This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft File: Eo0NA9Adij4t-t3y29j5fgkPgOk.mft (raw, json) Hash identifier: JA3ww2sug7UsAM22Xhi9/L32Ct6wq60swauUnvKPo4o= Subject key identifier: B6:39:7A:96:E0:D8:B7:40:C5:9C:63:7A:91:C4:D8:6D:40:5C:3B:36 Authority key identifier: 12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 Certificate issuer: /CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Certificate serial: 019AF31D108A34A40E1329381CC2664362E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft Manifest number: 0570 Signing time: Sat 06 Dec 2025 10:02:39 +0000 Manifest this update: Sat 06 Dec 2025 10:02:39 +0000 Manifest next update: Sun 07 Dec 2025 10:02:39 +0000 Files and hashes: 1: Eo0NA9Adij4t-t3y29j5fgkPgOk.crl (hash: IIOCGKVl5irEnqsupJUY1Ku0xki5S2NvMtol4/gE3C4=) 2: Yg36LjRXCXSCdmDkuzx_Yh_nOXc.roa (hash: Bv3OWsc+AnulFasemob+5BPRBgZPZ3l/tFY/Jb5RKa0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1d:10:8a:34:a4:0e:13:29:38:1c:c2:66:43:62:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128d0d03d01d8a3e2dfaddf2dbd8f97e090f80e9 Validity Not Before: Dec 6 10:02:39 2025 GMT Not After : Dec 7 10:02:39 2025 GMT Subject: CN=b6397a96e0d8b740c59c637a91c4d86d405c3b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0a:9f:56:a2:1f:68:84:65:fa:41:cd:3f:5b: 72:7f:73:fe:e8:39:7b:2b:62:3f:e3:d6:49:f4:b2: 67:01:0e:92:c7:49:24:9c:22:e5:5f:a6:17:30:2d: 21:11:b5:56:5a:84:64:9d:09:de:80:10:75:dc:2c: a0:3e:51:f6:a6:6f:5c:17:bb:90:ae:f5:f1:d1:af: 42:c8:b0:7c:3b:49:90:90:4c:8d:9a:6f:11:84:c5: 36:a7:f6:01:54:98:bd:98:d4:a5:cd:7e:95:05:20: c1:87:1b:f8:5e:e4:f2:ed:ed:b6:d7:5d:ec:d2:bd: 22:b3:cb:71:c7:22:de:ff:a8:8a:82:16:91:33:e3: ea:b3:d0:19:f7:b5:62:86:89:35:5a:9f:ee:43:81: d3:99:7c:f5:7e:ee:9b:8b:7b:50:18:4c:58:33:0f: c1:34:11:35:e8:76:13:9a:a0:2d:1b:bd:ed:7d:9c: 7d:e3:ce:c4:ba:a5:38:ee:ee:bb:94:09:d4:0b:96: be:bc:77:ff:4f:cf:05:f6:1d:6b:90:72:ad:6e:b3: db:ed:a3:42:41:d3:86:74:c4:0b:14:70:c5:b0:02: 8c:0e:9e:09:2c:db:d5:cf:9d:99:ba:36:7f:9b:22: 0d:3b:47:55:15:0a:e4:90:be:a2:ef:de:b9:cc:67: 2e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:39:7A:96:E0:D8:B7:40:C5:9C:63:7A:91:C4:D8:6D:40:5C:3B:36 X509v3 Authority Key Identifier: keyid:12:8D:0D:03:D0:1D:8A:3E:2D:FA:DD:F2:DB:D8:F9:7E:09:0F:80:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo0NA9Adij4t-t3y29j5fgkPgOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dbc6fa-c474-46c3-8945-af50fb5cc77a/1/Eo0NA9Adij4t-t3y29j5fgkPgOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:00:d3:42:91:b2:17:66:36:cc:0c:a5:16:2a:fe:08:a0:1f: 90:29:de:85:c5:27:6a:aa:0a:9a:a7:e9:cb:e8:dd:bf:ac:83: a1:b4:d7:49:67:70:07:4e:d6:48:1e:82:38:28:73:5b:40:9a: 63:94:23:ca:53:a4:46:43:33:28:fa:35:64:4b:3f:9b:32:23: 80:43:31:9d:c1:4d:76:ce:63:78:c7:b8:12:d8:c8:c3:39:25: f0:e0:ed:de:d2:a9:fd:24:78:fe:7a:23:1f:1a:f1:51:55:a6: 7b:36:5e:eb:86:92:96:0d:1a:80:74:26:8e:3a:ce:af:28:76: c3:37:25:44:c4:82:c0:4b:6f:e1:58:9f:77:12:d4:54:36:a4: 83:c7:fb:1f:77:25:98:fb:4c:9a:57:28:ee:f8:8b:63:67:f2: 93:6d:09:98:35:37:6b:ea:d4:f7:fb:78:9d:76:21:21:01:42: 68:24:d2:fb:29:fa:3a:02:73:d0:a4:b1:30:4d:cf:9d:92:2e: cd:7f:a3:df:18:f1:80:97:44:09:3f:28:1f:be:a1:cc:db:54: e3:e5:91:4a:84:56:65:8e:72:86:95:64:88:58:51:cf:87:7e: 23:b6:31:c2:f0:21:81:9d:a8:17:a1:29:09:b4:3f:59:bf:ec: 93:da:ec:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHRCKNKQOEyk4HMJmQ2LlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGQwZDAzZDAxZDhhM2UyZGZhZGRmMmRiZDhmOTdlMDkw ZjgwZTkwHhcNMjUxMjA2MTAwMjM5WhcNMjUxMjA3MTAwMjM5WjAzMTEwLwYDVQQD EyhiNjM5N2E5NmUwZDhiNzQwYzU5YzYzN2E5MWM0ZDg2ZDQwNWMzYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAqfVqIfaIRl+kHNP1tyf3P+6Dl7 K2I/49ZJ9LJnAQ6Sx0kknCLlX6YXMC0hEbVWWoRknQnegBB13CygPlH2pm9cF7uQ rvXx0a9CyLB8O0mQkEyNmm8RhMU2p/YBVJi9mNSlzX6VBSDBhxv4XuTy7e22113s 0r0is8txxyLe/6iKghaRM+Pqs9AZ97Vihok1Wp/uQ4HTmXz1fu6bi3tQGExYMw/B NBE16HYTmqAtG73tfZx9487EuqU47u67lAnUC5a+vHf/T88F9h1rkHKtbrPb7aNC QdOGdMQLFHDFsAKMDp4JLNvVz52ZujZ/myINO0dVFQrkkL6i7965zGcuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLY5epbg2LdAxZxjepHE2G1AXDs2MB8GA1UdIwQY MBaAFBKNDQPQHYo+Lfrd8tvY+X4JD4DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUt YWY1MGZiNWNjNzdhLzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9kYmM2ZmEtYzQ3NC00NmMzLTg5NDUtYWY1MGZiNWNjNzdh LzEvRW8wTkE5QWRpajR0LXQzeTI5ajVmZ2tQZ09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQDTQpGy F2Y2zAylFir+CKAfkCnehcUnaqoKmqfpy+jdv6yDobTXSWdwB07WSB6COChzW0Ca Y5QjylOkRkMzKPo1ZEs/mzIjgEMxncFNds5jeMe4EtjIwzkl8ODt3tKp/SR4/noj HxrxUVWmezZe64aSlg0agHQmjjrOryh2wzclRMSCwEtv4VifdxLUVDakg8f7H3cl mPtMmlco7viLY2fyk20JmDU3a+rU9/t4nXYhIQFCaCTS+yn6OgJz0KSxME3PnZIu zX+j3xjxgJdECT8oH76hzNtU4+WRSoRWZY5yhpVkiFhRz4d+I7YxwvAhgZ2oF6Ep CbQ/Wb/sk9rszA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:01:11 2025 by rpki-client