This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft File: EAcdqxaOjlPjzX31244PBCQukIY.mft (raw, json) Hash identifier: OCC9vIGp+wWuQUrEQsItQWIq52xk6ZRJDuPUp3siUgE= Subject key identifier: 74:A4:17:35:B9:75:DD:2A:84:FA:57:14:91:03:42:32:40:A5:E6:44 Authority key identifier: 10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 Certificate issuer: /CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Certificate serial: 019AF1D1CB55FAF19D76AB7563C44FCE0AE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:49 +0000 Manifest this update: Sat 06 Dec 2025 04:00:49 +0000 Manifest next update: Sun 07 Dec 2025 04:00:49 +0000 Files and hashes: 1: EAcdqxaOjlPjzX31244PBCQukIY.crl (hash: eS7vtV51F+M7AKd59aoYOVM8+z+fZ6ZFHKX9CDQDHqw=) 2: vfIxBAsj822N76w697miZZQZT-M.roa (hash: Q7ba86E3b6I2IxLmX1JkWhxhrGYtcU7zADafi/RdHVE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:cb:55:fa:f1:9d:76:ab:75:63:c4:4f:ce:0a:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10071dab168e8e53e3cd7df5db8e0f04242e9086 Validity Not Before: Dec 6 04:00:49 2025 GMT Not After : Dec 7 04:00:49 2025 GMT Subject: CN=74a41735b975dd2a84fa57149103423240a5e644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8c:8f:10:13:06:0c:99:9d:e1:35:4c:e1:af: 17:9b:2e:34:a2:42:19:a4:7b:6b:b3:1a:4f:c3:bf: 0f:9f:6c:5d:58:ce:af:d1:bc:cc:2b:06:92:6a:74: 51:0e:4f:2e:a2:11:79:18:26:4c:e5:0b:81:fc:d1: 50:94:d5:5e:75:66:f3:50:4f:aa:ac:4f:c6:a1:76: f5:a1:71:25:45:7d:e1:06:40:12:73:2c:55:a7:6a: e2:90:c4:e9:b2:87:d8:b3:e7:77:b8:c6:99:77:61: 91:3a:d0:41:46:49:2b:e7:4b:ac:1b:05:59:17:eb: ad:bb:03:30:65:61:4f:0a:4a:1d:66:b7:64:5f:21: 68:62:52:42:0a:1c:6c:86:eb:a2:d8:98:6f:44:e5: f4:e9:e1:88:47:41:fe:e7:56:e8:ed:49:db:01:cd: 2a:55:a9:1e:f8:e5:f0:6f:2e:88:4f:e0:6d:9c:27: 62:3f:91:87:e2:4f:72:54:4d:4d:62:5a:d3:1a:12: bf:ad:e1:07:5d:08:e8:d7:93:7b:fc:46:ea:87:58: 7a:f5:a1:f5:4a:d2:fa:d5:9c:7b:6b:b7:34:df:40: f6:ce:ad:ea:a8:77:e2:f4:d2:68:c7:89:69:9e:0e: f1:e4:8a:8c:6d:86:87:3d:ed:bd:c4:34:8a:5c:86: 83:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:A4:17:35:B9:75:DD:2A:84:FA:57:14:91:03:42:32:40:A5:E6:44 X509v3 Authority Key Identifier: keyid:10:07:1D:AB:16:8E:8E:53:E3:CD:7D:F5:DB:8E:0F:04:24:2E:90:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAcdqxaOjlPjzX31244PBCQukIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/cbe6b7-5e13-4094-b979-2fe412e3eab4/1/EAcdqxaOjlPjzX31244PBCQukIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fa:9d:cb:4b:e9:0b:80:b7:2b:73:79:06:a9:e4:f2:e7:01: 10:82:11:38:09:28:f3:f2:dc:8c:dc:70:f6:52:68:85:41:ac: d3:79:23:15:a7:44:6c:9f:57:e7:af:b5:af:8b:09:d5:64:e2: 12:36:f3:ed:d3:a3:a1:3e:09:4c:b4:c4:6d:24:d1:b6:69:55: b0:63:c6:c2:66:2d:48:34:58:8b:6b:bc:00:3d:94:6a:5c:7f: 76:7d:40:78:fd:28:ce:e4:0c:d1:5d:ef:6a:de:f7:88:e2:43: 38:46:a0:2f:16:86:ff:32:50:6e:11:54:b0:8e:20:7f:a8:6f: 62:4a:8f:c5:8d:4c:23:e3:9e:c8:0b:88:d5:11:b1:1a:61:dc: 76:1f:f5:28:82:bc:5b:1f:94:e5:c9:26:66:6b:6a:5b:36:d9: 8e:8e:89:66:09:51:48:19:43:9d:6e:58:5d:1b:6f:78:ed:47: ec:90:c9:80:5f:55:75:67:bb:54:1c:cb:f8:bf:c6:b1:e3:e8: 55:0a:2f:bc:f9:18:d9:75:74:07:4a:ab:a3:33:4b:8d:dc:60: 2e:ec:ea:d7:10:b2:e9:93:68:68:5e:f2:80:f7:b4:7e:77:c4: 8c:ff:69:fc:ef:4e:19:2f:37:c2:2a:98:01:33:c4:f7:82:0f: d9:24:e9:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ctV+vGddqt1Y8RPzgrlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDcxZGFiMTY4ZThlNTNlM2NkN2RmNWRiOGUwZjA0MjQy ZTkwODYwHhcNMjUxMjA2MDQwMDQ5WhcNMjUxMjA3MDQwMDQ5WjAzMTEwLwYDVQQD Eyg3NGE0MTczNWI5NzVkZDJhODRmYTU3MTQ5MTAzNDIzMjQwYTVlNjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoyPEBMGDJmd4TVM4a8Xmy40okIZ pHtrsxpPw78Pn2xdWM6v0bzMKwaSanRRDk8uohF5GCZM5QuB/NFQlNVedWbzUE+q rE/GoXb1oXElRX3hBkAScyxVp2rikMTpsofYs+d3uMaZd2GROtBBRkkr50usGwVZ F+utuwMwZWFPCkodZrdkXyFoYlJCChxshuui2JhvROX06eGIR0H+51bo7UnbAc0q Vake+OXwby6IT+BtnCdiP5GH4k9yVE1NYlrTGhK/reEHXQjo15N7/Ebqh1h69aH1 StL61Zx7a7c030D2zq3qqHfi9NJox4lpng7x5IqMbYaHPe29xDSKXIaD2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSkFzW5dd0qhPpXFJEDQjJApeZEMB8GA1UdIwQY MBaAFBAHHasWjo5T48199duODwQkLpCGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5Nzkt MmZlNDEyZTNlYWI0LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jYmU2YjctNWUxMy00MDk0LWI5NzktMmZlNDEyZTNlYWI0 LzEvRUFjZHF4YU9qbFBqelgzMTI0NFBCQ1F1a0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPqdy0vp C4C3K3N5Bqnk8ucBEIIROAko8/LcjNxw9lJohUGs03kjFadEbJ9X56+1r4sJ1WTi Ejbz7dOjoT4JTLTEbSTRtmlVsGPGwmYtSDRYi2u8AD2Ualx/dn1AeP0ozuQM0V3v at73iOJDOEagLxaG/zJQbhFUsI4gf6hvYkqPxY1MI+OeyAuI1RGxGmHcdh/1KIK8 Wx+U5ckmZmtqWzbZjo6JZglRSBlDnW5YXRtveO1H7JDJgF9VdWe7VBzL+L/GsePo VQovvPkY2XV0B0qrozNLjdxgLuzq1xCy6ZNoaF7ygPe0fnfEjP9p/O9OGS83wiqY ATPE94IP2STp7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:33:17 2025 by rpki-client