This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft File: kB-EOslEjLB3kZF7kDVAFf_iPbc.mft (raw, json) Hash identifier: Fw3Gsr3hMLL2xra+1VW0IELwAjvm70AhyjmvK31IfKg= Subject key identifier: 7D:77:3F:52:D4:D4:C4:F4:14:FA:75:73:52:D5:DF:99:7C:C0:77:9C Authority key identifier: 90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 Certificate issuer: /CN=901f843ac9448cb07791917b90354015ffe23db7 Certificate serial: 019AF352C3755B34FD46BC22D40465F2BB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 11:01:18 +0000 Manifest this update: Sat 06 Dec 2025 11:01:18 +0000 Manifest next update: Sun 07 Dec 2025 11:01:18 +0000 Files and hashes: 1: kB-EOslEjLB3kZF7kDVAFf_iPbc.crl (hash: VCEImraZcCsHwYC3egTC7mb3jrZB80f4/qPPHAtrt3E=) 2: qJaxShBy0DTWJnv89u4j-u1rRt0.roa (hash: v1eQwogxLyju8Nd0v7YmtPyhLDpVTvEoi8QUOeFY/iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:c3:75:5b:34:fd:46:bc:22:d4:04:65:f2:bb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=901f843ac9448cb07791917b90354015ffe23db7 Validity Not Before: Dec 6 11:01:18 2025 GMT Not After : Dec 7 11:01:18 2025 GMT Subject: CN=7d773f52d4d4c4f414fa757352d5df997cc0779c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e3:01:e0:9e:32:c9:16:c1:18:b9:71:1e:de: 38:3b:77:d4:25:09:72:f4:dc:83:bf:80:b3:c4:60: 4c:20:fa:f7:d3:f2:c4:b6:30:4f:2b:98:99:a4:92: e0:2e:db:fa:86:d3:aa:16:f2:83:06:b3:5a:65:f5: c6:89:46:3f:30:f3:a5:8f:67:95:c8:58:f0:24:35: a6:f9:f9:70:75:8c:17:d2:df:ef:33:92:4f:eb:78: 3a:10:da:78:f4:59:2c:50:ac:02:be:e8:24:22:1e: 07:0e:d2:84:47:5a:22:da:52:2d:33:7e:3c:57:40: 8b:2b:9d:32:1a:37:26:f1:84:d9:b6:df:8d:f8:bc: 26:79:b1:63:0b:62:70:50:1f:d0:59:8d:7c:c1:33: 88:07:e1:6d:8a:23:d5:7a:94:ef:06:6e:86:ca:ef: 90:4a:57:3f:ae:92:48:f3:75:3a:8b:42:2a:2b:c5: d8:c3:4d:5b:df:b4:e1:00:36:0f:a9:e3:b7:8d:57: 2f:d0:be:6a:23:d2:41:c5:29:99:55:5e:09:50:3c: e6:ef:07:13:ad:9e:4b:9b:bf:49:05:03:31:0b:e3: 78:66:f1:25:02:c1:bb:54:22:c0:c0:1b:95:f3:1f: 52:7e:cd:3c:2c:a0:3e:53:5e:4d:51:8f:0a:a7:f2: 03:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:77:3F:52:D4:D4:C4:F4:14:FA:75:73:52:D5:DF:99:7C:C0:77:9C X509v3 Authority Key Identifier: keyid:90:1F:84:3A:C9:44:8C:B0:77:91:91:7B:90:35:40:15:FF:E2:3D:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kB-EOslEjLB3kZF7kDVAFf_iPbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/03c734-7598-4bd7-ae21-b204f9fcadb6/1/kB-EOslEjLB3kZF7kDVAFf_iPbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:89:5d:8d:25:34:57:c3:ae:4e:1f:54:86:3f:6a:05:46:96: 77:d1:1d:57:f7:e5:90:0c:d5:49:ba:bb:f3:35:b4:e7:8b:2d: 61:08:4a:52:d4:d0:7a:1c:22:69:fc:84:12:52:e2:fa:34:01: ac:fd:3b:2e:76:67:31:0f:8a:bf:ac:2f:8b:a9:ee:3d:f7:0c: 79:b7:d9:fc:52:53:0b:01:96:ab:8e:5a:1d:05:ab:58:aa:27: 45:23:d9:24:e2:5e:a4:a9:54:da:7a:0e:a5:ef:cf:e6:9b:17: 93:c9:da:dc:49:4f:d3:64:49:04:c6:38:e7:36:d1:53:70:2a: 84:68:a8:e4:2d:40:20:26:e3:59:bf:f6:b3:10:e0:6f:f1:59: b1:9a:ea:b7:10:57:e0:01:c3:f7:89:09:c4:c2:67:c1:46:8f: e9:c2:59:20:c3:34:d1:db:51:87:54:d3:aa:03:08:3b:79:35: c3:65:eb:d7:a1:f9:a7:ca:12:cf:60:01:84:21:b5:ba:a4:d4: 9a:2f:75:ad:ae:5c:f0:29:86:97:5c:c0:37:ec:e6:cb:42:71: cf:b7:ea:bf:ce:79:5f:62:75:77:b5:14:08:23:51:77:68:5d: 04:c9:12:42:1d:84:b2:3f:2d:00:92:39:ce:82:41:14:d7:1f: e2:01:e8:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUsN1WzT9Rrwi1ARl8rspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwMWY4NDNhYzk0NDhjYjA3NzkxOTE3YjkwMzU0MDE1ZmZl MjNkYjcwHhcNMjUxMjA2MTEwMTE4WhcNMjUxMjA3MTEwMTE4WjAzMTEwLwYDVQQD Eyg3ZDc3M2Y1MmQ0ZDRjNGY0MTRmYTc1NzM1MmQ1ZGY5OTdjYzA3NzljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+MB4J4yyRbBGLlxHt44O3fUJQly 9NyDv4CzxGBMIPr30/LEtjBPK5iZpJLgLtv6htOqFvKDBrNaZfXGiUY/MPOlj2eV yFjwJDWm+flwdYwX0t/vM5JP63g6ENp49FksUKwCvugkIh4HDtKER1oi2lItM348 V0CLK50yGjcm8YTZtt+N+LwmebFjC2JwUB/QWY18wTOIB+FtiiPVepTvBm6Gyu+Q Slc/rpJI83U6i0IqK8XYw01b37ThADYPqeO3jVcv0L5qI9JBxSmZVV4JUDzm7wcT rZ5Lm79JBQMxC+N4ZvElAsG7VCLAwBuV8x9Sfs08LKA+U15NUY8Kp/IDvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH13P1LU1MT0FPp1c1LV35l8wHecMB8GA1UdIwQY MBaAFJAfhDrJRIywd5GRe5A1QBX/4j23MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEt YjIwNGY5ZmNhZGI2LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8wM2M3MzQtNzU5OC00YmQ3LWFlMjEtYjIwNGY5ZmNhZGI2 LzEva0ItRU9zbEVqTEIza1pGN2tEVkFGZl9pUGJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIldjSU0 V8OuTh9Uhj9qBUaWd9EdV/flkAzVSbq78zW054stYQhKUtTQehwiafyEElLi+jQB rP07LnZnMQ+Kv6wvi6nuPfcMebfZ/FJTCwGWq45aHQWrWKonRSPZJOJepKlU2noO pe/P5psXk8na3ElP02RJBMY45zbRU3AqhGio5C1AICbjWb/2sxDgb/FZsZrqtxBX 4AHD94kJxMJnwUaP6cJZIMM00dtRh1TTqgMIO3k1w2Xr16H5p8oSz2ABhCG1uqTU mi91ra5c8CmGl1zAN+zmy0Jxz7fqv855X2J1d7UUCCNRd2hdBMkSQh2Esj8tAJI5 zoJBFNcf4gHofg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:00:09 2025 by rpki-client