This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft File: eqhsgVbwgG3MzcItzE1hdbj6mJM.mft (raw, json) Hash identifier: YkJ8NzjGdDdxGAcRW5S6J6jBPilGzwDAZzHpYQZvXNc= Subject key identifier: C0:F3:7A:8E:00:E4:C4:72:DD:1D:CC:24:26:49:34:F2:58:62:DA:49 Authority key identifier: 7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 Certificate issuer: /CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Certificate serial: 019B33B27F277E4C373040486E50CD980C74 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft Manifest number: 1409 Signing time: Thu 18 Dec 2025 23:01:34 +0000 Manifest this update: Thu 18 Dec 2025 23:01:34 +0000 Manifest next update: Fri 19 Dec 2025 23:01:34 +0000 Files and hashes: 1: eqhsgVbwgG3MzcItzE1hdbj6mJM.crl (hash: 91LMmc6yR2zKctNPbcS8AKrdXrJmOVOu4Hq/Gxskmtg=) 2: r8_0uelpgxeJEhOZBb5I-C3t9Dw.roa (hash: qSHcoGbD5w1VMiNKpysCXUtKw278KTgr4tRmUU21kpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:7f:27:7e:4c:37:30:40:48:6e:50:cd:98:0c:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa86c8156f0806dcccdc22dcc4d6175b8fa9893 Validity Not Before: Dec 18 23:01:34 2025 GMT Not After : Dec 19 23:01:34 2025 GMT Subject: CN=c0f37a8e00e4c472dd1dcc24264934f25862da49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cd:33:6d:c0:6a:62:3d:af:3a:24:18:0e:09: 6b:d5:ea:97:61:74:35:fe:d1:27:f8:b7:38:d2:53: 52:98:68:88:85:60:db:7f:ff:09:59:f8:fa:11:29: 47:e0:c2:63:9c:ae:f6:46:82:96:bf:de:d9:9d:9c: eb:65:5e:28:28:6f:50:8b:c5:38:f6:04:5f:29:88: 32:5e:89:4f:5e:0d:59:d1:2e:31:2c:54:ef:b5:ae: e2:62:54:2c:aa:ad:29:64:65:a6:fe:42:0f:90:07: ca:a8:b4:60:b1:3d:2e:cc:f2:7a:71:1f:fe:54:1e: 1b:08:9f:b3:a0:33:99:8f:4b:5c:40:46:40:bb:c8: 0f:9c:97:a1:0b:53:f5:a3:93:7a:4d:f9:88:8c:46: 7d:10:86:eb:d2:c5:a6:5a:23:b0:33:cd:47:8d:1f: b0:bc:f0:e6:de:e2:c3:cb:c7:1a:38:77:bd:33:ed: ed:8a:12:77:35:ea:df:03:2f:4d:11:68:bf:18:ff: 2e:38:2b:01:d5:bd:f7:1d:d8:ab:a7:de:0f:40:26: 9e:57:aa:e7:29:b0:45:31:85:d2:eb:dd:36:c9:58: af:98:17:36:87:f9:7d:d4:99:5a:0e:02:30:d2:c8: 30:5f:23:56:6a:03:a8:f2:5b:45:2a:94:12:1c:92: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F3:7A:8E:00:E4:C4:72:DD:1D:CC:24:26:49:34:F2:58:62:DA:49 X509v3 Authority Key Identifier: keyid:7A:A8:6C:81:56:F0:80:6D:CC:CD:C2:2D:CC:4D:61:75:B8:FA:98:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqhsgVbwgG3MzcItzE1hdbj6mJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/b2d4d8-4f7c-4756-a461-fafdbed574ad/1/eqhsgVbwgG3MzcItzE1hdbj6mJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3d:53:48:68:93:d1:9a:b0:76:18:6d:90:68:7c:68:14:c6: 28:59:b4:f0:1d:de:30:df:bf:f0:38:d9:cd:d3:69:ad:aa:f9: d7:26:4a:0e:f5:08:28:cd:7f:cc:16:09:23:68:b8:c7:6e:05: 9c:cc:35:39:01:6f:3c:15:ad:7b:98:5b:54:fe:e3:18:cb:08: 77:e3:af:89:8c:dc:56:8e:64:d3:a0:d9:36:ca:eb:da:02:39: aa:ed:ae:72:c9:f4:f9:77:fa:8e:b0:59:45:4a:e5:b7:a2:55: 7a:8d:d3:c5:27:7f:06:f7:a6:d6:48:d8:86:4a:73:b5:2a:d1: 21:96:5d:1c:4e:92:77:e1:74:a4:cf:9f:b5:8c:1e:18:12:c8: e2:fd:a6:b8:18:24:f2:e7:e7:49:75:7f:15:b6:23:59:77:e8: 1c:05:89:60:52:e1:01:58:26:e4:70:8b:5b:27:79:99:64:22: c6:25:63:4c:30:25:d6:a2:23:d1:79:4f:60:ff:29:f3:de:a7: 59:57:25:86:db:5e:2f:c1:f4:77:a1:99:27:2d:55:94:de:d2: ef:4b:0b:75:1b:f1:4d:7c:59:2f:62:4b:0f:db:b5:96:a3:c1: ec:fd:69:97:7c:6c:bc:68:85:6e:cc:17:be:d4:d7:9f:1d:dd: fd:cf:c1:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsn8nfkw3MEBIblDNmAx0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYTg2YzgxNTZmMDgwNmRjY2NkYzIyZGNjNGQ2MTc1Yjhm YTk4OTMwHhcNMjUxMjE4MjMwMTM0WhcNMjUxMjE5MjMwMTM0WjAzMTEwLwYDVQQD EyhjMGYzN2E4ZTAwZTRjNDcyZGQxZGNjMjQyNjQ5MzRmMjU4NjJkYTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc0zbcBqYj2vOiQYDglr1eqXYXQ1 /tEn+Lc40lNSmGiIhWDbf/8JWfj6ESlH4MJjnK72RoKWv97ZnZzrZV4oKG9Qi8U4 9gRfKYgyXolPXg1Z0S4xLFTvta7iYlQsqq0pZGWm/kIPkAfKqLRgsT0uzPJ6cR/+ VB4bCJ+zoDOZj0tcQEZAu8gPnJehC1P1o5N6TfmIjEZ9EIbr0sWmWiOwM81HjR+w vPDm3uLDy8caOHe9M+3tihJ3NerfAy9NEWi/GP8uOCsB1b33Hdirp94PQCaeV6rn KbBFMYXS6902yVivmBc2h/l91JlaDgIw0sgwXyNWagOo8ltFKpQSHJL5fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDzeo4A5MRy3R3MJCZJNPJYYtpJMB8GA1UdIwQY MBaAFHqobIFW8IBtzM3CLcxNYXW4+piTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEt ZmFmZGJlZDU3NGFkLzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9iMmQ0ZDgtNGY3Yy00NzU2LWE0NjEtZmFmZGJlZDU3NGFk LzEvZXFoc2dWYndnRzNNemNJdHpFMWhkYmo2bUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhj1TSGiT 0ZqwdhhtkGh8aBTGKFm08B3eMN+/8DjZzdNprar51yZKDvUIKM1/zBYJI2i4x24F nMw1OQFvPBWte5hbVP7jGMsId+OviYzcVo5k06DZNsrr2gI5qu2ucsn0+Xf6jrBZ RUrlt6JVeo3TxSd/Bvem1kjYhkpztSrRIZZdHE6Sd+F0pM+ftYweGBLI4v2muBgk 8ufnSXV/FbYjWXfoHAWJYFLhAVgm5HCLWyd5mWQixiVjTDAl1qIj0XlPYP8p896n WVclhtteL8H0d6GZJy1VlN7S70sLdRvxTXxZL2JLD9u1lqPB7P1pl3xsvGiFbswX vtTXnx3d/c/BsA== -----END CERTIFICATE-----Generated at Fri Dec 19 06:20:14 2025 by rpki-client