This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft File: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json) Hash identifier: qz3fBoAqTCE7XgDtAK8AWp2+a29z3oBRN2JF1FVZF9A= Subject key identifier: 22:2E:1F:8F:C7:E9:37:52:BE:6A:28:30:1A:6E:36:02:49:8E:E5:D0 Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907 Certificate serial: 019AF1645622682528252B0FF3A8C644577C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft Manifest number: 020F Signing time: Sat 06 Dec 2025 02:01:15 +0000 Manifest this update: Sat 06 Dec 2025 02:01:15 +0000 Manifest next update: Sun 07 Dec 2025 02:01:15 +0000 Files and hashes: 1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: xO5T0uUgeLCm3bYmW9i1JSGgR4Wu9PYJZiULb8PtsY4=) 2: lexK-PZGa0dRIxHrAucmPZfoZH8.roa (hash: BTYzPVVTX+QrUsB9dt95kpnERBtDlHXeueDyzr/RAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:56:22:68:25:28:25:2b:0f:f3:a8:c6:44:57:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907 Validity Not Before: Dec 6 02:01:15 2025 GMT Not After : Dec 7 02:01:15 2025 GMT Subject: CN=222e1f8fc7e93752be6a28301a6e3602498ee5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:bf:22:47:bf:f2:bf:42:c6:6f:38:23:66: 3e:25:f0:5c:d8:79:2a:a4:76:9d:d7:7f:3e:74:c7: 51:27:86:4c:93:83:48:38:e7:82:2a:4d:ae:30:62: 6d:c1:c4:a9:8b:9d:b6:3e:38:b8:99:8a:a6:b7:e6: 19:3c:da:2e:21:a0:99:23:be:6d:fa:a8:ee:15:62: 51:00:03:cf:bd:3c:dd:90:30:22:12:7c:73:4d:c6: ec:d9:08:b1:9f:8b:97:9b:26:15:2e:d6:eb:2e:bb: 8c:7e:65:c6:a8:2b:84:44:59:b5:c1:63:b4:53:f3: 19:f9:c3:5a:45:31:d1:62:89:b5:01:3b:4e:32:e0: 39:9e:2a:51:0c:e9:29:94:58:0f:6c:00:0e:5c:32: cf:a7:57:f1:00:e6:4d:19:c1:44:65:19:24:e1:2c: d1:9d:a3:af:04:c6:b4:e3:69:aa:21:24:e9:60:b9: 05:01:9c:87:82:0f:13:db:df:7b:09:ff:d3:41:7b: c3:75:24:aa:cc:59:16:87:53:63:24:80:8f:c7:34: 8d:8e:33:2a:d7:68:eb:61:22:30:7e:97:24:7e:6f: e2:81:4e:a4:ed:df:36:86:53:c2:20:3a:d0:8c:80: 68:dd:36:c6:a4:c1:a9:14:49:3b:fc:b3:b1:cd:49: 5c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:2E:1F:8F:C7:E9:37:52:BE:6A:28:30:1A:6E:36:02:49:8E:E5:D0 X509v3 Authority Key Identifier: keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:e2:f2:10:9c:d6:4d:80:ec:99:96:9e:9b:3d:d2:ca:d3:50: c2:7b:8e:e0:9d:26:de:dc:03:0e:cb:9c:6f:73:29:3f:0d:56: 2a:2b:32:51:fc:e0:86:3a:84:67:85:67:cc:4f:db:b1:54:3b: 2a:a2:96:56:92:bf:38:0a:2d:b3:73:09:27:2b:40:bc:1d:25: 5a:67:7f:02:27:55:ce:f0:21:d3:bf:b7:d1:82:07:7e:90:c6: 97:a2:f7:06:cc:af:f9:aa:ec:24:7c:f8:04:24:f5:f2:77:9a: 9c:b0:5b:a0:49:bd:a0:a9:f9:18:42:e1:02:0a:f4:a1:74:49: 30:f9:43:99:50:3c:e1:27:37:39:29:bb:50:d9:83:11:da:30: 9c:8f:ac:6e:f9:36:4b:51:43:d6:97:e9:36:9a:77:e8:e2:0f: a1:42:dd:d7:d7:89:4f:e6:69:40:cd:d6:bc:ef:29:91:78:7b: f4:f3:08:35:f1:49:a6:23:f4:51:03:e3:e7:73:74:5c:9e:14: 7c:d9:f1:e2:08:14:eb:cc:2e:8d:ca:f8:aa:e8:50:8e:6d:a3: 86:cf:16:68:99:90:46:7b:6e:41:3f:fc:fe:bb:c5:73:04:14: c4:4d:23:f8:e6:e9:c3:6a:cd:d5:85:d5:ee:5c:8b:37:7f:5f: 0d:7c:4d:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFYiaCUoJSsP86jGRFd8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTVlZmU5MzRjZjM3N2RkZjM3M2IzNjY3MjFmMTMzOTI0 M2Y5MDcwHhcNMjUxMjA2MDIwMTE1WhcNMjUxMjA3MDIwMTE1WjAzMTEwLwYDVQQD EygyMjJlMWY4ZmM3ZTkzNzUyYmU2YTI4MzAxYTZlMzYwMjQ5OGVlNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2W/Ike/8r9Cxm84I2Y+JfBc2Hkq pHad138+dMdRJ4ZMk4NIOOeCKk2uMGJtwcSpi522Pji4mYqmt+YZPNouIaCZI75t +qjuFWJRAAPPvTzdkDAiEnxzTcbs2Qixn4uXmyYVLtbrLruMfmXGqCuERFm1wWO0 U/MZ+cNaRTHRYom1ATtOMuA5nipRDOkplFgPbAAOXDLPp1fxAOZNGcFEZRkk4SzR naOvBMa042mqISTpYLkFAZyHgg8T2997Cf/TQXvDdSSqzFkWh1NjJICPxzSNjjMq 12jrYSIwfpckfm/igU6k7d82hlPCIDrQjIBo3TbGpMGpFEk7/LOxzUlcKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIuH4/H6TdSvmooMBpuNgJJjuXQMB8GA1UdIwQY MBaAFBDl7+k0zzd93zc7Nmch8TOSQ/kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTIt OTVjMGEzZDk1Y2Q0LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTItOTVjMGEzZDk1Y2Q0 LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARuLyEJzW TYDsmZaemz3SytNQwnuO4J0m3twDDsucb3MpPw1WKisyUfzghjqEZ4VnzE/bsVQ7 KqKWVpK/OAots3MJJytAvB0lWmd/AidVzvAh07+30YIHfpDGl6L3Bsyv+arsJHz4 BCT18neanLBboEm9oKn5GELhAgr0oXRJMPlDmVA84Sc3OSm7UNmDEdownI+sbvk2 S1FD1pfpNpp36OIPoULd19eJT+ZpQM3WvO8pkXh79PMINfFJpiP0UQPj53N0XJ4U fNnx4ggU68wujcr4quhQjm2jhs8WaJmQRntuQT/8/rvFcwQUxE0j+Obpw2rN1YXV 7lyLN39fDXxNLg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:35:39 2025 by rpki-client