This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft File: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft (raw, json) Hash identifier: oHPEFCAr87wVeWUaPEWUxOaxbC+XHFv48li/gstMeY0= Subject key identifier: 96:63:81:6C:AA:89:46:00:C3:3C:B6:50:75:DB:58:50:9A:D9:7B:15 Authority key identifier: 7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 Certificate issuer: /CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Certificate serial: 019AF3BFEE94ED6A4A653BAC440730AB5333 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 13:00:33 +0000 Manifest this update: Sat 06 Dec 2025 13:00:33 +0000 Manifest next update: Sun 07 Dec 2025 13:00:33 +0000 Files and hashes: 1: eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl (hash: GVUwyJISdS3nxKAOuAizlJIFX3r57CnIXtc278U5o1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:bf:ee:94:ed:6a:4a:65:3b:ac:44:07:30:ab:53:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a8192e9f740e8d238059e28a0a037083081b7d2 Validity Not Before: Dec 6 13:00:33 2025 GMT Not After : Dec 7 13:00:33 2025 GMT Subject: CN=9663816caa894600c33cb65075db58509ad97b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:24:8a:d5:1e:0e:12:96:57:eb:e5:26:fd:b8: 87:23:14:48:ac:c5:7c:76:fc:de:80:bf:1b:b0:b1: f9:6e:f9:0f:05:cf:01:90:89:ca:ba:9e:a0:dc:1e: 51:5f:a2:c0:49:b3:48:83:95:bb:10:01:47:3b:a7: 46:06:29:d6:bf:cf:5c:03:18:b8:56:e8:73:8e:45: d4:3e:df:df:28:e9:d6:f8:5c:ec:3b:ee:5e:49:f3: 49:64:6f:79:3b:ef:01:5f:a9:d1:c8:c9:82:59:53: e2:ac:80:45:f3:01:20:be:65:da:86:2e:16:7a:65: 62:db:3d:02:56:9b:e5:d9:9e:f5:be:bb:e3:d5:5d: 51:bc:65:b0:f8:78:1c:30:41:db:76:eb:db:e6:c2: 66:8c:18:35:de:e6:db:2b:a5:e2:b2:b7:c9:6c:11: 77:62:f8:02:00:fe:c1:d1:3b:b1:a9:0f:99:10:28: b6:28:ce:d4:07:63:49:99:99:6f:35:c0:78:f0:b1: 7a:e0:c2:c0:d8:04:7b:f9:d4:29:6d:54:9e:2c:43: 42:45:31:ef:d6:e7:31:d8:1c:4f:02:15:81:7c:ef: 03:b8:2c:32:f6:f5:97:1c:59:09:31:8f:ba:ad:f5: 04:4d:cf:da:0e:ef:ea:b4:4a:1d:64:61:9e:ca:4d: b5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:81:6C:AA:89:46:00:C3:3C:B6:50:75:DB:58:50:9A:D9:7B:15 X509v3 Authority Key Identifier: keyid:7A:81:92:E9:F7:40:E8:D2:38:05:9E:28:A0:A0:37:08:30:81:B7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/218760-62fe-45e9-9a4d-c0e33bbf5238/1/eoGS6fdA6NI4BZ4ooKA3CDCBt9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:8c:4b:26:7f:54:00:d5:15:de:a7:30:8f:ea:43:94:0e:1c: e2:0e:6a:1f:d8:71:20:f1:3e:5b:18:6f:91:74:06:e9:1f:df: 34:2c:44:ae:d9:e1:85:d2:3f:03:20:02:07:11:ec:04:4b:96: d3:96:63:40:69:e5:c2:b7:cc:af:5a:0c:ff:3f:1d:a9:5a:9f: 19:0d:95:56:07:00:4a:c4:d5:e6:04:0d:f4:b5:45:a6:60:c0: 55:f4:d4:f4:14:e3:df:fd:62:fc:f8:8b:b6:c4:f4:a1:7a:16: 23:d4:de:cf:a2:9a:ea:03:18:5e:69:51:43:2b:36:ce:21:17: 56:25:dc:09:eb:82:92:fa:e3:a9:8a:cb:36:14:6d:31:16:64: 06:1c:9f:c5:97:0c:62:dd:87:80:74:4f:38:2b:6e:f4:67:00: 20:80:d7:cc:e3:a1:a9:a1:0d:25:85:ab:5a:62:e8:e4:82:2f: f0:f6:fa:0d:97:d3:3e:83:c7:e0:1d:a5:7b:21:ff:17:c1:c1: 3e:95:34:cf:ea:45:5e:44:68:84:63:48:9c:32:ad:bb:df:e5: 9a:4d:a7:e3:06:f0:22:1d:87:95:5f:36:c0:38:50:a6:42:d7: 95:9f:8e:03:c7:b9:a8:83:ca:2e:25:1e:8f:c8:38:d8:25:2d: 7d:0e:1c:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzv+6U7WpKZTusRAcwq1MzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODE5MmU5Zjc0MGU4ZDIzODA1OWUyOGEwYTAzNzA4MzA4 MWI3ZDIwHhcNMjUxMjA2MTMwMDMzWhcNMjUxMjA3MTMwMDMzWjAzMTEwLwYDVQQD Eyg5NjYzODE2Y2FhODk0NjAwYzMzY2I2NTA3NWRiNTg1MDlhZDk3YjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSSK1R4OEpZX6+Um/biHIxRIrMV8 dvzegL8bsLH5bvkPBc8BkInKup6g3B5RX6LASbNIg5W7EAFHO6dGBinWv89cAxi4 VuhzjkXUPt/fKOnW+FzsO+5eSfNJZG95O+8BX6nRyMmCWVPirIBF8wEgvmXahi4W emVi2z0CVpvl2Z71vrvj1V1RvGWw+HgcMEHbduvb5sJmjBg13ubbK6XisrfJbBF3 YvgCAP7B0TuxqQ+ZECi2KM7UB2NJmZlvNcB48LF64MLA2AR7+dQpbVSeLENCRTHv 1ucx2BxPAhWBfO8DuCwy9vWXHFkJMY+6rfUETc/aDu/qtEodZGGeyk21wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZjgWyqiUYAwzy2UHXbWFCa2XsVMB8GA1UdIwQY MBaAFHqBkun3QOjSOAWeKKCgNwgwgbfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQt YzBlMzNiYmY1MjM4LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8yMTg3NjAtNjJmZS00NWU5LTlhNGQtYzBlMzNiYmY1MjM4 LzEvZW9HUzZmZEE2Tkk0Qlo0b29LQTNDRENCdDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoxLJn9U ANUV3qcwj+pDlA4c4g5qH9hxIPE+WxhvkXQG6R/fNCxErtnhhdI/AyACBxHsBEuW 05ZjQGnlwrfMr1oM/z8dqVqfGQ2VVgcASsTV5gQN9LVFpmDAVfTU9BTj3/1i/PiL tsT0oXoWI9Tez6Ka6gMYXmlRQys2ziEXViXcCeuCkvrjqYrLNhRtMRZkBhyfxZcM Yt2HgHRPOCtu9GcAIIDXzOOhqaENJYWrWmLo5IIv8Pb6DZfTPoPH4B2leyH/F8HB PpU0z+pFXkRohGNInDKtu9/lmk2n4wbwIh2HlV82wDhQpkLXlZ+OA8e5qIPKLiUe j8g42CUtfQ4cZA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:37 2025 by rpki-client