This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json) Hash identifier: BUptWQBW8O+4iX9WFyABZMC0sK4MGpGuAfro1evDS/c= Subject key identifier: CB:C7:86:F8:C0:28:32:67:3A:F8:73:8F:E4:FD:29:90:46:67:08:98 Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Certificate serial: 019AF49BAC6ABD69954F0B5BE98DA30EFCCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:00:34 +0000 Manifest this update: Sat 06 Dec 2025 17:00:34 +0000 Manifest next update: Sun 07 Dec 2025 17:00:34 +0000 Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: 9YGD0M4kQck+giwnzJF8MCbLh6Y8gDJbEGGI4uGf91U=) 2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9b:ac:6a:bd:69:95:4f:0b:5b:e9:8d:a3:0e:fc:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Validity Not Before: Dec 6 17:00:34 2025 GMT Not After : Dec 7 17:00:34 2025 GMT Subject: CN=cbc786f8c02832673af8738fe4fd299046670898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bb:23:d5:db:f3:c9:06:d5:92:67:d4:b3:b2: 49:11:c3:4b:50:f3:6c:5b:10:c8:55:8e:9a:a7:55: 1e:32:99:1a:46:b4:f8:a8:f9:93:8c:ad:6e:31:f0: 0f:6f:63:35:09:57:27:2f:21:88:17:15:94:68:c9: 7e:bf:e8:02:0a:9b:78:c3:e8:55:4c:57:85:66:12: 8f:0d:f9:37:ab:91:48:87:5e:85:e8:84:8a:69:8f: f6:c2:d0:30:44:36:b6:5c:17:03:88:79:f2:9a:a7: 21:37:a4:f9:6b:d1:9a:ad:7b:05:a8:6b:57:d8:7b: a9:01:4a:58:da:35:a8:23:b4:34:fc:07:34:87:b2: b3:7d:e8:e1:f7:c2:53:52:3f:0f:74:6b:ce:2f:9e: 74:70:90:7a:a9:5a:a3:ef:65:89:70:99:5b:bd:2e: 6e:06:88:4d:1e:27:4b:c1:9e:56:5a:9b:bc:f4:be: d5:22:e8:2e:18:58:66:8f:74:41:1c:a4:0e:9f:c6: 51:01:c0:e4:00:9f:b1:a6:4a:5f:af:41:5c:a2:02: 27:b1:e2:b0:b8:b6:68:b3:d1:8e:16:de:0c:94:07: ad:98:50:dc:4f:d1:c1:51:2f:d2:f0:3b:ce:5a:fe: 84:57:c3:ed:67:83:f7:3e:51:7d:89:27:f9:59:f9: 58:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C7:86:F8:C0:28:32:67:3A:F8:73:8F:E4:FD:29:90:46:67:08:98 X509v3 Authority Key Identifier: keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:ae:67:6e:7c:7a:71:7c:b5:b7:13:a3:85:e5:d9:60:46:96: dc:f7:10:43:d0:5c:90:99:8f:32:40:09:9e:e1:6e:2c:87:f9: 28:ad:27:86:7a:5a:7d:23:bb:ca:4b:20:57:25:d5:69:fb:fc: a1:c1:d6:1d:0a:61:d8:0e:2c:e4:d8:f9:66:03:fa:73:4b:0c: 6c:a6:1a:9b:a7:6e:42:96:85:d6:d5:17:69:31:26:e2:e7:ac: 70:08:43:34:69:6a:51:02:80:76:60:e5:6e:2a:cb:83:df:ef: 27:30:b5:c9:4e:d2:e5:c0:4d:1e:58:80:dd:61:e1:ac:2b:b0: 72:2b:01:f2:b3:01:90:91:68:84:3e:14:63:5b:38:55:76:24: 0c:75:48:f6:67:6a:82:cf:fe:ca:2f:13:f8:90:f4:d9:7f:34: 3c:cd:5f:94:b6:ce:2b:e7:36:a8:91:12:91:cc:91:36:62:8a: 1e:e1:c7:22:95:1d:b3:f9:23:69:fc:85:1a:a4:dc:4f:4e:0c: 41:55:20:b9:96:e2:fe:b9:ee:93:e2:12:40:b8:52:bc:87:01: fa:63:12:ff:a8:9a:02:ce:b0:5b:ce:37:3c:60:7c:24:4a:32: f8:16:54:b1:2b:12:73:bb:25:db:6a:27:56:7b:51:71:8e:02: ab:a1:98:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0m6xqvWmVTwtb6Y2jDvzMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZThkYTg0MDdmOWY3NDhlODFmZTlkYTllYjA2YjNiMTdk MDY3ZGQwHhcNMjUxMjA2MTcwMDM0WhcNMjUxMjA3MTcwMDM0WjAzMTEwLwYDVQQD EyhjYmM3ODZmOGMwMjgzMjY3M2FmODczOGZlNGZkMjk5MDQ2NjcwODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Lsj1dvzyQbVkmfUs7JJEcNLUPNs WxDIVY6ap1UeMpkaRrT4qPmTjK1uMfAPb2M1CVcnLyGIFxWUaMl+v+gCCpt4w+hV TFeFZhKPDfk3q5FIh16F6ISKaY/2wtAwRDa2XBcDiHnymqchN6T5a9GarXsFqGtX 2HupAUpY2jWoI7Q0/Ac0h7Kzfejh98JTUj8PdGvOL550cJB6qVqj72WJcJlbvS5u BohNHidLwZ5WWpu89L7VIuguGFhmj3RBHKQOn8ZRAcDkAJ+xpkpfr0FcogInseKw uLZos9GOFt4MlAetmFDcT9HBUS/S8DvOWv6EV8PtZ4P3PlF9iSf5WflY9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvHhvjAKDJnOvhzj+T9KZBGZwiYMB8GA1UdIwQY MBaAFBDo2oQH+fdI6B/p2p6wazsX0GfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUt MmNlZWE1Y2FmM2EwLzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUtMmNlZWE1Y2FmM2Ew LzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKK5nbnx6 cXy1txOjheXZYEaW3PcQQ9BckJmPMkAJnuFuLIf5KK0nhnpafSO7yksgVyXVafv8 ocHWHQph2A4s5Nj5ZgP6c0sMbKYam6duQpaF1tUXaTEm4uescAhDNGlqUQKAdmDl birLg9/vJzC1yU7S5cBNHliA3WHhrCuwcisB8rMBkJFohD4UY1s4VXYkDHVI9mdq gs/+yi8T+JD02X80PM1flLbOK+c2qJESkcyRNmKKHuHHIpUds/kjafyFGqTcT04M QVUguZbi/rnuk+ISQLhSvIcB+mMS/6iaAs6wW843PGB8JEoy+BZUsSsSc7sl22on VntRcY4Cq6GY0A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:39:12 2025 by rpki-client