This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft File: EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json) Hash identifier: pbVkXoaktJMRM6odHXyrl8Lvs2L4kOrPV68rxzoDKwM= Subject key identifier: BE:65:85:08:59:98:65:44:98:52:02:AA:94:97:69:1D:04:BB:94:14 Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 Certificate issuer: /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Certificate serial: 019B73358AE9FED8B59F6DD436EE5881D246 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft Manifest number: 145F Signing time: Wed 31 Dec 2025 07:00:47 +0000 Manifest this update: Wed 31 Dec 2025 07:00:47 +0000 Manifest next update: Thu 01 Jan 2026 07:00:47 +0000 Files and hashes: 1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: tFcCOfioAzrZE6iX3tnzYdnNvgioywiat1Y1sEANb4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:73:35:8a:e9:fe:d8:b5:9f:6d:d4:36:ee:58:81:d2:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Validity Not Before: Dec 31 07:00:47 2025 GMT Not After : Jan 1 07:00:47 2026 GMT Subject: CN=be65850859986544985202aa9497691d04bb9414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d2:6d:24:5d:fb:f6:83:a4:a2:67:9f:6d:42: e4:21:4a:b2:68:bb:d8:4a:05:50:ac:6b:d6:65:c6: 07:f4:b5:76:3a:82:57:9e:b0:a8:28:44:0a:8b:55: 40:61:10:da:38:9d:25:35:57:da:45:49:a8:b2:1a: 69:f4:00:d8:bc:c6:c8:b5:a2:02:d2:57:f5:e4:c8: b0:03:6b:f9:a1:3c:83:85:e6:04:5d:0c:86:71:19: 30:fe:6e:bf:41:f2:f1:30:f8:7b:11:ef:aa:82:ae: e6:da:74:e3:8c:0c:43:2e:65:9b:c6:05:7d:cd:e1: 4c:6b:e3:72:57:cd:4a:f3:9f:8c:08:9e:03:09:ce: 02:42:24:0b:51:18:d9:73:74:8e:9c:bf:ef:a1:8e: c3:38:37:a2:50:6b:95:cb:af:2a:eb:40:cd:9e:a2: c9:36:91:0c:77:46:d2:dc:d6:c2:9d:c5:f9:e0:db: 50:f4:ad:3a:0a:32:07:e1:7a:63:c6:ba:c5:43:3d: a1:4c:3e:ab:39:b3:bf:39:e2:ca:33:54:b8:01:79: 58:ed:02:6a:32:68:3e:50:bb:a4:23:0b:ca:4c:a9: ac:40:86:02:57:e4:e4:b0:38:25:43:75:5f:3b:9c: 69:0f:1c:a5:73:f4:db:59:3e:d8:b0:bd:ff:b1:bd: 2e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:65:85:08:59:98:65:44:98:52:02:AA:94:97:69:1D:04:BB:94:14 X509v3 Authority Key Identifier: keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:8e:f5:c2:f1:21:b2:7d:65:89:63:f8:2d:e4:3b:1a:f9:5e: 7f:e5:7f:d6:98:a9:83:53:7a:53:00:6e:3b:bc:e9:5c:87:65: 39:b2:15:c2:31:f1:29:cf:2a:27:4b:6a:4d:be:8b:b7:4d:2a: cd:9f:7c:f0:d0:cc:b6:b6:4d:84:8e:d9:7d:6d:ec:45:04:ef: 5f:c8:43:53:f6:c3:93:ff:ef:63:e0:49:b7:09:4f:1f:fc:1c: 08:a9:88:cb:b8:45:48:49:43:68:ce:5a:46:80:4f:0f:56:47: 7b:2a:55:de:eb:a0:4d:92:8f:10:7e:cb:27:31:52:b2:7a:2e: 4e:4f:3f:b2:88:aa:f5:ef:31:a2:74:7a:b2:7d:39:e8:c9:f3: 3d:8c:f6:22:29:cd:b6:2e:df:8b:6e:0a:a3:a0:8d:d8:5d:b5: 25:5f:7c:bf:59:aa:b1:2f:01:b0:ac:8a:03:2e:d9:e7:2b:5d: 9f:8f:19:cc:4e:f1:ce:66:20:c1:2c:ef:30:c0:47:01:2b:1d: 1c:66:3a:ee:38:fd:37:27:1b:89:50:e7:4b:bb:22:b7:8c:38: 13:89:80:1e:3a:2a:f8:e9:5e:07:db:50:9e:1d:d5:3b:70:6e: 9d:51:74:cf:4a:12:a3:d4:4c:b6:b8:ee:cf:58:e9:36:f7:1c: 87:bd:c4:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtzNYrp/ti1n23UNu5YgdJGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWI4MzUwNDY4N2Y5ZThiYTQ4MGNkNDZlYTA4Yzc1ZGQ5 NGQ3OTUwHhcNMjUxMjMxMDcwMDQ3WhcNMjYwMTAxMDcwMDQ3WjAzMTEwLwYDVQQD EyhiZTY1ODUwODU5OTg2NTQ0OTg1MjAyYWE5NDk3NjkxZDA0YmI5NDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dJtJF379oOkomefbULkIUqyaLvY SgVQrGvWZcYH9LV2OoJXnrCoKEQKi1VAYRDaOJ0lNVfaRUmoshpp9ADYvMbItaIC 0lf15MiwA2v5oTyDheYEXQyGcRkw/m6/QfLxMPh7Ee+qgq7m2nTjjAxDLmWbxgV9 zeFMa+NyV81K85+MCJ4DCc4CQiQLURjZc3SOnL/voY7DODeiUGuVy68q60DNnqLJ NpEMd0bS3NbCncX54NtQ9K06CjIH4XpjxrrFQz2hTD6rObO/OeLKM1S4AXlY7QJq Mmg+ULukIwvKTKmsQIYCV+TksDglQ3VfO5xpDxylc/TbWT7YsL3/sb0ujQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5lhQhZmGVEmFICqpSXaR0Eu5QUMB8GA1UdIwQY MBaAFBDrg1BGh/noukgM1G6gjHXdlNeVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDIt ZDk0NTNjODQ1MjcyLzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDItZDk0NTNjODQ1Mjcy LzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmI71wvEh sn1liWP4LeQ7Gvlef+V/1pipg1N6UwBuO7zpXIdlObIVwjHxKc8qJ0tqTb6Lt00q zZ988NDMtrZNhI7ZfW3sRQTvX8hDU/bDk//vY+BJtwlPH/wcCKmIy7hFSElDaM5a RoBPD1ZHeypV3uugTZKPEH7LJzFSsnouTk8/soiq9e8xonR6sn056MnzPYz2IinN ti7fi24Ko6CN2F21JV98v1mqsS8BsKyKAy7Z5ytdn48ZzE7xzmYgwSzvMMBHASsd HGY67jj9NycbiVDnS7sit4w4E4mAHjoq+OleB9tQnh3VO3BunVF0z0oSo9RMtrju z1jpNvcch73E7g== -----END CERTIFICATE-----Generated at Wed Dec 31 09:02:44 2025 by rpki-client