This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft File: eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft (raw, json) Hash identifier: lCULXU2SHqc9b+gr1ZJUj8WbB+nRT6x5cuU73ufdPFo= Subject key identifier: E6:09:43:10:66:CD:95:9C:0E:37:74:8D:25:14:C6:AD:FD:35:A4:FC Authority key identifier: 7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A Certificate issuer: /CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a Certificate serial: 019AF276E46ABCFF75433D8CD376D5069BC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft Manifest number: 0795 Signing time: Sat 06 Dec 2025 07:01:09 +0000 Manifest this update: Sat 06 Dec 2025 07:01:09 +0000 Manifest next update: Sun 07 Dec 2025 07:01:09 +0000 Files and hashes: 1: eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl (hash: nJZ5MH4WNcM4iNINhO2yrHNXt4SilmEUeMTXhw6ew68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:e4:6a:bc:ff:75:43:3d:8c:d3:76:d5:06:9b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a20a87b82f698bbe9490a421a3d1b4161855f5a Validity Not Before: Dec 6 07:01:09 2025 GMT Not After : Dec 7 07:01:09 2025 GMT Subject: CN=e609431066cd959c0e37748d2514c6adfd35a4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:82:14:eb:0f:b4:1c:68:d8:93:d4:b9:c4:5d: 40:15:f2:86:8b:8c:d4:90:2b:09:84:94:30:7b:90: 06:f4:a7:d1:15:74:6b:ef:ac:10:4b:2b:71:37:97: 6b:3c:6b:99:64:b3:19:77:12:fa:f6:a9:9f:d9:ce: 32:ab:50:6c:5b:20:68:77:65:dc:bb:12:fe:41:a4: b3:42:b0:c2:b0:b4:55:ca:be:14:16:9a:b1:55:dc: e9:15:39:bc:22:37:eb:2a:40:e3:98:80:fa:cc:0e: 73:a0:55:1b:a5:9d:1d:b8:d8:58:51:d5:eb:ec:c2: c3:c4:3c:00:6c:a4:0a:d8:da:6f:d2:3e:6a:e3:90: dc:f7:17:27:9a:c7:a7:dd:32:11:6b:1a:54:c3:a4: 48:11:ea:d1:0f:ad:8e:8e:96:4d:6d:b6:dd:2a:67: c4:fa:de:81:4f:29:dd:5b:26:b3:aa:eb:aa:2c:cb: 4c:ae:a0:d3:fb:b4:ad:57:03:49:7a:b3:04:0f:1b: c8:2e:4f:e6:cf:63:f0:20:48:a6:1b:05:6f:1a:66: a6:8c:7c:8a:26:be:1d:6f:52:f4:28:5d:75:6d:0b: e6:c2:82:0c:c1:13:b7:8c:de:66:dc:df:3e:57:40: 76:ca:99:18:07:24:b8:91:0b:0c:40:69:7a:31:e0: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:09:43:10:66:CD:95:9C:0E:37:74:8D:25:14:C6:AD:FD:35:A4:FC X509v3 Authority Key Identifier: keyid:7A:20:A8:7B:82:F6:98:BB:E9:49:0A:42:1A:3D:1B:41:61:85:5F:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eiCoe4L2mLvpSQpCGj0bQWGFX1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/2fbcca-4008-4465-89ac-01e183a92f08/1/eiCoe4L2mLvpSQpCGj0bQWGFX1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:db:5f:fa:43:c9:d4:1f:6e:d4:1c:f0:11:1b:1f:dd:96:e3: 8e:01:b3:59:af:4d:ea:7f:4d:8c:15:88:b0:c5:9d:48:ff:4d: 18:16:f0:1e:02:5b:3e:70:73:5d:09:4d:cf:c7:f5:67:04:f6: e4:e3:1b:db:dd:0e:da:59:9b:05:95:cb:24:39:0e:94:a5:db: aa:2a:ff:f2:c5:99:17:44:78:b1:b3:74:fe:4e:71:0b:f5:2d: ab:6d:7e:80:e9:7a:f8:b0:e4:08:3f:1b:bf:be:9b:da:8c:52: b1:dd:0a:2e:38:ad:8d:3b:b4:f5:8e:7f:0b:f6:55:9d:a5:0b: d3:27:ea:1b:66:13:5e:d5:69:58:d8:29:f9:5f:73:82:58:77: b9:79:ad:c5:6f:2b:3b:bf:a8:fe:f1:9f:e6:07:30:e7:e7:6f: 8c:5f:8e:16:c2:ce:30:62:f7:62:e8:af:09:81:83:25:ed:b7: 21:5d:b0:5e:88:bf:b8:a2:1c:24:f5:97:60:f0:29:04:61:f5: 41:95:52:d7:ea:02:ff:a9:7d:ad:5d:ca:f2:fb:5e:6c:29:4f: a0:03:51:3c:c3:b2:98:33:87:91:b6:2c:98:64:b9:00:1f:b1: e2:8a:21:79:9f:4a:d4:a9:ce:9a:b4:1c:74:69:31:df:77:c1: 03:cf:b3:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryduRqvP91Qz2M03bVBpvDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMjBhODdiODJmNjk4YmJlOTQ5MGE0MjFhM2QxYjQxNjE4 NTVmNWEwHhcNMjUxMjA2MDcwMTA5WhcNMjUxMjA3MDcwMTA5WjAzMTEwLwYDVQQD EyhlNjA5NDMxMDY2Y2Q5NTljMGUzNzc0OGQyNTE0YzZhZGZkMzVhNGZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64IU6w+0HGjYk9S5xF1AFfKGi4zU kCsJhJQwe5AG9KfRFXRr76wQSytxN5drPGuZZLMZdxL69qmf2c4yq1BsWyBod2Xc uxL+QaSzQrDCsLRVyr4UFpqxVdzpFTm8IjfrKkDjmID6zA5zoFUbpZ0duNhYUdXr 7MLDxDwAbKQK2Npv0j5q45Dc9xcnmsen3TIRaxpUw6RIEerRD62OjpZNbbbdKmfE +t6BTyndWyazquuqLMtMrqDT+7StVwNJerMEDxvILk/mz2PwIEimGwVvGmamjHyK Jr4db1L0KF11bQvmwoIMwRO3jN5m3N8+V0B2ypkYByS4kQsMQGl6MeBr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOYJQxBmzZWcDjd0jSUUxq39NaT8MB8GA1UdIwQY MBaAFHogqHuC9pi76UkKQho9G0FhhV9aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMt MDFlMTgzYTkyZjA4LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8yZmJjY2EtNDAwOC00NDY1LTg5YWMtMDFlMTgzYTkyZjA4 LzEvZWlDb2U0TDJtTHZwU1FwQ0dqMGJRV0dGWDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARttf+kPJ 1B9u1BzwERsf3ZbjjgGzWa9N6n9NjBWIsMWdSP9NGBbwHgJbPnBzXQlNz8f1ZwT2 5OMb290O2lmbBZXLJDkOlKXbqir/8sWZF0R4sbN0/k5xC/Utq21+gOl6+LDkCD8b v76b2oxSsd0KLjitjTu09Y5/C/ZVnaUL0yfqG2YTXtVpWNgp+V9zglh3uXmtxW8r O7+o/vGf5gcw5+dvjF+OFsLOMGL3YuivCYGDJe23IV2wXoi/uKIcJPWXYPApBGH1 QZVS1+oC/6l9rV3K8vtebClPoANRPMOymDOHkbYsmGS5AB+x4ooheZ9K1KnOmrQc dGkx33fBA8+zFA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:44 2025 by rpki-client