This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft File: eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft (raw, json) Hash identifier: B98zMOQ6pydlEa/Nrv2JSr+h/oYJJEvETHAu3yrN9HQ= Subject key identifier: 5B:5E:F7:75:EF:00:F7:AA:32:39:7C:C9:C2:3E:60:1D:AE:C3:C8:72 Authority key identifier: 7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D Certificate issuer: /CN=7aa812372b83a5e0c9fca15a552bb63638a3827d Certificate serial: 019AF2098C4E38F174E26BC5AC2F05CD62D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft Manifest number: 03C5 Signing time: Sat 06 Dec 2025 05:01:43 +0000 Manifest this update: Sat 06 Dec 2025 05:01:43 +0000 Manifest next update: Sun 07 Dec 2025 05:01:43 +0000 Files and hashes: 1: eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl (hash: VCfAQMJ8KXv5F/Hx3WX8xKc+bxVONvqy3AmxYS5Wr30=) 2: t4J82APsmp_R6OEftpBkDV2egNw.roa (hash: 8zX3Us/+jsPS0B0DI0Wm7LbIZB+zrk1lXmg8uqQiqvY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:8c:4e:38:f1:74:e2:6b:c5:ac:2f:05:cd:62:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aa812372b83a5e0c9fca15a552bb63638a3827d Validity Not Before: Dec 6 05:01:43 2025 GMT Not After : Dec 7 05:01:43 2025 GMT Subject: CN=5b5ef775ef00f7aa32397cc9c23e601daec3c872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d2:c0:7b:60:a7:bd:7b:0b:52:44:bd:0d:cd: 35:b6:d9:0d:3e:e7:4e:62:6c:bd:20:2e:c5:33:95: 16:e6:f2:57:ca:7a:71:e6:c8:54:cc:52:05:b2:0c: c6:85:5b:8e:1e:70:7b:f3:aa:79:74:00:5f:01:a9: 7c:fa:85:64:fe:29:44:09:bc:ce:06:76:25:57:cf: 6e:cb:1f:e9:55:30:ff:ec:0a:0a:2d:aa:70:c8:f2: 13:60:d3:e5:0c:ba:66:a7:29:99:fa:49:c1:5a:b7: f9:32:95:29:77:26:e8:40:1a:cc:9b:71:f2:8a:ef: 1b:c3:c3:d8:d0:fc:8d:69:80:7d:ea:a2:10:c4:c9: 1b:11:d0:db:92:23:01:b5:3b:99:88:30:e5:7e:c2: 8a:c1:d4:bb:ce:f9:bb:e5:99:84:05:5d:3f:4f:09: 20:78:48:bc:37:25:89:c2:ff:82:36:61:ba:e5:36: ac:6f:3b:70:63:38:b8:2a:5f:dd:43:b4:73:f5:83: db:a0:2b:00:49:88:cf:1b:4e:cf:b4:e0:1b:bb:4b: 9f:30:59:91:e3:d1:ab:6b:20:ba:5b:56:62:ff:c1: ec:60:d7:9c:a9:3a:45:09:1a:7b:e3:52:b2:d1:de: 93:50:74:9b:da:49:c4:5d:49:da:6a:03:10:23:3c: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5E:F7:75:EF:00:F7:AA:32:39:7C:C9:C2:3E:60:1D:AE:C3:C8:72 X509v3 Authority Key Identifier: keyid:7A:A8:12:37:2B:83:A5:E0:C9:FC:A1:5A:55:2B:B6:36:38:A3:82:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eqgSNyuDpeDJ_KFaVSu2Njijgn0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/cdbb49-57c5-454f-9b05-e65292158f43/1/eqgSNyuDpeDJ_KFaVSu2Njijgn0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:8d:3b:29:51:54:f3:6c:71:00:07:fc:ad:ae:7c:06:0b:71: 66:47:e5:3f:52:13:a0:92:a1:2e:b2:22:eb:10:a9:75:4d:85: ef:d6:d9:88:59:b4:ad:e5:53:5d:98:82:d2:c9:46:35:fd:54: 49:37:44:3b:0f:98:ef:bc:dd:e8:85:f4:18:cb:8f:a0:c2:23: 8d:60:6b:9c:20:ed:f0:04:ee:bd:27:fb:eb:c1:14:49:c5:a1: 81:90:f8:29:eb:ab:10:57:5c:62:6d:20:5a:af:79:b2:a7:43: 3d:3d:21:a4:b4:7e:20:ea:76:35:30:a8:06:d7:4b:90:b0:8c: 3c:71:be:33:ca:93:12:00:9d:07:5b:07:8f:3f:f0:c9:ca:98: 5d:79:24:13:37:e5:01:61:42:95:e3:d9:9a:3f:78:4c:0f:00: 29:76:fe:74:c7:2d:83:84:4b:d0:8b:92:c4:64:b7:94:b5:b6: 79:a3:0b:95:9e:4c:58:cd:b2:8b:1d:4d:33:99:c8:55:d9:f9: bd:23:f9:6f:7e:dd:3b:e1:9f:40:41:da:98:27:d7:00:6e:2d: b2:99:03:48:2c:a2:b7:96:39:2b:6d:a8:7d:95:c6:7e:f8:5a: bc:0d:76:8d:93:77:89:af:ef:37:99:dc:84:76:68:a5:0d:4e: e0:56:c5:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCYxOOPF04mvFrC8FzWLZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhYTgxMjM3MmI4M2E1ZTBjOWZjYTE1YTU1MmJiNjM2Mzhh MzgyN2QwHhcNMjUxMjA2MDUwMTQzWhcNMjUxMjA3MDUwMTQzWjAzMTEwLwYDVQQD Eyg1YjVlZjc3NWVmMDBmN2FhMzIzOTdjYzljMjNlNjAxZGFlYzNjODcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9LAe2CnvXsLUkS9Dc01ttkNPudO Ymy9IC7FM5UW5vJXynpx5shUzFIFsgzGhVuOHnB786p5dABfAal8+oVk/ilECbzO BnYlV89uyx/pVTD/7AoKLapwyPITYNPlDLpmpymZ+knBWrf5MpUpdyboQBrMm3Hy iu8bw8PY0PyNaYB96qIQxMkbEdDbkiMBtTuZiDDlfsKKwdS7zvm75ZmEBV0/Twkg eEi8NyWJwv+CNmG65TasbztwYzi4Kl/dQ7Rz9YPboCsASYjPG07PtOAbu0ufMFmR 49GrayC6W1Zi/8HsYNecqTpFCRp741Ky0d6TUHSb2knEXUnaagMQIzwGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFte93XvAPeqMjl8ycI+YB2uw8hyMB8GA1UdIwQY MBaAFHqoEjcrg6XgyfyhWlUrtjY4o4J9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXFnU055dURwZURKX0tGYVZTdTJOamlqZ24wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9jZGJiNDktNTdjNS00NTRmLTliMDUt ZTY1MjkyMTU4ZjQzLzEvZXFnU055dURwZURKX0tGYVZTdTJOamlqZ24wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS9jZGJiNDktNTdjNS00NTRmLTliMDUtZTY1MjkyMTU4ZjQz LzEvZXFnU055dURwZURKX0tGYVZTdTJOamlqZ24wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqY07KVFU 82xxAAf8ra58BgtxZkflP1IToJKhLrIi6xCpdU2F79bZiFm0reVTXZiC0slGNf1U STdEOw+Y77zd6IX0GMuPoMIjjWBrnCDt8ATuvSf768EUScWhgZD4KeurEFdcYm0g Wq95sqdDPT0hpLR+IOp2NTCoBtdLkLCMPHG+M8qTEgCdB1sHjz/wycqYXXkkEzfl AWFClePZmj94TA8AKXb+dMctg4RL0IuSxGS3lLW2eaMLlZ5MWM2yix1NM5nIVdn5 vSP5b37dO+GfQEHamCfXAG4tspkDSCyit5Y5K22ofZXGfvhavA12jZN3ia/vN5nc hHZopQ1O4FbFRA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:09 2025 by rpki-client