This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft File: eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft (raw, json) Hash identifier: Twn5+xxQFRl1Bf0y34QYt7m5u5m6DpX5ACfj/XIyew0= Subject key identifier: D5:C1:E6:6F:21:01:F9:09:C2:BA:AB:4A:7B:DC:FF:00:6D:44:5C:82 Authority key identifier: 79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F Certificate issuer: /CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Certificate serial: 019AF50AA799E7854E01D536CAB4D7A92ACA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 19:01:47 +0000 Manifest this update: Sat 06 Dec 2025 19:01:47 +0000 Manifest next update: Sun 07 Dec 2025 19:01:47 +0000 Files and hashes: 1: T5ztfNUXWpcUexx1Ow5PIo80ytg.roa (hash: 1oOYGrHxVD+BaS7VqGZM3T/tDWbPcSE3UrszJqW1KJQ=) 2: eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl (hash: X5r6d36JDblg8id6NXJqlgA/OPvfSUdJobI5XYBOAJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:a7:99:e7:85:4e:01:d5:36:ca:b4:d7:a9:2a:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79a1cf1aa8fbc4e33378673ebd05364880e2a91f Validity Not Before: Dec 6 19:01:47 2025 GMT Not After : Dec 7 19:01:47 2025 GMT Subject: CN=d5c1e66f2101f909c2baab4a7bdcff006d445c82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:d4:b9:10:93:74:d0:2f:03:f5:7e:8d:6c: cc:01:b5:1d:72:00:4f:6e:6d:20:c6:ca:d4:14:47: 6d:90:db:93:65:11:f0:0a:a7:37:5e:28:1d:d1:82: 8e:7e:7e:b3:80:d0:cd:7f:8e:cd:5a:b0:24:9c:70: f3:57:a8:93:18:b1:a9:c3:ff:0f:2a:12:fa:ea:09: d7:0e:6b:57:8a:08:a1:57:9c:37:c1:18:3d:8c:1c: 8a:c2:2b:c6:09:6d:94:b5:0b:3f:4c:89:ae:cc:ca: 98:10:04:bb:4b:1c:4a:20:1e:af:f0:50:f7:67:36: 06:c5:9f:cf:ae:c7:2a:70:77:38:64:02:8a:38:73: 19:f3:32:04:11:33:76:1a:59:42:e9:04:44:eb:d1: 1b:f0:12:55:d0:18:39:2a:67:30:6b:5f:51:46:bb: bf:8b:71:22:e2:41:35:ac:c9:72:0c:c7:0c:ad:c3: d1:56:ef:32:ee:c9:ca:44:a2:1a:e0:01:40:98:1c: b5:b3:03:61:47:41:0f:9d:18:e1:2a:2c:47:95:7d: 70:97:b6:c0:1e:b8:d8:58:6f:bd:37:3f:64:7e:2f: c5:14:d9:55:fa:d9:6e:3d:c6:ef:54:41:42:da:4f: 93:b1:8e:11:51:80:76:d8:c9:33:00:22:6f:15:db: 56:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C1:E6:6F:21:01:F9:09:C2:BA:AB:4A:7B:DC:FF:00:6D:44:5C:82 X509v3 Authority Key Identifier: keyid:79:A1:CF:1A:A8:FB:C4:E3:33:78:67:3E:BD:05:36:48:80:E2:A9:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaHPGqj7xOMzeGc-vQU2SIDiqR8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/df5bad-ac59-413e-9ad0-5995ae8acb9f/1/eaHPGqj7xOMzeGc-vQU2SIDiqR8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:71:34:41:d5:f5:f8:24:3e:0e:bc:79:0f:3a:2e:ee:3b:f0: fc:26:8d:e4:19:a4:7c:f3:f3:6e:a0:05:f3:fd:1c:be:04:a1: d5:ac:71:4e:81:77:11:8a:d5:23:a6:f1:3c:36:0f:d9:47:c7: be:ce:f1:8f:05:de:cc:46:91:58:8a:07:f3:23:e0:e7:19:09: ce:94:12:fe:6d:9b:32:38:86:c5:61:d9:61:22:e5:c8:68:9b: 1d:fa:2b:7c:3f:b6:3a:50:51:11:38:25:11:03:38:8a:50:82: ac:0b:e2:e9:65:45:03:dc:6a:c4:87:58:f4:6e:f1:a4:35:d6: 3f:ea:bb:ce:72:5d:b9:08:9c:c7:01:53:6b:9c:bb:42:07:8f: 68:81:dc:71:2a:6c:5e:11:c2:08:95:22:6b:85:71:4c:83:ff: 6d:3e:6f:96:3a:0a:e2:a7:c6:3f:f3:9f:40:24:ad:7a:b6:32: 3d:08:06:ef:86:4d:06:75:26:06:f4:e3:f0:52:ca:0a:7a:7f: 26:bf:4d:d1:11:30:a6:51:9e:bc:b8:ba:ea:a3:f4:44:9c:ba: 1d:97:25:90:17:f8:44:1d:91:cf:2f:76:00:3c:dd:f4:68:4e: 39:57:a1:eb:8d:38:41:81:f6:be:d8:27:79:5c:6e:42:ea:b7: 50:2f:52:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CqeZ54VOAdU2yrTXqSrKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5YTFjZjFhYThmYmM0ZTMzMzc4NjczZWJkMDUzNjQ4ODBl MmE5MWYwHhcNMjUxMjA2MTkwMTQ3WhcNMjUxMjA3MTkwMTQ3WjAzMTEwLwYDVQQD EyhkNWMxZTY2ZjIxMDFmOTA5YzJiYWFiNGE3YmRjZmYwMDZkNDQ1YzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstbUuRCTdNAvA/V+jWzMAbUdcgBP bm0gxsrUFEdtkNuTZRHwCqc3Xigd0YKOfn6zgNDNf47NWrAknHDzV6iTGLGpw/8P KhL66gnXDmtXigihV5w3wRg9jByKwivGCW2UtQs/TImuzMqYEAS7SxxKIB6v8FD3 ZzYGxZ/PrscqcHc4ZAKKOHMZ8zIEETN2GllC6QRE69Eb8BJV0Bg5Kmcwa19RRru/ i3Ei4kE1rMlyDMcMrcPRVu8y7snKRKIa4AFAmBy1swNhR0EPnRjhKixHlX1wl7bA HrjYWG+9Nz9kfi/FFNlV+tluPcbvVEFC2k+TsY4RUYB22MkzACJvFdtWIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXB5m8hAfkJwrqrSnvc/wBtRFyCMB8GA1UdIwQY MBaAFHmhzxqo+8TjM3hnPr0FNkiA4qkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAt NTk5NWFlOGFjYjlmLzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy9kZjViYWQtYWM1OS00MTNlLTlhZDAtNTk5NWFlOGFjYjlm LzEvZWFIUEdxajd4T016ZUdjLXZRVTJTSURpcVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYXE0QdX1 +CQ+Drx5Dzou7jvw/CaN5BmkfPPzbqAF8/0cvgSh1axxToF3EYrVI6bxPDYP2UfH vs7xjwXezEaRWIoH8yPg5xkJzpQS/m2bMjiGxWHZYSLlyGibHforfD+2OlBRETgl EQM4ilCCrAvi6WVFA9xqxIdY9G7xpDXWP+q7znJduQicxwFTa5y7QgePaIHccSps XhHCCJUia4VxTIP/bT5vljoK4qfGP/OfQCSterYyPQgG74ZNBnUmBvTj8FLKCnp/ Jr9N0REwplGevLi66qP0RJy6HZclkBf4RB2Rzy92ADzd9GhOOVeh6404QYH2vtgn eVxuQuq3UC9SCw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:50:26 2025 by rpki-client