This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft File: eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft (raw, json) Hash identifier: rNdEXP0+V92j9eWGdCO7yR8LVzSeJgoxjO92uF8ZZek= Subject key identifier: F4:60:AE:B4:FF:14:7E:49:90:57:24:9D:64:B2:39:49:67:E8:AD:D0 Authority key identifier: 78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C Certificate issuer: /CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c Certificate serial: 019AF1645A6ABBDC86CADE42498BDE96D8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 02:01:16 +0000 Manifest this update: Sat 06 Dec 2025 02:01:16 +0000 Manifest next update: Sun 07 Dec 2025 02:01:16 +0000 Files and hashes: 1: eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl (hash: O2gCWfJXvOO3QQCiJqmwqZGPwjW1qPTr7QM91qVq74k=) 2: kvDA2uJCxtsf_iJspEUKkErzpBw.roa (hash: JEVQ/faqvkDHRCLDsyE8tNxf+ZkvCVkbrXJ5aSPcJrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:5a:6a:bb:dc:86:ca:de:42:49:8b:de:96:d8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78811e8e36e22280bb2f65a7d2c6034ecf86716c Validity Not Before: Dec 6 02:01:16 2025 GMT Not After : Dec 7 02:01:16 2025 GMT Subject: CN=f460aeb4ff147e499057249d64b2394967e8add0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c4:1a:e7:d6:73:4e:08:6b:c3:4e:39:aa:6a: 52:ae:84:ed:4c:d4:00:e3:cc:a6:79:92:b0:7f:a0: f8:f9:b0:83:e0:1a:43:11:46:ae:82:04:76:1e:a4: ad:50:92:0c:8c:19:e7:01:21:d2:e2:22:61:7c:71: ce:fc:78:d9:f5:5b:63:3f:72:df:55:16:4f:3f:d8: aa:ce:0d:b0:4b:50:fa:cf:3f:0a:76:72:8f:37:d2: ce:64:27:2e:b8:a6:c2:56:d9:08:56:7d:73:ae:83: f8:5c:23:66:47:5c:24:44:94:19:0f:12:89:d1:a5: af:6e:8d:d2:f6:e8:87:4e:d8:4c:42:dd:25:b2:30: 84:3d:2c:60:35:eb:e3:c1:7c:b8:71:25:94:b8:6f: e1:4b:9c:65:a0:4f:b4:96:97:60:63:73:60:51:5b: 46:c6:25:8f:a1:86:68:a6:58:04:64:02:c9:bc:e7: 7f:d4:65:f1:84:c7:d5:4e:2e:62:bf:eb:8f:98:a8: 87:7f:c0:f7:0d:07:f5:23:38:89:df:7e:f0:18:d3: c1:85:f0:09:7d:7c:a0:72:3b:4e:a2:29:8e:6b:1e: 05:8e:55:00:1f:13:d8:b3:a4:9a:ee:1c:a9:9b:d0: 7a:ad:16:32:1b:9a:28:7f:78:a0:7b:b4:eb:8f:14: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:60:AE:B4:FF:14:7E:49:90:57:24:9D:64:B2:39:49:67:E8:AD:D0 X509v3 Authority Key Identifier: keyid:78:81:1E:8E:36:E2:22:80:BB:2F:65:A7:D2:C6:03:4E:CF:86:71:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIEejjbiIoC7L2Wn0sYDTs-GcWw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/171251-6a75-4e9e-acf0-825e5a061df9/1/eIEejjbiIoC7L2Wn0sYDTs-GcWw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:5b:11:b7:d2:1b:7c:f9:c8:26:a2:0a:61:aa:f2:26:e9:52: 4d:53:86:df:c0:d8:f4:1b:e9:3e:23:a1:aa:47:63:18:a7:7b: 3f:ae:1e:0a:e1:ef:7a:d9:a7:1e:3a:16:e5:c4:da:eb:eb:57: a0:0c:44:75:e0:97:37:5b:d8:e7:b7:7c:f5:f3:1f:5c:ba:8e: e3:64:f5:25:11:1d:0f:5b:a6:32:1f:a4:76:fa:56:2a:3f:b6: 5b:35:50:82:37:8c:21:c3:ed:00:7a:6f:08:21:03:18:bc:f8: 2c:b2:70:77:59:98:78:38:7e:7d:f1:44:af:0e:ea:08:f0:15: f2:d8:aa:d0:4c:a3:4c:6a:a5:68:16:45:33:c5:ae:c4:17:57: 49:92:ef:35:70:4b:b6:46:4a:5a:7e:ac:77:6b:b3:af:fa:ae: 0c:46:25:84:bb:8a:32:33:20:e8:81:bc:3b:b3:b0:bb:65:d4: 4d:f9:b0:fb:34:d8:3a:ea:e2:56:15:e6:00:cc:c8:22:e7:cf: 6a:7e:37:0d:25:99:55:74:c2:bd:36:90:e9:c5:e4:92:6a:eb: da:30:27:c2:dc:91:fc:a3:7c:8b:c7:54:bb:34:8d:f3:d9:ff: 56:e5:cf:d0:2c:7a:91:08:55:fa:4f:ae:d0:eb:e3:4c:7d:06: 57:59:4b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZFpqu9yGyt5CSYveltivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODExZThlMzZlMjIyODBiYjJmNjVhN2QyYzYwMzRlY2Y4 NjcxNmMwHhcNMjUxMjA2MDIwMTE2WhcNMjUxMjA3MDIwMTE2WjAzMTEwLwYDVQQD EyhmNDYwYWViNGZmMTQ3ZTQ5OTA1NzI0OWQ2NGIyMzk0OTY3ZThhZGQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMQa59ZzTghrw045qmpSroTtTNQA 48ymeZKwf6D4+bCD4BpDEUauggR2HqStUJIMjBnnASHS4iJhfHHO/HjZ9VtjP3Lf VRZPP9iqzg2wS1D6zz8KdnKPN9LOZCcuuKbCVtkIVn1zroP4XCNmR1wkRJQZDxKJ 0aWvbo3S9uiHTthMQt0lsjCEPSxgNevjwXy4cSWUuG/hS5xloE+0lpdgY3NgUVtG xiWPoYZoplgEZALJvOd/1GXxhMfVTi5iv+uPmKiHf8D3DQf1IziJ337wGNPBhfAJ fXygcjtOoimOax4FjlUAHxPYs6Sa7hypm9B6rRYyG5oof3ige7TrjxQysQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPRgrrT/FH5JkFcknWSyOUln6K3QMB8GA1UdIwQY MBaAFHiBHo424iKAuy9lp9LGA07PhnFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlFZWpqYmlJb0M3TDJXbjBzWURUcy1HY1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xNzEyNTEtNmE3NS00ZTllLWFjZjAt ODI1ZTVhMDYxZGY5LzEvZUlFZWpqYmlJb0M3TDJXbjBzWURUcy1HY1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS8xNzEyNTEtNmE3NS00ZTllLWFjZjAtODI1ZTVhMDYxZGY5 LzEvZUlFZWpqYmlJb0M3TDJXbjBzWURUcy1HY1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFsRt9Ib fPnIJqIKYaryJulSTVOG38DY9BvpPiOhqkdjGKd7P64eCuHvetmnHjoW5cTa6+tX oAxEdeCXN1vY57d89fMfXLqO42T1JREdD1umMh+kdvpWKj+2WzVQgjeMIcPtAHpv CCEDGLz4LLJwd1mYeDh+ffFErw7qCPAV8tiq0EyjTGqlaBZFM8WuxBdXSZLvNXBL tkZKWn6sd2uzr/quDEYlhLuKMjMg6IG8O7Owu2XUTfmw+zTYOuriVhXmAMzIIufP an43DSWZVXTCvTaQ6cXkkmrr2jAnwtyR/KN8i8dUuzSN89n/VuXP0Cx6kQhV+k+u 0OvjTH0GV1lL5g== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:49 2025 by rpki-client