This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json) Hash identifier: LNUtlO46LkYhbgLxr3CNJCHmiFtzVnqhb/lZ6ntAPNQ= Subject key identifier: 77:98:2A:67:82:24:6A:55:B9:C1:64:D9:78:BA:3F:82:F7:31:7A:49 Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Certificate serial: 019AF3F78030BC0C0CFC9C22DF5EC12E51B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft Manifest number: 13E8 Signing time: Sat 06 Dec 2025 14:01:14 +0000 Manifest this update: Sat 06 Dec 2025 14:01:14 +0000 Manifest next update: Sun 07 Dec 2025 14:01:14 +0000 Files and hashes: 1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: H8EtIBAM1EOihQdvSMge2A8J0BBtwXD3HNB6E4LMrDk=) 2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:80:30:bc:0c:0c:fc:9c:22:df:5e:c1:2e:51:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Validity Not Before: Dec 6 14:01:14 2025 GMT Not After : Dec 7 14:01:14 2025 GMT Subject: CN=77982a6782246a55b9c164d978ba3f82f7317a49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a2:eb:1b:d8:d5:9f:7f:d2:99:7f:ab:35:50: 07:37:c6:44:a8:4d:43:a1:a9:20:ea:ce:4a:48:c5: d8:cb:0c:d0:ba:65:26:08:2c:f1:01:3a:51:ef:dc: 32:41:b6:23:46:bf:22:a6:59:b8:00:5d:ad:b0:77: b7:d1:fe:0e:a1:f7:c8:d2:86:41:75:00:e1:fa:44: 9d:f6:17:cc:97:f7:58:67:45:51:44:4d:40:4a:f6: af:71:04:b8:1f:23:e7:71:1b:ca:c0:43:78:a4:65: b3:7d:9d:a2:60:b9:27:54:56:6f:a2:dd:68:6b:be: 7c:4a:cf:9f:7f:8c:45:a4:b3:c7:b2:f7:82:1d:2e: 84:a9:5a:48:1a:a1:a5:fb:e1:dd:93:f7:1b:93:d9: 4b:52:0e:b7:02:29:8b:74:db:e5:ca:79:b4:21:8c: 05:d5:cd:e2:df:bc:eb:3e:f1:af:47:b3:c0:b4:89: c3:b7:df:39:7e:d2:27:e3:9b:ce:3d:56:55:51:2c: d9:2b:24:9b:1f:27:41:ff:5f:89:47:c7:17:84:d8: 5f:41:8b:29:c7:df:56:9b:7a:68:cd:3e:d7:c6:c2: 12:f2:4e:a9:f6:df:f8:3b:94:dc:dd:2e:31:a5:46: a1:90:a1:c6:fc:cd:a8:65:ae:78:23:4e:e9:6e:41: ea:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:98:2A:67:82:24:6A:55:B9:C1:64:D9:78:BA:3F:82:F7:31:7A:49 X509v3 Authority Key Identifier: keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:4c:77:ec:84:19:ec:c9:16:b3:4e:15:8a:87:7f:38:96:d1: f6:68:b7:24:fc:59:bb:12:2f:e6:f1:bb:4f:28:83:75:70:09: 0c:56:4b:36:0c:5b:de:ec:f3:13:7b:aa:e4:71:1e:c1:f0:dd: 06:a1:e2:34:78:7c:b6:46:75:b6:84:43:b3:38:f9:6a:2f:7f: d5:63:97:e9:10:c9:62:c0:c8:93:1b:2a:e9:08:9e:62:ea:66: 3f:dc:14:dc:ba:14:96:cc:c6:3c:c8:e6:30:65:ed:e0:e4:6f: 6f:dc:40:32:1e:a8:7c:b6:95:da:5c:12:94:25:8a:6a:f6:4d: c0:5f:5a:2e:aa:1d:8b:9e:d1:63:11:7d:cd:67:e8:93:27:04: 14:cd:d1:49:e8:0c:6e:b9:8d:c6:c8:f7:cc:00:0c:66:56:ac: a1:c5:cf:ca:c6:3a:d9:d1:a8:c2:71:32:54:a6:b0:10:dc:74: e7:67:9f:10:ba:2e:9f:b4:49:0b:61:70:6f:35:24:31:c7:b4: 5f:d3:18:f6:d3:03:8d:5e:6e:3d:ab:57:79:f0:b9:43:37:a9: 04:61:52:fd:25:50:7c:a0:e7:30:87:44:b0:7b:4c:ab:94:0f: 73:6e:fd:0a:47:67:35:c6:b8:2d:2c:29:49:d3:99:28:9a:3a: 9b:cc:68:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz94AwvAwM/Jwi317BLlGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm YTk4OTMwHhcNMjUxMjA2MTQwMTE0WhcNMjUxMjA3MTQwMTE0WjAzMTEwLwYDVQQD Eyg3Nzk4MmE2NzgyMjQ2YTU1YjljMTY0ZDk3OGJhM2Y4MmY3MzE3YTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaLrG9jVn3/SmX+rNVAHN8ZEqE1D oakg6s5KSMXYywzQumUmCCzxATpR79wyQbYjRr8iplm4AF2tsHe30f4OoffI0oZB dQDh+kSd9hfMl/dYZ0VRRE1ASvavcQS4HyPncRvKwEN4pGWzfZ2iYLknVFZvot1o a758Ss+ff4xFpLPHsveCHS6EqVpIGqGl++Hdk/cbk9lLUg63AimLdNvlynm0IYwF 1c3i37zrPvGvR7PAtInDt985ftIn45vOPVZVUSzZKySbHydB/1+JR8cXhNhfQYsp x99Wm3pozT7XxsIS8k6p9t/4O5Tc3S4xpUahkKHG/M2oZa54I07pbkHqjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeYKmeCJGpVucFk2Xi6P4L3MXpJMB8GA1UdIwQY MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn0x37IQZ 7MkWs04Viod/OJbR9mi3JPxZuxIv5vG7TyiDdXAJDFZLNgxb3uzzE3uq5HEewfDd BqHiNHh8tkZ1toRDszj5ai9/1WOX6RDJYsDIkxsq6QieYupmP9wU3LoUlszGPMjm MGXt4ORvb9xAMh6ofLaV2lwSlCWKavZNwF9aLqodi57RYxF9zWfokycEFM3RSegM brmNxsj3zAAMZlasocXPysY62dGownEyVKawENx052efELoun7RJC2FwbzUkMce0 X9MY9tMDjV5uPatXefC5QzepBGFS/SVQfKDnMIdEsHtMq5QPc279CkdnNca4LSwp SdOZKJo6m8xotA== -----END CERTIFICATE-----Generated at Sat Dec 6 17:41:42 2025 by rpki-client