This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft File: eteMr7NfX5az9s7OlwYVrVz_9xE.mft (raw, json) Hash identifier: EdfFr9a+Tq0aCDYw5a9IlE/t4fLU0BzETyOEQ+psL4Y= Subject key identifier: D3:A7:A0:DC:3B:19:09:40:07:C2:11:43:97:28:1F:1B:FF:5C:1A:2E Authority key identifier: 7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11 Certificate issuer: /CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711 Certificate serial: 019AF208A8FB80FBF853CD1F0E079E3447E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft Manifest number: 0274 Signing time: Sat 06 Dec 2025 05:00:45 +0000 Manifest this update: Sat 06 Dec 2025 05:00:45 +0000 Manifest next update: Sun 07 Dec 2025 05:00:45 +0000 Files and hashes: 1: eteMr7NfX5az9s7OlwYVrVz_9xE.crl (hash: NBKWtbYHrVY9H+b7q11wNH9tq2SjXNljeggLEEoSOfE=) 2: mjCXGX40P2ffcrN44boEpnJTaTc.roa (hash: LgLHJFwEHcRfiWC8m23QPb6Ya1PBtB3V5dXpILctiVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:a8:fb:80:fb:f8:53:cd:1f:0e:07:9e:34:47:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711 Validity Not Before: Dec 6 05:00:45 2025 GMT Not After : Dec 7 05:00:45 2025 GMT Subject: CN=d3a7a0dc3b19094007c2114397281f1bff5c1a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b7:e7:27:72:4b:cf:35:37:7a:8f:69:3e:fe: c5:b0:75:d3:34:c0:5e:eb:5d:d0:03:50:ed:84:74: 14:3d:07:2c:58:c7:38:f9:2b:97:b0:8e:d6:49:e2: c7:b3:07:11:7f:11:46:48:b7:bc:d2:ed:73:fa:28: fc:a9:7a:93:56:cc:a6:b6:bb:d4:64:6c:75:94:8d: 5e:7a:e2:69:6e:ea:17:90:2c:45:bc:14:29:9a:bd: 01:a8:55:cf:ae:f0:23:0f:b2:36:fe:89:03:da:22: 6a:68:3f:47:fd:00:68:8b:2a:c4:50:29:31:69:2a: ca:3e:c4:30:c6:54:09:c4:40:5d:fc:ea:08:09:c9: 1f:e4:44:cb:57:5e:ce:d0:f9:2d:fd:72:32:dd:96: a9:50:40:03:98:31:46:d7:f7:f8:94:33:0d:69:a4: ba:dc:ca:f4:1d:c7:33:fe:8e:f1:80:01:f2:65:78: a1:e3:c1:49:93:7a:e1:08:fa:f9:d8:4e:9e:1b:02: 6e:2d:5c:60:4b:ce:b8:cb:bc:2f:17:95:72:5d:95: 15:f1:ad:6b:5e:dd:05:57:47:99:56:b4:7d:de:4d: 2a:f2:41:5a:70:b7:6a:c0:aa:f3:04:a6:dc:d1:b0: ce:a3:76:23:18:79:e2:8d:5c:6d:1a:9c:4a:7e:29: 05:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:A7:A0:DC:3B:19:09:40:07:C2:11:43:97:28:1F:1B:FF:5C:1A:2E X509v3 Authority Key Identifier: keyid:7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:89:db:ac:d1:b7:0d:df:ef:7b:6c:14:66:9e:e9:0a:4c:2c: 6c:0a:b2:f8:b9:8b:b3:9d:26:8f:d6:80:9f:65:69:01:b0:8d: 46:81:3d:5b:b7:a6:d0:2c:75:8e:e8:63:af:31:70:94:e3:e7: ba:06:c2:f4:c7:69:e5:2f:cf:4d:01:2d:a0:25:20:b3:93:0b: 21:9a:17:21:76:53:c0:8d:b6:0f:ea:a3:6b:30:2a:85:cf:6a: a6:2c:8d:5a:84:7d:b0:84:8d:3a:cc:92:3c:9f:b5:34:06:1c: 2d:7f:4e:3e:a0:38:d5:c4:67:7b:14:c3:75:81:fb:66:90:db: a3:7f:23:9d:26:bd:a4:cb:57:3d:7d:fd:10:31:94:9e:29:49: 66:4d:80:1b:16:2a:09:33:1e:33:9d:a7:f3:53:23:1b:02:f3: cd:2b:8b:c7:11:e2:75:10:b7:90:2e:41:e3:22:11:f5:6e:36: bc:b0:a2:2c:d2:00:aa:ce:78:a3:69:47:30:2f:dd:c5:b3:ef: d0:ec:eb:9f:06:85:59:55:79:b5:e0:58:ef:06:80:e4:95:91: 0b:2d:76:0e:ca:1f:06:03:90:11:6a:49:10:89:b0:9b:45:71: 9d:d0:e8:d2:52:ca:30:2c:0a:4b:36:aa:97:7d:28:e6:68:6d: 0b:76:86:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCKj7gPv4U80fDgeeNEfnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDc4Y2FmYjM1ZjVmOTZiM2Y2Y2VjZTk3MDYxNWFkNWNm ZmY3MTEwHhcNMjUxMjA2MDUwMDQ1WhcNMjUxMjA3MDUwMDQ1WjAzMTEwLwYDVQQD EyhkM2E3YTBkYzNiMTkwOTQwMDdjMjExNDM5NzI4MWYxYmZmNWMxYTJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbfnJ3JLzzU3eo9pPv7FsHXTNMBe 613QA1DthHQUPQcsWMc4+SuXsI7WSeLHswcRfxFGSLe80u1z+ij8qXqTVsymtrvU ZGx1lI1eeuJpbuoXkCxFvBQpmr0BqFXPrvAjD7I2/okD2iJqaD9H/QBoiyrEUCkx aSrKPsQwxlQJxEBd/OoICckf5ETLV17O0Pkt/XIy3ZapUEADmDFG1/f4lDMNaaS6 3Mr0Hccz/o7xgAHyZXih48FJk3rhCPr52E6eGwJuLVxgS864y7wvF5VyXZUV8a1r Xt0FV0eZVrR93k0q8kFacLdqwKrzBKbc0bDOo3YjGHnijVxtGpxKfikFewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOnoNw7GQlAB8IRQ5coHxv/XBouMB8GA1UdIwQY MBaAFHrXjK+zX1+Ws/bOzpcGFa1c//cRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kYTBlNDctYjYxOS00MTBhLWI0NTEt M2ZkZmVhZTliM2QzLzEvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kYTBlNDctYjYxOS00MTBhLWI0NTEtM2ZkZmVhZTliM2Qz LzEvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN4nbrNG3 Dd/ve2wUZp7pCkwsbAqy+LmLs50mj9aAn2VpAbCNRoE9W7em0Cx1juhjrzFwlOPn ugbC9Mdp5S/PTQEtoCUgs5MLIZoXIXZTwI22D+qjazAqhc9qpiyNWoR9sISNOsyS PJ+1NAYcLX9OPqA41cRnexTDdYH7ZpDbo38jnSa9pMtXPX39EDGUnilJZk2AGxYq CTMeM52n81MjGwLzzSuLxxHidRC3kC5B4yIR9W42vLCiLNIAqs54o2lHMC/dxbPv 0OzrnwaFWVV5teBY7waA5JWRCy12DsofBgOQEWpJEImwm0VxndDo0lLKMCwKSzaq l30o5mhtC3aG6g== -----END CERTIFICATE-----Generated at Sat Dec 6 15:08:38 2025 by rpki-client