This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json) Hash identifier: gdpPqjGp3B5XxXp4+qJ5ZWGkdN8aw3gzfWcjPJGJztQ= Subject key identifier: C7:32:4F:2E:02:4B:1E:6B:17:C2:18:5C:FF:9C:68:AA:96:D2:26:CA Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019B3F7ECE24A04EADBF1B9238C30686EC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft Manifest number: 0A31 Signing time: Sun 21 Dec 2025 06:00:33 +0000 Manifest this update: Sun 21 Dec 2025 06:00:33 +0000 Manifest next update: Mon 22 Dec 2025 06:00:33 +0000 Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: unsDNv/lJa6qXvu3P73mRfHawWYH1H/F/gOBE1nivsU=) 2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:ce:24:a0:4e:ad:bf:1b:92:38:c3:06:86:ec:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Dec 21 06:00:33 2025 GMT Not After : Dec 22 06:00:33 2025 GMT Subject: CN=c7324f2e024b1e6b17c2185cff9c68aa96d226ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1c:bb:d1:bf:23:c0:f1:e8:f5:58:67:f2:7e: d2:21:e0:2c:90:28:11:30:fb:f3:5c:85:cf:e6:09: d4:e1:8c:44:1a:14:6c:57:59:29:d6:49:0d:fd:9e: e7:67:bb:5c:ba:60:3d:6b:27:34:ca:d8:dd:06:9e: 7d:d8:31:a3:eb:ff:b0:58:c6:54:fe:90:93:9c:99: 17:f3:41:41:3e:7d:8b:28:21:64:9a:06:81:27:d4: 11:e7:b4:03:6a:86:1c:d3:a9:4f:f2:19:7d:00:23: 25:30:38:c6:0b:4a:7e:0b:66:4f:fd:65:d7:20:30: 9d:32:25:20:b9:4a:6d:0a:49:39:9f:3d:e2:60:56: 25:68:95:62:86:8c:72:75:dc:ed:91:bc:77:3c:8d: 29:7f:8d:05:c6:f9:7a:c0:f9:9a:5d:95:1c:fa:5b: 72:7c:79:f6:b1:da:40:c8:68:47:97:07:a9:a4:c7: cc:dc:84:28:56:3c:b4:2e:af:b9:e0:b5:1f:e7:e3: f7:a8:71:f9:a4:79:0c:a6:74:bc:f1:dc:d9:d2:06: 35:cb:be:3f:59:7d:81:8d:ba:7b:19:2d:3e:c7:c3: 8c:21:83:1f:4c:0a:c3:25:c4:96:00:d6:76:48:c2: 67:8a:75:0c:0f:b1:9a:ab:b3:23:de:86:e0:dc:a6: ec:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:32:4F:2E:02:4B:1E:6B:17:C2:18:5C:FF:9C:68:AA:96:D2:26:CA X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:9e:d3:d6:a2:46:6d:5a:8a:df:9f:23:72:7a:bd:47:5b: 72:87:b6:4e:ff:fc:06:13:88:fd:df:27:d2:d2:ee:42:e2:df: 39:b4:f9:2d:06:e7:49:d6:92:10:c6:05:01:d0:72:f4:49:40: dc:90:43:ec:40:d0:36:cb:b8:34:7d:af:28:e3:0d:31:ef:c0: aa:90:7b:a1:9d:d6:bb:38:ed:b6:91:3d:01:2a:d3:66:69:01: 57:30:83:df:77:4b:76:67:8e:53:ce:73:d0:45:de:87:41:40: 08:12:b4:65:a7:db:af:97:fb:b1:93:ed:e6:64:6f:4a:78:39: 8c:e1:0a:fb:3d:94:9b:c9:85:c7:b1:cc:35:8a:55:dc:c9:5e: d6:83:06:d0:8a:38:66:ce:c1:b8:1f:c9:da:b2:f5:e0:72:a0: 84:0b:64:e3:ce:da:95:2c:86:8c:b0:ba:95:35:0e:3d:1c:58: f0:56:0b:22:4c:82:f3:14:d4:ef:70:82:44:0b:4c:34:c5:d0: 56:57:89:e3:fd:0c:7a:c7:30:72:a6:55:11:95:db:ca:9f:de: 7e:85:93:c8:38:f4:1a:c8:49:ca:43:b4:f8:53:f1:d3:f8:fe: a4:33:e4:62:7a:7e:bd:e1:c2:6d:cf:92:b6:36:35:18:40:15: 2e:d9:3f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fs4koE6tvxuSOMMGhuwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjUxMjIxMDYwMDMzWhcNMjUxMjIyMDYwMDMzWjAzMTEwLwYDVQQD EyhjNzMyNGYyZTAyNGIxZTZiMTdjMjE4NWNmZjljNjhhYTk2ZDIyNmNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRy70b8jwPHo9Vhn8n7SIeAskCgR MPvzXIXP5gnU4YxEGhRsV1kp1kkN/Z7nZ7tcumA9ayc0ytjdBp592DGj6/+wWMZU /pCTnJkX80FBPn2LKCFkmgaBJ9QR57QDaoYc06lP8hl9ACMlMDjGC0p+C2ZP/WXX IDCdMiUguUptCkk5nz3iYFYlaJVihoxyddztkbx3PI0pf40Fxvl6wPmaXZUc+lty fHn2sdpAyGhHlweppMfM3IQoVjy0Lq+54LUf5+P3qHH5pHkMpnS88dzZ0gY1y74/ WX2Bjbp7GS0+x8OMIYMfTArDJcSWANZ2SMJninUMD7Gaq7Mj3obg3KbsjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcyTy4CSx5rF8IYXP+caKqW0ibKMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluue09ai Rm1ait+fI3J6vUdbcoe2Tv/8BhOI/d8n0tLuQuLfObT5LQbnSdaSEMYFAdBy9ElA 3JBD7EDQNsu4NH2vKOMNMe/AqpB7oZ3WuzjttpE9ASrTZmkBVzCD33dLdmeOU85z 0EXeh0FACBK0Zafbr5f7sZPt5mRvSng5jOEK+z2Um8mFx7HMNYpV3Mle1oMG0Io4 Zs7BuB/J2rL14HKghAtk487alSyGjLC6lTUOPRxY8FYLIkyC8xTU73CCRAtMNMXQ VleJ4/0MescwcqZVEZXbyp/efoWTyDj0GshJykO0+FPx0/j+pDPkYnp+veHCbc+S tjY1GEAVLtk/uw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:41:30 2025 by rpki-client