This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft File: EagjxkJx95aUakaCWW5zKDXMTsg.mft (raw, json) Hash identifier: IMj97vNckFAkd/3oDzyP5xWBWb0WeFtuO2A2YPUN2XA= Subject key identifier: 4B:C9:DF:5B:8F:1D:CB:CE:34:AA:61:AE:B0:79:B3:46:82:04:E4:02 Authority key identifier: 11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 Certificate issuer: /CN=11a823c64271f796946a4682596e732835cc4ec8 Certificate serial: 019AF31CCC927F5A664E830C495DB63A1954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft Manifest number: 0E09 Signing time: Sat 06 Dec 2025 10:02:22 +0000 Manifest this update: Sat 06 Dec 2025 10:02:22 +0000 Manifest next update: Sun 07 Dec 2025 10:02:22 +0000 Files and hashes: 1: EagjxkJx95aUakaCWW5zKDXMTsg.crl (hash: uoExB3aefYAGr9GjI4BEF45IRSprUNFz9S1PWV+Cnss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:cc:92:7f:5a:66:4e:83:0c:49:5d:b6:3a:19:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a823c64271f796946a4682596e732835cc4ec8 Validity Not Before: Dec 6 10:02:22 2025 GMT Not After : Dec 7 10:02:22 2025 GMT Subject: CN=4bc9df5b8f1dcbce34aa61aeb079b3468204e402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:24:8f:22:33:f3:bf:47:d9:ac:e1:aa:fb:88: 43:d1:cd:cc:a8:1f:84:19:16:25:d0:93:c5:9a:df: 5c:b0:aa:a0:b0:dc:da:ef:7b:3a:ac:58:bb:67:3e: 95:ac:b4:b1:ae:11:43:13:0a:58:b5:49:69:5d:ca: 83:70:b4:e0:93:78:03:09:90:53:ce:29:bf:5f:a3: b8:0e:8f:16:0e:1a:80:63:1d:13:6f:a5:49:1d:81: a1:b5:59:d2:49:e3:a2:c7:0e:9a:39:4c:c2:dc:aa: 64:8b:c8:3e:76:4e:90:d5:59:0b:f8:c2:fa:68:1f: e0:0b:a4:41:19:29:f7:0a:5c:db:fa:41:5c:54:3a: fa:fd:8f:46:19:84:c5:e3:49:ac:f6:e3:ae:be:e4: 55:28:fb:79:35:f9:d1:22:30:ac:26:b4:34:c1:8c: 16:46:35:77:24:d2:29:6c:04:9e:c5:b1:99:96:11: 61:71:fa:9a:10:cb:f7:f3:21:84:f0:f5:a7:17:d0: dd:63:89:24:3a:ce:a8:30:5c:fc:ec:ba:32:25:3d: ea:0c:74:6d:f9:df:6b:c1:15:08:23:bc:93:fe:39: 7d:e6:fe:5e:04:4d:0d:c2:84:3a:f3:f0:2a:b8:63: d0:7b:61:de:44:7d:d8:63:a9:8e:1b:48:8e:7a:24: 72:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:C9:DF:5B:8F:1D:CB:CE:34:AA:61:AE:B0:79:B3:46:82:04:E4:02 X509v3 Authority Key Identifier: keyid:11:A8:23:C6:42:71:F7:96:94:6A:46:82:59:6E:73:28:35:CC:4E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EagjxkJx95aUakaCWW5zKDXMTsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/23dddc-ad4a-4e32-99c0-24fb24b5ae5b/1/EagjxkJx95aUakaCWW5zKDXMTsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c4:17:91:54:19:02:3e:2b:fb:83:b1:92:c6:0c:b5:5c:3e: d7:8c:90:5f:c1:ff:d8:a5:3f:88:dc:56:49:80:9b:29:db:f2: 15:c6:f4:7c:a0:55:cf:ca:0b:79:5b:0d:4c:a7:9a:1c:7b:21: 66:92:73:4b:4e:d7:ac:8b:a6:11:3e:b3:5c:50:4a:5e:46:65: 9d:01:9e:32:fe:18:87:20:89:36:e8:b0:4b:8c:d4:82:7b:0a: 10:be:4a:f0:c7:b2:3e:9c:75:fd:82:c0:0f:a5:e1:3f:82:17: 8a:94:78:bf:5e:1e:73:63:fb:ae:bb:ef:eb:f3:6d:a1:8e:bc: 58:d8:0a:4b:48:1b:98:17:bb:a0:b9:4a:31:04:d7:c8:38:5b: e0:cd:83:d4:da:7a:0b:db:de:ab:5d:a5:38:92:4d:ea:53:a0: 6b:07:71:8d:7a:7a:b9:36:da:71:5e:17:51:30:d6:a2:46:61: b3:55:49:7d:ed:d5:86:52:74:f5:83:91:9b:6b:f1:8a:6d:17: 9e:7f:59:59:3c:f8:53:d4:29:42:aa:41:12:c2:37:15:31:35: 41:04:81:d9:d1:d6:31:51:f7:33:2d:03:7a:17:50:d2:6b:49: aa:d5:18:32:bf:ba:61:ba:ce:bf:13:26:51:a6:9e:ff:16:fb: 19:68:a6:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHMySf1pmToMMSV22OhlUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTgyM2M2NDI3MWY3OTY5NDZhNDY4MjU5NmU3MzI4MzVj YzRlYzgwHhcNMjUxMjA2MTAwMjIyWhcNMjUxMjA3MTAwMjIyWjAzMTEwLwYDVQQD Eyg0YmM5ZGY1YjhmMWRjYmNlMzRhYTYxYWViMDc5YjM0NjgyMDRlNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjySPIjPzv0fZrOGq+4hD0c3MqB+E GRYl0JPFmt9csKqgsNza73s6rFi7Zz6VrLSxrhFDEwpYtUlpXcqDcLTgk3gDCZBT zim/X6O4Do8WDhqAYx0Tb6VJHYGhtVnSSeOixw6aOUzC3Kpki8g+dk6Q1VkL+ML6 aB/gC6RBGSn3Clzb+kFcVDr6/Y9GGYTF40ms9uOuvuRVKPt5NfnRIjCsJrQ0wYwW RjV3JNIpbASexbGZlhFhcfqaEMv38yGE8PWnF9DdY4kkOs6oMFz87LoyJT3qDHRt +d9rwRUII7yT/jl95v5eBE0NwoQ68/AquGPQe2HeRH3YY6mOG0iOeiRyxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEvJ31uPHcvONKphrrB5s0aCBOQCMB8GA1UdIwQY MBaAFBGoI8ZCcfeWlGpGgllucyg1zE7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAt MjRmYjI0YjVhZTViLzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8yM2RkZGMtYWQ0YS00ZTMyLTk5YzAtMjRmYjI0YjVhZTVi LzEvRWFnanhrSng5NWFVYWthQ1dXNXpLRFhNVHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKsQXkVQZ Aj4r+4OxksYMtVw+14yQX8H/2KU/iNxWSYCbKdvyFcb0fKBVz8oLeVsNTKeaHHsh ZpJzS07XrIumET6zXFBKXkZlnQGeMv4YhyCJNuiwS4zUgnsKEL5K8MeyPpx1/YLA D6XhP4IXipR4v14ec2P7rrvv6/NtoY68WNgKS0gbmBe7oLlKMQTXyDhb4M2D1Np6 C9veq12lOJJN6lOgawdxjXp6uTbacV4XUTDWokZhs1VJfe3VhlJ09YORm2vxim0X nn9ZWTz4U9QpQqpBEsI3FTE1QQSB2dHWMVH3My0DehdQ0mtJqtUYMr+6YbrOvxMm Uaae/xb7GWimJw== -----END CERTIFICATE-----Generated at Sat Dec 6 13:53:24 2025 by rpki-client