This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft File: Eeb3cZPydkuolChd0vZPEib9kSY.mft (raw, json) Hash identifier: i3d0SNjawbobjveEa/hfMAZwLw+6r/l6J26eNI1lHco= Subject key identifier: ED:9D:70:DF:3C:44:5F:62:2D:59:D1:B9:A4:B1:A8:69:B7:4E:D6:C4 Authority key identifier: 11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 Certificate issuer: /CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Certificate serial: 019AF12E5D21D4C0493817D828BB6E7DC2DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:18 +0000 Manifest this update: Sat 06 Dec 2025 01:02:18 +0000 Manifest next update: Sun 07 Dec 2025 01:02:18 +0000 Files and hashes: 1: Eeb3cZPydkuolChd0vZPEib9kSY.crl (hash: oqKSeqVV1a627S7/Dq4FE6d9ySHH6ZXXaYD0w6a90nU=) 2: XFg9UB4gTIL8wJ9DUJTpOfsymeY.roa (hash: xjEc3UgcuslMKxGxfh1ksiSKMzapldmW9N+WDd88oT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:5d:21:d4:c0:49:38:17:d8:28:bb:6e:7d:c2:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11e6f77193f2764ba894285dd2f64f1226fd9126 Validity Not Before: Dec 6 01:02:18 2025 GMT Not After : Dec 7 01:02:18 2025 GMT Subject: CN=ed9d70df3c445f622d59d1b9a4b1a869b74ed6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:74:30:cc:da:1a:08:4a:8f:c8:c3:98:c8:67: e0:6b:d5:ac:1f:4e:43:1a:e2:3d:e4:ae:92:14:9b: fc:74:d9:02:16:64:60:14:ae:a4:94:aa:ad:25:26: 65:d5:af:3a:5b:4d:3f:f8:b5:ac:08:9b:fb:34:f6: dc:92:00:4f:95:61:72:3a:9a:01:7c:78:ae:17:b2: b5:52:97:d6:8c:77:2f:ae:e9:23:05:91:7f:af:1b: 87:b1:c8:46:47:dc:48:2f:b4:f0:ca:0a:5c:1e:e0: 3f:c0:7a:75:cc:63:73:f1:dc:e2:46:a0:5e:46:07: f2:2d:f8:68:86:57:7b:45:09:ab:2e:88:82:9f:c2: 9f:11:a5:6c:d0:53:55:3a:8e:ff:3b:a9:b8:9b:02: 2f:a9:ce:a4:7e:f7:8b:ca:4a:0c:76:f9:25:7e:49: f2:ca:d2:32:19:ad:4e:30:12:67:34:ae:cb:cb:1d: 6a:b9:d0:c6:be:72:5e:3c:92:65:aa:9d:b8:8b:ae: 5b:58:27:97:bc:3d:1c:03:4d:a1:f0:d0:ba:61:c0: 20:f3:d3:5b:d2:56:a6:3c:ab:36:61:54:e4:c8:65: 51:97:e0:a1:66:0e:51:eb:15:2c:22:4b:a6:1f:e7: fb:79:db:3b:a4:39:91:50:8e:fc:b9:e8:5d:dd:27: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:70:DF:3C:44:5F:62:2D:59:D1:B9:A4:B1:A8:69:B7:4E:D6:C4 X509v3 Authority Key Identifier: keyid:11:E6:F7:71:93:F2:76:4B:A8:94:28:5D:D2:F6:4F:12:26:FD:91:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eeb3cZPydkuolChd0vZPEib9kSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7d2b94-3b76-4ffc-b680-bd728b8f5327/1/Eeb3cZPydkuolChd0vZPEib9kSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:be:cd:6f:68:30:0e:0c:14:b0:74:2c:5c:59:e9:da:81:ce: cf:22:57:a8:79:04:60:ef:5a:10:d5:4e:25:ed:f4:f4:46:22: b9:31:75:df:ec:1d:71:3f:60:d9:9d:c2:f0:54:52:13:a7:28: 10:e4:95:da:70:72:9c:c6:e4:bd:97:a8:54:17:db:92:e2:c0: a7:15:14:a8:51:84:bb:97:0c:b1:af:c9:96:d3:d1:c1:b5:89: b1:5d:66:37:9d:48:dc:78:68:60:78:1c:72:57:d7:02:a9:8f: 18:39:83:dd:a6:f0:a8:7a:08:3d:37:a6:23:8f:3e:e9:65:b7: e5:10:86:62:a5:d9:9b:a3:a5:6d:94:c4:47:74:91:45:f8:8f: 32:79:27:85:2c:86:2e:2f:12:3f:d9:5e:cd:fd:62:32:39:a6: 92:b3:c7:fd:90:85:ad:d8:e0:09:1e:05:68:ad:7c:16:65:d5: 15:64:3a:6c:cd:d8:12:c1:83:2a:70:62:2e:c9:f9:be:10:bf: 6a:76:c8:a2:7f:c9:a6:db:e3:14:d9:d6:19:98:f7:61:56:bf: 02:fb:d0:04:74:6e:1a:57:fe:33:57:31:aa:36:cb:af:00:f2: 61:ac:eb:a4:09:42:68:9b:9d:e8:b0:e7:77:76:63:7c:7c:4f: 20:e9:ec:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLl0h1MBJOBfYKLtufcLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExZTZmNzcxOTNmMjc2NGJhODk0Mjg1ZGQyZjY0ZjEyMjZm ZDkxMjYwHhcNMjUxMjA2MDEwMjE4WhcNMjUxMjA3MDEwMjE4WjAzMTEwLwYDVQQD EyhlZDlkNzBkZjNjNDQ1ZjYyMmQ1OWQxYjlhNGIxYTg2OWI3NGVkNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknQwzNoaCEqPyMOYyGfga9WsH05D GuI95K6SFJv8dNkCFmRgFK6klKqtJSZl1a86W00/+LWsCJv7NPbckgBPlWFyOpoB fHiuF7K1UpfWjHcvrukjBZF/rxuHschGR9xIL7TwygpcHuA/wHp1zGNz8dziRqBe RgfyLfhohld7RQmrLoiCn8KfEaVs0FNVOo7/O6m4mwIvqc6kfveLykoMdvklfkny ytIyGa1OMBJnNK7Lyx1qudDGvnJePJJlqp24i65bWCeXvD0cA02h8NC6YcAg89Nb 0lamPKs2YVTkyGVRl+ChZg5R6xUsIkumH+f7eds7pDmRUI78uehd3SdbIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO2dcN88RF9iLVnRuaSxqGm3TtbEMB8GA1UdIwQY MBaAFBHm93GT8nZLqJQoXdL2TxIm/ZEmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAt YmQ3MjhiOGY1MzI3LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83ZDJiOTQtM2I3Ni00ZmZjLWI2ODAtYmQ3MjhiOGY1MzI3 LzEvRWViM2NaUHlka3VvbENoZDB2WlBFaWI5a1NZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAob7Nb2gw DgwUsHQsXFnp2oHOzyJXqHkEYO9aENVOJe309EYiuTF13+wdcT9g2Z3C8FRSE6co EOSV2nBynMbkvZeoVBfbkuLApxUUqFGEu5cMsa/JltPRwbWJsV1mN51I3HhoYHgc clfXAqmPGDmD3abwqHoIPTemI48+6WW35RCGYqXZm6OlbZTER3SRRfiPMnknhSyG Li8SP9lezf1iMjmmkrPH/ZCFrdjgCR4FaK18FmXVFWQ6bM3YEsGDKnBiLsn5vhC/ anbIon/JptvjFNnWGZj3YVa/AvvQBHRuGlf+M1cxqjbLrwDyYazrpAlCaJud6LDn d3ZjfHxPIOnsVw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:36:59 2025 by rpki-client