This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json) Hash identifier: jMvY81AcksKDchdb326gWrhe93lWO72Fq8VIS14Wh60= Subject key identifier: 39:92:24:4A:0F:59:C7:03:E5:4F:06:33:52:86:D7:83:CE:E1:C1:35 Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Certificate serial: 019B3E356201CC08A7DBABFCD58E731236EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft Manifest number: 1788 Signing time: Sun 21 Dec 2025 00:00:44 +0000 Manifest this update: Sun 21 Dec 2025 00:00:44 +0000 Manifest next update: Mon 22 Dec 2025 00:00:44 +0000 Files and hashes: 1: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (hash: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=) 2: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: fsWheUug8KSETUKBbgSTHq/g4zIn+oZmkFqDiHf6gUU=) 3: dSwIHtxC0u8qG1ueqYtW3i5amv8.roa (hash: QLyGTOk3dWjVPkNifNVqdGuq0/tGZ+FpGJ8RyLY/su8=) 4: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (hash: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:62:01:cc:08:a7:db:ab:fc:d5:8e:73:12:36:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Validity Not Before: Dec 21 00:00:44 2025 GMT Not After : Dec 22 00:00:44 2025 GMT Subject: CN=3992244a0f59c703e54f06335286d783cee1c135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:be:9f:8e:03:49:6f:6e:38:dc:1f:4d:0f:ef: e8:0c:a5:0c:27:49:02:7f:bc:b0:cd:b1:da:86:fe: e9:9d:a8:91:2d:ea:43:c8:92:7b:5b:90:d5:d6:2b: 3b:1b:28:b7:cd:60:13:7a:dc:5f:5d:8a:70:12:99: 8e:14:f1:c8:00:24:fd:e9:49:c8:e6:60:fc:31:84: 72:2f:02:23:b1:be:0e:4b:71:04:5c:5b:30:0b:e4: c4:49:2b:fd:46:05:fc:af:69:37:5d:05:26:07:29: 9b:56:cc:bc:1a:2e:99:bb:3f:35:f2:d9:f5:d2:b5: 5c:b4:c0:a7:45:aa:4f:84:f6:6e:4d:07:48:fa:98: 12:b9:f4:32:63:32:4b:bc:52:22:ba:8a:6c:73:92: e9:fb:fb:34:da:b8:38:23:30:6c:68:03:e7:50:47: 94:ed:68:ac:78:38:cc:d2:73:cc:a9:30:cb:4f:ea: 86:57:aa:8c:25:fc:1e:0e:22:ac:08:23:24:13:54: 2e:b1:9b:02:a9:29:d3:c7:3b:a0:7e:2f:5b:b5:a7: f1:dc:84:83:ed:65:9f:1c:57:54:4b:2a:16:63:a6: 19:34:f3:42:24:56:eb:eb:81:70:5a:59:93:f1:9b: ca:ce:10:31:91:d6:5a:af:69:b8:1e:94:fa:5d:5b: c3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:92:24:4A:0F:59:C7:03:E5:4F:06:33:52:86:D7:83:CE:E1:C1:35 X509v3 Authority Key Identifier: keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f2:76:4c:71:78:60:a3:61:5f:cb:8c:d6:5d:b4:b3:2d:2d: 74:f6:32:ed:ad:d9:98:4e:34:b9:60:b3:17:ce:f2:59:c2:11: fb:b7:d7:84:1c:de:53:ef:7f:c7:f5:74:01:85:28:35:4e:cd: 48:87:3d:f2:13:55:9d:65:ca:cd:f4:cb:11:80:65:b3:d3:0e: 2e:0d:57:55:e8:78:bc:2c:10:3b:f1:a2:cd:06:68:87:23:16: c2:44:c4:cf:20:40:9c:c4:08:32:e9:33:e1:0a:bb:dd:73:f0: 2c:58:da:c1:32:9a:7b:e6:2f:b5:28:c2:5e:86:8c:b9:71:bf: 31:84:2b:16:85:1e:c5:8d:98:b8:c5:d0:a2:db:50:98:c8:22: 64:bf:3f:0a:f3:d9:d5:53:3a:b3:f9:52:72:e2:40:2a:4d:2a: 2c:42:c6:ae:b8:de:ac:6c:d6:9a:44:af:10:7d:af:48:2b:d6: 64:5c:9d:cc:37:f5:47:94:3f:39:62:14:ec:13:15:a4:12:41: c8:62:77:ad:50:5b:b1:60:5f:7c:92:e1:6d:d5:45:ed:60:cd: 1f:88:76:3c:28:82:f2:d7:44:b7:0d:37:1b:66:c1:6e:53:3f: 2b:83:00:9a:50:1e:a7:74:82:8e:61:04:12:d6:76:da:05:15: 43:3e:b4:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NWIBzAin26v81Y5zEjbvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx OGEwYzkwHhcNMjUxMjIxMDAwMDQ0WhcNMjUxMjIyMDAwMDQ0WjAzMTEwLwYDVQQD EygzOTkyMjQ0YTBmNTljNzAzZTU0ZjA2MzM1Mjg2ZDc4M2NlZTFjMTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr6fjgNJb2443B9ND+/oDKUMJ0kC f7ywzbHahv7pnaiRLepDyJJ7W5DV1is7Gyi3zWATetxfXYpwEpmOFPHIACT96UnI 5mD8MYRyLwIjsb4OS3EEXFswC+TESSv9RgX8r2k3XQUmBymbVsy8Gi6Zuz818tn1 0rVctMCnRapPhPZuTQdI+pgSufQyYzJLvFIiuopsc5Lp+/s02rg4IzBsaAPnUEeU 7WiseDjM0nPMqTDLT+qGV6qMJfweDiKsCCMkE1QusZsCqSnTxzugfi9btafx3ISD 7WWfHFdUSyoWY6YZNPNCJFbr64FwWlmT8ZvKzhAxkdZar2m4HpT6XVvD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmSJEoPWccD5U8GM1KG14PO4cE1MB8GA1UdIwQY MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAePJ2THF4 YKNhX8uM1l20sy0tdPYy7a3ZmE40uWCzF87yWcIR+7fXhBzeU+9/x/V0AYUoNU7N SIc98hNVnWXKzfTLEYBls9MOLg1XVeh4vCwQO/GizQZohyMWwkTEzyBAnMQIMukz 4Qq73XPwLFjawTKae+YvtSjCXoaMuXG/MYQrFoUexY2YuMXQottQmMgiZL8/CvPZ 1VM6s/lScuJAKk0qLELGrrjerGzWmkSvEH2vSCvWZFydzDf1R5Q/OWIU7BMVpBJB yGJ3rVBbsWBffJLhbdVF7WDNH4h2PCiC8tdEtw03G2bBblM/K4MAmlAep3SCjmEE EtZ22gUVQz60uw== -----END CERTIFICATE-----Generated at Sun Dec 21 08:59:55 2025 by rpki-client