This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft File: EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json) Hash identifier: PTA4HPVSHKHT9sdwaZYZfsRDexXhRcpuPLM55bPfrSw= Subject key identifier: 62:3D:00:30:74:F0:4A:82:88:F6:3F:BB:0E:1F:BC:14:12:F5:F6:5A Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Certificate serial: 019AF12DF6C99221CD3BACBDFB598C6DA03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft Manifest number: 0BC4 Signing time: Sat 06 Dec 2025 01:01:52 +0000 Manifest this update: Sat 06 Dec 2025 01:01:52 +0000 Manifest next update: Sun 07 Dec 2025 01:01:52 +0000 Files and hashes: 1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: moiJMA9Yu3qKB3Fh7o1e2i9OKPuskXZweJSkxE8L/k4=) 2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:f6:c9:92:21:cd:3b:ac:bd:fb:59:8c:6d:a0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Validity Not Before: Dec 6 01:01:52 2025 GMT Not After : Dec 7 01:01:52 2025 GMT Subject: CN=623d003074f04a8288f63fbb0e1fbc1412f5f65a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:cb:3e:c7:36:88:ec:e4:00:43:d6:86:b1:8a: b9:0a:00:ea:0b:33:e6:5c:54:ad:ed:c8:01:69:da: 6c:25:7e:49:97:ae:c7:57:75:1f:77:f0:35:02:e4: 53:2b:ac:d9:1a:c0:ce:05:db:01:a4:b9:ed:ed:62: 3e:09:aa:cd:2c:a9:5c:a7:f9:9e:80:0d:66:3e:10: f7:1c:d9:95:52:bd:a9:01:1d:db:6d:80:74:30:e8: 54:16:60:63:5d:fe:5e:59:40:11:45:1a:6b:cb:a6: 67:e2:9b:5c:c8:70:32:8e:4e:c4:cd:c1:c3:8a:79: 76:1c:c5:db:52:19:25:b6:79:01:3b:8e:87:1f:a2: f5:ce:95:d4:3d:7f:e2:57:94:bc:c3:66:50:ae:b3: e3:86:3a:bd:47:99:10:f0:c4:57:1f:fe:13:52:73: c2:e3:92:2d:03:36:39:63:8e:62:d4:21:1f:d7:3a: 1c:4b:39:ee:92:73:8c:83:10:8b:40:e3:f8:c0:eb: 61:f6:da:9c:a6:8b:ce:b4:68:d0:4b:7e:d3:90:09: 1f:8a:9a:77:24:3d:76:8f:37:81:90:d5:62:be:22: 7e:de:89:f6:d4:b4:81:85:dc:d5:a9:ec:2e:03:45: e9:ca:44:04:ad:a0:24:56:c5:79:f8:72:cb:1e:47: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:3D:00:30:74:F0:4A:82:88:F6:3F:BB:0E:1F:BC:14:12:F5:F6:5A X509v3 Authority Key Identifier: keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:f9:96:28:f4:75:d9:ba:3d:d7:bf:e7:b3:7b:c3:5a:03:fc: 29:3d:b2:d5:2f:c2:8c:91:ad:92:3e:f1:11:43:d6:64:c0:36: fd:a4:91:62:3e:f6:0d:61:9f:8c:11:61:c8:75:b2:69:35:7e: 13:77:fa:f1:4b:86:6c:e9:13:3f:0d:d6:65:9c:95:d8:fa:7c: 1c:7f:7e:ae:20:b5:33:4c:16:ec:6c:e4:ca:93:3a:aa:ba:39: cb:96:ef:e6:dc:77:62:df:f2:75:bb:e7:7f:d6:48:27:c8:fb: 18:83:67:57:10:b3:34:52:50:47:d6:f1:3d:cb:d7:5e:94:e3: ae:86:2d:e8:cd:fc:07:f8:0d:5e:5a:3c:20:0a:58:95:9a:51: cf:eb:0a:07:d2:0f:6a:59:70:ba:d1:17:dc:39:8a:31:fa:71: 70:97:42:3f:06:4e:52:d3:e0:61:7f:fa:2e:60:9f:d4:fc:9a: de:e2:f6:af:1f:d2:77:b2:de:0b:1d:32:43:c2:06:5c:ca:a5: 9f:b3:17:99:cb:34:d9:b8:80:07:6d:10:eb:92:34:16:56:19: 10:b8:39:1c:e0:ca:7a:db:3d:df:9c:56:23:3b:d4:1b:45:92: d4:e1:a2:40:1b:06:6a:a2:ec:0e:2a:26:5b:3b:e6:35:50:ab: a1:57:30:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLfbJkiHNO6y9+1mMbaA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDJmYzBkOWZmODZmZTY1YzE0NDY5ZDU1MDQ2ZTIwNTNi ZmU1Y2EwHhcNMjUxMjA2MDEwMTUyWhcNMjUxMjA3MDEwMTUyWjAzMTEwLwYDVQQD Eyg2MjNkMDAzMDc0ZjA0YTgyODhmNjNmYmIwZTFmYmMxNDEyZjVmNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9cs+xzaI7OQAQ9aGsYq5CgDqCzPm XFSt7cgBadpsJX5Jl67HV3Ufd/A1AuRTK6zZGsDOBdsBpLnt7WI+CarNLKlcp/me gA1mPhD3HNmVUr2pAR3bbYB0MOhUFmBjXf5eWUARRRpry6Zn4ptcyHAyjk7EzcHD inl2HMXbUhkltnkBO46HH6L1zpXUPX/iV5S8w2ZQrrPjhjq9R5kQ8MRXH/4TUnPC 45ItAzY5Y45i1CEf1zocSznuknOMgxCLQOP4wOth9tqcpovOtGjQS37TkAkfipp3 JD12jzeBkNViviJ+3on21LSBhdzVqewuA0XpykQEraAkVsV5+HLLHkfb0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGI9ADB08EqCiPY/uw4fvBQS9fZaMB8GA1UdIwQY MBaAFBEC/A2f+G/mXBRGnVUEbiBTv+XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQt MzQwM2NkYWQyYzY3LzEvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQtMzQwM2NkYWQyYzY3 LzEvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOPmWKPR1 2bo917/ns3vDWgP8KT2y1S/CjJGtkj7xEUPWZMA2/aSRYj72DWGfjBFhyHWyaTV+ E3f68UuGbOkTPw3WZZyV2Pp8HH9+riC1M0wW7GzkypM6qro5y5bv5tx3Yt/ydbvn f9ZIJ8j7GINnVxCzNFJQR9bxPcvXXpTjroYt6M38B/gNXlo8IApYlZpRz+sKB9IP allwutEX3DmKMfpxcJdCPwZOUtPgYX/6LmCf1Pya3uL2rx/Sd7LeCx0yQ8IGXMql n7MXmcs02biAB20Q65I0FlYZELg5HODKets935xWIzvUG0WS1OGiQBsGaqLsDiom WzvmNVCroVcw3w== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:25 2025 by rpki-client