This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft File: eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft (raw, json) Hash identifier: IUT4bcNmBZWe/DRPS9VotzQdoZD3gNErwStHueXm/lE= Subject key identifier: D5:9D:D0:B6:DD:61:62:33:34:0B:66:BA:EE:4A:3B:FB:D7:25:41:0A Authority key identifier: 78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4 Certificate issuer: /CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4 Certificate serial: 019AF19AB0840960C25E508A3F7CE49D4D6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft Manifest number: 0129 Signing time: Sat 06 Dec 2025 03:00:37 +0000 Manifest this update: Sat 06 Dec 2025 03:00:37 +0000 Manifest next update: Sun 07 Dec 2025 03:00:37 +0000 Files and hashes: 1: eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl (hash: Knsq+xX2VhJyOCgoL8VSJsPmmNr6O6uMX+UgXeiKOtY=) 2: liGvOqZEMZVJ31qcvM63A-JRrWQ.roa (hash: 7Wp5rJr7TP0Q094F3fLaEjNmRJEAB/0CXre5MVFA1x0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9a:b0:84:09:60:c2:5e:50:8a:3f:7c:e4:9d:4d:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78220e2d4a591497c0f91b880ce6f0a3e47770e4 Validity Not Before: Dec 6 03:00:37 2025 GMT Not After : Dec 7 03:00:37 2025 GMT Subject: CN=d59dd0b6dd616233340b66baee4a3bfbd725410a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ea:59:db:11:8a:19:70:61:a2:f5:47:28:a5: 7e:e4:87:be:4e:66:54:23:bc:ac:2a:e5:23:50:1e: 33:90:4d:a6:a9:bb:50:43:ec:b8:b6:63:b3:2b:80: 8b:8e:d6:61:3f:df:20:d7:94:f2:97:72:89:43:e2: 98:e6:cd:2c:03:ee:4d:c1:34:58:60:2d:09:bb:6d: 88:cf:0d:7a:87:dc:7f:fd:e3:1a:67:24:fd:56:36: c4:13:7d:f8:39:5f:6b:73:2f:40:e9:9b:f3:6e:1e: 41:a8:97:68:5c:59:7e:9d:72:26:bd:e6:6d:ec:58: bb:95:a7:41:ef:a7:1e:d6:81:45:54:c6:ef:94:5f: d1:ae:02:1c:fc:2a:72:c2:f4:7d:63:9d:68:69:8e: 55:cd:60:3a:0f:46:89:62:f4:d5:4b:eb:88:e8:1c: 4b:e6:5c:a7:6a:be:f3:74:48:d4:8b:83:b1:02:9e: 90:73:97:bf:c3:dc:62:ea:ea:38:5a:07:02:92:51: 3c:99:a1:e1:52:58:13:ec:1d:68:f0:aa:75:23:80: a6:d6:46:5a:12:7e:2f:94:38:99:73:26:15:0c:81: 2c:ae:1e:23:2f:70:d8:34:c2:9c:72:ca:89:99:6f: 13:01:64:8f:0e:d1:7c:51:f0:c6:0f:73:0f:16:91: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9D:D0:B6:DD:61:62:33:34:0B:66:BA:EE:4A:3B:FB:D7:25:41:0A X509v3 Authority Key Identifier: keyid:78:22:0E:2D:4A:59:14:97:C0:F9:1B:88:0C:E6:F0:A3:E4:77:70:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCIOLUpZFJfA-RuIDObwo-R3cOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe4179-a21d-4ea4-8a1a-d57a4da4cc1e/1/eCIOLUpZFJfA-RuIDObwo-R3cOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c9:a3:e3:b4:8b:7c:8f:6e:1a:0b:77:38:18:18:33:a7:93: fd:e1:8e:ed:5c:6e:47:a5:92:45:d0:a3:66:25:b2:08:3b:5d: db:9f:76:aa:63:75:0b:09:a5:6c:aa:b1:b2:45:32:9a:17:95: 22:03:d7:e6:12:26:86:d3:14:55:85:6e:80:f4:23:0a:16:b6: 9d:bc:d8:2c:94:81:56:a3:87:c0:d6:97:d1:98:6d:c8:fc:67: 82:2f:0c:cf:16:db:76:f3:46:6e:80:c6:a6:ee:f1:5c:80:ae: 0e:d8:1d:3a:5b:e8:c0:69:b3:42:ac:9c:35:00:64:a7:2b:62: a2:b6:0f:d1:d1:c7:22:ac:83:41:8f:7e:db:7e:3e:59:1b:e0: db:5c:1d:e4:ed:b5:b3:25:ce:51:6b:25:52:af:ed:b2:2d:2d: 28:dd:af:99:6c:63:8d:b1:d3:83:f9:96:d6:8e:e7:d4:29:f9: 11:3d:be:d5:7a:d3:48:85:73:e4:da:bd:71:a5:54:73:21:10: 6a:60:7e:93:16:af:64:9e:a2:cf:d1:98:97:6c:a1:a3:5d:73: dc:93:76:aa:64:34:50:24:b8:76:1e:87:99:05:2b:c3:5d:e3: ca:eb:09:8c:c6:66:56:4e:ba:f5:37:b5:e0:85:03:36:9f:29: 68:a3:5b:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmrCECWDCXlCKP3zknU1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MjIwZTJkNGE1OTE0OTdjMGY5MWI4ODBjZTZmMGEzZTQ3 NzcwZTQwHhcNMjUxMjA2MDMwMDM3WhcNMjUxMjA3MDMwMDM3WjAzMTEwLwYDVQQD EyhkNTlkZDBiNmRkNjE2MjMzMzQwYjY2YmFlZTRhM2JmYmQ3MjU0MTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7upZ2xGKGXBhovVHKKV+5Ie+TmZU I7ysKuUjUB4zkE2mqbtQQ+y4tmOzK4CLjtZhP98g15Tyl3KJQ+KY5s0sA+5NwTRY YC0Ju22Izw16h9x//eMaZyT9VjbEE334OV9rcy9A6Zvzbh5BqJdoXFl+nXImveZt 7Fi7ladB76ce1oFFVMbvlF/RrgIc/CpywvR9Y51oaY5VzWA6D0aJYvTVS+uI6BxL 5lynar7zdEjUi4OxAp6Qc5e/w9xi6uo4WgcCklE8maHhUlgT7B1o8Kp1I4Cm1kZa En4vlDiZcyYVDIEsrh4jL3DYNMKccsqJmW8TAWSPDtF8UfDGD3MPFpES+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWd0LbdYWIzNAtmuu5KO/vXJUEKMB8GA1UdIwQY MBaAFHgiDi1KWRSXwPkbiAzm8KPkd3DkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUNJT0xVcFpGSmZBLVJ1SURPYndvLVIzY09RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9mZTQxNzktYTIxZC00ZWE0LThhMWEt ZDU3YTRkYTRjYzFlLzEvZUNJT0xVcFpGSmZBLVJ1SURPYndvLVIzY09RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi9mZTQxNzktYTIxZC00ZWE0LThhMWEtZDU3YTRkYTRjYzFl LzEvZUNJT0xVcFpGSmZBLVJ1SURPYndvLVIzY09RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMmj47SL fI9uGgt3OBgYM6eT/eGO7VxuR6WSRdCjZiWyCDtd2592qmN1CwmlbKqxskUymheV IgPX5hImhtMUVYVugPQjCha2nbzYLJSBVqOHwNaX0ZhtyPxngi8MzxbbdvNGboDG pu7xXICuDtgdOlvowGmzQqycNQBkpytiorYP0dHHIqyDQY9+234+WRvg21wd5O21 syXOUWslUq/tsi0tKN2vmWxjjbHTg/mW1o7n1Cn5ET2+1XrTSIVz5Nq9caVUcyEQ amB+kxavZJ6iz9GYl2yho11z3JN2qmQ0UCS4dh6HmQUrw13jyusJjMZmVk669Te1 4IUDNp8paKNbHQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:07:17 2025 by rpki-client