This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft File: eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft (raw, json) Hash identifier: nK/b3vz6AxSkBEaqr9K2raDeveaezO4M6VfcuVhINBM= Subject key identifier: 11:17:D5:D5:F0:30:01:D9:D3:20:CE:ED:DC:43:64:62:18:42:0F:54 Authority key identifier: 7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36 Certificate issuer: /CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36 Certificate serial: 019AF42E3A9D192BC19150B69E9248DA20AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft Manifest number: 0649 Signing time: Sat 06 Dec 2025 15:01:01 +0000 Manifest this update: Sat 06 Dec 2025 15:01:01 +0000 Manifest next update: Sun 07 Dec 2025 15:01:01 +0000 Files and hashes: 1: eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl (hash: uxA+zMJOsVBtY02yvYVlflPPzKEynRUzkr29ZB44R4g=) 2: gP8qEhtADxz-fNyyU3vcu8NYBMU.roa (hash: UQJK4mMNNX6B898sPio2JOjeNiXhgW4l71UxZw7LEXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2e:3a:9d:19:2b:c1:91:50:b6:9e:92:48:da:20:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b2711150910dcd1b1c7ab531448bd8321fc1c36 Validity Not Before: Dec 6 15:01:01 2025 GMT Not After : Dec 7 15:01:01 2025 GMT Subject: CN=1117d5d5f03001d9d320ceeddc43646218420f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:46:86:1c:e8:c0:97:15:5f:55:b0:c4:48:dc: a2:51:8c:25:49:d2:93:f3:be:d9:85:b6:1b:2f:b7: 9d:7c:0e:7a:c1:56:42:c6:87:65:b3:bd:66:39:73: a2:09:b7:f0:55:db:01:39:1f:67:23:0f:11:ac:d9: e1:0c:f3:1c:b8:a2:13:d7:87:94:2a:66:2e:97:ae: 20:25:c4:ec:77:cd:a7:63:98:11:68:08:32:2b:33: c3:fe:13:21:6a:77:1b:d3:ec:35:9c:90:b8:ed:b1: a0:a2:ce:bd:cf:38:50:9c:7b:a1:f8:7e:6c:9a:54: bf:8a:a5:21:96:81:c7:2b:20:ef:c4:fa:4c:24:6e: 9e:aa:02:96:6a:bc:fc:ae:c4:6a:05:4e:5d:e3:c4: 10:3f:35:89:dc:3a:4e:91:58:6b:5e:dc:2a:0c:03: 34:90:dd:2c:53:58:0a:69:7e:13:8c:8a:a6:6e:56: a1:2b:49:43:f1:48:47:e0:08:7e:ef:8e:7c:8a:08: 77:80:fb:26:ca:7b:70:2c:c2:1d:7a:6c:d0:ab:78: 32:d2:72:15:89:55:ce:95:44:b0:68:f3:13:ed:77: c3:e0:fa:3a:a5:6c:43:24:13:c3:5b:33:67:12:a6: 13:57:e0:08:23:45:22:b4:fc:d1:f2:6e:50:21:6e: f3:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:17:D5:D5:F0:30:01:D9:D3:20:CE:ED:DC:43:64:62:18:42:0F:54 X509v3 Authority Key Identifier: keyid:7B:27:11:15:09:10:DC:D1:B1:C7:AB:53:14:48:BD:83:21:FC:1C:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eycRFQkQ3NGxx6tTFEi9gyH8HDY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/b11764-be65-49f1-b42c-b7a8b7c12eee/1/eycRFQkQ3NGxx6tTFEi9gyH8HDY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:18:3a:17:40:28:23:a0:31:f3:e4:70:da:4d:34:c4:25:72: 5f:e5:48:f8:39:f6:f1:b4:50:62:9b:08:bb:1a:ed:7d:a9:cf: ab:18:23:67:ec:d8:a0:2a:43:23:de:92:1f:cc:74:82:5c:45: 28:58:ad:d2:94:4d:4a:1e:c1:12:15:20:7d:95:5b:ac:29:e0: ef:58:80:05:1d:34:5e:31:bf:fc:85:22:59:0c:45:c0:80:78: f7:e6:93:db:38:98:ea:fb:81:09:4a:56:12:57:a7:5f:7c:14: 7e:5e:3b:95:20:7d:da:ec:b7:df:f6:40:87:b9:73:3d:f7:e7: ae:94:a3:cc:36:48:cc:1b:8d:96:5f:1c:a0:5b:33:27:2b:25: d2:7b:f4:a7:af:c7:7a:57:ee:89:96:fa:b1:95:d1:0b:34:d5: a5:96:96:d0:ae:10:4e:12:4f:f1:3c:79:42:54:ef:c9:d6:0f: a3:95:df:52:2e:5a:be:22:16:3e:b7:d0:ca:ce:e2:85:61:3e: 0b:0f:9a:af:b5:78:d9:fe:5b:23:fc:e5:28:5f:20:60:cb:af: e3:8f:38:90:ee:1b:84:09:6e:b2:41:ac:54:b2:28:eb:85:00: 30:39:37:c8:44:8a:58:e4:20:00:bc:c7:cd:5d:82:03:39:46: 62:d0:63:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0LjqdGSvBkVC2npJI2iCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjcxMTE1MDkxMGRjZDFiMWM3YWI1MzE0NDhiZDgzMjFm YzFjMzYwHhcNMjUxMjA2MTUwMTAxWhcNMjUxMjA3MTUwMTAxWjAzMTEwLwYDVQQD EygxMTE3ZDVkNWYwMzAwMWQ5ZDMyMGNlZWRkYzQzNjQ2MjE4NDIwZjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7EaGHOjAlxVfVbDESNyiUYwlSdKT 877ZhbYbL7edfA56wVZCxodls71mOXOiCbfwVdsBOR9nIw8RrNnhDPMcuKIT14eU KmYul64gJcTsd82nY5gRaAgyKzPD/hMhancb0+w1nJC47bGgos69zzhQnHuh+H5s mlS/iqUhloHHKyDvxPpMJG6eqgKWarz8rsRqBU5d48QQPzWJ3DpOkVhrXtwqDAM0 kN0sU1gKaX4TjIqmblahK0lD8UhH4Ah+7458igh3gPsmyntwLMIdemzQq3gy0nIV iVXOlUSwaPMT7XfD4Po6pWxDJBPDWzNnEqYTV+AII0UitPzR8m5QIW7zYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEX1dXwMAHZ0yDO7dxDZGIYQg9UMB8GA1UdIwQY MBaAFHsnERUJENzRscerUxRIvYMh/Bw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMt YjdhOGI3YzEyZWVlLzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9iMTE3NjQtYmU2NS00OWYxLWI0MmMtYjdhOGI3YzEyZWVl LzEvZXljUkZRa1EzTkd4eDZ0VEZFaTlneUg4SERZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBg6F0Ao I6Ax8+Rw2k00xCVyX+VI+Dn28bRQYpsIuxrtfanPqxgjZ+zYoCpDI96SH8x0glxF KFit0pRNSh7BEhUgfZVbrCng71iABR00XjG//IUiWQxFwIB49+aT2ziY6vuBCUpW ElenX3wUfl47lSB92uy33/ZAh7lzPffnrpSjzDZIzBuNll8coFszJysl0nv0p6/H elfuiZb6sZXRCzTVpZaW0K4QThJP8Tx5QlTvydYPo5XfUi5aviIWPrfQys7ihWE+ Cw+ar7V42f5bI/zlKF8gYMuv4484kO4bhAluskGsVLIo64UAMDk3yESKWOQgALzH zV2CAzlGYtBjeA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:30 2025 by rpki-client