This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft File: EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft (raw, json) Hash identifier: mWSTnhhwB9sWho0Tz8eoWUpWA47aJGTPstXhG195ucA= Subject key identifier: CE:3F:57:72:32:80:72:50:4C:FC:A8:34:32:9D:3B:27:3B:ED:51:D8 Authority key identifier: 11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3 Certificate issuer: /CN=110f053a6db54b1bf396f85063a6fcca0a346ec3 Certificate serial: 019AF4D2A1683C9070752D5B09358CAF60A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 18:00:35 +0000 Manifest this update: Sat 06 Dec 2025 18:00:35 +0000 Manifest next update: Sun 07 Dec 2025 18:00:35 +0000 Files and hashes: 1: EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl (hash: MaIYwdKiIygRHvob5sxX0p2xlwJCkw2Us4dWt/NYXig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:d2:a1:68:3c:90:70:75:2d:5b:09:35:8c:af:60:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110f053a6db54b1bf396f85063a6fcca0a346ec3 Validity Not Before: Dec 6 18:00:35 2025 GMT Not After : Dec 7 18:00:35 2025 GMT Subject: CN=ce3f5772328072504cfca834329d3b273bed51d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:d0:23:7c:ca:1f:f2:03:d1:a5:c2:05:03: ca:40:5a:ad:a1:58:c7:22:5f:5e:20:81:70:42:81: 06:85:85:27:bd:07:8b:44:54:4b:9a:1b:95:cd:a0: dd:ab:a3:10:62:f6:07:8e:7d:2b:92:85:fb:c4:c7: 26:f7:7a:81:2d:32:1f:76:1c:ee:c9:60:de:01:1e: 1c:64:2d:1e:74:b1:15:b0:83:be:64:b2:ed:07:62: 35:d3:cc:8f:e1:09:43:dc:d0:a3:3c:47:7d:ac:1a: bc:29:7e:ed:7e:d6:c2:dd:d6:8f:3d:eb:bf:a5:17: 8d:df:f2:6e:8d:c8:b1:d8:15:16:18:c8:83:72:cc: 83:78:54:c8:14:02:fb:b5:8e:c3:22:14:88:a1:37: ab:46:52:77:78:27:8a:28:0f:2f:45:cd:a5:92:2e: 67:f4:1c:c8:83:d5:1d:1a:f4:63:45:7a:90:eb:b9: 77:f3:f2:73:58:f4:4a:56:42:7e:10:3a:8c:62:45: 94:46:c7:0b:6b:01:7c:8d:16:19:20:a1:2e:d5:ec: ae:ca:9d:46:08:91:ad:13:5a:78:fb:88:e3:72:85: 9e:5e:49:ab:07:c8:81:b0:7d:ed:d8:4d:2c:1e:6c: 5a:23:e5:e0:8d:38:7c:f5:3f:c4:b2:66:7e:ac:09: 2d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3F:57:72:32:80:72:50:4C:FC:A8:34:32:9D:3B:27:3B:ED:51:D8 X509v3 Authority Key Identifier: keyid:11:0F:05:3A:6D:B5:4B:1B:F3:96:F8:50:63:A6:FC:CA:0A:34:6E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQ8FOm21SxvzlvhQY6b8ygo0bsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/53d18e-cace-4ea4-9a08-38bfbd34799e/1/EQ8FOm21SxvzlvhQY6b8ygo0bsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:db:c9:6c:f9:bf:15:6d:d2:79:b7:0f:c4:78:29:2f:86:a0: 4c:85:8b:21:3d:bd:96:bf:f8:ac:04:99:fc:2c:d9:5b:f6:c5: a7:55:5d:05:d9:d9:8d:9d:1c:90:1b:7b:2d:91:d2:43:68:bd: 1e:26:fe:04:82:d7:80:75:a9:ef:0e:fd:a3:11:1a:d0:d6:43: eb:c8:bb:6e:08:2d:ce:61:d0:5b:af:f6:76:1e:39:e2:82:3e: e5:76:a7:de:9c:5d:07:53:f6:41:fc:da:e8:75:43:ea:4d:67: dc:88:d3:a6:f9:ae:6f:9d:d0:6a:15:f0:24:a9:8d:a4:fe:7b: 4e:58:f6:a1:50:c9:96:75:12:67:9c:dc:96:88:90:04:4a:de: fd:b2:9f:fb:0e:ec:4a:f2:0f:02:c7:92:33:67:b7:ca:29:26: e4:65:56:81:3a:38:27:d8:67:f3:db:de:c5:e4:5b:d5:8f:fe: ef:ab:b4:c9:27:0c:b7:48:f1:e7:df:78:3b:9e:e6:24:66:a6: 91:6c:aa:b3:c0:db:4c:09:cd:68:46:53:37:39:4f:26:0b:f3: 93:24:cc:c1:a6:e3:e0:74:64:3e:67:04:c8:01:ca:17:f7:5d: 5c:3d:75:fc:0f:a5:45:30:fa:7e:b5:34:8a:66:3f:ba:bb:97: 62:a8:d5:d3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr00qFoPJBwdS1bCTWMr2ChMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMGYwNTNhNmRiNTRiMWJmMzk2Zjg1MDYzYTZmY2NhMGEz NDZlYzMwHhcNMjUxMjA2MTgwMDM1WhcNMjUxMjA3MTgwMDM1WjAzMTEwLwYDVQQD EyhjZTNmNTc3MjMyODA3MjUwNGNmY2E4MzQzMjlkM2IyNzNiZWQ1MWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LvQI3zKH/ID0aXCBQPKQFqtoVjH Il9eIIFwQoEGhYUnvQeLRFRLmhuVzaDdq6MQYvYHjn0rkoX7xMcm93qBLTIfdhzu yWDeAR4cZC0edLEVsIO+ZLLtB2I108yP4QlD3NCjPEd9rBq8KX7tftbC3daPPeu/ pReN3/Jujcix2BUWGMiDcsyDeFTIFAL7tY7DIhSIoTerRlJ3eCeKKA8vRc2lki5n 9BzIg9UdGvRjRXqQ67l38/JzWPRKVkJ+EDqMYkWURscLawF8jRYZIKEu1eyuyp1G CJGtE1p4+4jjcoWeXkmrB8iBsH3t2E0sHmxaI+XgjTh89T/EsmZ+rAktnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM4/V3IygHJQTPyoNDKdOyc77VHYMB8GA1UdIwQY MBaAFBEPBTpttUsb85b4UGOm/MoKNG7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgt MzhiZmJkMzQ3OTllLzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni81M2QxOGUtY2FjZS00ZWE0LTlhMDgtMzhiZmJkMzQ3OTll LzEvRVE4Rk9tMjFTeHZ6bHZoUVk2Yjh5Z28wYnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNvJbPm/ FW3SebcPxHgpL4agTIWLIT29lr/4rASZ/CzZW/bFp1VdBdnZjZ0ckBt7LZHSQ2i9 Hib+BILXgHWp7w79oxEa0NZD68i7bggtzmHQW6/2dh454oI+5Xan3pxdB1P2Qfza 6HVD6k1n3IjTpvmub53QahXwJKmNpP57Tlj2oVDJlnUSZ5zcloiQBEre/bKf+w7s SvIPAseSM2e3yikm5GVWgTo4J9hn89vexeRb1Y/+76u0yScMt0jx5994O57mJGam kWyqs8DbTAnNaEZTNzlPJgvzkyTMwabj4HRkPmcEyAHKF/ddXD11/A+lRTD6frU0 imY/uruXYqjV0w== -----END CERTIFICATE-----Generated at Sat Dec 6 23:44:34 2025 by rpki-client