This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft File: eQ7eZiID9FnpsZbSM4esKeSnxOU.mft (raw, json) Hash identifier: Dw9B37rGYXlHRUHgqQlEuecUYmdPEqC3pHu9OOfchvE= Subject key identifier: 00:62:DF:8F:FF:2C:F3:9A:30:B7:47:36:38:12:86:A4:45:3A:DC:03 Authority key identifier: 79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 Certificate issuer: /CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Certificate serial: 019AF163E3DEEF4F7CF8D17933ED1929F0DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft Manifest number: 0430 Signing time: Sat 06 Dec 2025 02:00:46 +0000 Manifest this update: Sat 06 Dec 2025 02:00:46 +0000 Manifest next update: Sun 07 Dec 2025 02:00:46 +0000 Files and hashes: 1: eQ7eZiID9FnpsZbSM4esKeSnxOU.crl (hash: ikiPnJ53W1jcgCmSoUQ08dNIu7gJFxG9oE/Z0a9wBek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e3:de:ef:4f:7c:f8:d1:79:33:ed:19:29:f0:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=790ede662203f459e9b196d23387ac29e4a7c4e5 Validity Not Before: Dec 6 02:00:46 2025 GMT Not After : Dec 7 02:00:46 2025 GMT Subject: CN=0062df8fff2cf39a30b74736381286a4453adc03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:59:74:6b:41:98:82:0f:29:d3:d2:92:2b: 8e:3d:0d:2e:9d:3d:2e:29:c2:ea:c2:07:05:7a:1f: 2a:db:6e:6c:35:14:d8:fe:f8:87:6f:ec:ac:ae:a1: 42:6e:8d:de:21:81:c8:57:d9:31:42:89:e4:26:d9: a0:f9:fe:92:b0:37:a7:7c:1e:6b:65:e3:8c:d9:fa: 15:1a:28:a4:94:e5:f6:1b:a3:7b:a6:e2:43:40:c4: 9c:96:fa:47:59:cc:8c:3c:18:9a:c9:ba:25:92:f5: 58:3d:9c:51:e3:56:ac:72:21:d7:01:b7:2b:02:db: a7:65:3f:dc:6a:2c:d5:f9:1d:ca:7e:b6:89:4e:a5: e5:34:3f:15:d8:9e:ee:f7:e5:68:5c:06:05:fc:48: 59:34:21:2c:e9:f9:82:f8:8f:1c:53:95:76:1f:a2: 6d:d7:21:37:6e:4c:78:ac:d6:fb:35:c8:a8:34:83: 5d:3f:19:7a:be:69:aa:54:6f:fb:68:c8:15:95:2a: c6:55:f2:9c:a5:9c:9a:5d:ae:17:54:57:79:14:0b: 13:ea:fd:c6:74:7d:36:77:8c:c6:84:19:7b:d0:c3: d5:98:52:50:17:33:29:77:f6:ad:3d:56:37:4b:64: 74:51:a4:85:d4:e4:85:bc:e8:7a:7f:be:f5:dd:4e: 9d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:62:DF:8F:FF:2C:F3:9A:30:B7:47:36:38:12:86:A4:45:3A:DC:03 X509v3 Authority Key Identifier: keyid:79:0E:DE:66:22:03:F4:59:E9:B1:96:D2:33:87:AC:29:E4:A7:C4:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQ7eZiID9FnpsZbSM4esKeSnxOU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/803431-a762-4feb-bdd3-c5d4c178ecb5/1/eQ7eZiID9FnpsZbSM4esKeSnxOU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:63:5e:dc:b9:00:53:af:cd:bd:5b:c2:d0:13:cd:c4:17: 83:92:53:69:ca:0a:2f:48:12:07:02:fe:fb:e8:99:04:da:31: b2:03:9a:76:6d:64:fe:91:ed:fa:74:d0:49:e2:ce:bc:11:1f: 12:19:cb:26:7f:32:f5:60:b2:3f:67:38:02:f5:a6:e2:e3:12: 80:31:76:e9:7b:d9:1d:d0:f9:c5:cb:f7:ef:01:14:be:fc:13: 71:1b:bf:07:46:20:3d:23:fd:f1:22:ec:6e:37:9f:26:c8:5e: 70:d8:11:cc:b7:40:f8:d7:15:15:35:97:ae:e4:ec:ad:d0:50: c8:ea:9f:c3:b3:54:d6:17:41:ac:74:01:48:ca:35:e6:25:bd: b7:18:81:53:0b:45:4a:50:28:b4:5b:05:04:cb:5e:8e:2f:cf: 52:c4:aa:31:bf:cb:1e:48:a1:f6:67:f4:30:e3:7a:ff:92:1a: 61:26:fc:58:76:4c:ab:67:ab:47:10:ff:ac:84:9f:a7:6f:a3: 29:cb:b6:e7:1a:21:9a:d7:24:e5:10:03:98:b8:62:1f:84:01: 8d:d5:50:2c:fa:d7:38:db:8c:06:d0:e3:ff:51:89:31:4a:6e: 58:45:af:7d:6a:91:d9:27:46:ff:17:ad:be:04:9e:86:96:c4: 17:3e:5d:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+Pe7098+NF5M+0ZKfDbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5MGVkZTY2MjIwM2Y0NTllOWIxOTZkMjMzODdhYzI5ZTRh N2M0ZTUwHhcNMjUxMjA2MDIwMDQ2WhcNMjUxMjA3MDIwMDQ2WjAzMTEwLwYDVQQD EygwMDYyZGY4ZmZmMmNmMzlhMzBiNzQ3MzYzODEyODZhNDQ1M2FkYzAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D5ZdGtBmIIPKdPSkiuOPQ0unT0u KcLqwgcFeh8q225sNRTY/viHb+ysrqFCbo3eIYHIV9kxQonkJtmg+f6SsDenfB5r ZeOM2foVGiiklOX2G6N7puJDQMSclvpHWcyMPBiaybolkvVYPZxR41asciHXAbcr AtunZT/caizV+R3KfraJTqXlND8V2J7u9+VoXAYF/EhZNCEs6fmC+I8cU5V2H6Jt 1yE3bkx4rNb7NcioNINdPxl6vmmqVG/7aMgVlSrGVfKcpZyaXa4XVFd5FAsT6v3G dH02d4zGhBl70MPVmFJQFzMpd/atPVY3S2R0UaSF1OSFvOh6f7713U6d3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFABi34//LPOaMLdHNjgShqRFOtwDMB8GA1UdIwQY MBaAFHkO3mYiA/RZ6bGW0jOHrCnkp8TlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMt YzVkNGMxNzhlY2I1LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS84MDM0MzEtYTc2Mi00ZmViLWJkZDMtYzVkNGMxNzhlY2I1 LzEvZVE3ZVppSUQ5Rm5wc1piU000ZXNLZVNueE9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGpjXty5 AFOvzb1bwtATzcQXg5JTacoKL0gSBwL+++iZBNoxsgOadm1k/pHt+nTQSeLOvBEf EhnLJn8y9WCyP2c4AvWm4uMSgDF26XvZHdD5xcv37wEUvvwTcRu/B0YgPSP98SLs bjefJshecNgRzLdA+NcVFTWXruTsrdBQyOqfw7NU1hdBrHQBSMo15iW9txiBUwtF SlAotFsFBMteji/PUsSqMb/LHkih9mf0MON6/5IaYSb8WHZMq2erRxD/rISfp2+j Kcu25xohmtck5RADmLhiH4QBjdVQLPrXONuMBtDj/1GJMUpuWEWvfWqR2SdG/xet vgSehpbEFz5dtQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:07:07 2025 by rpki-client