This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft File: eojTDTUC0d-66TDV6pzJ1yY-lQg.mft (raw, json) Hash identifier: wgR6UiuvyraZHIzCR60bk/vdCAHCBDhjGHx4jZ3kaEY= Subject key identifier: 06:98:BD:C8:3E:BD:D3:EF:7E:46:B5:A5:4C:99:23:F0:B4:69:41:90 Authority key identifier: 7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 Certificate issuer: /CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Certificate serial: 019B3D911EFA3733C70B5F9F26E3BD9E059E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft Manifest number: 047E Signing time: Sat 20 Dec 2025 21:01:19 +0000 Manifest this update: Sat 20 Dec 2025 21:01:19 +0000 Manifest next update: Sun 21 Dec 2025 21:01:19 +0000 Files and hashes: 1: W8sGLPfZJfk-AE8QSt5pW51bYBc.roa (hash: WTLS8/lHH8tSlHx/vjXHMnAP1canB1yYuL3OZnBm/0I=) 2: eojTDTUC0d-66TDV6pzJ1yY-lQg.crl (hash: n+W8ZCioltZszWBTHghfDWvAo4OEjEOe5MnM6KO8ywU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:1e:fa:37:33:c7:0b:5f:9f:26:e3:bd:9e:05:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a88d30d3502d1dfbae930d5ea9cc9d7263e9508 Validity Not Before: Dec 20 21:01:19 2025 GMT Not After : Dec 21 21:01:19 2025 GMT Subject: CN=0698bdc83ebdd3ef7e46b5a54c9923f0b4694190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:35:3b:25:0e:ca:0b:4c:43:20:a5:d5:e6: cd:7d:88:10:c1:3b:55:7d:ea:0b:42:79:de:a4:22: 99:61:8e:82:8e:d3:ab:17:25:70:c4:05:11:84:f3: 55:25:93:74:92:31:9d:52:7b:49:af:fe:fb:34:e7: bd:1c:ab:7f:0c:28:b4:dc:fc:67:22:68:e7:57:b0: 38:1b:28:67:fb:65:36:5b:f0:e3:77:06:dc:79:a3: e8:18:74:8c:4d:83:6b:ac:ba:a0:4a:b4:fa:8d:69: 97:bf:49:02:94:07:c9:c8:b6:53:17:cf:62:33:8a: 2b:fb:7a:a0:73:2b:99:a4:01:63:f0:9d:18:98:96: 74:6f:fb:d8:cd:bd:19:3d:a6:3d:17:a8:9d:ea:0b: e6:27:35:3f:44:bc:02:07:8e:53:b6:65:e9:81:35: b4:86:2c:d5:5f:44:ef:1c:29:84:30:63:04:ca:72: e0:35:24:54:3a:2b:78:9a:a7:b7:e2:71:19:a5:5e: ab:66:0c:c7:68:ba:0f:9e:ef:fa:06:42:16:2a:08: 6b:04:7f:f2:b7:fd:17:98:59:89:d5:83:b9:09:4f: ed:66:3c:dd:27:4b:06:e6:84:0e:58:b6:5c:1a:8b: 2d:fd:5e:95:9a:6a:47:33:8f:b8:50:b9:fd:66:b0: a5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:98:BD:C8:3E:BD:D3:EF:7E:46:B5:A5:4C:99:23:F0:B4:69:41:90 X509v3 Authority Key Identifier: keyid:7A:88:D3:0D:35:02:D1:DF:BA:E9:30:D5:EA:9C:C9:D7:26:3E:95:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eojTDTUC0d-66TDV6pzJ1yY-lQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/88cbd2-51ab-4cd3-8d46-0a1c13a68be4/1/eojTDTUC0d-66TDV6pzJ1yY-lQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c8:eb:08:b6:f4:7e:47:f9:5e:6b:60:32:1b:3e:07:38:ba: e6:05:3b:fd:16:e0:22:2f:4b:5d:01:82:fd:27:aa:a6:94:21: 83:a6:3b:b8:70:e2:0b:a5:09:04:33:ab:4d:b8:cd:73:5f:ac: f7:92:d4:02:d5:da:6e:4e:7c:4b:47:15:6b:66:48:11:de:1c: 2b:db:1d:61:1e:76:67:a6:be:4b:64:65:3e:83:7c:0f:26:d8: a6:1f:94:e3:97:88:d5:51:63:47:3f:b3:20:16:90:50:37:a2: 9f:07:84:32:e5:09:82:2a:b0:de:fb:43:39:dd:df:a2:7b:61: 0e:8d:76:b3:92:b3:24:a4:5a:f5:c8:1f:5f:02:3d:6a:bb:b0: c2:43:dd:1e:60:9f:83:27:81:6e:4d:7e:7b:9f:40:51:92:a3: 6d:67:c3:4f:f9:c6:34:27:fd:a4:13:f8:46:12:4b:14:22:2b: 5f:44:53:32:7e:7a:32:b1:e4:66:10:08:c0:2c:b4:09:b7:2b: ac:b5:52:d0:01:c3:4f:88:93:ef:74:e6:62:57:5d:c9:81:d9: 72:cb:05:0d:d9:93:23:dc:85:32:98:5f:92:0a:41:54:28:4a: 1e:31:8c:4a:01:64:85:cc:9c:92:ea:91:5e:12:9a:b0:fc:d3: 1f:46:4e:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kR76NzPHC1+fJuO9ngWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhODhkMzBkMzUwMmQxZGZiYWU5MzBkNWVhOWNjOWQ3MjYz ZTk1MDgwHhcNMjUxMjIwMjEwMTE5WhcNMjUxMjIxMjEwMTE5WjAzMTEwLwYDVQQD EygwNjk4YmRjODNlYmRkM2VmN2U0NmI1YTU0Yzk5MjNmMGI0Njk0MTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Vg1OyUOygtMQyCl1ebNfYgQwTtV feoLQnnepCKZYY6CjtOrFyVwxAURhPNVJZN0kjGdUntJr/77NOe9HKt/DCi03Pxn ImjnV7A4Gyhn+2U2W/DjdwbceaPoGHSMTYNrrLqgSrT6jWmXv0kClAfJyLZTF89i M4or+3qgcyuZpAFj8J0YmJZ0b/vYzb0ZPaY9F6id6gvmJzU/RLwCB45TtmXpgTW0 hizVX0TvHCmEMGMEynLgNSRUOit4mqe34nEZpV6rZgzHaLoPnu/6BkIWKghrBH/y t/0XmFmJ1YO5CU/tZjzdJ0sG5oQOWLZcGost/V6VmmpHM4+4ULn9ZrClGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaYvcg+vdPvfka1pUyZI/C0aUGQMB8GA1UdIwQY MBaAFHqI0w01AtHfuukw1eqcydcmPpUIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYt MGExYzEzYTY4YmU0LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS84OGNiZDItNTFhYi00Y2QzLThkNDYtMGExYzEzYTY4YmU0 LzEvZW9qVERUVUMwZC02NlREVjZwekoxeVktbFFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArsjrCLb0 fkf5XmtgMhs+Bzi65gU7/RbgIi9LXQGC/SeqppQhg6Y7uHDiC6UJBDOrTbjNc1+s 95LUAtXabk58S0cVa2ZIEd4cK9sdYR52Z6a+S2RlPoN8DybYph+U45eI1VFjRz+z IBaQUDeinweEMuUJgiqw3vtDOd3fonthDo12s5KzJKRa9cgfXwI9aruwwkPdHmCf gyeBbk1+e59AUZKjbWfDT/nGNCf9pBP4RhJLFCIrX0RTMn56MrHkZhAIwCy0Cbcr rLVS0AHDT4iT73TmYlddyYHZcssFDdmTI9yFMphfkgpBVChKHjGMSgFkhcyckuqR XhKasPzTH0ZOtw== -----END CERTIFICATE-----Generated at Sun Dec 21 02:20:49 2025 by rpki-client