:9f:64:e3:18:62:72:74:37:29:94:1b:a2:86:b7: 84:24:ed:f3:59:b9:0d:e7:48:e5:80:22:80:f7:77: 48:b8:dd:ee:ab:e5:de:9b:c9:ff:ba:ea:55:02:ce: 80:c7:a4:7d:cb:a6:93:18:13:79:2f:37:b6:0e:ed: 65:0a:98:d8:85:73:e7:21:a6:bb:d5:a1:6b:97:32: 59:10:02:17:96:43:51:16:30:67:1e:44:03:f6:79: d4:7f:db:16:3b:b4:79:cb:f7:bd:d0:4d:79:ac:64: 71:ca:33:9b:3c:6d:f4:c2:0e:88:c1:c4:1a:a7:9a: 6f:0a:6e:8d:37:fd:60:3a:12:fa:0f:6e:fa:b1:39: ac:d4:5d:e3:4e:cb:f4:c8:9c:ee:44:95:6f:06:b2: 09:40:13:83:2c:f6:f2:af:2e:2c:37:b2:37:f2:0b: 15:09:b9:bc:cd:a4:4d:ba:82:a5:2f:5c:78:12:ba: 41:1f:e6:63:9e:aa:81:71:be:69:a2:05:f4:eb:fe: 89:f3:19:a0:6f:d7:08:07:91:b4:c2:02:59:cc:d3: 9d:01:1d:e6:e9:26:81:4f:86:62:21:3a:b3:1f:af: 29:c5:76:06:1b:04:b2:de:b0:3d:4a:4c:b8:09:29: b8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:DF:97:91:45:6E:7A:29:E3:60:D3:6C:46:94:EE:EC:74:D2:30 X509v3 Authority Key Identifier: keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:5c:96:93:5d:0a:23:9e:5a:d8:17:06:50:e0:2e:04:ce:7b: 57:af:58:b2:b2:75:e0:e3:18:07:8e:9b:b8:07:b3:e9:9e:3e: 7e:47:77:47:24:ba:18:55:d4:c0:27:5b:8a:58:6e:6c:44:b3: 08:7c:67:53:3c:16:bd:35:68:94:7a:ec:93:31:94:e9:5a:4c: 7d:c5:4d:09:cc:23:9b:b4:78:7d:9b:8f:2c:8d:15:bb:dd:a0: b5:6c:e5:26:6c:80:72:44:61:7a:79:c4:82:56:10:52:21:91: 87:e9:ed:66:c9:a1:5c:2a:bc:76:94:fc:34:67:a3:a3:3e:bc: f4:1e:3b:09:51:21:8f:d1:80:f9:16:67:3d:74:46:d6:55:59: 29:87:e8:bf:c4:12:76:1b:66:5f:6e:5e:58:43:a9:42:36:c1: 7d:a2:c7:76:30:76:91:2f:d4:73:19:c0:92:34:4b:86:8a:31: f3:d6:9c:6e:c7:35:65:52:b9:d6:72:bd:f5:77:8b:eb:97:a2: 4e:d4:a0:70:36:73:39:8e:67:e3:78:d9:db:49:fa:b4:16:75: 50:c4:7c:5b:fd:f4:08:1c:77:d8:c1:10:b4:bc:ac:c8:54:2d: 81:1e:e0:b5:cb:9f:45:d6:c5:54:da:c4:18:a1:d0:f5:18:20: e1:2c:b9:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rfa4tN006YQQmLedYTjmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMmJkZmViZTQ1OTIyMWRkYTM1ZjUyYzVhMzk5NTAyMGU0 ZmJiN2EwHhcNMjUxMjIwMDEwMDQ1WhcNMjUxMjIxMDEwMDQ1WjAzMTEwLwYDVQQD EygyNmIxZGY5NzkxNDU2ZTdhMjllMzYwZDM2YzQ2OTRlZWVjNzRkMjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrE7OM2IMYLHBkFKec/On2TjGGJy dDcplBuihreEJO3zWbkN50jlgCKA93dIuN3uq+Xem8n/uupVAs6Ax6R9y6aTGBN5 Lze2Du1lCpjYhXPnIaa71aFrlzJZEAIXlkNRFjBnHkQD9nnUf9sWO7R5y/e90E15 rGRxyjObPG30wg6IwcQap5pvCm6NN/1gOhL6D276sTms1F3jTsv0yJzuRJVvBrIJ QBODLPbyry4sN7I38gsVCbm8zaRNuoKlL1x4ErpBH+ZjnqqBcb5pogX06/6J8xmg b9cIB5G0wgJZzNOdAR3m6SaBT4ZiITqzH68pxXYGGwSy3rA9Sky4CSm4HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCax35eRRW56KeNg02xGlO7sdNIwMB8GA1UdIwQY MBaAFHsr3+vkWSId2jX1LFo5lQIOT7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEt MzRjNzZkOTc1NmRkLzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEtMzRjNzZkOTc1NmRk LzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1yWk10K I55a2BcGUOAuBM57V69YsrJ14OMYB46buAez6Z4+fkd3RyS6GFXUwCdbilhubESz CHxnUzwWvTVolHrskzGU6VpMfcVNCcwjm7R4fZuPLI0Vu92gtWzlJmyAckRhennE glYQUiGRh+ntZsmhXCq8dpT8NGejoz689B47CVEhj9GA+RZnPXRG1lVZKYfov8QS dhtmX25eWEOpQjbBfaLHdjB2kS/UcxnAkjRLhoox89acbsc1ZVK51nK99XeL65ei TtSgcDZzOY5n43jZ20n6tBZ1UMR8W/30CBx32MEQtLysyFQtgR7gtcufRdbFVNrE GKHQ9Rgg4Sy5QQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:38 2025 by rpki-client