This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json) Hash identifier: OOxkiHwUU/EseuJgEX3vIsZ47x3xPODsTb5DTvKOvzA= Subject key identifier: A1:80:77:A8:C2:CF:26:49:CA:3E:EA:0E:11:67:94:D0:75:A0:94:7C Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Certificate serial: 019AF61C4613A3862FD5A8F0210888D93D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft Manifest number: 0459 Signing time: Sun 07 Dec 2025 00:00:39 +0000 Manifest this update: Sun 07 Dec 2025 00:00:39 +0000 Manifest next update: Mon 08 Dec 2025 00:00:39 +0000 Files and hashes: 1: W8sGLPfZJfk-AE8QSt5pW51bYBc.roa (hash: WTLS8/lHH8tSlHx/vjXHMnAP1canB1yYuL3OZnBm/0I=) 2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: aVkIh5/V0cWnvvlHhBX31PGxloZypMA42TJToVjwYLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:46:13:a3:86:2f:d5:a8:f0:21:08:88:d9:3d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Validity Not Before: Dec 7 00:00:39 2025 GMT Not After : Dec 8 00:00:39 2025 GMT Subject: CN=a18077a8c2cf2649ca3eea0e116794d075a0947c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6f:7c:76:b8:04:69:99:a2:28:18:29:67:75: ae:82:1b:e5:05:85:2f:6a:4a:5b:76:ea:3a:31:28: 14:95:a7:36:88:6b:7b:14:ee:76:27:8f:05:e9:5f: 4e:9a:e5:66:bd:96:14:66:fb:0c:91:d2:f2:2d:18: d1:7a:85:57:32:dd:1a:ce:18:f6:71:61:c2:aa:66: 2b:48:c2:42:d2:b8:10:c3:5a:54:1d:4c:dd:50:77: d5:38:38:e6:20:ce:e8:a7:1e:db:ed:43:ee:60:c9: 9e:a5:44:5d:dd:21:7e:9c:58:28:4d:c6:f7:42:9a: d2:d8:7e:be:4c:1e:ca:f7:d1:b7:94:d2:a8:ae:db: 79:26:2d:9f:93:ed:be:84:c5:17:47:80:e7:48:7b: 6c:ab:3a:f9:2f:6e:36:c1:5c:fa:92:c1:64:c8:22: 52:12:1e:d1:ca:65:79:ae:01:66:6a:d5:49:91:45: 16:4c:e5:72:ff:f5:87:ec:19:2c:1d:8f:ce:be:1d: 8d:34:cc:02:62:ef:00:c3:1f:b9:27:82:4f:77:ec: 76:2d:e0:1c:00:df:31:5e:52:b8:bb:df:54:ff:f2: ad:3e:fa:65:9d:4a:e3:cf:8a:ea:ff:a3:8c:81:76: a0:50:25:b2:7e:13:d9:0d:59:83:f0:b4:58:36:ea: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:80:77:A8:C2:CF:26:49:CA:3E:EA:0E:11:67:94:D0:75:A0:94:7C X509v3 Authority Key Identifier: keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:fb:8d:3c:34:09:a7:4d:ce:54:d1:70:97:eb:65:1e:e2:98: a6:e2:40:51:50:e6:33:9b:b1:74:15:ed:4d:7a:17:1c:14:af: 83:f6:8b:d9:fa:a0:eb:fb:d7:1c:c0:77:33:6f:a3:38:a3:61: 2d:37:29:14:31:76:0e:02:86:5d:17:4d:21:90:0d:fe:be:4d: 76:1a:25:37:77:e4:2b:6a:63:e5:78:ee:19:bb:3a:17:69:73: 20:07:17:28:14:a4:d8:74:46:22:51:77:cc:91:03:ce:23:e3: c3:70:62:72:58:27:cc:e9:f3:77:ce:b3:dc:4a:07:da:e0:2f: 45:3f:08:5d:e0:21:88:94:88:e9:8d:85:e8:17:96:b3:8f:af: 9e:09:db:6b:39:3c:bb:30:f9:fd:cd:3b:dc:a6:59:45:4f:e9: 4f:ef:c3:eb:f2:34:6d:4f:12:46:07:65:23:d4:af:e3:ce:9e: 75:de:ea:59:6f:2b:f3:77:6d:29:26:58:9c:02:f2:6f:47:44: 5b:0e:90:d9:78:a8:a0:71:b3:3d:c3:05:a4:57:95:2f:25:30: 3e:9b:b2:cc:87:fc:87:b3:a4:44:32:c8:c1:04:ee:d3:65:a9: d7:15:8f:9a:51:28:c8:f4:15:d8:2f:c2:e2:ff:59:21:e9:f3: 0a:62:83:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HEYTo4Yv1ajwIQiI2T0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODhkMzBkMzUwMmQxZGZiYWU5MzBkNWVhOWNjOWQ3MjYz ZTk1MDgwHhcNMjUxMjA3MDAwMDM5WhcNMjUxMjA4MDAwMDM5WjAzMTEwLwYDVQQD EyhhMTgwNzdhOGMyY2YyNjQ5Y2EzZWVhMGUxMTY3OTRkMDc1YTA5NDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs298drgEaZmiKBgpZ3WughvlBYUv akpbduo6MSgUlac2iGt7FO52J48F6V9OmuVmvZYUZvsMkdLyLRjReoVXMt0azhj2 cWHCqmYrSMJC0rgQw1pUHUzdUHfVODjmIM7opx7b7UPuYMmepURd3SF+nFgoTcb3 QprS2H6+TB7K99G3lNKortt5Ji2fk+2+hMUXR4DnSHtsqzr5L242wVz6ksFkyCJS Eh7RymV5rgFmatVJkUUWTOVy//WH7BksHY/Ovh2NNMwCYu8Awx+5J4JPd+x2LeAc AN8xXlK4u99U//KtPvplnUrjz4rq/6OMgXagUCWyfhPZDVmD8LRYNuqa6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGAd6jCzyZJyj7qDhFnlNB1oJR8MB8GA1UdIwQY MBaAFHqI0w01AtHfuukw1eqcydcmPpUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYt MGExYzEzYTY4YmU0LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYtMGExYzEzYTY4YmU0 LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/uNPDQJ p03OVNFwl+tlHuKYpuJAUVDmM5uxdBXtTXoXHBSvg/aL2fqg6/vXHMB3M2+jOKNh LTcpFDF2DgKGXRdNIZAN/r5NdholN3fkK2pj5XjuGbs6F2lzIAcXKBSk2HRGIlF3 zJEDziPjw3BiclgnzOnzd86z3EoH2uAvRT8IXeAhiJSI6Y2F6BeWs4+vngnbazk8 uzD5/c073KZZRU/pT+/D6/I0bU8SRgdlI9Sv486edd7qWW8r83dtKSZYnALyb0dE Ww6Q2XiooHGzPcMFpFeVLyUwPpuyzIf8h7OkRDLIwQTu02Wp1xWPmlEoyPQV2C/C 4v9ZIenzCmKDJQ== -----END CERTIFICATE-----Generated at Sun Dec 7 05:17:58 2025 by rpki-client