This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft File: Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json) Hash identifier: 5PHFW63HjYkutbPSQyRdZfwelPuRYRtgXeZpWQIcFk0= Subject key identifier: D9:6A:A6:05:52:3E:23:DD:4E:6C:39:8B:B5:2A:C7:7C:6A:9A:5C:58 Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Certificate serial: 019B2B1CE5447146EEE3EE6CE3CA07047E62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft Manifest number: 1781 Signing time: Wed 17 Dec 2025 07:01:12 +0000 Manifest this update: Wed 17 Dec 2025 07:01:12 +0000 Manifest next update: Thu 18 Dec 2025 07:01:12 +0000 Files and hashes: 1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: bLcXQs/WjWE5IuPGFl631su650oxvsFe52304vzu6BU=) 2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 07:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:1c:e5:44:71:46:ee:e3:ee:6c:e3:ca:07:04:7e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Validity Not Before: Dec 17 07:01:12 2025 GMT Not After : Dec 18 07:01:12 2025 GMT Subject: CN=d96aa605523e23dd4e6c398bb52ac77c6a9a5c58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:10:0a:c3:8f:6f:b4:f4:f3:5e:dc:fb:0e:d7: 42:7d:e2:b2:09:43:c1:aa:09:09:5c:56:2c:4e:3b: d9:83:3a:9b:7c:97:78:b5:78:a9:31:f5:94:88:60: 97:c2:6c:a5:11:25:fe:e6:e1:06:6f:dd:2a:c0:0b: 75:08:d9:27:30:77:d5:43:a7:c2:34:c7:de:7a:11: 13:dd:c9:dc:22:a5:e6:5c:6b:3c:af:f1:26:4b:d7: 65:2c:92:aa:ad:06:f4:5f:4c:46:8c:a7:2c:78:0c: fa:90:6e:44:a0:53:1e:05:8f:b2:8d:8c:f6:1a:d5: 50:8b:a5:b9:4c:45:a5:db:3f:76:09:9c:59:2d:2b: 79:1f:c5:91:38:af:0e:e0:19:1d:03:4c:04:a0:8a: ff:58:d7:2f:ed:c7:5f:0d:0a:26:c0:7c:d5:3d:b8: 6d:2a:f6:bd:68:81:68:07:cf:73:d3:9e:18:19:7f: 85:cb:66:25:47:ca:a7:9b:87:6d:4e:e3:3f:16:66: ab:2b:ef:39:e7:57:d2:e2:55:fd:61:42:c3:cc:bb: 90:5f:fd:ef:44:14:10:3f:3d:8d:2f:60:b8:53:5e: c0:7c:ca:e1:77:8c:99:60:55:cc:3d:c1:06:3d:55: aa:35:30:cc:ab:ea:aa:db:8c:71:68:55:32:7c:fa: 7a:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:A6:05:52:3E:23:DD:4E:6C:39:8B:B5:2A:C7:7C:6A:9A:5C:58 X509v3 Authority Key Identifier: keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:1c:a6:d4:25:85:80:74:5d:49:2d:98:48:ea:18:01:96:79: f2:c4:0e:ba:28:de:20:f4:52:2f:49:02:8d:ef:d3:be:48:98: 0d:6e:3a:95:71:22:b1:f7:2d:97:2e:cc:b2:2c:57:d9:0d:a1: 28:54:32:10:b4:be:a3:39:4a:49:9e:6c:99:98:80:b4:78:80: 90:11:a8:63:2b:c3:c2:37:a9:b5:67:35:88:36:3e:5f:5d:77: 23:77:14:23:2f:20:0a:55:47:9b:52:8c:c7:21:bd:24:c1:fd: 4a:00:7c:e4:0c:ae:31:28:e2:76:1f:83:ad:bd:97:15:fb:b1: 16:cb:92:9d:23:54:c3:a1:75:ff:e1:17:86:6c:7e:68:06:b2: 47:9e:7a:e9:7c:42:27:c0:54:16:71:3c:c9:ed:3e:ae:59:97: ae:91:e0:ce:f2:d3:39:c6:19:9c:56:10:a2:66:22:6b:7d:a0: c9:28:c4:c2:84:6e:ce:5f:97:af:69:4c:43:20:93:03:41:b3: 62:ed:ee:d8:6a:fc:2a:93:6f:33:26:20:f7:0d:5d:9d:85:7d: 64:3c:9f:68:05:28:0d:7c:42:fb:e3:1c:d6:0a:de:ab:ed:57: 87:32:af:40:56:4b:4e:f9:32:eb:36:4d:92:27:90:fc:83:f5: e4:ab:15:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrHOVEcUbu4+5s48oHBH5iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTZmNzcxOTNmMjc2NGJhODk0Mjg1ZGQyZjY0ZjEyMjZm ZDkxMjYwHhcNMjUxMjE3MDcwMTEyWhcNMjUxMjE4MDcwMTEyWjAzMTEwLwYDVQQD EyhkOTZhYTYwNTUyM2UyM2RkNGU2YzM5OGJiNTJhYzc3YzZhOWE1YzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BAKw49vtPTzXtz7DtdCfeKyCUPB qgkJXFYsTjvZgzqbfJd4tXipMfWUiGCXwmylESX+5uEGb90qwAt1CNknMHfVQ6fC NMfeehET3cncIqXmXGs8r/EmS9dlLJKqrQb0X0xGjKcseAz6kG5EoFMeBY+yjYz2 GtVQi6W5TEWl2z92CZxZLSt5H8WROK8O4BkdA0wEoIr/WNcv7cdfDQomwHzVPbht Kva9aIFoB89z054YGX+Fy2YlR8qnm4dtTuM/FmarK+8551fS4lX9YULDzLuQX/3v RBQQPz2NL2C4U17AfMrhd4yZYFXMPcEGPVWqNTDMq+qq24xxaFUyfPp6TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNlqpgVSPiPdTmw5i7Uqx3xqmlxYMB8GA1UdIwQY MBaAFBHm93GT8nZLqJQoXdL2TxIm/ZEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAt YmQ3MjhiOGY1MzI3LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAtYmQ3MjhiOGY1MzI3 LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAChym1CWF gHRdSS2YSOoYAZZ58sQOuijeIPRSL0kCje/TvkiYDW46lXEisfctly7MsixX2Q2h KFQyELS+ozlKSZ5smZiAtHiAkBGoYyvDwjeptWc1iDY+X113I3cUIy8gClVHm1KM xyG9JMH9SgB85AyuMSjidh+Drb2XFfuxFsuSnSNUw6F1/+EXhmx+aAayR5566XxC J8BUFnE8ye0+rlmXrpHgzvLTOcYZnFYQomYia32gySjEwoRuzl+Xr2lMQyCTA0Gz Yu3u2Gr8KpNvMyYg9w1dnYV9ZDyfaAUoDXxC++Mc1greq+1XhzKvQFZLTvky6zZN kieQ/IP15KsVQw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:39:03 2025 by rpki-client