This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft File: EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json) Hash identifier: X3k9B1xIBt45u76jwJ0+cj2X6QFPexeN+JVVYbWvLwQ= Subject key identifier: 43:1C:7C:26:1F:4A:22:75:9D:73:44:EB:85:50:00:6C:A2:EA:F7:E0 Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82 Certificate issuer: /CN=12868f5e34eefefce655c1bb8383299fa56c5c82 Certificate serial: 019AF12E62D96DB7EC559FED9796E0DE9A37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft Manifest number: 12DE Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: adh41qs0NmZxqQx6gFY0EPiRNFKD2mha6Iam30a3P3c=) 2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:62:d9:6d:b7:ec:55:9f:ed:97:96:e0:de:9a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82 Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=431c7c261f4a22759d7344eb8550006ca2eaf7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:0b:ee:dd:95:1c:f2:0d:4a:8e:ea:15:ae:4f: 65:d8:4c:e2:92:92:e6:2b:11:39:fc:64:3d:95:dd: ee:0c:07:a7:b3:37:b4:03:4a:7f:0f:c7:a0:9c:72: 0e:7f:84:65:14:5d:6f:6f:a9:91:f9:55:66:ab:68: e2:41:05:88:af:04:d8:33:98:34:b2:39:70:4e:44: 58:32:bd:74:95:91:7c:32:24:e0:40:86:57:ea:a0: 62:77:1a:a1:1e:65:2d:db:a9:be:60:22:07:52:d3: fa:48:9d:2d:fe:12:37:31:a9:d2:32:ff:c5:69:eb: 7f:cf:b3:ab:71:44:84:89:34:9d:b9:15:a3:6d:e0: ba:e7:1d:e6:39:c9:ae:e7:90:bf:f5:bc:42:47:a1: ca:29:37:0c:4a:ac:cb:3a:fa:5d:ba:82:f3:92:5d: fe:ff:01:9b:ab:a8:cd:b9:3a:ee:7e:aa:0c:a6:5b: 4a:32:fa:aa:a3:09:3f:21:3d:9f:89:ab:55:5d:25: 2d:11:27:08:c9:66:e1:24:d7:ba:74:05:f8:eb:6b: 16:cd:a5:0b:c4:de:b0:2a:20:c5:bc:5d:50:c6:0e: 47:53:1b:4b:33:27:cf:72:17:0d:57:11:59:21:99: da:56:05:f8:b6:9f:77:7b:1f:d6:01:a6:ae:d1:c0: f3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:1C:7C:26:1F:4A:22:75:9D:73:44:EB:85:50:00:6C:A2:EA:F7:E0 X509v3 Authority Key Identifier: keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:36:f0:99:af:d6:fa:f0:77:ac:be:8c:2c:12:39:f8:e8:8f: 63:51:23:c9:33:05:f4:67:4e:77:b9:d3:47:21:12:e9:36:b5: d2:74:d0:ee:d0:03:62:e7:4d:13:ee:4a:8e:7b:f3:d8:12:5e: 6d:2b:80:34:08:01:2c:b4:f7:e9:d5:d0:52:ef:64:d5:b0:ae: 0f:37:9e:33:6c:f2:d5:40:70:cb:85:e1:33:c7:65:72:fc:60: 91:e8:33:a3:32:a1:73:64:12:13:28:aa:b2:e4:b5:2b:b8:92: c6:04:97:ef:9d:46:3a:37:ce:5e:ff:4d:e6:8f:01:40:59:82: 76:94:e1:17:be:0b:f0:c9:72:c6:e3:09:6b:ce:82:38:2b:01: e4:06:21:4c:cb:ab:f8:a3:26:93:be:23:9d:73:85:11:28:4f: d7:93:81:c6:49:3f:ae:ce:d7:00:4c:1a:10:f5:31:34:c2:85: 1e:fc:ac:80:bf:4a:14:dc:d5:73:b7:39:b9:ca:75:ec:00:aa: b1:d4:cf:b5:b9:0b:47:e4:0e:a8:a3:38:46:7f:3e:6c:58:d9: 04:01:d3:1c:6d:a9:01:ad:ee:bf:22:70:68:56:26:a9:2a:89: 01:40:e7:12:a9:f7:f5:f6:79:8c:ea:e6:28:ad:fa:22:db:8c: 97:fe:13:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmLZbbfsVZ/tl5bg3po3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyODY4ZjVlMzRlZWZlZmNlNjU1YzFiYjgzODMyOTlmYTU2 YzVjODIwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD Eyg0MzFjN2MyNjFmNGEyMjc1OWQ3MzQ0ZWI4NTUwMDA2Y2EyZWFmN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQvu3ZUc8g1KjuoVrk9l2EzikpLm KxE5/GQ9ld3uDAensze0A0p/D8egnHIOf4RlFF1vb6mR+VVmq2jiQQWIrwTYM5g0 sjlwTkRYMr10lZF8MiTgQIZX6qBidxqhHmUt26m+YCIHUtP6SJ0t/hI3ManSMv/F aet/z7OrcUSEiTSduRWjbeC65x3mOcmu55C/9bxCR6HKKTcMSqzLOvpduoLzkl3+ /wGbq6jNuTrufqoMpltKMvqqowk/IT2fiatVXSUtEScIyWbhJNe6dAX462sWzaUL xN6wKiDFvF1Qxg5HUxtLMyfPchcNVxFZIZnaVgX4tp93ex/WAaau0cDzTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMcfCYfSiJ1nXNE64VQAGyi6vfgMB8GA1UdIwQY MBaAFBKGj1407v785lXBu4ODKZ+lbFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTIt MWYzNGVmYjViN2QxLzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTItMWYzNGVmYjViN2Qx LzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzjbwma/W +vB3rL6MLBI5+OiPY1EjyTMF9GdOd7nTRyES6Ta10nTQ7tADYudNE+5Kjnvz2BJe bSuANAgBLLT36dXQUu9k1bCuDzeeM2zy1UBwy4XhM8dlcvxgkegzozKhc2QSEyiq suS1K7iSxgSX751GOjfOXv9N5o8BQFmCdpThF74L8MlyxuMJa86COCsB5AYhTMur +KMmk74jnXOFEShP15OBxkk/rs7XAEwaEPUxNMKFHvysgL9KFNzVc7c5ucp17ACq sdTPtbkLR+QOqKM4Rn8+bFjZBAHTHG2pAa3uvyJwaFYmqSqJAUDnEqn39fZ5jOrm KK36ItuMl/4TsQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:55:50 2025 by rpki-client