This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft File: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft (raw, json) Hash identifier: Z0Xd9N+r8XGTDq+3VSrfaKfb5Mc/BzyI0mZoTQLFVL4= Subject key identifier: D1:E9:52:AC:41:48:51:2B:D0:1E:E0:19:39:DD:1D:00:EC:04:19:1A Authority key identifier: 12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2 Certificate issuer: /CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2 Certificate serial: 019B5418E5CCB9C6B868F3F11AD81751C239 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft Manifest number: 1793 Signing time: Thu 25 Dec 2025 06:01:16 +0000 Manifest this update: Thu 25 Dec 2025 06:01:16 +0000 Manifest next update: Fri 26 Dec 2025 06:01:16 +0000 Files and hashes: 1: Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl (hash: Lv0I6So4x5p3mfINrPtxi5/cymLHSQotFGm1EC1+IVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:54:18:e5:cc:b9:c6:b8:68:f3:f1:1a:d8:17:51:c2:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128f0e5b0c1dec0051fe5e6ebeb58e7607f314b2 Validity Not Before: Dec 25 06:01:16 2025 GMT Not After : Dec 26 06:01:16 2025 GMT Subject: CN=d1e952ac4148512bd01ee01939dd1d00ec04191a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:74:ec:78:c0:6e:d1:ed:69:38:dc:87:27:c8: 91:02:a6:48:5f:e7:cc:e1:9a:8a:3a:cd:12:48:f4: a9:39:74:39:c0:50:58:66:92:99:95:80:9d:b7:19: b5:ac:87:21:44:b9:f8:69:fc:a7:06:be:06:fd:71: 9e:af:06:8f:d6:d6:c5:4f:92:d0:fc:1f:bf:bf:41: aa:33:4d:e8:d5:8e:85:5b:f0:f9:eb:f8:8a:03:ce: 45:0e:cb:8e:4c:c3:6b:a3:32:b6:97:6f:a7:ab:24: 7d:9a:60:95:43:64:b6:b9:c2:f8:f3:5c:1b:32:48: c0:f0:41:b7:16:97:42:03:23:05:c7:2c:60:22:6f: 6d:f6:96:11:3b:f8:53:29:aa:02:ed:d2:a2:11:a3: bf:4e:11:f0:2a:0f:ca:1e:cb:8e:97:33:42:ca:55: bb:59:b3:67:38:37:ca:c2:21:b6:45:96:6e:a3:fc: bc:a8:b3:cc:ec:f2:d1:1c:bc:cc:89:bd:0b:9a:69: 4e:c5:b3:ff:5e:e1:52:21:5f:31:65:a6:90:ce:12: 59:d1:5e:10:4e:be:6a:33:6a:73:dc:5d:08:63:16: 85:6c:62:3f:79:9f:87:26:e0:59:02:41:95:a3:a1: 35:30:1d:97:93:03:b8:49:94:60:fb:43:28:87:8a: 0b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:E9:52:AC:41:48:51:2B:D0:1E:E0:19:39:DD:1D:00:EC:04:19:1A X509v3 Authority Key Identifier: keyid:12:8F:0E:5B:0C:1D:EC:00:51:FE:5E:6E:BE:B5:8E:76:07:F3:14:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/54c45c-4524-4177-bfac-a52424fb2a0e/1/Eo8OWwwd7ABR_l5uvrWOdgfzFLI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:c7:b7:d9:e8:c4:33:28:68:62:55:5b:38:a4:c3:e3:ac:b0: 45:8a:37:14:9d:15:41:57:b5:0a:97:6d:1c:f7:fc:75:e4:4d: 99:d4:42:6e:7c:20:01:c5:fd:96:5d:c5:34:28:5d:36:d2:c9: 69:37:2c:83:e1:81:48:99:48:52:2c:a8:15:52:8d:e4:51:59: 5f:99:1d:7d:4a:52:92:77:ef:a8:04:06:24:28:03:71:95:35: fc:07:2d:f8:11:c5:54:cd:1d:76:22:92:af:0a:bf:28:16:66: e0:38:40:2d:78:6e:69:fb:bc:9c:ba:4a:dd:8b:dc:98:bb:54: 58:92:3f:de:15:e5:22:2b:39:57:25:21:e9:f0:00:b5:33:aa: eb:2f:98:3d:10:fd:76:18:69:64:5f:ce:d7:63:db:a7:4f:67: fb:23:d9:41:82:68:10:48:b4:e2:50:79:77:b5:f5:1d:72:72: e0:b4:c3:c6:f1:d4:a9:40:a0:fa:6a:b2:6c:6f:29:62:34:0e: 91:2d:51:0f:ab:fe:d6:be:95:d3:98:c9:56:44:8f:c3:d9:48: 3f:f1:d8:ba:dc:e0:86:a9:2b:2c:b4:79:a6:57:b2:44:d1:8c: 11:06:0a:97:c1:11:02:88:25:ac:de:fc:0c:e9:20:95:55:11: bb:9e:6a:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtUGOXMuca4aPPxGtgXUcI5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOGYwZTViMGMxZGVjMDA1MWZlNWU2ZWJlYjU4ZTc2MDdm MzE0YjIwHhcNMjUxMjI1MDYwMTE2WhcNMjUxMjI2MDYwMTE2WjAzMTEwLwYDVQQD EyhkMWU5NTJhYzQxNDg1MTJiZDAxZWUwMTkzOWRkMWQwMGVjMDQxOTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnTseMBu0e1pONyHJ8iRAqZIX+fM 4ZqKOs0SSPSpOXQ5wFBYZpKZlYCdtxm1rIchRLn4afynBr4G/XGerwaP1tbFT5LQ /B+/v0GqM03o1Y6FW/D56/iKA85FDsuOTMNrozK2l2+nqyR9mmCVQ2S2ucL481wb MkjA8EG3FpdCAyMFxyxgIm9t9pYRO/hTKaoC7dKiEaO/ThHwKg/KHsuOlzNCylW7 WbNnODfKwiG2RZZuo/y8qLPM7PLRHLzMib0LmmlOxbP/XuFSIV8xZaaQzhJZ0V4Q Tr5qM2pz3F0IYxaFbGI/eZ+HJuBZAkGVo6E1MB2XkwO4SZRg+0Moh4oLSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHpUqxBSFEr0B7gGTndHQDsBBkaMB8GA1UdIwQY MBaAFBKPDlsMHewAUf5ebr61jnYH8xSyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81NGM0NWMtNDUyNC00MTc3LWJmYWMt YTUyNDI0ZmIyYTBlLzEvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS81NGM0NWMtNDUyNC00MTc3LWJmYWMtYTUyNDI0ZmIyYTBl LzEvRW84T1d3d2Q3QUJSX2w1dXZyV09kZ2Z6RkxJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPce32ejE MyhoYlVbOKTD46ywRYo3FJ0VQVe1CpdtHPf8deRNmdRCbnwgAcX9ll3FNChdNtLJ aTcsg+GBSJlIUiyoFVKN5FFZX5kdfUpSknfvqAQGJCgDcZU1/Act+BHFVM0ddiKS rwq/KBZm4DhALXhuafu8nLpK3YvcmLtUWJI/3hXlIis5VyUh6fAAtTOq6y+YPRD9 dhhpZF/O12Pbp09n+yPZQYJoEEi04lB5d7X1HXJy4LTDxvHUqUCg+mqybG8pYjQO kS1RD6v+1r6V05jJVkSPw9lIP/HYutzghqkrLLR5pleyRNGMEQYKl8ERAoglrN78 DOkglVURu55qEg== -----END CERTIFICATE-----Generated at Thu Dec 25 13:05:22 2025 by rpki-client