This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft File: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft (raw, json) Hash identifier: C/PEkXKqPcF/MEgTm3yXGNi0FK1GeqiNslpD1QMG2eo= Subject key identifier: 1B:57:DA:10:79:CE:77:38:F5:04:3E:35:E0:5A:F6:FA:6F:21:1B:81 Authority key identifier: 7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A Certificate issuer: /CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Certificate serial: 019AF5AE5BA8E65BA8E048D0DD6F9A80B160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:00:35 +0000 Manifest this update: Sat 06 Dec 2025 22:00:35 +0000 Manifest next update: Sun 07 Dec 2025 22:00:35 +0000 Files and hashes: 1: eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl (hash: 2G2rNd9pUQEuyW1Iv7m7rKW+1QHQCCjbUJAV0zspiLw=) 2: stNJNaGeal-FHwEwjC3WB-1Iv34.roa (hash: qGHFbDJPeE85BxBcD0txqzFvtVR+ui4dTz0qswD2vsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:5b:a8:e6:5b:a8:e0:48:d0:dd:6f:9a:80:b1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2bdfebe459221dda35f52c5a3995020e4fbb7a Validity Not Before: Dec 6 22:00:35 2025 GMT Not After : Dec 7 22:00:35 2025 GMT Subject: CN=1b57da1079ce7738f5043e35e05af6fa6f211b81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b8:13:9a:09:46:b7:b2:fe:46:90:59:a6:ed: 76:82:30:e2:82:74:a6:c3:7b:09:32:4f:99:2a:3a: 54:60:f2:c4:af:6b:61:b8:df:89:7e:26:46:c1:70: 11:d9:82:94:cc:ab:fc:5a:08:32:2d:cc:a9:47:ec: 52:14:32:ef:d3:8f:81:0f:01:e9:05:f3:80:1c:be: 76:26:74:19:68:01:61:a3:b7:00:d0:57:c8:48:d6: 09:60:89:d3:08:cf:43:94:d5:3a:af:0c:28:52:32: 75:1c:d1:f9:c8:a0:b6:aa:f1:0b:01:72:57:44:0a: 9b:96:b2:f6:e8:47:89:ad:43:ec:b9:5b:34:0c:f9: c8:48:93:98:96:d1:75:ec:45:42:fa:84:e1:49:77: b7:70:67:d0:70:c5:29:66:20:ed:05:68:55:5d:ad: 99:ab:a4:e9:de:31:80:eb:d5:a3:19:3e:3a:07:38: bb:cc:ac:ef:56:8c:27:e9:e1:84:49:88:6b:cf:36: 67:2d:50:cb:b3:bb:b6:da:e4:9e:e4:28:c9:1c:67: 2c:18:b5:71:6c:98:ee:b1:37:8a:11:10:21:d9:4c: 4e:59:a7:a9:00:84:6d:46:47:41:a3:ed:06:24:51: 7c:d7:74:28:d6:ad:21:34:b0:f5:83:25:ea:81:3b: 47:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:57:DA:10:79:CE:77:38:F5:04:3E:35:E0:5A:F6:FA:6F:21:1B:81 X509v3 Authority Key Identifier: keyid:7B:2B:DF:EB:E4:59:22:1D:DA:35:F5:2C:5A:39:95:02:0E:4F:BB:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/e6b617-76e2-426a-8071-34c76d9756dd/1/eyvf6-RZIh3aNfUsWjmVAg5Pu3o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b8:6b:03:28:5c:a6:42:6f:54:a1:93:bb:7a:ff:55:9e:2b: 9b:9f:76:a4:7d:1d:a6:52:bf:77:63:31:0a:4b:9f:41:7a:ad: 51:00:f6:8b:82:ff:b6:31:07:d3:43:49:31:32:89:ab:63:76: ad:60:39:b5:06:45:de:e6:56:59:89:f3:22:28:08:49:c4:d6: 97:3d:ac:aa:e5:e6:da:d0:ea:cb:77:43:91:cb:a8:8e:28:63: 46:02:53:1a:02:71:89:89:61:b0:61:2d:df:e2:cc:00:c9:e6: fa:e8:0b:ed:a7:37:04:b5:6f:58:c7:c5:6f:80:29:ae:3e:f5: 24:0a:07:5a:8f:10:98:94:ef:78:60:e7:5a:fc:5c:9a:fa:81: 12:fe:2c:a0:b3:80:18:e3:29:93:63:7b:62:4e:f6:0c:6c:dd: f8:51:b4:23:7c:77:8b:23:98:c1:17:68:78:69:1b:ab:d1:b6: b1:a1:50:1e:35:3c:87:0b:e2:f2:79:36:e6:49:76:af:5d:1a: 93:c1:8f:a7:64:6f:b0:a2:3b:e8:ee:69:0b:f2:30:e5:57:61: 3a:57:e8:d8:66:bf:10:54:89:d2:22:0c:dd:c0:2b:7d:b4:3a: 6a:c0:f5:9c:88:36:ae:92:c2:e6:dc:3c:e8:40:5f:0d:9c:55: ef:ee:57:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rluo5luo4EjQ3W+agLFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMmJkZmViZTQ1OTIyMWRkYTM1ZjUyYzVhMzk5NTAyMGU0 ZmJiN2EwHhcNMjUxMjA2MjIwMDM1WhcNMjUxMjA3MjIwMDM1WjAzMTEwLwYDVQQD EygxYjU3ZGExMDc5Y2U3NzM4ZjUwNDNlMzVlMDVhZjZmYTZmMjExYjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7gTmglGt7L+RpBZpu12gjDignSm w3sJMk+ZKjpUYPLEr2thuN+JfiZGwXAR2YKUzKv8WggyLcypR+xSFDLv04+BDwHp BfOAHL52JnQZaAFho7cA0FfISNYJYInTCM9DlNU6rwwoUjJ1HNH5yKC2qvELAXJX RAqblrL26EeJrUPsuVs0DPnISJOYltF17EVC+oThSXe3cGfQcMUpZiDtBWhVXa2Z q6Tp3jGA69WjGT46Bzi7zKzvVown6eGESYhrzzZnLVDLs7u22uSe5CjJHGcsGLVx bJjusTeKERAh2UxOWaepAIRtRkdBo+0GJFF813Qo1q0hNLD1gyXqgTtHvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBtX2hB5znc49QQ+NeBa9vpvIRuBMB8GA1UdIwQY MBaAFHsr3+vkWSId2jX1LFo5lQIOT7t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEt MzRjNzZkOTc1NmRkLzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9lNmI2MTctNzZlMi00MjZhLTgwNzEtMzRjNzZkOTc1NmRk LzEvZXl2ZjYtUlpJaDNhTmZVc1dqbVZBZzVQdTNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrhrAyhc pkJvVKGTu3r/VZ4rm592pH0dplK/d2MxCkufQXqtUQD2i4L/tjEH00NJMTKJq2N2 rWA5tQZF3uZWWYnzIigIScTWlz2squXm2tDqy3dDkcuojihjRgJTGgJxiYlhsGEt 3+LMAMnm+ugL7ac3BLVvWMfFb4Aprj71JAoHWo8QmJTveGDnWvxcmvqBEv4soLOA GOMpk2N7Yk72DGzd+FG0I3x3iyOYwRdoeGkbq9G2saFQHjU8hwvi8nk25kl2r10a k8GPp2RvsKI76O5pC/Iw5VdhOlfo2Ga/EFSJ0iIM3cArfbQ6asD1nIg2rpLC5tw8 6EBfDZxV7+5XGA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:57:10 2025 by rpki-client