This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft File: eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json) Hash identifier: /F9ao8aC+ApQ/zRHPzdivtNNbAHb90/bm/zVyjDw+cM= Subject key identifier: E6:67:CD:D4:76:2A:C5:C3:FE:55:F2:9C:3F:3E:2F:9C:04:CD:BD:B0 Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a Certificate serial: 019AF0BF94A12DE26484C2B1F62BE1E70290 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft Manifest number: 0501 Signing time: Fri 05 Dec 2025 23:01:18 +0000 Manifest this update: Fri 05 Dec 2025 23:01:18 +0000 Manifest next update: Sat 06 Dec 2025 23:01:18 +0000 Files and hashes: 1: F7OA04yE7M4qNkerNNmgXrIbsfw.roa (hash: v4Vdufe1qMpmLce6/l8zLEXuhsNN6MeM3OiQ8L0sZ8s=) 2: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: LC2f7tEZG9E1aJuG95k5S6V3TRsJmQyg3nmB4bAkkTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:94:a1:2d:e2:64:84:c2:b1:f6:2b:e1:e7:02:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a Validity Not Before: Dec 5 23:01:18 2025 GMT Not After : Dec 6 23:01:18 2025 GMT Subject: CN=e667cdd4762ac5c3fe55f29c3f3e2f9c04cdbdb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f4:eb:ff:5c:97:21:3f:dc:d3:00:74:12:0f: a6:0e:fa:cf:5e:28:ee:34:3d:bf:12:e1:30:a4:35: 1c:b8:de:d0:3d:97:93:d3:0b:75:ce:00:97:86:28: 84:7d:ee:9d:a9:e0:c4:65:21:44:6b:f3:3f:29:42: e3:e4:18:1c:ac:8d:2c:58:27:7b:ba:ce:e3:fc:7a: 6d:e4:b1:ae:4b:d5:48:6b:2d:8d:bc:67:e0:04:6d: bc:2e:4c:a0:0d:94:ce:9a:34:79:84:73:92:f8:83: 00:91:42:5b:e3:45:d5:cb:b4:46:b6:b3:33:29:45: 35:39:2d:ae:d5:64:5f:55:6b:fe:7a:f9:82:df:1b: a1:a0:c6:af:01:53:b4:fa:ca:91:1d:39:26:b2:73: 10:be:04:22:09:16:11:5b:ce:09:e1:b4:1c:74:2a: b5:94:96:8e:1a:be:2f:15:f2:50:db:f6:3e:8d:98: c4:54:88:f1:da:cc:8e:27:81:0c:86:ca:36:da:da: e5:20:84:e7:ab:d2:67:8e:b1:74:06:c6:bd:d0:33: 55:98:53:2e:44:77:c1:2e:5d:97:65:51:2e:b7:2d: 29:92:6d:66:b9:02:cf:2e:30:0d:48:3b:bc:f8:c9: 25:10:ce:38:d9:d6:8c:f5:50:fd:03:0c:3e:4f:8c: 23:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:67:CD:D4:76:2A:C5:C3:FE:55:F2:9C:3F:3E:2F:9C:04:CD:BD:B0 X509v3 Authority Key Identifier: keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6e:d0:03:02:39:ea:a2:53:b4:64:e0:1a:c7:b3:18:d4:2a: 6e:33:cc:b3:c1:16:f8:27:35:15:e2:5d:fe:82:f9:8a:e8:ae: 4f:a5:43:d0:98:8b:4c:34:5d:15:a1:2f:a4:eb:5c:2d:d6:05: 70:6e:46:22:d8:9f:30:fc:fd:45:21:60:8b:0f:b9:5e:f4:90: 0e:3a:fd:c7:92:f2:71:aa:e6:64:aa:02:e3:d6:4e:4d:a8:b5: df:b9:69:bd:bf:10:7d:51:76:9f:95:8a:b7:7d:6b:e5:8b:2c: 26:3e:e6:7b:c7:70:d5:f0:e3:27:e8:cc:ef:dc:a2:78:57:6e: e4:a9:e2:31:8f:41:a2:63:b5:2c:9e:36:0c:50:2b:a6:55:ce: 29:18:c7:ae:3b:92:e8:26:e7:ab:23:ce:ef:d7:ec:c4:a9:ca: 79:cf:de:64:a4:13:24:90:f9:63:fe:37:ba:9f:a8:64:d3:ad: e4:49:23:42:ed:2d:e0:cb:2f:d2:ad:b7:a5:16:b9:78:42:7e: 0a:e1:4d:5f:00:20:f1:1f:18:6a:52:fe:ac:19:46:a2:8f:97: 1f:87:d3:48:f1:d6:ce:03:1f:13:ed:93:6e:14:a6:c8:42:84: c6:f1:9b:0a:3a:c0:58:a4:bf:39:c2:14:14:29:dd:a2:8b:30: 2f:a0:b9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv5ShLeJkhMKx9ivh5wKQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODkxZTk2MzFiYmM2ZThhZTVkYTRiMjE5YmU0ZDhmNjFm ZWZiNWEwHhcNMjUxMjA1MjMwMTE4WhcNMjUxMjA2MjMwMTE4WjAzMTEwLwYDVQQD EyhlNjY3Y2RkNDc2MmFjNWMzZmU1NWYyOWMzZjNlMmY5YzA0Y2RiZGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPTr/1yXIT/c0wB0Eg+mDvrPXiju ND2/EuEwpDUcuN7QPZeT0wt1zgCXhiiEfe6dqeDEZSFEa/M/KULj5BgcrI0sWCd7 us7j/Hpt5LGuS9VIay2NvGfgBG28LkygDZTOmjR5hHOS+IMAkUJb40XVy7RGtrMz KUU1OS2u1WRfVWv+evmC3xuhoMavAVO0+sqRHTkmsnMQvgQiCRYRW84J4bQcdCq1 lJaOGr4vFfJQ2/Y+jZjEVIjx2syOJ4EMhso22trlIITnq9JnjrF0Bsa90DNVmFMu RHfBLl2XZVEuty0pkm1muQLPLjANSDu8+MklEM442daM9VD9Aww+T4wjoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZnzdR2KsXD/lXynD8+L5wEzb2wMB8GA1UdIwQY MBaAFHmJHpYxu8borl2kshm+TY9h/vtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEt YTA2ZTY4MWI0ZWM4LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEtYTA2ZTY4MWI0ZWM4 LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT27QAwI5 6qJTtGTgGsezGNQqbjPMs8EW+Cc1FeJd/oL5iuiuT6VD0JiLTDRdFaEvpOtcLdYF cG5GItifMPz9RSFgiw+5XvSQDjr9x5LycarmZKoC49ZOTai137lpvb8QfVF2n5WK t31r5YssJj7me8dw1fDjJ+jM79yieFdu5KniMY9BomO1LJ42DFArplXOKRjHrjuS 6CbnqyPO79fsxKnKec/eZKQTJJD5Y/43up+oZNOt5EkjQu0t4Msv0q23pRa5eEJ+ CuFNXwAg8R8YalL+rBlGoo+XH4fTSPHWzgMfE+2TbhSmyEKExvGbCjrAWKS/OcIU FCndooswL6C51Q== -----END CERTIFICATE-----Generated at Sat Dec 6 08:34:43 2025 by rpki-client