This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft File: eBC14tQZE_koo06ZYbf8iWSFAEY.mft (raw, json) Hash identifier: 9ns7+uX8FnR9dAHW7KGF65EtFjC3p+HISUR+qqmDmNI= Subject key identifier: 1A:C8:F3:58:29:4E:37:C8:5B:D4:0B:E8:C5:71:8C:04:D7:66:1D:2D Authority key identifier: 78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46 Certificate issuer: /CN=7810b5e2d41913f928a34e9961b7fc8964850046 Certificate serial: 019AF352A831E523E90BDDC185755AB202F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft Manifest number: B2 Signing time: Sat 06 Dec 2025 11:01:11 +0000 Manifest this update: Sat 06 Dec 2025 11:01:11 +0000 Manifest next update: Sun 07 Dec 2025 11:01:11 +0000 Files and hashes: 1: cE7D59zxehJZdZNEvYWQXDVNz7A.roa (hash: p6fUjsKyUdQv5Z7o25/yMrHwWCat6eLyUeS3asqc+Yo=) 2: eBC14tQZE_koo06ZYbf8iWSFAEY.crl (hash: x3cfQYyfimYz2dUri7mz+jooGEzvoza6zX5ydZ1LuFQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:a8:31:e5:23:e9:0b:dd:c1:85:75:5a:b2:02:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7810b5e2d41913f928a34e9961b7fc8964850046 Validity Not Before: Dec 6 11:01:11 2025 GMT Not After : Dec 7 11:01:11 2025 GMT Subject: CN=1ac8f358294e37c85bd40be8c5718c04d7661d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:89:13:a2:83:a6:44:72:d7:84:1f:68:fe: 5b:9f:6e:2a:61:0f:1b:be:23:46:3f:f2:62:73:ed: cd:74:3b:f7:3f:54:19:f3:b8:ea:4d:49:1f:14:e8: 4f:e7:f2:d2:a3:42:18:0b:01:e5:66:35:bd:8c:5a: ad:2c:30:62:be:6b:d7:d3:96:4e:79:d9:8d:2f:4d: 8a:3f:11:8a:9c:cc:93:c3:8f:8c:e2:8b:f7:74:9a: 0a:86:41:ac:3e:90:d1:28:4a:89:cf:98:d9:98:c4: 03:0c:0a:dd:9c:15:ac:90:cd:83:1d:70:26:aa:f1: 82:bb:11:8c:cf:89:fb:ef:6d:29:71:48:ca:8a:4b: fa:96:69:66:69:10:a9:aa:b3:d9:99:77:b7:43:26: ce:e2:5f:de:ee:e5:4a:3a:47:e9:3b:e4:56:49:6f: 85:18:06:94:3f:f5:a5:1b:f9:20:01:29:f1:9a:a2: 74:3a:41:38:71:eb:74:41:37:c7:14:0f:b2:13:ff: 89:55:b3:77:9d:d7:b0:1f:ec:5b:61:fd:d6:de:db: a4:c4:ad:b5:33:3f:1e:a2:d3:21:bd:ce:e7:21:5d: 77:f2:03:bc:82:66:3c:4b:fc:c1:7a:0c:bc:17:10: fe:a6:26:c7:ec:8b:b9:67:c5:7d:e6:5d:51:4e:39: f6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C8:F3:58:29:4E:37:C8:5B:D4:0B:E8:C5:71:8C:04:D7:66:1D:2D X509v3 Authority Key Identifier: keyid:78:10:B5:E2:D4:19:13:F9:28:A3:4E:99:61:B7:FC:89:64:85:00:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eBC14tQZE_koo06ZYbf8iWSFAEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/76e277-9637-4cbf-91f9-85432e93ee78/1/eBC14tQZE_koo06ZYbf8iWSFAEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:d7:58:00:21:e4:a4:ad:18:af:cd:49:26:3e:27:33:4f:a2: 20:45:cf:46:83:c5:e1:f0:95:38:97:81:7a:ef:57:be:96:ab: b2:d7:b8:ba:a9:ca:31:19:97:8d:96:7e:58:15:7c:ae:24:7c: 1b:de:12:19:65:1e:e5:32:22:e0:dd:b6:82:71:03:5e:48:58: e2:b0:6f:d0:4c:f0:e9:9c:11:22:cc:89:03:98:26:2a:9e:95: 61:a8:d2:6e:20:70:f3:03:e1:2b:73:61:49:46:dc:48:0c:1a: d2:7e:d6:c9:e8:92:c7:83:a2:8a:89:93:90:85:48:2f:e3:8f: 8b:37:b2:96:0f:cc:35:f3:77:b4:c8:af:12:82:3e:65:72:a6: 88:20:02:1d:f9:8e:c6:e0:77:23:d3:1b:30:3d:ba:20:cf:96: 61:ef:14:a3:26:00:47:6f:2b:08:74:82:ba:35:8c:20:cd:61: 82:cb:40:f9:5a:1e:97:3c:db:11:9d:ad:1c:2f:ff:e3:d6:6d: 14:84:00:b8:e4:c5:bd:5e:77:a2:6e:81:6c:a8:34:b1:2a:c9: 8d:2c:94:5b:5d:dc:2d:8e:21:ad:32:c1:cc:94:d9:90:9b:9d: a8:ec:3e:13:8d:20:af:9c:21:32:42:ce:1a:cc:71:54:fa:a2: 02:2c:e3:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUqgx5SPpC93BhXVasgL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MTBiNWUyZDQxOTEzZjkyOGEzNGU5OTYxYjdmYzg5NjQ4 NTAwNDYwHhcNMjUxMjA2MTEwMTExWhcNMjUxMjA3MTEwMTExWjAzMTEwLwYDVQQD EygxYWM4ZjM1ODI5NGUzN2M4NWJkNDBiZThjNTcxOGMwNGQ3NjYxZDJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ECJE6KDpkRy14QfaP5bn24qYQ8b viNGP/Jic+3NdDv3P1QZ87jqTUkfFOhP5/LSo0IYCwHlZjW9jFqtLDBivmvX05ZO edmNL02KPxGKnMyTw4+M4ov3dJoKhkGsPpDRKEqJz5jZmMQDDArdnBWskM2DHXAm qvGCuxGMz4n7720pcUjKikv6lmlmaRCpqrPZmXe3QybO4l/e7uVKOkfpO+RWSW+F GAaUP/WlG/kgASnxmqJ0OkE4cet0QTfHFA+yE/+JVbN3ndewH+xbYf3W3tukxK21 Mz8eotMhvc7nIV138gO8gmY8S/zBegy8FxD+pibH7Iu5Z8V95l1RTjn2oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrI81gpTjfIW9QL6MVxjATXZh0tMB8GA1UdIwQY MBaAFHgQteLUGRP5KKNOmWG3/IlkhQBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUJDMTR0UVpFX2tvbzA2WlliZjhpV1NGQUVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi83NmUyNzctOTYzNy00Y2JmLTkxZjkt ODU0MzJlOTNlZTc4LzEvZUJDMTR0UVpFX2tvbzA2WlliZjhpV1NGQUVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi83NmUyNzctOTYzNy00Y2JmLTkxZjktODU0MzJlOTNlZTc4 LzEvZUJDMTR0UVpFX2tvbzA2WlliZjhpV1NGQUVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNdYACHk pK0Yr81JJj4nM0+iIEXPRoPF4fCVOJeBeu9Xvparste4uqnKMRmXjZZ+WBV8riR8 G94SGWUe5TIi4N22gnEDXkhY4rBv0Ezw6ZwRIsyJA5gmKp6VYajSbiBw8wPhK3Nh SUbcSAwa0n7WyeiSx4OiiomTkIVIL+OPizeylg/MNfN3tMivEoI+ZXKmiCACHfmO xuB3I9MbMD26IM+WYe8UoyYAR28rCHSCujWMIM1hgstA+VoelzzbEZ2tHC//49Zt FIQAuOTFvV53om6BbKg0sSrJjSyUW13cLY4hrTLBzJTZkJudqOw+E40gr5whMkLO GsxxVPqiAizj8Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:13:27 2025 by rpki-client