This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft File: euxtTzVbc4ad_qGnkYDIoheN8f0.mft (raw, json) Hash identifier: gMLeKI/vMqML5I6Tp7FNG2BX3SOa6wmW+Zg38NRe1jw= Subject key identifier: 71:D8:97:19:AD:05:28:3A:3D:A2:38:7B:FC:46:F9:2B:B5:BF:CA:31 Authority key identifier: 7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD Certificate issuer: /CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd Certificate serial: 019B665585D0B5F878D1B0CBB212BEE80C7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft Manifest number: 0345 Signing time: Sun 28 Dec 2025 19:00:39 +0000 Manifest this update: Sun 28 Dec 2025 19:00:39 +0000 Manifest next update: Mon 29 Dec 2025 19:00:39 +0000 Files and hashes: 1: GlERHStnJxWQurcUkrnzvUsZBvQ.roa (hash: 2BqHZp4aDN03bLESoTVqSnJeyUSck+7eAGoy0G/N7ws=) 2: euxtTzVbc4ad_qGnkYDIoheN8f0.crl (hash: Lv4MKEJ8fIQ6uvc/K7IfXgeXXtHrs3hBSjM0dBJkGxk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 19:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:55:85:d0:b5:f8:78:d1:b0:cb:b2:12:be:e8:0c:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7aec6d4f355b73869dfea1a79180c8a2178df1fd Validity Not Before: Dec 28 19:00:39 2025 GMT Not After : Dec 29 19:00:39 2025 GMT Subject: CN=71d89719ad05283a3da2387bfc46f92bb5bfca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:17:d8:9a:03:67:61:81:3f:e4:11:80:4e: 4b:44:02:6a:5f:01:38:ea:1b:4d:f5:28:45:9f:6f: 07:26:b5:b2:a2:b0:44:69:f2:c0:21:9c:70:00:da: 4e:ee:78:e5:fc:3d:35:91:be:d8:66:83:73:ab:08: 15:37:27:28:76:71:55:d3:11:43:f1:30:a9:27:3e: 87:21:ae:ca:ef:80:2c:e2:5f:86:ee:dd:b8:17:cb: ce:bb:02:72:76:32:26:50:2e:5c:e7:a6:c0:c2:3b: a5:fd:92:21:0d:6f:5a:1a:a5:41:43:6e:48:97:e0: 31:fa:7e:10:6c:89:44:58:39:6d:6d:ee:2b:a1:ec: 8e:a3:bd:3f:1d:b6:af:24:32:f2:31:75:d4:83:35: e7:d1:a6:d4:44:76:a9:74:48:d4:ec:64:06:c8:35: 2d:4c:75:64:6a:b2:4b:09:7d:41:5b:db:f3:35:b9: d5:e7:7f:b4:80:ea:9d:df:fe:d4:4a:41:86:c0:67: d9:a2:c5:bf:d6:1c:37:d1:c1:8a:47:32:5c:49:b9: 0f:a5:b9:e6:09:33:0b:0a:de:08:45:de:93:44:68: ee:67:15:e8:70:be:3d:f6:61:31:5c:d1:5d:6e:5a: 5f:d2:13:57:b5:47:b0:ec:aa:0e:56:b4:d6:6b:05: 40:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D8:97:19:AD:05:28:3A:3D:A2:38:7B:FC:46:F9:2B:B5:BF:CA:31 X509v3 Authority Key Identifier: keyid:7A:EC:6D:4F:35:5B:73:86:9D:FE:A1:A7:91:80:C8:A2:17:8D:F1:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/euxtTzVbc4ad_qGnkYDIoheN8f0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/40526a-05bc-4ec7-b999-1ff630f1d841/1/euxtTzVbc4ad_qGnkYDIoheN8f0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bb:58:99:1a:bd:37:58:e2:39:85:e8:b8:e1:fd:16:f8:ca: a9:76:c4:c9:d3:93:37:1d:5c:e0:8e:e0:dc:09:1b:f9:92:c7: 46:78:02:5f:24:02:3e:4d:7a:2b:ea:8b:e7:f9:6e:89:2f:da: 41:3b:bb:bb:d5:66:63:ec:e5:d7:fa:e3:78:3f:be:c7:a3:c3: 40:ae:be:79:51:ca:10:99:4b:cc:3f:b3:f7:49:03:1b:19:d4: 56:03:8c:aa:cf:97:83:3b:cf:a1:49:b4:f4:5f:f6:6b:cb:8e: e2:37:ff:bf:5b:aa:4e:d6:f0:b9:7d:27:3c:29:08:3f:f5:a0: 70:b9:48:df:4e:cc:be:bf:38:3f:9e:2f:0a:24:7a:ae:1f:93: 10:1c:41:e5:63:01:05:9b:0f:b3:df:d6:12:23:ca:3d:5a:1f: 87:c7:5d:d5:a5:0c:13:ee:05:79:d1:30:8e:ea:76:5c:48:aa: 4b:b8:78:af:d8:1c:a0:8d:01:6a:0b:19:29:01:21:5b:47:70: 29:c4:91:fa:99:8f:eb:9b:fe:4c:95:9f:7a:15:df:69:83:a1: 35:a5:16:4d:09:25:9f:0e:5f:ba:a8:0e:86:e0:1c:44:fb:2c: d9:38:e1:04:b3:3a:9a:48:2a:e6:42:2c:cf:12:5d:13:f9:9b: b6:78:17:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtmVYXQtfh40bDLshK+6Ax7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZWM2ZDRmMzU1YjczODY5ZGZlYTFhNzkxODBjOGEyMTc4 ZGYxZmQwHhcNMjUxMjI4MTkwMDM5WhcNMjUxMjI5MTkwMDM5WjAzMTEwLwYDVQQD Eyg3MWQ4OTcxOWFkMDUyODNhM2RhMjM4N2JmYzQ2ZjkyYmI1YmZjYTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPMX2JoDZ2GBP+QRgE5LRAJqXwE4 6htN9ShFn28HJrWyorBEafLAIZxwANpO7njl/D01kb7YZoNzqwgVNycodnFV0xFD 8TCpJz6HIa7K74As4l+G7t24F8vOuwJydjImUC5c56bAwjul/ZIhDW9aGqVBQ25I l+Ax+n4QbIlEWDltbe4roeyOo70/HbavJDLyMXXUgzXn0abURHapdEjU7GQGyDUt THVkarJLCX1BW9vzNbnV53+0gOqd3/7USkGGwGfZosW/1hw30cGKRzJcSbkPpbnm CTMLCt4IRd6TRGjuZxXocL499mExXNFdblpf0hNXtUew7KoOVrTWawVAgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHYlxmtBSg6PaI4e/xG+Su1v8oxMB8GA1UdIwQY MBaAFHrsbU81W3OGnf6hp5GAyKIXjfH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My80MDUyNmEtMDViYy00ZWM3LWI5OTkt MWZmNjMwZjFkODQxLzEvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My80MDUyNmEtMDViYy00ZWM3LWI5OTktMWZmNjMwZjFkODQx LzEvZXV4dFR6VmJjNGFkX3FHbmtZRElvaGVOOGYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7tYmRq9 N1jiOYXouOH9FvjKqXbEydOTNx1c4I7g3Akb+ZLHRngCXyQCPk16K+qL5/luiS/a QTu7u9VmY+zl1/rjeD++x6PDQK6+eVHKEJlLzD+z90kDGxnUVgOMqs+XgzvPoUm0 9F/2a8uO4jf/v1uqTtbwuX0nPCkIP/WgcLlI307Mvr84P54vCiR6rh+TEBxB5WMB BZsPs9/WEiPKPVofh8dd1aUME+4FedEwjup2XEiqS7h4r9gcoI0BagsZKQEhW0dw KcSR+pmP65v+TJWfehXfaYOhNaUWTQklnw5fuqgOhuAcRPss2TjhBLM6mkgq5kIs zxJdE/mbtngXtw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:48 2025 by rpki-client