This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft File: EIr56cVlKzWESy5dS1N-n81EUvM.mft (raw, json) Hash identifier: CQDQT1Nwr8E5IuUEU9jgk2uPNAWJrSbq9T8EC4A8tqQ= Subject key identifier: BB:17:D5:71:2A:2E:2E:30:06:CD:F1:E5:2A:C1:F4:48:7C:08:9F:EF Authority key identifier: 10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3 Certificate issuer: /CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3 Certificate serial: 019B3D23422B0CD62CE6E80984574FCCA29D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft Manifest number: 131E Signing time: Sat 20 Dec 2025 19:01:19 +0000 Manifest this update: Sat 20 Dec 2025 19:01:19 +0000 Manifest next update: Sun 21 Dec 2025 19:01:19 +0000 Files and hashes: 1: EIr56cVlKzWESy5dS1N-n81EUvM.crl (hash: iDM4/xxAn/dna1QKMl9D3pNieo2g53n+Ce4MfooJvUs=) 2: dIVATvBSzX3-SNfEUJlU8mxDvDM.roa (hash: /zYG/pdQ9E5dfKf9N6xTzPoRPhdVlqRDaAGUUjW4u0g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:42:2b:0c:d6:2c:e6:e8:09:84:57:4f:cc:a2:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108af9e9c5652b35844b2e5d4b537e9fcd4452f3 Validity Not Before: Dec 20 19:01:19 2025 GMT Not After : Dec 21 19:01:19 2025 GMT Subject: CN=bb17d5712a2e2e3006cdf1e52ac1f4487c089fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:7b:11:ce:44:25:e1:a4:94:8c:b0:43:a2: 6c:9b:aa:7d:21:ca:14:0d:71:7f:fc:7d:f4:ad:6c: a2:93:09:2a:c0:0d:05:56:1a:6c:9f:65:21:25:dc: 27:9a:67:c8:95:57:08:03:03:a1:de:44:cc:e8:2d: d0:2a:1e:61:ab:f8:2d:0f:ba:df:0c:24:c2:99:46: bf:06:51:a1:be:7a:ef:38:f3:16:ab:c8:5c:db:a6: 2c:21:d7:9a:97:87:61:2b:e7:4d:f5:a2:ce:49:4e: 06:65:ea:e1:08:fe:89:c6:db:a9:91:2b:30:33:17: f4:bb:fc:e7:ae:b2:ef:a1:41:97:7e:2c:68:57:25: c2:cf:58:79:0e:2d:37:44:41:4c:5b:96:2c:20:aa: fc:03:40:31:a7:c6:03:41:0e:0b:29:d8:d0:9a:31: 12:3b:c8:fc:ad:b5:da:62:ad:60:34:84:4b:ea:a8: 53:21:f4:36:f9:a7:ff:39:4c:ce:c0:32:c0:86:50: 55:f9:09:50:09:13:91:75:80:83:06:73:fb:86:8d: 77:2e:bf:53:59:43:40:0f:ef:87:ac:19:30:dd:b4: 50:ee:ec:62:07:46:eb:bb:96:af:a2:2b:43:41:0a: a9:c1:2a:43:f1:dd:03:28:ad:59:ec:96:d2:f1:b2: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:17:D5:71:2A:2E:2E:30:06:CD:F1:E5:2A:C1:F4:48:7C:08:9F:EF X509v3 Authority Key Identifier: keyid:10:8A:F9:E9:C5:65:2B:35:84:4B:2E:5D:4B:53:7E:9F:CD:44:52:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIr56cVlKzWESy5dS1N-n81EUvM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e02a6c-ac2e-47c7-8b82-de2f6ea020ba/1/EIr56cVlKzWESy5dS1N-n81EUvM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3a:5b:e2:19:93:68:0b:b6:28:4b:26:b2:04:7e:4a:be:e3: 41:dc:0b:6e:04:91:70:6e:95:05:a8:05:a3:75:15:e9:f3:4a: 87:c2:e8:90:e1:a6:be:df:f0:94:c3:91:ca:30:d6:fc:58:ab: 27:86:86:fc:90:58:36:82:95:1c:23:8f:27:12:10:bf:d2:0b: c4:a3:f3:94:18:3c:b6:44:0f:59:5f:5e:12:4a:ad:cb:cc:d3: 78:db:1a:ec:7f:e2:c3:0d:5c:27:0f:8b:b2:b5:8e:06:10:fd: 82:2b:49:0f:f2:92:dc:64:ae:fd:e9:b4:19:3c:e9:19:03:0f: 27:3f:f3:1c:c2:d1:d6:83:7a:93:56:76:83:d4:fc:91:a6:cc: e2:a7:76:5b:89:58:97:88:ad:54:a6:51:12:95:1d:ec:0b:b0: 3d:0f:cf:ff:ba:80:14:c9:8b:df:51:be:b5:93:8c:6a:4d:4d: 7a:c3:ae:78:78:a7:e1:ec:7e:ed:3b:10:db:6e:ff:6a:6d:07: 6d:fb:8d:0e:86:7b:57:17:56:18:42:fb:7c:cd:d1:52:7d:9d: cd:ff:6f:b7:da:56:55:35:ad:e1:b6:04:cc:d4:6a:79:57:20: 07:da:c7:06:6d:9d:81:2c:81:cf:3f:7c:76:89:03:ac:9e:c6: 9e:cb:52:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9I0IrDNYs5ugJhFdPzKKdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwOGFmOWU5YzU2NTJiMzU4NDRiMmU1ZDRiNTM3ZTlmY2Q0 NDUyZjMwHhcNMjUxMjIwMTkwMTE5WhcNMjUxMjIxMTkwMTE5WjAzMTEwLwYDVQQD EyhiYjE3ZDU3MTJhMmUyZTMwMDZjZGYxZTUyYWMxZjQ0ODdjMDg5ZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gV7Ec5EJeGklIywQ6Jsm6p9IcoU DXF//H30rWyikwkqwA0FVhpsn2UhJdwnmmfIlVcIAwOh3kTM6C3QKh5hq/gtD7rf DCTCmUa/BlGhvnrvOPMWq8hc26YsIdeal4dhK+dN9aLOSU4GZerhCP6JxtupkSsw Mxf0u/znrrLvoUGXfixoVyXCz1h5Di03REFMW5YsIKr8A0Axp8YDQQ4LKdjQmjES O8j8rbXaYq1gNIRL6qhTIfQ2+af/OUzOwDLAhlBV+QlQCRORdYCDBnP7ho13Lr9T WUNAD++HrBkw3bRQ7uxiB0bru5avoitDQQqpwSpD8d0DKK1Z7JbS8bKt4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLsX1XEqLi4wBs3x5SrB9Eh8CJ/vMB8GA1UdIwQY MBaAFBCK+enFZSs1hEsuXUtTfp/NRFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODIt ZGUyZjZlYTAyMGJhLzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9lMDJhNmMtYWMyZS00N2M3LThiODItZGUyZjZlYTAyMGJh LzEvRUlyNTZjVmxLeldFU3k1ZFMxTi1uODFFVXZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDpb4hmT aAu2KEsmsgR+Sr7jQdwLbgSRcG6VBagFo3UV6fNKh8LokOGmvt/wlMORyjDW/Fir J4aG/JBYNoKVHCOPJxIQv9ILxKPzlBg8tkQPWV9eEkqty8zTeNsa7H/iww1cJw+L srWOBhD9gitJD/KS3GSu/em0GTzpGQMPJz/zHMLR1oN6k1Z2g9T8kabM4qd2W4lY l4itVKZREpUd7AuwPQ/P/7qAFMmL31G+tZOMak1NesOueHin4ex+7TsQ227/am0H bfuNDoZ7VxdWGEL7fM3RUn2dzf9vt9pWVTWt4bYEzNRqeVcgB9rHBm2dgSyBzz98 dokDrJ7GnstS9A== -----END CERTIFICATE-----Generated at Sun Dec 21 02:00:48 2025 by rpki-client