This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json) Hash identifier: 7CP3LONoGR+mESoYz9uR03aMRdIRQGcBZdnRsWt+EDs= Subject key identifier: 0C:4E:49:4A:FC:54:D5:50:89:C1:9B:12:83:21:CE:1F:B1:13:84:5B Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Certificate serial: 019B4F970C8B0DA2EB95CBF2EE30A9C9F9FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft Manifest number: 1791 Signing time: Wed 24 Dec 2025 09:00:57 +0000 Manifest this update: Wed 24 Dec 2025 09:00:57 +0000 Manifest next update: Thu 25 Dec 2025 09:00:57 +0000 Files and hashes: 1: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (hash: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=) 2: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: 4qK17rzcVId6cdQ5vF7xC0H2xArCUXmc5C8AEuv3vNo=) 3: dSwIHtxC0u8qG1ueqYtW3i5amv8.roa (hash: QLyGTOk3dWjVPkNifNVqdGuq0/tGZ+FpGJ8RyLY/su8=) 4: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (hash: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:97:0c:8b:0d:a2:eb:95:cb:f2:ee:30:a9:c9:f9:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Validity Not Before: Dec 24 09:00:57 2025 GMT Not After : Dec 25 09:00:57 2025 GMT Subject: CN=0c4e494afc54d55089c19b128321ce1fb113845b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:be:f5:e0:78:24:d8:f3:5a:03:9a:6b:a0:3c: 19:9e:76:e4:68:a0:e9:eb:2f:ee:11:3f:9d:4a:e2: 98:8c:44:02:7c:b3:8f:8a:f1:60:95:8e:d1:46:f5: e3:f5:79:4d:36:bd:4f:cd:e3:88:d9:ba:2d:c4:b4: 45:66:41:db:6e:ea:f4:f8:d9:b8:3b:2b:6b:30:cb: 24:7c:7d:26:7a:2a:b0:ee:0b:76:5d:f3:38:fb:30: 3d:a0:34:cd:fa:89:e2:e3:f2:ba:7d:47:23:83:6b: 08:b1:4b:96:91:ce:6f:0d:dc:ee:5a:7d:10:b2:8a: ef:40:3b:92:16:08:fb:f2:4b:c0:ad:f3:a2:de:c1: a9:d0:c0:43:83:b5:2c:43:34:f6:74:ea:10:65:4a: a3:35:20:74:8e:4b:14:94:ea:2d:65:ba:e2:8f:b8: 88:12:8c:02:cf:75:f5:bd:a4:3a:58:f4:8d:83:16: 31:18:06:8f:4b:9f:7f:56:3c:af:b4:5c:c8:73:ba: 74:7e:86:97:d8:fd:5c:dd:97:4f:4f:36:d3:32:35: 46:bb:d6:28:99:a6:66:21:62:8c:87:38:04:ba:00: 98:67:23:67:45:27:8b:41:00:93:24:40:57:fa:ba: 75:f7:a7:47:44:c9:73:2d:9f:13:ad:ff:58:98:85: 98:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4E:49:4A:FC:54:D5:50:89:C1:9B:12:83:21:CE:1F:B1:13:84:5B X509v3 Authority Key Identifier: keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:ee:98:2c:9b:b7:f1:f0:1c:e8:39:f5:a1:a0:90:21:75:65: 9b:44:67:01:ac:b0:c5:09:97:1b:c0:a2:f5:2f:e3:be:eb:d0: 99:c3:ad:11:76:2d:92:e6:22:ab:4e:ec:be:db:01:27:36:64: d0:30:c4:91:46:ef:d4:95:50:d9:9d:b3:f6:68:d3:81:29:35: fb:bf:61:d4:55:29:9c:0a:c7:94:86:9e:17:e5:07:37:38:1a: 13:04:cd:aa:21:0d:ab:fc:cc:be:6f:2a:a6:fd:23:ee:f6:c5: 2e:6a:2f:3a:b6:67:75:1e:2f:bb:b8:05:d3:07:65:e7:54:82: f4:f8:78:c6:34:e9:c1:6d:ed:06:d9:21:f9:e7:19:1e:6e:fb: 57:16:32:67:31:f6:18:03:d5:e3:f2:97:63:1e:24:a3:c4:0b: a3:1e:d5:4c:53:24:04:c2:40:50:49:a8:e0:13:03:93:76:80: 45:39:e9:b9:96:7d:82:b6:77:6b:77:ac:2b:02:e7:cf:4c:54: 58:04:07:8e:22:7d:fe:83:f7:5b:b5:76:23:a8:f0:49:71:32: 5c:3a:c0:f5:c3:c9:3d:95:26:cc:ac:9e:bc:31:9e:12:dc:1b: fe:ad:05:86:50:e0:47:63:be:c5:22:d9:92:5b:71:36:b7:3d: 8d:f9:47:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPlwyLDaLrlcvy7jCpyfn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx OGEwYzkwHhcNMjUxMjI0MDkwMDU3WhcNMjUxMjI1MDkwMDU3WjAzMTEwLwYDVQQD EygwYzRlNDk0YWZjNTRkNTUwODljMTliMTI4MzIxY2UxZmIxMTM4NDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7714Hgk2PNaA5proDwZnnbkaKDp 6y/uET+dSuKYjEQCfLOPivFglY7RRvXj9XlNNr1PzeOI2botxLRFZkHbbur0+Nm4 OytrMMskfH0meiqw7gt2XfM4+zA9oDTN+oni4/K6fUcjg2sIsUuWkc5vDdzuWn0Q sorvQDuSFgj78kvArfOi3sGp0MBDg7UsQzT2dOoQZUqjNSB0jksUlOotZbrij7iI EowCz3X1vaQ6WPSNgxYxGAaPS59/VjyvtFzIc7p0foaX2P1c3ZdPTzbTMjVGu9Yo maZmIWKMhzgEugCYZyNnRSeLQQCTJEBX+rp196dHRMlzLZ8Trf9YmIWYlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAxOSUr8VNVQicGbEoMhzh+xE4RbMB8GA1UdIwQY MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAce6YLJu3 8fAc6Dn1oaCQIXVlm0RnAaywxQmXG8Ci9S/jvuvQmcOtEXYtkuYiq07svtsBJzZk 0DDEkUbv1JVQ2Z2z9mjTgSk1+79h1FUpnArHlIaeF+UHNzgaEwTNqiENq/zMvm8q pv0j7vbFLmovOrZndR4vu7gF0wdl51SC9Ph4xjTpwW3tBtkh+ecZHm77VxYyZzH2 GAPV4/KXYx4ko8QLox7VTFMkBMJAUEmo4BMDk3aARTnpuZZ9grZ3a3esKwLnz0xU WAQHjiJ9/oP3W7V2I6jwSXEyXDrA9cPJPZUmzKyevDGeEtwb/q0FhlDgR2O+xSLZ kltxNrc9jflH/A== -----END CERTIFICATE-----Generated at Wed Dec 24 18:07:14 2025 by rpki-client