This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft File: EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft (raw, json) Hash identifier: VBEu1xKC5IowDcIynATsh6ASW0PKkxeYjXHHyHpzxwI= Subject key identifier: 49:D4:B2:B9:A5:F0:70:D2:D1:C9:F8:CB:65:39:F2:F2:23:1B:96:45 Authority key identifier: 11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE Certificate issuer: /CN=110aaf9016a68752fc9132149b91e8fab16e24be Certificate serial: 019AF540D1484FE9286EF4762695C97B452E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:57 +0000 Manifest this update: Sat 06 Dec 2025 20:00:57 +0000 Manifest next update: Sun 07 Dec 2025 20:00:57 +0000 Files and hashes: 1: 6R7l5Zc0F8S-RPgHqG7ELPTEGWs.roa (hash: qKcKkoUboZrcqtoprL7lO+GfuPllhw7eINNwNRAw7pk=) 2: EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl (hash: LddO0Kfmf/p9MG5jIBypYSYcT3xq/Jd+/mHarYmr+1g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:d1:48:4f:e9:28:6e:f4:76:26:95:c9:7b:45:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=110aaf9016a68752fc9132149b91e8fab16e24be Validity Not Before: Dec 6 20:00:57 2025 GMT Not After : Dec 7 20:00:57 2025 GMT Subject: CN=49d4b2b9a5f070d2d1c9f8cb6539f2f2231b9645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:60:d8:9f:e2:69:84:b5:ab:cf:da:3e:40:2c: 15:55:dc:eb:4b:aa:f6:d1:ff:75:0e:46:50:dc:32: d1:7d:7a:29:3f:08:0f:6d:09:37:cd:e9:08:95:30: 58:57:56:fd:f8:34:2b:ab:4b:f0:4c:59:6f:ad:9a: 09:de:05:e9:1b:9d:d0:e5:8c:a0:85:df:69:52:58: 68:9f:e1:16:11:5c:22:9c:ce:c2:51:c0:c2:4d:fe: af:af:c8:88:cc:00:8c:e6:78:39:73:2c:61:68:f6: 3e:06:f1:65:e3:a4:c3:e9:d9:66:5d:b3:4c:25:90: 5c:c6:24:8c:4d:77:f9:93:be:39:e7:9d:be:46:c4: 63:50:46:65:65:ea:7c:a3:90:b8:f6:7a:b8:1c:37: 94:d2:45:23:88:5c:98:94:46:88:48:5a:1c:6c:64: 0f:50:b4:0c:9e:04:44:0d:7f:3c:b4:70:f1:03:64: 53:39:91:b8:44:e7:26:29:cf:c5:88:22:e1:b8:c4: 6f:df:21:5c:be:24:98:f1:8a:75:70:07:ee:14:49: 3a:a1:7f:81:2d:cf:a5:db:07:a6:8e:e9:6a:7e:59: d5:50:3c:23:7b:d7:c9:cd:16:cf:d7:e7:7b:94:ed: 9b:ee:e9:0d:e7:8a:69:ad:aa:cc:07:fc:0e:8c:25: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D4:B2:B9:A5:F0:70:D2:D1:C9:F8:CB:65:39:F2:F2:23:1B:96:45 X509v3 Authority Key Identifier: keyid:11:0A:AF:90:16:A6:87:52:FC:91:32:14:9B:91:E8:FA:B1:6E:24:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQqvkBamh1L8kTIUm5Ho-rFuJL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e411e8-0dc6-46e2-b3a7-d0debcfffd76/1/EQqvkBamh1L8kTIUm5Ho-rFuJL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:b4:de:0f:8b:85:d3:f1:7e:bc:d5:97:1b:36:f4:f4:8b:a7: 9d:e5:f3:b1:e7:8b:a7:c2:b7:94:f7:a9:4a:7e:d9:95:01:32: ee:7f:d4:21:0c:24:cc:fb:4b:77:69:7a:17:97:72:0f:c4:00: fc:5b:d2:b5:fb:64:9c:79:7a:a8:7e:f7:a4:34:ff:e2:25:f9: 04:41:da:51:49:ec:d3:e5:80:b9:5e:92:37:ac:23:1f:ff:8c: 4c:9b:34:b3:d8:4b:88:f7:85:f0:55:81:1e:26:b9:d7:eb:a0: 25:74:d5:d9:ce:1a:14:a8:af:25:3b:f2:44:00:ca:9a:63:26: 5b:b8:e1:1b:80:c8:d2:89:80:48:0f:3f:1a:84:84:96:47:db: 40:ff:7b:24:22:54:00:e9:a6:f2:2f:5e:ec:8c:48:e8:0f:ae: dd:16:01:28:0f:88:fb:c4:5c:66:4c:a4:41:a4:f2:9b:ab:26: 5a:d7:6d:93:53:a2:e4:89:74:8b:a1:fe:ec:53:e8:5a:fb:bd: fd:13:d7:ae:8c:f6:ea:c0:2e:4c:ef:63:3b:f5:52:ac:ef:2f: fd:2d:a5:8a:a8:d9:f3:0b:be:20:05:04:52:f1:f1:41:61:a6: 8a:63:ab:5a:85:37:26:f8:4a:e3:3d:38:7f:d2:8e:a6:f1:23: a3:64:38:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QNFIT+kobvR2JpXJe0UuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMGFhZjkwMTZhNjg3NTJmYzkxMzIxNDliOTFlOGZhYjE2 ZTI0YmUwHhcNMjUxMjA2MjAwMDU3WhcNMjUxMjA3MjAwMDU3WjAzMTEwLwYDVQQD Eyg0OWQ0YjJiOWE1ZjA3MGQyZDFjOWY4Y2I2NTM5ZjJmMjIzMWI5NjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmDYn+JphLWrz9o+QCwVVdzrS6r2 0f91DkZQ3DLRfXopPwgPbQk3zekIlTBYV1b9+DQrq0vwTFlvrZoJ3gXpG53Q5Yyg hd9pUlhon+EWEVwinM7CUcDCTf6vr8iIzACM5ng5cyxhaPY+BvFl46TD6dlmXbNM JZBcxiSMTXf5k745552+RsRjUEZlZep8o5C49nq4HDeU0kUjiFyYlEaISFocbGQP ULQMngREDX88tHDxA2RTOZG4ROcmKc/FiCLhuMRv3yFcviSY8Yp1cAfuFEk6oX+B Lc+l2wemjulqflnVUDwje9fJzRbP1+d7lO2b7ukN54pprarMB/wOjCXX5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnUsrml8HDS0cn4y2U58vIjG5ZFMB8GA1UdIwQY MBaAFBEKr5AWpodS/JEyFJuR6PqxbiS+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTct ZDBkZWJjZmZmZDc2LzEvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9lNDExZTgtMGRjNi00NmUyLWIzYTctZDBkZWJjZmZmZDc2 LzEvRVFxdmtCYW1oMUw4a1RJVW01SG8tckZ1Skw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc7TeD4uF 0/F+vNWXGzb09IunneXzseeLp8K3lPepSn7ZlQEy7n/UIQwkzPtLd2l6F5dyD8QA /FvStftknHl6qH73pDT/4iX5BEHaUUns0+WAuV6SN6wjH/+MTJs0s9hLiPeF8FWB Hia51+ugJXTV2c4aFKivJTvyRADKmmMmW7jhG4DI0omASA8/GoSElkfbQP97JCJU AOmm8i9e7IxI6A+u3RYBKA+I+8RcZkykQaTym6smWtdtk1Oi5Il0i6H+7FPoWvu9 /RPXroz26sAuTO9jO/VSrO8v/S2liqjZ8wu+IAUEUvHxQWGmimOrWoU3JvhK4z04 f9KOpvEjo2Q4vg== -----END CERTIFICATE-----Generated at Sun Dec 7 00:30:58 2025 by rpki-client