This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft File: eIKlTbKvSuLgSGRxuNUPj6X36GE.mft (raw, json) Hash identifier: rveSs5KVWJe9oM5cWRf3IBFz9InpI29ozYHmIv2nX28= Subject key identifier: 7D:AF:03:1F:C3:5C:AC:3B:D3:AB:9C:3B:FE:8B:F3:0E:1D:41:1C:BE Authority key identifier: 78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 Certificate issuer: /CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Certificate serial: 019AF0BF3FDA26E8D9C3BB81913D1214DEDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft Manifest number: 7A Signing time: Fri 05 Dec 2025 23:00:56 +0000 Manifest this update: Fri 05 Dec 2025 23:00:56 +0000 Manifest next update: Sat 06 Dec 2025 23:00:56 +0000 Files and hashes: 1: aenbutlsHdIddYbTr8SaSbe80BI.roa (hash: AHbNxfBI1PuhNtZ/xkZPyFX+9IwZWsMH6bfEwT22XqQ=) 2: eIKlTbKvSuLgSGRxuNUPj6X36GE.crl (hash: 6uZ+SRiFRRDGNjG/dEUjizOmSX4bJiPDK4MODnscWE0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:3f:da:26:e8:d9:c3:bb:81:91:3d:12:14:de:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7882a54db2af4ae2e0486471b8d50f8fa5f7e861 Validity Not Before: Dec 5 23:00:56 2025 GMT Not After : Dec 6 23:00:56 2025 GMT Subject: CN=7daf031fc35cac3bd3ab9c3bfe8bf30e1d411cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:26:02:be:00:ff:8f:1c:9d:db:d1:f3:45:09: 6c:6c:a0:2b:2b:e6:6f:69:dd:76:3f:62:33:37:bf: 6f:10:db:a3:d5:85:4f:75:89:18:4a:e5:81:04:61: 1d:fe:04:d1:b5:41:4f:28:20:67:aa:fc:53:40:80: 19:ba:f7:22:fd:29:d5:60:90:7a:23:0a:fe:26:fe: a5:3b:81:a1:53:49:1c:c4:8b:28:2a:0e:6d:08:56: 4d:20:10:f7:29:48:a3:09:c7:1b:9f:f1:0d:ff:9b: d1:96:a7:1a:8d:f6:b1:cd:19:b9:e2:81:a8:cd:37: d9:d7:bd:ea:3c:87:3d:41:8f:34:b6:8d:15:8a:3e: 44:03:3f:71:5a:cb:fa:61:72:33:23:dc:95:25:d2: a9:8d:f3:46:cd:f5:7d:fd:38:6c:31:51:18:d7:6d: e9:bf:14:7a:22:14:ff:51:55:d0:fd:07:ac:f9:af: 4c:69:a1:ed:8a:53:51:b0:41:10:f9:f0:76:a8:fa: 80:09:82:22:27:9c:fd:89:70:ef:8a:42:d6:c3:24: 16:14:8c:e8:15:6b:3c:ea:e2:00:0e:b3:fc:7f:cf: db:b1:52:09:bc:ca:ee:10:c8:25:70:18:2f:ea:80: dd:ae:29:74:96:2b:04:29:7c:36:1a:14:22:dd:ab: 1b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:AF:03:1F:C3:5C:AC:3B:D3:AB:9C:3B:FE:8B:F3:0E:1D:41:1C:BE X509v3 Authority Key Identifier: keyid:78:82:A5:4D:B2:AF:4A:E2:E0:48:64:71:B8:D5:0F:8F:A5:F7:E8:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIKlTbKvSuLgSGRxuNUPj6X36GE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/63312e-10d2-445f-9fea-f16b07f4306f/1/eIKlTbKvSuLgSGRxuNUPj6X36GE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:65:c7:91:d2:d3:ee:86:76:fc:fb:59:ab:e3:90:ba:aa:8a: 00:49:61:30:7e:35:c3:fe:f0:a9:02:d0:fa:5b:83:61:15:a3: b5:8b:af:69:ca:90:97:0f:7a:32:c4:c5:ac:f5:c0:e9:69:0d: 63:1e:9c:8f:6c:95:5f:a8:25:22:2d:20:7a:da:e3:19:c2:6d: 0d:46:f2:07:95:7e:ab:d6:8f:17:4a:b1:3c:6a:bb:74:87:d9: 62:b8:92:bc:ae:3e:f8:2f:31:da:cf:9c:37:e7:49:00:a7:6e: 49:4c:65:b4:ae:e7:5d:17:49:06:9f:04:a3:0a:8d:d4:32:31: 26:09:72:0b:6f:7f:68:da:e3:eb:64:77:1a:85:92:3c:96:27: 35:eb:6f:51:bc:22:c2:af:f4:69:25:04:db:29:1a:78:ca:63: 91:74:94:cc:d1:cf:1b:f4:bb:c3:8c:3a:7f:c0:59:a5:80:62: ca:f5:7b:4d:0e:b3:a5:26:e9:0f:cf:c8:bf:77:2a:6c:9e:8f: 79:68:5c:9b:a4:2f:12:ff:36:16:8a:68:4c:b2:7c:5d:e9:5b: 6d:6d:36:52:f1:5d:6a:7f:81:0f:ee:5f:a4:b2:8d:6d:f7:92: 2c:e0:e7:80:81:0f:8e:55:8b:39:2c:03:1c:cd:61:a2:28:4a: a0:e9:0e:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvz/aJujZw7uBkT0SFN7dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODJhNTRkYjJhZjRhZTJlMDQ4NjQ3MWI4ZDUwZjhmYTVm N2U4NjEwHhcNMjUxMjA1MjMwMDU2WhcNMjUxMjA2MjMwMDU2WjAzMTEwLwYDVQQD Eyg3ZGFmMDMxZmMzNWNhYzNiZDNhYjljM2JmZThiZjMwZTFkNDExY2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySYCvgD/jxyd29HzRQlsbKArK+Zv ad12P2IzN79vENuj1YVPdYkYSuWBBGEd/gTRtUFPKCBnqvxTQIAZuvci/SnVYJB6 Iwr+Jv6lO4GhU0kcxIsoKg5tCFZNIBD3KUijCccbn/EN/5vRlqcajfaxzRm54oGo zTfZ173qPIc9QY80to0Vij5EAz9xWsv6YXIzI9yVJdKpjfNGzfV9/ThsMVEY123p vxR6IhT/UVXQ/Qes+a9MaaHtilNRsEEQ+fB2qPqACYIiJ5z9iXDvikLWwyQWFIzo FWs86uIADrP8f8/bsVIJvMruEMglcBgv6oDdril0lisEKXw2GhQi3asb+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2vAx/DXKw706ucO/6L8w4dQRy+MB8GA1UdIwQY MBaAFHiCpU2yr0ri4EhkcbjVD4+l9+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEt ZjE2YjA3ZjQzMDZmLzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy82MzMxMmUtMTBkMi00NDVmLTlmZWEtZjE2YjA3ZjQzMDZm LzEvZUlLbFRiS3ZTdUxnU0dSeHVOVVBqNlgzNkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtWXHkdLT 7oZ2/PtZq+OQuqqKAElhMH41w/7wqQLQ+luDYRWjtYuvacqQlw96MsTFrPXA6WkN Yx6cj2yVX6glIi0getrjGcJtDUbyB5V+q9aPF0qxPGq7dIfZYriSvK4++C8x2s+c N+dJAKduSUxltK7nXRdJBp8EowqN1DIxJglyC29/aNrj62R3GoWSPJYnNetvUbwi wq/0aSUE2ykaeMpjkXSUzNHPG/S7w4w6f8BZpYBiyvV7TQ6zpSbpD8/Iv3cqbJ6P eWhcm6QvEv82FopoTLJ8XelbbW02UvFdan+BD+5fpLKNbfeSLODngIEPjlWLOSwD HM1hoihKoOkONA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:41:53 2025 by rpki-client