This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft File: eQ3IFFdVEBrMCIiqALsouZW5xPE.mft (raw, json) Hash identifier: uXhktD8mQSWh9HEWYofquDUatT8T0ovg1TcWYEM4V8k= Subject key identifier: 14:26:6E:E8:56:1E:1F:0A:E6:53:BA:49:6F:4E:AE:BF:93:ED:C7:C5 Authority key identifier: 79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 Certificate issuer: /CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Certificate serial: 019B32D5D34A6BE46F284F8678E753AD42F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft Manifest number: 1784 Signing time: Thu 18 Dec 2025 19:00:32 +0000 Manifest this update: Thu 18 Dec 2025 19:00:32 +0000 Manifest next update: Fri 19 Dec 2025 19:00:32 +0000 Files and hashes: 1: 1qgt4GAyW_3c-IECItJTlUngLgw.roa (hash: JMxnB6RQt5YXqrAyQkabjodjhDTimqSiK2ILClsZiRA=) 2: eQ3IFFdVEBrMCIiqALsouZW5xPE.crl (hash: yZTPcZyGuo1ie0UKTeuoOm6i+0rzFBM73bbegNV5QE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d5:d3:4a:6b:e4:6f:28:4f:86:78:e7:53:ad:42:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790dc8145755101acc0888aa00bb28b995b9c4f1 Validity Not Before: Dec 18 19:00:32 2025 GMT Not After : Dec 19 19:00:32 2025 GMT Subject: CN=14266ee8561e1f0ae653ba496f4eaebf93edc7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:87:e6:22:fa:23:b6:39:3a:1f:62:5b:bf:3f: c0:31:c4:08:59:ff:2f:cf:f3:73:d1:8a:5b:3a:c6: c1:b5:9d:35:e4:31:98:9e:8f:1b:36:0d:f0:5d:6a: 15:03:21:8e:46:5d:b3:6d:ec:0f:52:0b:96:b9:2b: 74:2b:0d:3c:2e:77:4b:5b:e0:bc:12:b9:46:76:61: 24:81:ea:02:02:fb:09:a9:1f:05:82:c2:14:56:4d: 59:44:6e:f0:da:76:1c:cc:fc:bb:49:3e:84:f7:12: 11:3a:de:e8:02:83:ce:92:30:32:19:63:16:75:f6: ef:12:db:fb:a0:2c:0a:22:be:06:79:7d:dd:93:ba: 7a:80:07:23:32:a2:1b:28:d0:71:0e:31:88:05:db: 93:65:12:44:5d:e6:90:c2:bf:57:63:a6:49:30:22: 74:76:e0:b1:08:04:21:1c:ee:49:94:c4:92:26:22: 7e:1a:f2:0f:8a:7d:51:92:68:f6:bf:02:97:33:c0: 8e:a5:8b:d4:00:96:37:21:74:0d:d7:4e:d6:a7:10: 92:90:79:6b:c2:02:a4:a8:a1:8a:ed:42:dc:c2:25: 88:f5:23:ae:4d:a6:3c:32:76:64:25:35:9c:b3:7b: c2:1c:84:31:dd:b0:aa:d2:51:72:aa:77:ff:19:f6: 04:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:26:6E:E8:56:1E:1F:0A:E6:53:BA:49:6F:4E:AE:BF:93:ED:C7:C5 X509v3 Authority Key Identifier: keyid:79:0D:C8:14:57:55:10:1A:CC:08:88:AA:00:BB:28:B9:95:B9:C4:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ3IFFdVEBrMCIiqALsouZW5xPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/2c4110-eaee-440b-820e-95cae09ff563/1/eQ3IFFdVEBrMCIiqALsouZW5xPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:64:3d:04:cf:cc:7f:41:35:c6:c8:11:ae:44:2b:42:52:2d: ba:10:8f:58:ea:ee:03:55:00:c4:6a:5b:19:83:ea:3e:cd:5a: 30:99:52:0a:be:5d:ad:c9:be:7b:9a:2b:fe:41:0c:30:e2:0c: 97:3d:41:0c:97:34:5c:32:5e:06:e8:81:dd:6e:ee:76:13:ab: e4:48:be:95:a2:1f:ab:a9:46:d4:44:12:0a:29:e9:ed:fa:24: d6:e1:f7:d7:11:fb:44:f5:67:45:37:c8:51:6b:e3:a9:c9:a1: 7e:d6:81:d1:9a:e8:c1:91:d2:f5:d2:30:7c:43:c0:6e:9f:e0: 0d:e9:84:c1:79:5d:d5:78:1f:a3:55:41:75:81:57:e5:41:fd: 00:93:bb:01:ff:5f:08:08:f2:cc:e0:8a:a3:5d:6c:6a:ed:6b: 98:04:d4:e7:03:4a:af:5b:c3:e2:2a:d6:b6:0e:db:2b:a6:0a: a7:3e:70:d0:cc:c8:9e:6c:30:85:a3:1b:e2:ac:70:1f:db:ff: ed:28:fd:f7:51:e1:1c:41:45:19:59:62:b4:5d:0a:b4:55:35: 28:ef:bf:78:37:5a:ce:f8:2a:b7:5e:eb:89:60:c2:9f:fb:89: 53:32:f4:89:4d:86:56:8d:67:18:66:5f:07:3d:7d:3a:aa:14: db:fb:c5:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1dNKa+RvKE+GeOdTrUL3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGRjODE0NTc1NTEwMWFjYzA4ODhhYTAwYmIyOGI5OTVi OWM0ZjEwHhcNMjUxMjE4MTkwMDMyWhcNMjUxMjE5MTkwMDMyWjAzMTEwLwYDVQQD EygxNDI2NmVlODU2MWUxZjBhZTY1M2JhNDk2ZjRlYWViZjkzZWRjN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4fmIvojtjk6H2Jbvz/AMcQIWf8v z/Nz0YpbOsbBtZ015DGYno8bNg3wXWoVAyGORl2zbewPUguWuSt0Kw08LndLW+C8 ErlGdmEkgeoCAvsJqR8FgsIUVk1ZRG7w2nYczPy7ST6E9xIROt7oAoPOkjAyGWMW dfbvEtv7oCwKIr4GeX3dk7p6gAcjMqIbKNBxDjGIBduTZRJEXeaQwr9XY6ZJMCJ0 duCxCAQhHO5JlMSSJiJ+GvIPin1Rkmj2vwKXM8COpYvUAJY3IXQN107WpxCSkHlr wgKkqKGK7ULcwiWI9SOuTaY8MnZkJTWcs3vCHIQx3bCq0lFyqnf/GfYEiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQmbuhWHh8K5lO6SW9Orr+T7cfFMB8GA1UdIwQY MBaAFHkNyBRXVRAazAiIqgC7KLmVucTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUt OTVjYWUwOWZmNTYzLzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8yYzQxMTAtZWFlZS00NDBiLTgyMGUtOTVjYWUwOWZmNTYz LzEvZVEzSUZGZFZFQnJNQ0lpcUFMc291Wlc1eFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmWQ9BM/M f0E1xsgRrkQrQlItuhCPWOruA1UAxGpbGYPqPs1aMJlSCr5drcm+e5or/kEMMOIM lz1BDJc0XDJeBuiB3W7udhOr5Ei+laIfq6lG1EQSCinp7fok1uH31xH7RPVnRTfI UWvjqcmhftaB0ZrowZHS9dIwfEPAbp/gDemEwXld1Xgfo1VBdYFX5UH9AJO7Af9f CAjyzOCKo11sau1rmATU5wNKr1vD4irWtg7bK6YKpz5w0MzInmwwhaMb4qxwH9v/ 7Sj991HhHEFFGVlitF0KtFU1KO+/eDdazvgqt17riWDCn/uJUzL0iU2GVo1nGGZf Bz19OqoU2/vF/A== -----END CERTIFICATE-----Generated at Thu Dec 18 23:42:46 2025 by rpki-client