This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft File: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft (raw, json) Hash identifier: 8d0ULwhAG/P5KV/GZ68npEUe4BzP68Nlwb8hf0uLUDQ= Subject key identifier: AC:1B:6D:8F:99:49:9E:1B:24:14:62:AB:97:73:D6:57:64:82:B5:31 Authority key identifier: 11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 Certificate issuer: /CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Certificate serial: 019AF23F70EC3B1738F8897177FA04B4ACE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft Manifest number: 0320 Signing time: Sat 06 Dec 2025 06:00:35 +0000 Manifest this update: Sat 06 Dec 2025 06:00:35 +0000 Manifest next update: Sun 07 Dec 2025 06:00:35 +0000 Files and hashes: 1: Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl (hash: WJYIcKXV9P/MdHHAfxxxG50gN+vTOIlDUjv2c/qDQ2w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:70:ec:3b:17:38:f8:89:71:77:fa:04:b4:ac:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ae4ecaf5fe48e18586d90fa54e9e6fbfd4fed5 Validity Not Before: Dec 6 06:00:35 2025 GMT Not After : Dec 7 06:00:35 2025 GMT Subject: CN=ac1b6d8f99499e1b241462ab9773d6576482b531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:56:59:e0:f2:30:19:00:c7:7c:88:a2:fa:1f: d3:08:bd:c8:55:f2:2a:65:b9:a9:83:df:21:f5:5e: 80:7d:c0:88:08:94:59:a1:49:35:8b:6d:36:37:0f: ac:ff:57:ce:c3:1d:23:de:4f:57:c4:a6:bc:78:c5: 4c:9d:7f:d1:4c:14:ea:7c:b2:a2:54:a8:7f:b2:31: f6:70:75:39:01:d4:c7:42:9e:42:9c:db:9f:77:10: d2:af:d0:e9:4a:8d:5d:fe:47:f7:97:43:39:fb:58: 31:ca:ac:8f:46:2c:9f:95:9b:f3:25:62:b8:df:cf: cf:7c:11:8d:06:c7:76:f9:8c:4d:5d:2e:43:b0:73: a4:b7:9b:15:78:bd:6e:b6:3d:36:3c:ca:fd:60:16: eb:a0:4a:d1:f4:fa:e5:e7:c1:cb:97:45:d4:38:cb: 2b:a6:32:11:6c:15:0b:cf:71:11:df:1f:30:50:4d: d7:1d:58:22:df:9d:a5:6e:d1:89:43:0c:05:1b:c6: 16:6f:1f:7b:4d:2a:30:10:81:20:70:9c:ad:1e:90: 52:47:b9:98:89:f0:c1:3b:be:d7:2a:e1:15:77:c8: 00:da:5e:af:eb:7c:c3:68:e3:80:03:48:35:9f:de: b0:2d:06:f1:7d:dd:3f:43:f2:1f:9e:f2:ad:a3:4a: a0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:1B:6D:8F:99:49:9E:1B:24:14:62:AB:97:73:D6:57:64:82:B5:31 X509v3 Authority Key Identifier: keyid:11:AE:4E:CA:F5:FE:48:E1:85:86:D9:0F:A5:4E:9E:6F:BF:D4:FE:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/df407b-06a0-437c-809e-74b32939cc84/1/Ea5OyvX-SOGFhtkPpU6eb7_U_tU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:d0:41:13:75:66:7e:a5:00:86:c2:ec:2f:43:6f:a4:c1:78: 47:4e:09:69:f0:35:dc:cd:7f:c9:60:66:0d:7f:dd:16:cb:f6: 0a:5b:83:78:a4:83:e3:05:ee:6a:8e:b5:f9:c6:e6:88:8a:bd: cd:b0:a4:fd:b5:ec:d1:45:cc:02:9a:c4:1e:d3:65:95:33:f0: 21:bf:22:05:1f:f8:4f:e3:7d:8d:9e:7f:5d:13:7e:2c:36:14: 56:57:c7:fb:bb:78:b5:06:d7:90:b3:8e:e2:fe:1e:45:34:65: 9f:5e:75:cb:c2:62:d3:5d:fb:52:24:25:70:6c:a7:64:c4:45: 0e:0e:2a:86:c4:8b:ff:d0:d2:23:38:39:44:7f:59:f2:a1:b5: 3a:7a:07:9d:6c:d0:0c:50:44:cd:18:49:91:34:9a:91:eb:d1: 96:1d:96:49:bf:39:40:a0:04:b0:2a:dc:5f:a5:7c:4a:a0:ce: fa:35:cc:55:91:ee:9a:52:8a:80:9e:e0:77:75:9b:70:e5:80: da:f6:15:8f:78:f6:18:f0:b3:d5:c1:b9:18:c8:a7:81:a2:f4: f8:0f:c1:f6:25:03:35:bd:35:ae:45:a8:8e:6f:cf:fe:1c:5e: ec:57:cd:54:57:26:e2:cf:26:7b:f1:d1:15:f2:58:fb:21:c0: 38:e3:95:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3DsOxc4+Ilxd/oEtKzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYWU0ZWNhZjVmZTQ4ZTE4NTg2ZDkwZmE1NGU5ZTZmYmZk NGZlZDUwHhcNMjUxMjA2MDYwMDM1WhcNMjUxMjA3MDYwMDM1WjAzMTEwLwYDVQQD EyhhYzFiNmQ4Zjk5NDk5ZTFiMjQxNDYyYWI5NzczZDY1NzY0ODJiNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVZZ4PIwGQDHfIii+h/TCL3IVfIq Zbmpg98h9V6AfcCICJRZoUk1i202Nw+s/1fOwx0j3k9XxKa8eMVMnX/RTBTqfLKi VKh/sjH2cHU5AdTHQp5CnNufdxDSr9DpSo1d/kf3l0M5+1gxyqyPRiyflZvzJWK4 38/PfBGNBsd2+YxNXS5DsHOkt5sVeL1utj02PMr9YBbroErR9Prl58HLl0XUOMsr pjIRbBULz3ER3x8wUE3XHVgi352lbtGJQwwFG8YWbx97TSowEIEgcJytHpBSR7mY ifDBO77XKuEVd8gA2l6v63zDaOOAA0g1n96wLQbxfd0/Q/IfnvKto0qgMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwbbY+ZSZ4bJBRiq5dz1ldkgrUxMB8GA1UdIwQY MBaAFBGuTsr1/kjhhYbZD6VOnm+/1P7VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUt NzRiMzI5MzljYzg0LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZjQwN2ItMDZhMC00MzdjLTgwOWUtNzRiMzI5MzljYzg0 LzEvRWE1T3l2WC1TT0dGaHRrUHBVNmViN19VX3RVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg9BBE3Vm fqUAhsLsL0NvpMF4R04JafA13M1/yWBmDX/dFsv2CluDeKSD4wXuao61+cbmiIq9 zbCk/bXs0UXMAprEHtNllTPwIb8iBR/4T+N9jZ5/XRN+LDYUVlfH+7t4tQbXkLOO 4v4eRTRln151y8Ji0137UiQlcGynZMRFDg4qhsSL/9DSIzg5RH9Z8qG1OnoHnWzQ DFBEzRhJkTSakevRlh2WSb85QKAEsCrcX6V8SqDO+jXMVZHumlKKgJ7gd3WbcOWA 2vYVj3j2GPCz1cG5GMingaL0+A/B9iUDNb01rkWojm/P/hxe7FfNVFcm4s8me/HR FfJY+yHAOOOV6A== -----END CERTIFICATE-----Generated at Sat Dec 6 12:41:52 2025 by rpki-client