This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft File: EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft (raw, json) Hash identifier: OCg3jW92e/SWOXUlrDzXgwTD4AclSi6Npi6m71McZY8= Subject key identifier: F5:71:3F:31:69:D0:61:DA:32:62:52:05:DF:56:F5:BB:7B:99:AE:B5 Authority key identifier: 12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82 Certificate issuer: /CN=12868f5e34eefefce655c1bb8383299fa56c5c82 Certificate serial: 019B34C4F8ECA744ED3EE85177D407C18F5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft Manifest number: 1301 Signing time: Fri 19 Dec 2025 04:01:22 +0000 Manifest this update: Fri 19 Dec 2025 04:01:22 +0000 Manifest next update: Sat 20 Dec 2025 04:01:22 +0000 Files and hashes: 1: EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl (hash: LFLXQzph47Yw4wdbvRgDmS/iNW/0AzNDcM8IuhXRmbY=) 2: VxIYrmkfaudMi3uvOgmfLEYS9i4.roa (hash: HVOJKOfT05YM4fO+NpvciBLZRFLtFXYsLyo0g2RCD3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:f8:ec:a7:44:ed:3e:e8:51:77:d4:07:c1:8f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12868f5e34eefefce655c1bb8383299fa56c5c82 Validity Not Before: Dec 19 04:01:22 2025 GMT Not After : Dec 20 04:01:22 2025 GMT Subject: CN=f5713f3169d061da32625205df56f5bb7b99aeb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:09:bb:30:73:37:6a:cd:f9:3d:c4:66:15:6e: cd:d1:60:9e:d7:3f:0e:c0:3d:6e:1e:c2:68:cd:88: 8b:c2:d7:7e:02:49:22:44:ab:29:17:be:f8:6a:02: 8d:05:50:f9:ec:8f:42:21:71:62:82:12:a0:53:66: b3:af:01:14:8b:34:dd:0e:08:b5:73:8b:a0:11:d3: 26:21:07:be:a3:3a:cc:9f:22:84:c7:51:bb:ca:de: d9:9c:f6:f6:11:76:e7:95:f1:6d:bb:46:aa:4f:02: d5:3d:19:84:63:66:db:33:dd:ac:df:aa:b6:bb:ff: e8:82:ae:9b:c9:ce:0e:67:e6:fa:bf:d9:06:4a:97: 7b:d4:b6:8d:d0:ef:d7:40:ad:94:cd:2f:0e:71:09: 6f:f8:bf:53:2e:20:0e:05:75:5c:ab:37:7d:ff:b4: 75:9f:83:f1:79:aa:c3:35:79:ce:ce:6a:e8:9a:12: c3:11:9e:b2:6a:ea:57:61:dc:c9:0e:ef:12:94:3c: 6f:b3:24:10:21:08:d6:df:ab:49:67:34:54:b1:fc: 19:b4:a7:c9:d5:d3:23:e0:43:31:22:e6:6b:70:54: 2d:80:9b:4e:d2:ed:9c:56:86:38:0f:82:d5:5b:bb: 86:31:e5:a7:94:78:ca:17:9e:fa:16:83:97:19:3b: 23:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:71:3F:31:69:D0:61:DA:32:62:52:05:DF:56:F5:BB:7B:99:AE:B5 X509v3 Authority Key Identifier: keyid:12:86:8F:5E:34:EE:FE:FC:E6:55:C1:BB:83:83:29:9F:A5:6C:5C:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoaPXjTu_vzmVcG7g4Mpn6VsXII.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/436aa1-f47a-4cd5-87a2-1f34efb5b7d1/1/EoaPXjTu_vzmVcG7g4Mpn6VsXII.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:2b:48:99:a2:0c:70:68:10:36:5f:a3:21:2a:62:a4:fe:83: fa:fc:a3:d6:71:21:5c:65:d4:7d:fa:a5:1b:f4:16:07:ee:fb: e8:d5:cc:81:f0:4d:f7:f5:57:fe:5b:68:85:e7:90:fd:ce:2d: 11:a2:a6:e6:47:a0:89:81:dc:8a:64:fc:03:50:4d:22:86:5c: 74:83:d1:36:99:d7:16:e1:95:7f:75:90:cf:8d:16:9b:fa:ab: 07:07:59:31:a5:ea:9a:14:a3:7c:f1:bb:54:99:29:e6:03:50: 45:92:47:46:a1:00:b1:e4:e9:3a:6f:73:b8:7e:22:d8:db:e8: 16:87:3c:59:e4:1e:31:ad:56:61:2e:66:43:07:1f:bd:90:c0: 8f:32:fe:94:ee:10:65:47:a0:d3:ee:72:35:22:fa:9e:17:8f: 5d:69:39:25:ff:46:2a:aa:73:4e:61:b7:87:7e:07:38:f8:a6: fb:d9:27:ad:63:9a:2b:aa:8c:41:4e:4b:d4:52:64:1e:7f:73: b0:ce:a8:e6:c9:ae:d1:bd:b2:a4:78:49:75:49:98:72:bb:32: 5e:91:9f:f1:8c:47:71:00:b7:19:06:7f:7e:b7:d5:f4:6e:df: 71:b1:db:68:f4:f4:3a:a8:9e:51:05:99:05:02:c7:0c:1b:ba: af:d1:fc:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xPjsp0TtPuhRd9QHwY9aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyODY4ZjVlMzRlZWZlZmNlNjU1YzFiYjgzODMyOTlmYTU2 YzVjODIwHhcNMjUxMjE5MDQwMTIyWhcNMjUxMjIwMDQwMTIyWjAzMTEwLwYDVQQD EyhmNTcxM2YzMTY5ZDA2MWRhMzI2MjUyMDVkZjU2ZjViYjdiOTlhZWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowm7MHM3as35PcRmFW7N0WCe1z8O wD1uHsJozYiLwtd+AkkiRKspF774agKNBVD57I9CIXFighKgU2azrwEUizTdDgi1 c4ugEdMmIQe+ozrMnyKEx1G7yt7ZnPb2EXbnlfFtu0aqTwLVPRmEY2bbM92s36q2 u//ogq6byc4OZ+b6v9kGSpd71LaN0O/XQK2UzS8OcQlv+L9TLiAOBXVcqzd9/7R1 n4PxearDNXnOzmromhLDEZ6yaupXYdzJDu8SlDxvsyQQIQjW36tJZzRUsfwZtKfJ 1dMj4EMxIuZrcFQtgJtO0u2cVoY4D4LVW7uGMeWnlHjKF576FoOXGTsjTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPVxPzFp0GHaMmJSBd9W9bt7ma61MB8GA1UdIwQY MBaAFBKGj1407v785lXBu4ODKZ+lbFyCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTIt MWYzNGVmYjViN2QxLzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi80MzZhYTEtZjQ3YS00Y2Q1LTg3YTItMWYzNGVmYjViN2Qx LzEvRW9hUFhqVHVfdnptVmNHN2c0TXBuNlZzWElJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhytImaIM cGgQNl+jISpipP6D+vyj1nEhXGXUffqlG/QWB+776NXMgfBN9/VX/ltoheeQ/c4t EaKm5kegiYHcimT8A1BNIoZcdIPRNpnXFuGVf3WQz40Wm/qrBwdZMaXqmhSjfPG7 VJkp5gNQRZJHRqEAseTpOm9zuH4i2NvoFoc8WeQeMa1WYS5mQwcfvZDAjzL+lO4Q ZUeg0+5yNSL6nhePXWk5Jf9GKqpzTmG3h34HOPim+9knrWOaK6qMQU5L1FJkHn9z sM6o5smu0b2ypHhJdUmYcrsyXpGf8YxHcQC3GQZ/frfV9G7fcbHbaPT0OqieUQWZ BQLHDBu6r9H8UA== -----END CERTIFICATE-----Generated at Fri Dec 19 13:33:12 2025 by rpki-client