This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft File: eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft (raw, json) Hash identifier: FvEttqnNG/XvMIgQVvEPx3pJvtzF0OYWhva6/nCmpoo= Subject key identifier: 3B:C3:4F:D0:7A:5D:8D:95:90:08:BE:C3:9C:C3:EE:97:6D:65:43:16 Authority key identifier: 78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9 Certificate issuer: /CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9 Certificate serial: 019AF31B5ACC5DD343851D8C166D3D8A4B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft Manifest number: 01CE Signing time: Sat 06 Dec 2025 10:00:47 +0000 Manifest this update: Sat 06 Dec 2025 10:00:47 +0000 Manifest next update: Sun 07 Dec 2025 10:00:47 +0000 Files and hashes: 1: eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl (hash: JJCSWXoqldy8nfc1YItzrCbL9IQoH8RSkWCjaVDrg2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:5a:cc:5d:d3:43:85:1d:8c:16:6d:3d:8a:4b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78023b5f441a4c585c68c9c3bd88f9d19d654cc9 Validity Not Before: Dec 6 10:00:47 2025 GMT Not After : Dec 7 10:00:47 2025 GMT Subject: CN=3bc34fd07a5d8d959008bec39cc3ee976d654316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f0:d1:6b:9b:67:05:6b:6b:15:ed:0a:88:c2: 81:98:e3:23:09:5b:2e:41:7e:40:7e:ae:94:6d:a6: 5d:09:9b:73:c0:18:79:48:14:56:72:68:46:c3:9b: db:12:b8:c1:5b:c8:d8:b5:13:7e:da:ea:ca:31:9f: aa:1b:95:41:94:5f:7b:a2:e8:23:53:b6:b7:ff:81: 9b:97:88:0d:c8:59:d1:8b:15:78:16:ed:ea:af:ff: 6a:40:e3:8d:59:17:70:43:24:5e:3d:fc:69:66:ba: 22:3c:7a:ac:10:8a:e9:33:2d:ff:7e:72:9a:b3:21: 40:a9:28:67:29:6b:b0:05:fd:58:6f:fd:ca:7d:45: 88:ac:00:9b:65:63:91:36:43:f8:58:bd:1e:bf:1f: 59:f5:55:f6:08:a5:fd:86:dc:fb:59:15:a9:72:ac: 1f:18:e0:fe:46:bc:07:e3:b0:05:3b:70:a4:fd:83: 76:bc:b0:95:18:ae:6b:01:31:b0:10:b5:e8:52:a0: df:59:4c:e3:2f:9f:c6:33:de:39:a2:b2:c4:d7:6d: a3:97:9e:51:fa:37:71:d8:54:82:92:76:24:35:07: 70:cd:9f:03:2a:81:b5:db:6d:94:81:ac:c7:d6:8a: 4d:0a:69:42:23:fd:62:3f:0c:a2:69:40:0b:24:76: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:C3:4F:D0:7A:5D:8D:95:90:08:BE:C3:9C:C3:EE:97:6D:65:43:16 X509v3 Authority Key Identifier: keyid:78:02:3B:5F:44:1A:4C:58:5C:68:C9:C3:BD:88:F9:D1:9D:65:4C:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAI7X0QaTFhcaMnDvYj50Z1lTMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/06358d-170c-439a-9b80-43698bf966a2/1/eAI7X0QaTFhcaMnDvYj50Z1lTMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:91:a5:08:42:ec:cf:a6:ab:5a:fd:9b:29:c0:5d:f0:1d:eb: 71:4e:26:e7:28:91:e5:f5:26:8d:f2:9f:c9:f2:f9:47:22:ad: 06:71:59:fd:25:e8:42:9f:bf:90:7e:62:d4:2f:03:b5:20:11: a1:33:94:a9:36:e5:8f:24:56:41:fd:ba:86:57:33:e2:9a:0d: 86:94:5c:f3:f6:5e:ab:53:c9:ef:b8:95:ce:be:e7:92:42:1e: 92:81:86:11:ea:9d:c1:00:2d:8c:e9:9a:aa:91:dc:bf:9c:16: 8f:4f:7c:87:d9:82:84:79:a9:70:2a:33:98:3d:c8:53:a7:bf: dc:c8:c7:91:e0:a1:d9:1b:28:a0:0f:c5:e0:a1:18:9d:d2:4a: 3e:ff:f9:d6:b4:45:24:60:e2:07:75:5a:d2:f3:2f:ce:e1:52: a2:a1:d7:ca:58:58:cf:53:c5:fa:be:73:1b:4b:25:54:12:8a: 20:ca:50:0a:e4:b5:cf:29:5f:06:00:66:26:f9:74:10:52:2a: b1:24:f1:51:c9:05:bc:c6:c7:c4:f4:f6:f6:49:0c:8b:26:a6: b6:b7:b2:f0:b5:50:8c:a9:89:3d:9c:c9:d0:24:0e:53:fa:35: 99:3c:d3:92:5a:04:ff:7d:06:d8:db:37:89:ed:19:ff:9d:59: 17:18:4a:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG1rMXdNDhR2MFm09ikscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MDIzYjVmNDQxYTRjNTg1YzY4YzljM2JkODhmOWQxOWQ2 NTRjYzkwHhcNMjUxMjA2MTAwMDQ3WhcNMjUxMjA3MTAwMDQ3WjAzMTEwLwYDVQQD EygzYmMzNGZkMDdhNWQ4ZDk1OTAwOGJlYzM5Y2MzZWU5NzZkNjU0MzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/DRa5tnBWtrFe0KiMKBmOMjCVsu QX5Afq6UbaZdCZtzwBh5SBRWcmhGw5vbErjBW8jYtRN+2urKMZ+qG5VBlF97ougj U7a3/4Gbl4gNyFnRixV4Fu3qr/9qQOONWRdwQyRePfxpZroiPHqsEIrpMy3/fnKa syFAqShnKWuwBf1Yb/3KfUWIrACbZWORNkP4WL0evx9Z9VX2CKX9htz7WRWpcqwf GOD+RrwH47AFO3Ck/YN2vLCVGK5rATGwELXoUqDfWUzjL5/GM945orLE122jl55R +jdx2FSCknYkNQdwzZ8DKoG1222UgazH1opNCmlCI/1iPwyiaUALJHavZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDvDT9B6XY2VkAi+w5zD7pdtZUMWMB8GA1UdIwQY MBaAFHgCO19EGkxYXGjJw72I+dGdZUzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8wNjM1OGQtMTcwYy00MzlhLTliODAt NDM2OThiZjk2NmEyLzEvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8wNjM1OGQtMTcwYy00MzlhLTliODAtNDM2OThiZjk2NmEy LzEvZUFJN1gwUWFURmhjYU1uRHZZajUwWjFsVE1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5GlCELs z6arWv2bKcBd8B3rcU4m5yiR5fUmjfKfyfL5RyKtBnFZ/SXoQp+/kH5i1C8DtSAR oTOUqTbljyRWQf26hlcz4poNhpRc8/Zeq1PJ77iVzr7nkkIekoGGEeqdwQAtjOma qpHcv5wWj098h9mChHmpcCozmD3IU6e/3MjHkeCh2RsooA/F4KEYndJKPv/51rRF JGDiB3Va0vMvzuFSoqHXylhYz1PF+r5zG0slVBKKIMpQCuS1zylfBgBmJvl0EFIq sSTxUckFvMbHxPT29kkMiyamtrey8LVQjKmJPZzJ0CQOU/o1mTzTkloE/30G2Ns3 ie0Z/51ZFxhKdg== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:47 2025 by rpki-client