This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft File: eH0Q8i5f-ksg99W3goxVuVCal1k.mft (raw, json) Hash identifier: ZuqcYEntaYbvunSq6/9CLWRMBC9Zsze4ehqSSgBChLs= Subject key identifier: DB:D8:20:D3:F0:2F:2D:4E:A7:13:E7:3B:C8:46:42:B1:DF:F6:5F:83 Authority key identifier: 78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59 Certificate issuer: /CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759 Certificate serial: 019AF1D1E51756D3EA289763A0F835EDB306 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 04:00:55 +0000 Manifest this update: Sat 06 Dec 2025 04:00:55 +0000 Manifest next update: Sun 07 Dec 2025 04:00:55 +0000 Files and hashes: 1: eH0Q8i5f-ksg99W3goxVuVCal1k.crl (hash: EWFuTmp9l8IQb5pWiOgLtMRf2MXkJCbbxJ3gtyMwToA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:e5:17:56:d3:ea:28:97:63:a0:f8:35:ed:b3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787d10f22e5ffa4b20f7d5b7828c55b9509a9759 Validity Not Before: Dec 6 04:00:55 2025 GMT Not After : Dec 7 04:00:55 2025 GMT Subject: CN=dbd820d3f02f2d4ea713e73bc84642b1dff65f83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:58:e1:8c:5f:79:b1:4a:8e:e5:51:15:c4:af: ee:4b:e6:61:f5:df:cc:c5:53:b4:02:72:51:f0:fd: 12:c5:5c:c8:99:60:65:36:c0:91:3f:b8:0e:95:41: ae:78:ac:b3:5c:f8:dc:be:8c:59:18:d6:b0:40:4d: 69:00:4c:8b:0d:cd:fb:2c:1e:ae:6d:35:51:9a:a9: 1a:89:d9:23:cf:57:26:d4:a6:f5:9b:d8:60:6a:f2: 4d:ac:38:48:e0:10:5a:81:4a:02:72:ae:82:a7:8f: 2a:60:2a:08:78:90:83:ef:e5:f9:57:e4:7f:b5:0b: f7:f7:ec:03:aa:67:70:14:f3:f1:49:a1:c1:8e:47: 18:08:85:22:a6:5e:98:34:16:b9:71:09:5e:3a:a5: 64:83:32:38:0c:ec:bb:22:ae:75:4b:e9:79:23:b7: 4d:71:93:57:2d:43:bf:58:55:b1:f4:e6:27:20:82: 20:2c:12:ae:cf:3e:27:ea:8e:24:c0:72:c6:62:96: ab:e0:7f:c9:49:41:06:2a:7a:26:20:d1:c9:6c:24: 60:38:7d:79:3b:07:e0:73:93:68:3b:a6:64:23:f2: 99:1b:35:dc:1f:6c:40:51:71:47:de:8a:21:85:40: da:30:06:c1:db:83:46:20:7c:d1:43:59:97:cf:44: 1d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D8:20:D3:F0:2F:2D:4E:A7:13:E7:3B:C8:46:42:B1:DF:F6:5F:83 X509v3 Authority Key Identifier: keyid:78:7D:10:F2:2E:5F:FA:4B:20:F7:D5:B7:82:8C:55:B9:50:9A:97:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH0Q8i5f-ksg99W3goxVuVCal1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/ab8055-389c-43ed-abde-bf0de2bb1c3c/1/eH0Q8i5f-ksg99W3goxVuVCal1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:8d:25:97:4e:f5:4e:c2:dd:31:9b:44:aa:c2:73:9a:7d:48: f4:23:1f:16:c9:24:01:db:5e:2f:7a:80:d2:27:4a:94:43:fd: 7f:6e:3c:c8:50:88:aa:7a:52:ff:96:63:f0:e9:2e:8a:00:86: 5b:7c:84:54:6c:26:a1:79:ff:7b:83:6a:8f:47:a9:dc:72:cf: b5:4f:45:30:7e:52:27:d9:3e:1d:7e:b1:8f:f5:2a:81:9f:84: 97:3f:c8:27:bc:14:8e:04:c5:16:1d:95:27:1f:84:b6:c2:96: 49:c6:cd:19:20:7c:48:19:66:37:60:41:c8:8d:32:4d:b8:73: ff:47:26:cd:f8:ff:fc:ed:34:92:a7:6d:77:02:2c:92:78:3c: 2b:f2:93:f1:a3:06:b6:60:b4:0c:ae:ce:2e:ba:95:c4:32:b5: 41:d8:3e:7e:25:ea:fc:c1:78:36:3d:dc:b2:fe:a3:31:f6:75: e7:13:69:a4:51:f0:5d:48:ec:ae:d1:dd:88:81:0d:3c:11:a9: ea:94:32:47:a0:4a:94:06:27:5e:da:88:49:2d:5e:31:ee:09: 2f:4e:e8:57:33:05:3d:53:dc:5d:fe:23:88:db:66:a4:75:4e: 07:3c:19:ef:da:a5:d5:3f:04:b1:c6:e8:f4:27:e2:5a:b9:c8: 30:a5:3b:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0eUXVtPqKJdjoPg17bMGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2QxMGYyMmU1ZmZhNGIyMGY3ZDViNzgyOGM1NWI5NTA5 YTk3NTkwHhcNMjUxMjA2MDQwMDU1WhcNMjUxMjA3MDQwMDU1WjAzMTEwLwYDVQQD EyhkYmQ4MjBkM2YwMmYyZDRlYTcxM2U3M2JjODQ2NDJiMWRmZjY1ZjgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ljhjF95sUqO5VEVxK/uS+Zh9d/M xVO0AnJR8P0SxVzImWBlNsCRP7gOlUGueKyzXPjcvoxZGNawQE1pAEyLDc37LB6u bTVRmqkaidkjz1cm1Kb1m9hgavJNrDhI4BBagUoCcq6Cp48qYCoIeJCD7+X5V+R/ tQv39+wDqmdwFPPxSaHBjkcYCIUipl6YNBa5cQleOqVkgzI4DOy7Iq51S+l5I7dN cZNXLUO/WFWx9OYnIIIgLBKuzz4n6o4kwHLGYpar4H/JSUEGKnomINHJbCRgOH15 Owfgc5NoO6ZkI/KZGzXcH2xAUXFH3oohhUDaMAbB24NGIHzRQ1mXz0QdkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvYINPwLy1OpxPnO8hGQrHf9l+DMB8GA1UdIwQY MBaAFHh9EPIuX/pLIPfVt4KMVblQmpdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUt YmYwZGUyYmIxYzNjLzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC9hYjgwNTUtMzg5Yy00M2VkLWFiZGUtYmYwZGUyYmIxYzNj LzEvZUgwUThpNWYta3NnOTlXM2dveFZ1VkNhbDFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALo0ll071 TsLdMZtEqsJzmn1I9CMfFskkAdteL3qA0idKlEP9f248yFCIqnpS/5Zj8OkuigCG W3yEVGwmoXn/e4Nqj0ep3HLPtU9FMH5SJ9k+HX6xj/UqgZ+Elz/IJ7wUjgTFFh2V Jx+EtsKWScbNGSB8SBlmN2BByI0yTbhz/0cmzfj//O00kqdtdwIskng8K/KT8aMG tmC0DK7OLrqVxDK1Qdg+fiXq/MF4Nj3csv6jMfZ15xNppFHwXUjsrtHdiIENPBGp 6pQyR6BKlAYnXtqISS1eMe4JL07oVzMFPVPcXf4jiNtmpHVOBzwZ79ql1T8Escbo 9CfiWrnIMKU7Qw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:50:27 2025 by rpki-client