This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft File: eYuFtR4z3wxpTb13vIwro-q01Rk.mft (raw, json) Hash identifier: MylQLeQca8M4sCcmsfZAC2TiK8eaNfnQ3y6aa7yGCNU= Subject key identifier: EA:F0:C6:01:E9:CE:C0:59:B5:4C:7F:FE:63:BC:BB:A1:5E:38:D3:41 Authority key identifier: 79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 Certificate issuer: /CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519 Certificate serial: 019B454ABF28B34E20C997B25B1A5E0A4E9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft Manifest number: 1789 Signing time: Mon 22 Dec 2025 09:01:25 +0000 Manifest this update: Mon 22 Dec 2025 09:01:25 +0000 Manifest next update: Tue 23 Dec 2025 09:01:25 +0000 Files and hashes: 1: eYuFtR4z3wxpTb13vIwro-q01Rk.crl (hash: tOt+46UH0bUJaMieuSmJ+fjoE58zDStn3nNAIp6UVAw=) 2: rO3rBHeUdzO45KEgLURgvLQ06xY.roa (hash: eqYadC0MWylIdYu574Ax0sVtpnO5xgmNX3OGp/S+dbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 09:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:45:4a:bf:28:b3:4e:20:c9:97:b2:5b:1a:5e:0a:4e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798b85b51e33df0c694dbd77bc8c2ba3eab4d519 Validity Not Before: Dec 22 09:01:25 2025 GMT Not After : Dec 23 09:01:25 2025 GMT Subject: CN=eaf0c601e9cec059b54c7ffe63bcbba15e38d341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9c:ef:08:4a:da:a7:35:36:64:1b:f5:ee:94: bc:f5:50:ff:03:3f:27:92:77:13:c7:c4:f9:a0:4d: b7:fd:4c:63:ac:91:3d:f1:83:b8:4d:e8:92:62:c2: 08:27:54:93:70:0e:a0:68:da:ca:84:8f:0a:dd:e0: 50:78:b7:b0:25:86:2e:d0:cc:56:5e:d6:da:b2:65: cf:47:54:04:e4:36:70:f1:ec:d3:32:ee:4a:c0:38: d6:ef:3b:07:b3:18:7d:1c:75:8a:f4:07:3f:e2:41: ef:dd:9c:97:90:35:39:44:60:5b:ba:4f:a9:b2:06: 88:b9:9a:8e:7b:27:b1:a3:50:25:dd:7b:a0:88:9b: 75:c9:a3:04:4f:bb:fb:2a:8d:64:9b:6e:16:9a:86: f8:76:58:17:5d:90:9f:d4:ac:be:58:57:b1:71:dc: d5:b0:b2:48:7e:a7:76:07:00:01:c6:2d:68:84:ba: a9:6f:e4:bc:6a:eb:a7:ec:14:a6:4e:4e:8b:69:7f: 3b:bb:98:e1:47:d6:7c:52:9e:fc:6d:e6:ef:57:93: 95:f8:5d:c3:46:3d:c5:3d:10:6e:cc:ad:f8:9f:fb: 9e:41:2e:1f:41:a3:9e:d2:a4:54:3c:da:ec:bc:f1: 3c:89:99:66:2f:20:bc:3d:c7:e8:83:a6:50:1b:c4: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F0:C6:01:E9:CE:C0:59:B5:4C:7F:FE:63:BC:BB:A1:5E:38:D3:41 X509v3 Authority Key Identifier: keyid:79:8B:85:B5:1E:33:DF:0C:69:4D:BD:77:BC:8C:2B:A3:EA:B4:D5:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYuFtR4z3wxpTb13vIwro-q01Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2ede8e-f7f5-4045-9341-940dfb961630/1/eYuFtR4z3wxpTb13vIwro-q01Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:0d:79:f8:ab:e1:0a:3d:87:b1:2c:96:c8:31:38:e1:d5:fb: 9a:61:9b:fa:50:9d:0b:5b:a7:9c:d6:6e:c2:d9:fc:b6:ac:cd: 5b:8c:b3:6d:54:73:99:f5:0b:c5:b2:a1:50:6b:c9:c2:dd:32: ad:11:bd:00:9b:73:06:e3:11:df:58:89:87:4d:10:30:7c:b0: 18:b9:88:26:8c:f0:40:20:3d:98:52:46:34:41:b0:23:a4:ea: 1e:20:2a:9f:06:d8:b5:2d:5c:23:4c:11:d3:0f:d0:3e:fd:b3: 58:61:e0:50:59:a9:2d:11:d4:3a:cc:70:78:47:5e:88:f3:b3: d7:cf:2b:d7:1e:1d:d8:00:03:f8:8b:48:8b:0f:f1:db:a8:b7: b3:99:2e:e0:e5:6d:b8:24:f0:4a:9f:89:ee:1a:99:f8:92:52: 06:fa:c3:39:a2:42:89:2a:69:b4:1e:52:1f:41:79:47:10:d8: 3c:02:9d:91:b5:a4:f4:1c:11:4c:13:be:b7:ac:c5:b6:36:3a: bf:be:fa:11:18:81:7a:54:6c:be:d8:ad:dd:47:77:bc:74:dc: 26:86:bd:e5:cf:12:3e:c2:59:73:e0:5b:07:c0:b6:91:49:08: 4a:72:fe:b9:55:90:85:fd:15:7c:05:7f:74:5a:5f:cb:c3:d4: 56:fd:0d:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtFSr8os04gyZeyWxpeCk6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGI4NWI1MWUzM2RmMGM2OTRkYmQ3N2JjOGMyYmEzZWFi NGQ1MTkwHhcNMjUxMjIyMDkwMTI1WhcNMjUxMjIzMDkwMTI1WjAzMTEwLwYDVQQD EyhlYWYwYzYwMWU5Y2VjMDU5YjU0YzdmZmU2M2JjYmJhMTVlMzhkMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJzvCErapzU2ZBv17pS89VD/Az8n kncTx8T5oE23/UxjrJE98YO4TeiSYsIIJ1STcA6gaNrKhI8K3eBQeLewJYYu0MxW XtbasmXPR1QE5DZw8ezTMu5KwDjW7zsHsxh9HHWK9Ac/4kHv3ZyXkDU5RGBbuk+p sgaIuZqOeyexo1Al3XugiJt1yaMET7v7Ko1km24Wmob4dlgXXZCf1Ky+WFexcdzV sLJIfqd2BwABxi1ohLqpb+S8auun7BSmTk6LaX87u5jhR9Z8Up78bebvV5OV+F3D Rj3FPRBuzK34n/ueQS4fQaOe0qRUPNrsvPE8iZlmLyC8Pcfog6ZQG8RexwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOrwxgHpzsBZtUx//mO8u6FeONNBMB8GA1UdIwQY MBaAFHmLhbUeM98MaU29d7yMK6PqtNUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEt OTQwZGZiOTYxNjMwLzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8yZWRlOGUtZjdmNS00MDQ1LTkzNDEtOTQwZGZiOTYxNjMw LzEvZVl1RnRSNHozd3hwVGIxM3ZJd3JvLXEwMVJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIg15+Kvh Cj2HsSyWyDE44dX7mmGb+lCdC1unnNZuwtn8tqzNW4yzbVRzmfULxbKhUGvJwt0y rRG9AJtzBuMR31iJh00QMHywGLmIJozwQCA9mFJGNEGwI6TqHiAqnwbYtS1cI0wR 0w/QPv2zWGHgUFmpLRHUOsxweEdeiPOz188r1x4d2AAD+ItIiw/x26i3s5ku4OVt uCTwSp+J7hqZ+JJSBvrDOaJCiSpptB5SH0F5RxDYPAKdkbWk9BwRTBO+t6zFtjY6 v776ERiBelRsvtit3Ud3vHTcJoa95c8SPsJZc+BbB8C2kUkISnL+uVWQhf0VfAV/ dFpfy8PUVv0NRA== -----END CERTIFICATE-----Generated at Mon Dec 22 17:07:16 2025 by rpki-client