This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft File: eYKALOcYMFkLJquplx4S9q4Y3O4.mft (raw, json) Hash identifier: yVnVn6Tlc2xVWU/+sVzkG9A3U/Mn655EQ+/RCpBL/+I= Subject key identifier: 75:B7:0C:20:17:86:37:25:D1:DD:34:DB:95:9E:D5:B5:BB:21:35:0E Authority key identifier: 79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE Certificate issuer: /CN=7982802ce71830590b26aba9971e12f6ae18dcee Certificate serial: 019AF352B304F77521DA011456A3D68B80E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 11:01:14 +0000 Manifest this update: Sat 06 Dec 2025 11:01:14 +0000 Manifest next update: Sun 07 Dec 2025 11:01:14 +0000 Files and hashes: 1: 4MQBhzW6p5UOyqP-hbDAFP6drKQ.roa (hash: ZKT/8JUqtRAisTydFecUdHw72JiTE01MYJo6LVg8rWw=) 2: eYKALOcYMFkLJquplx4S9q4Y3O4.crl (hash: 3cO1EJK3k5QVBu2Z4hEuiacuC1yugjSeEKZzWcgB+oc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b3:04:f7:75:21:da:01:14:56:a3:d6:8b:80:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7982802ce71830590b26aba9971e12f6ae18dcee Validity Not Before: Dec 6 11:01:14 2025 GMT Not After : Dec 7 11:01:14 2025 GMT Subject: CN=75b70c2017863725d1dd34db959ed5b5bb21350e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a0:8a:69:70:f9:a5:cc:9b:39:60:58:21:e9: 1c:ae:5f:be:a6:45:4b:a5:8e:dc:5f:63:6a:12:f1: 10:4d:f2:39:ab:9c:80:b8:9a:b6:f9:e8:a6:bf:95: 5d:92:c2:86:93:c2:23:d7:da:33:0d:be:b9:ca:0f: 58:96:0f:d1:49:77:8a:3f:d2:74:dc:ee:b2:49:01: 67:c0:9d:2b:f6:20:5a:2c:09:df:ae:41:ca:4e:15: 87:d0:76:2a:43:8e:78:bb:69:bf:22:ab:af:66:e3: 42:91:08:6d:19:e7:91:12:3d:1e:dd:e8:86:33:7f: 51:37:40:ee:82:07:18:8e:fe:55:cf:cf:dd:1e:dd: 99:44:50:9d:f1:7e:c6:70:bc:81:7d:9e:c0:c8:fd: 86:c0:35:89:c7:d7:e8:bf:2f:ea:12:27:6a:1b:4c: 84:d3:61:cb:2f:02:97:53:fc:d1:61:89:e9:15:6f: 67:e5:53:d8:03:35:02:ce:27:12:ea:9f:d1:fd:8f: f0:b6:18:d6:b6:52:88:e7:c1:9f:e5:16:6b:00:cb: 20:7d:f7:1b:b3:ed:87:af:1a:33:92:45:8e:91:f1: 5e:77:f6:dd:d1:75:31:58:9d:47:89:9b:49:4b:f1: 91:4c:d1:b6:47:c5:cf:da:09:aa:db:94:4e:65:cc: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B7:0C:20:17:86:37:25:D1:DD:34:DB:95:9E:D5:B5:BB:21:35:0E X509v3 Authority Key Identifier: keyid:79:82:80:2C:E7:18:30:59:0B:26:AB:A9:97:1E:12:F6:AE:18:DC:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYKALOcYMFkLJquplx4S9q4Y3O4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/08bfdc-8c02-42c4-9025-dcdf24414989/1/eYKALOcYMFkLJquplx4S9q4Y3O4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:0d:5f:15:58:b3:4d:a2:96:97:40:4c:4a:85:ac:19:98:04: 5e:60:43:89:85:df:c5:8b:08:50:4e:65:29:24:cb:0a:53:bf: 63:5f:32:15:49:63:d7:6a:c4:e8:bd:1b:82:a6:8b:36:37:1b: 7c:7f:c7:18:72:b1:c7:47:fd:fb:0b:74:b7:43:72:e4:dc:49: 61:9a:d2:c3:c7:63:07:29:bf:dd:0e:07:d2:0b:56:25:08:41: 67:be:92:b2:bf:9e:72:49:e2:a3:cb:9e:36:eb:f7:bb:a3:c4: bc:96:86:a4:48:e6:f8:4a:69:3d:ec:de:ae:6c:d7:d1:a6:0d: b5:20:11:9e:c7:83:93:17:d9:57:62:17:28:4f:6f:11:5a:d6: 8b:1f:27:32:60:bd:32:4a:58:97:4c:2c:1c:a2:9f:0a:c9:3f: f2:96:ca:d9:74:a4:79:7d:5a:15:59:9b:a0:ab:76:f6:77:66: 23:49:88:55:74:fa:b8:0a:a7:ea:f9:d2:5c:b4:39:a9:56:04: ac:fa:29:d3:16:f7:d8:bc:02:c7:87:04:23:ff:f1:0c:fb:ab: 5d:05:6d:a3:15:b6:df:e5:26:56:ec:3c:1e:b9:ec:6f:99:0e: 6c:11:2a:46:ba:c4:5c:35:95:80:35:bf:d0:2a:00:2c:c7:c0: 23:d4:53:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrME93Uh2gEUVqPWi4DgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODI4MDJjZTcxODMwNTkwYjI2YWJhOTk3MWUxMmY2YWUx OGRjZWUwHhcNMjUxMjA2MTEwMTE0WhcNMjUxMjA3MTEwMTE0WjAzMTEwLwYDVQQD Eyg3NWI3MGMyMDE3ODYzNzI1ZDFkZDM0ZGI5NTllZDViNWJiMjEzNTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aCKaXD5pcybOWBYIekcrl++pkVL pY7cX2NqEvEQTfI5q5yAuJq2+eimv5VdksKGk8Ij19ozDb65yg9Ylg/RSXeKP9J0 3O6ySQFnwJ0r9iBaLAnfrkHKThWH0HYqQ454u2m/IquvZuNCkQhtGeeREj0e3eiG M39RN0DuggcYjv5Vz8/dHt2ZRFCd8X7GcLyBfZ7AyP2GwDWJx9fovy/qEidqG0yE 02HLLwKXU/zRYYnpFW9n5VPYAzUCzicS6p/R/Y/wthjWtlKI58Gf5RZrAMsgffcb s+2HrxozkkWOkfFed/bd0XUxWJ1HiZtJS/GRTNG2R8XP2gmq25ROZcyxVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHW3DCAXhjcl0d0025We1bW7ITUOMB8GA1UdIwQY MBaAFHmCgCznGDBZCyarqZceEvauGNzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUt ZGNkZjI0NDE0OTg5LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wOGJmZGMtOGMwMi00MmM0LTkwMjUtZGNkZjI0NDE0OTg5 LzEvZVlLQUxPY1lNRmtMSnF1cGx4NFM5cTRZM080LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjw1fFViz TaKWl0BMSoWsGZgEXmBDiYXfxYsIUE5lKSTLClO/Y18yFUlj12rE6L0bgqaLNjcb fH/HGHKxx0f9+wt0t0Ny5NxJYZrSw8djBym/3Q4H0gtWJQhBZ76Ssr+ecknio8ue Nuv3u6PEvJaGpEjm+EppPezermzX0aYNtSARnseDkxfZV2IXKE9vEVrWix8nMmC9 MkpYl0wsHKKfCsk/8pbK2XSkeX1aFVmboKt29ndmI0mIVXT6uAqn6vnSXLQ5qVYE rPop0xb32LwCx4cEI//xDPurXQVtoxW23+UmVuw8Hrnsb5kObBEqRrrEXDWVgDW/ 0CoALMfAI9RTaQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:54:04 2025 by rpki-client