This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft File: eIeO3aauSgFH23C2YQXP0X8gZqM.mft (raw, json) Hash identifier: ZaaC9dL5hiUdxe7TficvSgFHCdzkXJre0x4b0VfX4lw= Subject key identifier: 17:EA:85:C4:83:48:40:C5:50:03:E1:E5:30:B0:45:ED:69:33:71:28 Authority key identifier: 78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3 Certificate issuer: /CN=78878edda6ae4a0147db70b66105cfd17f2066a3 Certificate serial: 019AF464E13E330E2A5C20F2AF4619C57E0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 16:00:43 +0000 Manifest this update: Sat 06 Dec 2025 16:00:43 +0000 Manifest next update: Sun 07 Dec 2025 16:00:43 +0000 Files and hashes: 1: eIeO3aauSgFH23C2YQXP0X8gZqM.crl (hash: 5/naUqxYkcW98GXkuUsly48JP7Axdo4U8GArbVK93rQ=) 2: t0DJyinn4llKKpeCe0OBlE_2NVY.roa (hash: NAk4z+1h3HiDOuSQgX+6rT4C+GeWqbjHTxsOaoe1l/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 16:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:e1:3e:33:0e:2a:5c:20:f2:af:46:19:c5:7e:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78878edda6ae4a0147db70b66105cfd17f2066a3 Validity Not Before: Dec 6 16:00:43 2025 GMT Not After : Dec 7 16:00:43 2025 GMT Subject: CN=17ea85c4834840c55003e1e530b045ed69337128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:32:6c:2a:47:7f:a5:45:7e:e0:a6:48:e1: 8e:08:dc:0e:a4:0b:bf:ee:9e:83:9c:f8:78:8f:64: e2:27:e2:01:3d:c9:1e:5d:5f:5a:e9:d5:85:f8:ff: 53:90:e4:35:35:8f:cf:ea:50:f2:b2:ec:bf:88:55: b1:e7:0b:51:ea:59:62:0f:1b:dd:1a:84:ee:28:a9: 10:ee:93:20:10:5b:03:ac:a7:ad:8a:1a:a4:2f:c6: 4b:8a:37:50:66:4e:e0:93:2c:aa:29:80:7e:d6:6a: 76:4d:1a:de:07:b4:42:be:70:21:82:f1:65:14:de: fe:12:b6:d7:8c:3e:5c:af:ab:5a:53:43:7d:a0:af: 03:c3:10:3f:59:ea:62:bb:85:64:72:9d:b9:00:38: d9:bd:2d:aa:62:d7:30:6b:c0:bd:dc:f6:9d:77:a2: 1a:94:2a:a1:07:0e:4b:7e:39:7a:69:90:65:2d:3e: 39:03:e8:d2:73:80:6f:5a:2f:1b:94:e1:74:89:d5: 65:a7:a7:dd:5f:14:44:23:3e:3a:2e:9a:ea:22:5f: 09:99:c4:a4:3e:7d:14:02:a0:fd:5a:e1:71:24:d4: f0:3b:16:e1:b4:e8:06:0b:04:25:b1:03:fa:e3:1e: 6b:50:7b:d9:4e:b1:ea:1f:61:07:b5:dc:ca:62:3d: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:EA:85:C4:83:48:40:C5:50:03:E1:E5:30:B0:45:ED:69:33:71:28 X509v3 Authority Key Identifier: keyid:78:87:8E:DD:A6:AE:4A:01:47:DB:70:B6:61:05:CF:D1:7F:20:66:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIeO3aauSgFH23C2YQXP0X8gZqM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/95/f87422-3c8e-4b51-bab8-2e3ed5a17098/1/eIeO3aauSgFH23C2YQXP0X8gZqM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:fb:43:2c:16:8e:f6:8a:06:36:2e:05:90:c9:f8:2f:de:43: ff:c0:ef:2d:59:01:44:5f:01:f6:27:5b:ec:92:6a:98:c5:36: a3:90:18:6b:55:5c:a7:61:f5:a5:9d:40:a1:38:5e:f1:70:c1: c3:88:bc:06:db:6a:9e:cc:1a:1c:4e:28:80:a3:8d:db:7c:35: 89:d7:34:2e:66:ff:b6:1c:c0:f1:73:ad:76:21:49:50:33:6a: 05:8c:a6:83:da:b5:ae:3f:ff:55:10:fa:7e:5a:44:0c:10:66: f2:dc:91:98:de:f5:7e:b8:e7:48:25:4d:67:5c:79:88:2d:30: 4b:65:89:cc:bb:69:5d:85:a2:46:83:f9:02:02:81:e7:24:15: ae:94:a8:07:eb:be:37:5f:aa:2c:48:de:e4:0e:6f:e9:0c:e8: df:f7:b2:d7:10:39:97:58:dc:ca:c4:13:4e:0f:82:59:b3:24: 81:27:14:e0:63:e0:2e:6b:09:6d:70:31:de:8e:6e:25:3e:8f: 98:5a:4a:ba:d3:b9:da:38:62:ec:bf:2e:57:e4:ca:ca:2c:da: 64:d2:2a:80:19:66:bc:c1:19:b3:62:0f:5e:e9:02:82:fb:65: fb:b6:1e:75:00:1b:d4:eb:00:70:56:9b:8a:17:7e:3f:f0:a1: 33:c0:6f:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZOE+Mw4qXCDyr0YZxX4PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODc4ZWRkYTZhZTRhMDE0N2RiNzBiNjYxMDVjZmQxN2Yy MDY2YTMwHhcNMjUxMjA2MTYwMDQzWhcNMjUxMjA3MTYwMDQzWjAzMTEwLwYDVQQD EygxN2VhODVjNDgzNDg0MGM1NTAwM2UxZTUzMGIwNDVlZDY5MzM3MTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCwybCpHf6VFfuCmSOGOCNwOpAu/ 7p6DnPh4j2TiJ+IBPckeXV9a6dWF+P9TkOQ1NY/P6lDysuy/iFWx5wtR6lliDxvd GoTuKKkQ7pMgEFsDrKetihqkL8ZLijdQZk7gkyyqKYB+1mp2TRreB7RCvnAhgvFl FN7+ErbXjD5cr6taU0N9oK8DwxA/Wepiu4Vkcp25ADjZvS2qYtcwa8C93Padd6Ia lCqhBw5Lfjl6aZBlLT45A+jSc4BvWi8blOF0idVlp6fdXxREIz46LprqIl8JmcSk Pn0UAqD9WuFxJNTwOxbhtOgGCwQlsQP64x5rUHvZTrHqH2EHtdzKYj2P4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfqhcSDSEDFUAPh5TCwRe1pM3EoMB8GA1UdIwQY MBaAFHiHjt2mrkoBR9twtmEFz9F/IGajMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgt MmUzZWQ1YTE3MDk4LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NS9mODc0MjItM2M4ZS00YjUxLWJhYjgtMmUzZWQ1YTE3MDk4 LzEvZUllTzNhYXVTZ0ZIMjNDMllRWFAwWDhnWnFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/tDLBaO 9ooGNi4FkMn4L95D/8DvLVkBRF8B9idb7JJqmMU2o5AYa1Vcp2H1pZ1AoThe8XDB w4i8BttqnswaHE4ogKON23w1idc0Lmb/thzA8XOtdiFJUDNqBYymg9q1rj//VRD6 flpEDBBm8tyRmN71frjnSCVNZ1x5iC0wS2WJzLtpXYWiRoP5AgKB5yQVrpSoB+u+ N1+qLEje5A5v6Qzo3/ey1xA5l1jcysQTTg+CWbMkgScU4GPgLmsJbXAx3o5uJT6P mFpKutO52jhi7L8uV+TKyizaZNIqgBlmvMEZs2IPXukCgvtl+7YedQAb1OsAcFab ihd+P/ChM8Bv6g== -----END CERTIFICATE-----Generated at Sun Dec 7 01:43:24 2025 by rpki-client