This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft File: EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json) Hash identifier: 7aBAnv3VaA1FKL3nnHcikt/SH2e0B79WBcE1lR73cFQ= Subject key identifier: E6:83:C8:92:61:51:40:D0:66:7D:24:A1:2B:42:AE:FC:B1:F3:D3:DF Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA Certificate issuer: /CN=132868644579e6eb61f4771d67b40664f50116fa Certificate serial: 019B4A03B323D3480776E9BCFD1B4960789F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft Manifest number: 1327 Signing time: Tue 23 Dec 2025 07:01:54 +0000 Manifest this update: Tue 23 Dec 2025 07:01:54 +0000 Manifest next update: Wed 24 Dec 2025 07:01:54 +0000 Files and hashes: 1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: w0N6M6Nfelmswm7ADVqj4Oo+f0j/EgqYzTEO4h5dpSs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 07:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:03:b3:23:d3:48:07:76:e9:bc:fd:1b:49:60:78:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa Validity Not Before: Dec 23 07:01:54 2025 GMT Not After : Dec 24 07:01:54 2025 GMT Subject: CN=e683c892615140d0667d24a12b42aefcb1f3d3df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:52:39:fb:66:cb:40:7d:53:5e:10:48:f5: 30:3f:67:c0:f9:e0:e5:de:58:e4:ed:c7:b0:20:89: 65:c5:58:d5:e6:51:15:af:55:f0:af:f3:73:32:09: 4b:fc:76:cd:4f:2f:c9:77:22:4c:48:c6:ab:53:c8: ae:34:0b:04:c2:d7:02:38:0d:24:b2:00:eb:dd:b6: f8:10:4a:9e:da:4d:f8:4c:75:2f:41:3c:9e:e1:d0: e5:2c:68:20:8b:43:ae:7c:0b:2a:75:d9:a8:8d:b9: b4:46:05:fe:20:11:50:32:9b:71:6f:1f:72:21:a9: c3:79:cf:e2:fb:e9:1e:6c:00:16:e9:e1:2c:b9:7f: ee:f0:1c:13:56:32:6c:0c:bc:ae:ad:0c:34:38:1e: 19:4d:6d:e1:56:35:75:a7:ad:b9:f2:21:4f:85:bb: 1a:43:96:bf:62:dd:45:88:1e:2b:fa:f5:0f:de:a7: b8:1f:55:da:b5:d5:5d:04:a9:21:8b:a1:17:49:01: e5:6f:68:b3:82:47:1f:1e:9a:e0:d3:c9:0e:0b:b7: ac:a2:c5:70:d0:f6:e4:25:da:f0:1e:e9:da:d6:bf: 70:e6:0f:1f:7d:28:40:1c:40:5e:4f:d1:fe:cf:39: 91:f1:2d:c5:b4:fc:37:dd:cd:fa:a4:1b:fc:da:9f: 9c:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:83:C8:92:61:51:40:D0:66:7D:24:A1:2B:42:AE:FC:B1:F3:D3:DF X509v3 Authority Key Identifier: keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a9:fd:37:c0:22:d1:a6:45:8e:2d:45:03:26:bc:be:cb:bb: c0:72:e2:57:e7:38:e3:2a:81:e1:23:fa:3b:ed:c2:a7:b5:b3: fa:f2:10:e2:25:40:c4:66:db:b5:a6:af:34:06:3a:e7:83:85: 74:aa:0f:05:8d:8f:70:1d:51:b4:7e:43:61:bb:85:22:96:65: 0c:20:54:15:e8:c7:59:47:89:ba:0d:5a:50:f1:92:c5:15:3a: e4:2b:54:7f:35:ee:00:da:97:53:35:c6:3d:54:6a:d3:65:37: ac:b9:42:f8:dc:40:30:ad:d5:4e:7b:bb:1b:8e:26:45:93:d0: e4:64:e2:05:b0:f4:c9:19:8c:5a:d5:e3:8b:3a:46:15:d5:49: 04:43:f0:fa:7b:9b:16:c3:1b:74:d2:2a:f6:1c:a3:6e:93:11: be:1a:98:47:09:0c:ee:57:24:8f:e5:ed:f0:87:ad:2d:40:ae: ed:dc:fb:01:18:24:3b:8a:40:0c:fa:0a:97:3f:15:8a:d5:ac: f1:51:6a:84:85:f6:c9:06:5e:7b:04:4a:18:aa:68:53:1a:54: 3b:f0:0f:aa:29:74:69:a9:2a:23:27:73:4f:ee:a9:ca:a6:34: 3c:72:b5:b4:48:c3:4b:40:84:80:95:30:6e:48:a7:3e:83:34: 01:41:c7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKA7Mj00gHdum8/RtJYHifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjg2ODY0NDU3OWU2ZWI2MWY0NzcxZDY3YjQwNjY0ZjUw MTE2ZmEwHhcNMjUxMjIzMDcwMTU0WhcNMjUxMjI0MDcwMTU0WjAzMTEwLwYDVQQD EyhlNjgzYzg5MjYxNTE0MGQwNjY3ZDI0YTEyYjQyYWVmY2IxZjNkM2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6xSOftmy0B9U14QSPUwP2fA+eDl 3ljk7cewIIllxVjV5lEVr1Xwr/NzMglL/HbNTy/JdyJMSMarU8iuNAsEwtcCOA0k sgDr3bb4EEqe2k34THUvQTye4dDlLGggi0OufAsqddmojbm0RgX+IBFQMptxbx9y IanDec/i++kebAAW6eEsuX/u8BwTVjJsDLyurQw0OB4ZTW3hVjV1p6258iFPhbsa Q5a/Yt1FiB4r+vUP3qe4H1XatdVdBKkhi6EXSQHlb2izgkcfHprg08kOC7esosVw 0PbkJdrwHuna1r9w5g8ffShAHEBeT9H+zzmR8S3FtPw33c36pBv82p+cOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaDyJJhUUDQZn0koStCrvyx89PfMB8GA1UdIwQY MBaAFBMoaGRFeebrYfR3HWe0BmT1ARb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUt ZjJkOGRmOGVhYWQ5LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUtZjJkOGRmOGVhYWQ5 LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHqn9N8Ai 0aZFji1FAya8vsu7wHLiV+c44yqB4SP6O+3Cp7Wz+vIQ4iVAxGbbtaavNAY654OF dKoPBY2PcB1RtH5DYbuFIpZlDCBUFejHWUeJug1aUPGSxRU65CtUfzXuANqXUzXG PVRq02U3rLlC+NxAMK3VTnu7G44mRZPQ5GTiBbD0yRmMWtXjizpGFdVJBEPw+nub FsMbdNIq9hyjbpMRvhqYRwkM7lckj+Xt8IetLUCu7dz7ARgkO4pADPoKlz8VitWs 8VFqhIX2yQZeewRKGKpoUxpUO/APqil0aakqIydzT+6pyqY0PHK1tEjDS0CEgJUw bkinPoM0AUHHmQ== -----END CERTIFICATE-----Generated at Tue Dec 23 10:47:31 2025 by rpki-client