This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft File: EasXfkpP_uueof01dmw7iocxHeg.mft (raw, json) Hash identifier: sSUR48f31LpwMkAS6t1v8pO96FaHuqmq+Yn7s7Jpbo4= Subject key identifier: 89:F5:2D:B1:5A:46:37:D2:83:F2:88:72:3F:70:41:E4:36:63:FF:1E Authority key identifier: 11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8 Certificate issuer: /CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8 Certificate serial: 019AF2ADA95B6C523953A62356613F76FA02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft Manifest number: 06A8 Signing time: Sat 06 Dec 2025 08:00:58 +0000 Manifest this update: Sat 06 Dec 2025 08:00:58 +0000 Manifest next update: Sun 07 Dec 2025 08:00:58 +0000 Files and hashes: 1: 5LHo1rIxEBH1YyvcCV5J0OCLikI.roa (hash: G0Yp0y8eU2LPogOz8dggyJAEEJcHDiocdCHAGxqPAIo=) 2: EasXfkpP_uueof01dmw7iocxHeg.crl (hash: lD8UHTM8gW3/M2EvS5GsFpaevPfxW6XOolIDiVvXTxc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:a9:5b:6c:52:39:53:a6:23:56:61:3f:76:fa:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ab177e4a4ffeeb9ea1fd35766c3b8a87311de8 Validity Not Before: Dec 6 08:00:58 2025 GMT Not After : Dec 7 08:00:58 2025 GMT Subject: CN=89f52db15a4637d283f288723f7041e43663ff1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:3c:58:a2:91:97:43:0e:2c:8b:2a:70:2b:78: 58:95:e3:92:dd:23:0a:ee:c5:13:89:1d:cd:dd:2d: 93:f7:38:ab:31:11:d0:7f:4d:fb:5e:ce:4c:9a:4b: c1:34:9c:8a:38:af:e4:ea:6f:ce:35:a0:88:3a:ee: 08:40:a8:32:31:37:7d:67:20:0c:06:d8:80:95:ec: 8b:dc:3d:75:e0:97:3a:ba:7c:a2:3d:6f:fe:de:c2: c7:af:a6:a2:cb:07:66:2e:d0:b0:9a:f9:2f:72:45: 0a:8d:89:d6:db:75:17:48:5f:45:cb:74:3b:ca:c3: 8a:86:36:59:f9:fc:cc:0d:21:23:70:33:ea:7e:15: 56:8a:09:50:a6:34:6c:c5:2a:08:13:d7:a6:a6:25: ec:e2:47:40:ef:e8:4e:87:94:62:0e:68:c0:9f:2c: 50:dd:2a:88:0f:3e:f6:c4:44:65:3a:21:e7:a5:36: 41:e0:66:74:82:10:44:0e:b5:37:14:bc:67:c4:1a: 1a:6a:cc:68:86:4c:7b:fc:a9:5f:30:b5:b1:35:de: da:be:73:2f:5d:37:43:42:85:28:7f:fd:88:b0:4f: 72:30:f3:0f:fc:27:d4:6e:e1:74:02:c7:20:cb:5a: 94:e0:89:fd:2a:1d:cb:c8:9e:43:24:7a:ed:ea:81: 5e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F5:2D:B1:5A:46:37:D2:83:F2:88:72:3F:70:41:E4:36:63:FF:1E X509v3 Authority Key Identifier: keyid:11:AB:17:7E:4A:4F:FE:EB:9E:A1:FD:35:76:6C:3B:8A:87:31:1D:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EasXfkpP_uueof01dmw7iocxHeg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/229d3d-c0ea-4e11-9509-5eb4a55f0119/1/EasXfkpP_uueof01dmw7iocxHeg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:89:b3:e1:9c:2b:69:0b:2c:50:f8:cc:82:b0:cd:6e:88:e7: c5:b2:f6:17:17:60:3b:e4:cd:6d:93:c7:a9:da:12:50:ec:df: ed:80:6f:b3:75:e6:00:ad:15:64:a5:3d:ca:68:26:14:0e:61: 0e:23:b2:70:59:b3:15:a2:5d:a2:f9:db:8e:72:9a:4f:58:b7: a2:28:30:39:43:2a:f1:51:e2:52:ad:7b:53:82:ca:3e:56:2d: 13:f8:39:c9:b9:1c:a6:2d:ed:51:54:69:ed:73:c8:17:be:47: ad:ee:66:d9:e2:fe:53:e3:03:9a:90:7e:9c:8a:b6:04:b4:6a: 36:d9:3c:1f:3f:45:f4:89:f2:58:26:3b:1d:2b:f4:0c:fb:be: 40:57:e2:2a:a9:8a:2d:34:50:85:ae:c1:2c:14:92:a5:43:74: 0e:ad:ac:f4:2b:36:ac:e5:ce:78:b6:ca:3f:32:96:a6:35:5b: 93:be:d1:8c:62:fa:80:a0:1a:4f:18:98:ec:3d:1d:1a:46:10: 32:c0:27:bd:cd:4d:ad:c1:e6:a5:07:24:08:53:bb:ca:5c:ff: 17:5e:43:c0:24:5c:e2:27:9c:a1:09:1d:0e:21:74:fb:d4:0d: a9:45:e5:d0:6b:d0:6a:78:c1:07:45:d2:80:db:65:9d:3c:06: c0:01:b4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryralbbFI5U6YjVmE/dvoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYWIxNzdlNGE0ZmZlZWI5ZWExZmQzNTc2NmMzYjhhODcz MTFkZTgwHhcNMjUxMjA2MDgwMDU4WhcNMjUxMjA3MDgwMDU4WjAzMTEwLwYDVQQD Eyg4OWY1MmRiMTVhNDYzN2QyODNmMjg4NzIzZjcwNDFlNDM2NjNmZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTxYopGXQw4siypwK3hYleOS3SMK 7sUTiR3N3S2T9zirMRHQf037Xs5MmkvBNJyKOK/k6m/ONaCIOu4IQKgyMTd9ZyAM BtiAleyL3D114Jc6unyiPW/+3sLHr6aiywdmLtCwmvkvckUKjYnW23UXSF9Fy3Q7 ysOKhjZZ+fzMDSEjcDPqfhVWiglQpjRsxSoIE9empiXs4kdA7+hOh5RiDmjAnyxQ 3SqIDz72xERlOiHnpTZB4GZ0ghBEDrU3FLxnxBoaasxohkx7/KlfMLWxNd7avnMv XTdDQoUof/2IsE9yMPMP/CfUbuF0Ascgy1qU4In9Kh3LyJ5DJHrt6oFedQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIn1LbFaRjfSg/KIcj9wQeQ2Y/8eMB8GA1UdIwQY MBaAFBGrF35KT/7rnqH9NXZsO4qHMR3oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yMjlkM2QtYzBlYS00ZTExLTk1MDkt NWViNGE1NWYwMTE5LzEvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8yMjlkM2QtYzBlYS00ZTExLTk1MDktNWViNGE1NWYwMTE5 LzEvRWFzWGZrcFBfdXVlb2YwMWRtdzdpb2N4SGVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfImz4Zwr aQssUPjMgrDNbojnxbL2FxdgO+TNbZPHqdoSUOzf7YBvs3XmAK0VZKU9ymgmFA5h DiOycFmzFaJdovnbjnKaT1i3oigwOUMq8VHiUq17U4LKPlYtE/g5ybkcpi3tUVRp 7XPIF75Hre5m2eL+U+MDmpB+nIq2BLRqNtk8Hz9F9InyWCY7HSv0DPu+QFfiKqmK LTRQha7BLBSSpUN0Dq2s9Cs2rOXOeLbKPzKWpjVbk77RjGL6gKAaTxiY7D0dGkYQ MsAnvc1NrcHmpQckCFO7ylz/F15DwCRc4iecoQkdDiF0+9QNqUXl0GvQanjBB0XS gNtlnTwGwAG03w== -----END CERTIFICATE-----Generated at Sat Dec 6 12:11:00 2025 by rpki-client