This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft File: eO-oRu6OjAecoehyv-BfngT3_-8.mft (raw, json) Hash identifier: SJfb9r5twCeXZExPhPUaDWcE1hoSKu5JALbiWBpZmfI= Subject key identifier: 05:3E:88:A2:46:DC:8F:3C:B1:74:AF:6B:B0:56:C7:4B:65:45:26:2A Authority key identifier: 78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF Certificate issuer: /CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef Certificate serial: 019AF31D694792E698E2B6EA68C308B7C473 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft Manifest number: 12EF Signing time: Sat 06 Dec 2025 10:03:02 +0000 Manifest this update: Sat 06 Dec 2025 10:03:02 +0000 Manifest next update: Sun 07 Dec 2025 10:03:02 +0000 Files and hashes: 1: eO-oRu6OjAecoehyv-BfngT3_-8.crl (hash: 4WRsMw0pH09tA1ZypGYO1LMUDPtu2Gu90lluGfOjoMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:03:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:69:47:92:e6:98:e2:b6:ea:68:c3:08:b7:c4:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78efa846ee8e8c079ca1e872bfe05f9e04f7ffef Validity Not Before: Dec 6 10:03:02 2025 GMT Not After : Dec 7 10:03:02 2025 GMT Subject: CN=053e88a246dc8f3cb174af6bb056c74b6545262a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:32:47:6f:4c:09:3b:01:7a:2e:72:1b:41: d9:13:89:c6:d8:26:22:d2:bc:5b:d8:38:27:e9:a9: d2:48:4c:63:a6:27:f0:60:24:d8:bb:f5:6b:51:ad: f1:3a:37:2c:ce:d8:35:d0:a6:3f:2c:e5:e2:a5:10: 5c:8a:0d:2f:d3:51:af:6b:2b:e1:11:84:ac:bc:b0: 2f:cd:7a:d5:96:eb:78:6b:68:22:92:e6:92:1c:39: 12:b8:d0:66:a9:5e:bc:56:e9:69:00:5a:b0:db:22: 7b:d5:cf:e4:32:47:01:57:49:cf:ba:e2:4a:79:01: b3:cf:8f:cc:c5:86:2e:4e:3c:26:37:70:a2:55:7f: 5e:e0:62:b4:38:dc:b4:e8:2f:25:ab:b7:6c:84:5c: 0b:c4:fb:ec:0d:c5:c5:94:dd:07:5a:1e:fa:c1:e1: 35:22:83:91:27:d3:84:95:00:11:4c:1f:fd:0d:df: cc:af:42:f1:d4:6a:df:88:4f:a7:4b:fe:73:3b:9c: e1:a3:4e:14:c8:bb:c6:b0:b9:5b:a1:28:54:39:b7: b0:9e:c6:7b:f9:14:a0:e3:3e:ff:84:2a:b8:94:8a: 53:4a:8f:c9:94:ce:53:b3:3c:44:9f:ff:de:74:53: 0f:24:b8:32:5b:24:06:ea:79:76:af:ee:8a:f9:f2: f1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:3E:88:A2:46:DC:8F:3C:B1:74:AF:6B:B0:56:C7:4B:65:45:26:2A X509v3 Authority Key Identifier: keyid:78:EF:A8:46:EE:8E:8C:07:9C:A1:E8:72:BF:E0:5F:9E:04:F7:FF:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eO-oRu6OjAecoehyv-BfngT3_-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/3c87b8-a840-4090-9465-63cef23f8d31/1/eO-oRu6OjAecoehyv-BfngT3_-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:42:ea:06:c8:4e:7b:01:3b:d4:8a:f2:6a:01:da:a4:ae:38: 5d:2f:5f:31:e9:bb:99:96:a6:6c:0e:96:a0:44:00:f3:be:ce: 80:63:f0:c4:73:24:9a:4c:f4:0a:b7:fc:22:1c:eb:11:c5:14: 4a:3b:11:84:fe:3d:20:af:78:b7:d5:7c:a5:9f:f8:6e:7d:47: 48:77:3d:a6:70:2a:10:ad:4b:fd:92:f8:9b:5e:43:c6:dd:03: 52:38:ea:75:bd:9f:a6:40:9b:5f:9f:ee:b7:5a:8f:f3:f1:0b: aa:ff:a9:02:0b:ec:f3:f5:e3:cc:9d:f8:70:73:33:89:6a:7d: 60:5b:38:38:64:9c:f7:d1:a2:1d:52:f4:bf:8c:ef:a1:bd:a6: 39:5b:be:fd:3f:3c:ad:64:91:b0:a0:a1:e7:68:6c:d4:aa:f5: 82:d5:f2:1c:36:2a:17:0d:e4:de:be:c7:ab:8a:db:4c:3f:8f: 7e:5b:13:f0:4b:42:88:e6:24:57:4a:1c:92:f1:cd:56:e5:68: d5:9c:b0:a2:12:3c:2b:aa:58:01:c8:f1:85:0c:1e:87:77:ba: af:07:1f:8f:cd:ae:a1:a3:bd:29:2e:c5:e3:91:6f:88:5a:3c: a5:5c:2b:ae:09:64:3e:06:85:1f:80:4c:7f:00:12:57:d5:a0: d1:d8:b7:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHWlHkuaY4rbqaMMIt8RzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZWZhODQ2ZWU4ZThjMDc5Y2ExZTg3MmJmZTA1ZjllMDRm N2ZmZWYwHhcNMjUxMjA2MTAwMzAyWhcNMjUxMjA3MTAwMzAyWjAzMTEwLwYDVQQD EygwNTNlODhhMjQ2ZGM4ZjNjYjE3NGFmNmJiMDU2Yzc0YjY1NDUyNjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8gyR29MCTsBei5yG0HZE4nG2CYi 0rxb2Dgn6anSSExjpifwYCTYu/VrUa3xOjcsztg10KY/LOXipRBcig0v01Gvayvh EYSsvLAvzXrVlut4a2gikuaSHDkSuNBmqV68VulpAFqw2yJ71c/kMkcBV0nPuuJK eQGzz4/MxYYuTjwmN3CiVX9e4GK0ONy06C8lq7dshFwLxPvsDcXFlN0HWh76weE1 IoORJ9OElQARTB/9Dd/Mr0Lx1GrfiE+nS/5zO5zho04UyLvGsLlboShUObewnsZ7 +RSg4z7/hCq4lIpTSo/JlM5TszxEn//edFMPJLgyWyQG6nl2r+6K+fLxcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAU+iKJG3I88sXSva7BWx0tlRSYqMB8GA1UdIwQY MBaAFHjvqEbujowHnKHocr/gX54E9//vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUt NjNjZWYyM2Y4ZDMxLzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My8zYzg3YjgtYTg0MC00MDkwLTk0NjUtNjNjZWYyM2Y4ZDMx LzEvZU8tb1J1Nk9qQWVjb2VoeXYtQmZuZ1QzXy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACELqBshO ewE71IryagHapK44XS9fMem7mZambA6WoEQA877OgGPwxHMkmkz0Crf8IhzrEcUU SjsRhP49IK94t9V8pZ/4bn1HSHc9pnAqEK1L/ZL4m15Dxt0DUjjqdb2fpkCbX5/u t1qP8/ELqv+pAgvs8/XjzJ34cHMziWp9YFs4OGSc99GiHVL0v4zvob2mOVu+/T88 rWSRsKCh52hs1Kr1gtXyHDYqFw3k3r7Hq4rbTD+PflsT8EtCiOYkV0ockvHNVuVo 1ZywohI8K6pYAcjxhQweh3e6rwcfj82uoaO9KS7F45FviFo8pVwrrglkPgaFH4BM fwASV9Wg0di3gQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:00:24 2025 by rpki-client