This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft File: eC-fO7vgtR6p6bLpbGhodI-gePc.mft (raw, json) Hash identifier: HtGuPJ92pgugh0LtUcgNxFPT/G7hx3kjjSMXf8d5W9A= Subject key identifier: 09:03:A0:C5:B6:51:2B:50:E2:F0:E7:AA:DF:53:D4:54:F3:EB:A1:D8 Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Certificate serial: 019AF72F83511270852BCCBE3073E38CC153 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft Manifest number: 09C1 Signing time: Sun 07 Dec 2025 05:01:17 +0000 Manifest this update: Sun 07 Dec 2025 05:01:17 +0000 Manifest next update: Mon 08 Dec 2025 05:01:17 +0000 Files and hashes: 1: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (hash: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=) 2: eC-fO7vgtR6p6bLpbGhodI-gePc.crl (hash: 8t2J3g0RCT9xehlntQXIU/3PZVWpSxfDXLmNQE2VZ/w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f7:2f:83:51:12:70:85:2b:cc:be:30:73:e3:8c:c1:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7 Validity Not Before: Dec 7 05:01:17 2025 GMT Not After : Dec 8 05:01:17 2025 GMT Subject: CN=0903a0c5b6512b50e2f0e7aadf53d454f3eba1d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:9d:af:3a:f1:64:7c:5b:c2:86:e4:c0:da: e3:77:5e:24:cd:27:4b:56:63:d9:71:5a:44:1a:50: 93:19:8f:b3:bc:50:27:ad:f9:ce:cb:0c:d3:6e:50: 7b:d2:05:9f:12:69:6c:ae:96:6b:39:cf:9e:b1:c2: 8e:7b:64:29:7a:a8:62:8f:72:b0:39:d6:17:cb:8b: 40:07:31:e5:4d:a2:ea:20:5a:26:27:43:32:ce:d9: f7:f3:c5:47:f2:9d:08:6a:a5:06:f6:f0:b8:9e:42: a4:cb:7e:0a:dc:cf:f5:55:9e:88:ed:a4:23:1f:1a: fe:61:5a:67:ce:f4:72:73:e9:84:56:84:5e:dd:fd: 00:b7:0e:28:32:f6:eb:c6:a5:45:8c:6e:0c:e9:bc: 5e:ef:6b:3a:a0:6c:c0:1a:1a:e8:5a:a4:0b:e9:c6: 6b:17:a1:00:cc:a7:91:70:82:d4:c5:47:5d:09:19: 9e:7f:69:87:6d:86:67:a2:af:52:ed:6d:e5:80:c6: c8:62:2a:f2:19:5c:e8:dc:37:08:08:67:31:5b:5c: aa:b9:29:27:23:6f:44:0b:4e:cd:7c:1d:0a:84:21: f1:e6:a1:b7:a3:5c:f1:e6:5b:ef:77:23:25:13:5e: bc:6e:04:8f:91:6e:65:4f:09:8e:39:0b:f0:8a:8e: 61:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:03:A0:C5:B6:51:2B:50:E2:F0:E7:AA:DF:53:D4:54:F3:EB:A1:D8 X509v3 Authority Key Identifier: keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:62:26:4f:a7:b3:41:a1:1c:64:35:57:85:68:07:6d:68:a3: 52:08:19:02:21:41:8a:1d:4c:e4:f9:88:56:9e:49:e2:c9:e2: 78:36:17:35:01:18:f9:1f:1e:3e:81:9c:bf:56:4f:bf:2a:79: 8e:65:38:53:33:54:5f:57:1f:9c:02:13:52:e9:63:4f:7a:65: 9d:07:0f:4b:6b:60:33:5f:a7:e4:17:a3:fb:b4:6d:f5:a3:af: 25:ae:71:e8:71:00:22:03:10:4c:24:a4:4f:f4:ad:ea:40:ed: 27:2c:0f:a7:28:fb:ae:87:f9:d1:3c:14:c8:cd:d3:3c:b4:98: 0b:5d:50:a4:69:6d:4a:50:f2:34:dc:f0:bf:fd:76:14:1b:fe: 51:e6:cf:39:08:0a:72:48:16:4a:d3:26:a2:88:ac:6c:52:16: 65:c1:e4:06:a0:d0:57:a0:08:c7:07:96:dd:ee:33:e0:11:b6: 5c:8d:cc:5a:42:43:d1:b7:64:f1:54:dd:dd:40:1c:6d:27:f0: 79:2c:24:2a:4f:d8:4f:5f:5b:04:60:c4:1d:22:ca:17:9b:c3: 3d:0e:96:d5:08:f2:4c:9f:85:d6:83:f8:a4:58:cb:6b:39:3b: de:59:37:1b:be:a2:a4:1d:a0:35:21:71:2e:74:42:6a:a8:32: 3f:b9:cf:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr3L4NREnCFK8y+MHPjjMFTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MmY5ZjNiYmJlMGI1MWVhOWU5YjJlOTZjNjg2ODc0OGZh MDc4ZjcwHhcNMjUxMjA3MDUwMTE3WhcNMjUxMjA4MDUwMTE3WjAzMTEwLwYDVQQD EygwOTAzYTBjNWI2NTEyYjUwZTJmMGU3YWFkZjUzZDQ1NGYzZWJhMWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZudrzrxZHxbwobkwNrjd14kzSdL VmPZcVpEGlCTGY+zvFAnrfnOywzTblB70gWfEmlsrpZrOc+escKOe2Qpeqhij3Kw OdYXy4tABzHlTaLqIFomJ0Myztn388VH8p0IaqUG9vC4nkKky34K3M/1VZ6I7aQj Hxr+YVpnzvRyc+mEVoRe3f0Atw4oMvbrxqVFjG4M6bxe72s6oGzAGhroWqQL6cZr F6EAzKeRcILUxUddCRmef2mHbYZnoq9S7W3lgMbIYiryGVzo3DcICGcxW1yquSkn I29EC07NfB0KhCHx5qG3o1zx5lvvdyMlE168bgSPkW5lTwmOOQvwio5hWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAkDoMW2UStQ4vDnqt9T1FTz66HYMB8GA1UdIwQY MBaAFHgvnzu74LUeqemy6WxoaHSPoHj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQt NzQzYzMwODAxZmYxLzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lN2YzMjItMzliNS00MzdhLTk5ZmQtNzQzYzMwODAxZmYx LzEvZUMtZk83dmd0UjZwNmJMcGJHaG9kSS1nZVBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoGImT6ez QaEcZDVXhWgHbWijUggZAiFBih1M5PmIVp5J4snieDYXNQEY+R8ePoGcv1ZPvyp5 jmU4UzNUX1cfnAITUuljT3plnQcPS2tgM1+n5Bej+7Rt9aOvJa5x6HEAIgMQTCSk T/St6kDtJywPpyj7rof50TwUyM3TPLSYC11QpGltSlDyNNzwv/12FBv+UebPOQgK ckgWStMmooisbFIWZcHkBqDQV6AIxweW3e4z4BG2XI3MWkJD0bdk8VTd3UAcbSfw eSwkKk/YT19bBGDEHSLKF5vDPQ6W1QjyTJ+F1oP4pFjLazk73lk3G76ipB2gNSFx LnRCaqgyP7nPZQ== -----END CERTIFICATE-----Generated at Sun Dec 7 08:12:21 2025 by rpki-client