This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft File: EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft (raw, json) Hash identifier: 1MW+/6PEhIEtrcNU0qMsJlV/zVZ48XZJQAFV1qm6I8s= Subject key identifier: 8A:6F:24:E7:7D:63:D5:61:A3:47:1F:41:32:05:82:EB:CB:21:34:C1 Authority key identifier: 12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4 Certificate issuer: /CN=12e64042b6e7288a485db270c551329b802fd8c4 Certificate serial: 019B4DDF5E0428B1F382028A6A9A04FB83BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft Manifest number: 144D Signing time: Wed 24 Dec 2025 01:00:42 +0000 Manifest this update: Wed 24 Dec 2025 01:00:42 +0000 Manifest next update: Thu 25 Dec 2025 01:00:42 +0000 Files and hashes: 1: BXtbJRTGPhW1VlCQ66qjiZWhbAM.roa (hash: 9OVGLVBb4qleVwsOx0lriWprWo/Ar1aDDscASTXyLXo=) 2: EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl (hash: nHOINYJ3bBxMQj7AghTJzLP2FQfTUST+QiEmNYiSIXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 19:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4d:df:5e:04:28:b1:f3:82:02:8a:6a:9a:04:fb:83:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e64042b6e7288a485db270c551329b802fd8c4 Validity Not Before: Dec 24 01:00:42 2025 GMT Not After : Dec 25 01:00:42 2025 GMT Subject: CN=8a6f24e77d63d561a3471f41320582ebcb2134c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e2:4b:af:f4:40:f0:ba:da:58:9e:2f:74:75: 8e:4d:0a:8e:3f:10:6b:d3:84:ae:46:76:bc:76:bc: 8f:ce:cc:6a:97:08:c7:fb:a9:ee:62:81:8b:02:d1: 5b:08:01:55:1a:37:43:77:f3:95:fd:a9:db:49:d2: 7b:db:81:ee:4d:69:eb:38:bc:ac:87:d1:33:bf:d6: 81:1c:36:8d:48:9b:05:45:b0:08:fd:f1:2e:88:78: 61:bc:bd:a1:a2:39:ea:4b:4b:91:c0:b8:4d:0d:12: 14:c9:b8:42:15:2a:a1:8d:7a:c0:b6:57:ef:30:b0: db:63:4d:f9:04:a3:b4:c9:a3:e2:60:91:c9:dd:9c: b0:1b:15:cc:47:4f:0d:83:e4:3f:c2:d4:aa:3c:17: 9c:c2:f1:5c:31:98:d6:77:65:d8:42:ed:69:3f:bd: af:64:66:6d:8b:38:cf:37:ec:9f:e6:b8:9a:9e:bf: 57:7d:59:63:82:82:04:be:49:c6:6b:14:3a:d6:76: b7:5a:90:fc:2f:d0:a1:25:fe:b8:b8:ea:58:37:fa: c3:8e:78:21:cf:1c:56:e4:dc:07:48:89:25:cc:fd: 6a:79:4e:d8:81:49:7e:9d:12:27:d2:a6:35:c8:57: 71:f6:8c:65:62:18:f1:77:53:23:7f:f3:ad:73:ea: 2a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6F:24:E7:7D:63:D5:61:A3:47:1F:41:32:05:82:EB:CB:21:34:C1 X509v3 Authority Key Identifier: keyid:12:E6:40:42:B6:E7:28:8A:48:5D:B2:70:C5:51:32:9B:80:2F:D8:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuZAQrbnKIpIXbJwxVEym4Av2MQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8e35f5-97d3-4351-9bb0-fcb36d81254a/1/EuZAQrbnKIpIXbJwxVEym4Av2MQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:4c:59:96:48:70:7a:6c:db:7e:56:63:f7:fe:07:37:9d:25: b1:3f:2e:9f:67:6a:09:e6:11:69:0c:6c:b6:49:78:0e:c4:78: 07:a7:5d:4f:33:61:81:94:a3:13:e5:f6:69:c5:c4:7e:27:79: f7:0d:aa:3e:f4:04:20:8f:6a:aa:44:95:d8:c1:e1:f9:22:df: 65:d4:38:03:45:09:f5:56:74:90:57:6a:1b:0d:e9:3c:a1:7c: ab:c6:5e:d3:93:d7:8e:78:24:4d:78:1f:18:ce:dd:74:4c:32: 0a:3d:f2:81:03:18:3f:56:e0:16:c0:c7:c9:48:6b:6f:92:c0: 2c:e8:a7:88:b6:b6:2c:0d:88:11:27:80:a6:02:a8:ae:16:31: 29:ec:04:1f:e9:89:e4:8d:80:82:86:6a:56:c9:aa:d2:fa:9f: 9a:c4:70:e1:e4:52:fd:7c:bd:a7:c2:66:05:88:57:19:e2:4c: a9:d5:62:b3:e0:53:09:94:d4:2c:53:0e:31:63:15:7d:0a:0c: 80:92:19:d2:e3:41:21:8a:ee:31:cc:e5:52:5b:6b:25:c6:ce: 00:20:83:7f:ca:6e:59:5a:fc:8d:2d:fb:17:68:f8:79:1b:98: 39:03:d8:ef:3e:e1:d7:8a:5c:79:f0:87:ab:84:54:c6:d6:2a: da:b9:c9:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtN314EKLHzggKKapoE+4O6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZTY0MDQyYjZlNzI4OGE0ODVkYjI3MGM1NTEzMjliODAy ZmQ4YzQwHhcNMjUxMjI0MDEwMDQyWhcNMjUxMjI1MDEwMDQyWjAzMTEwLwYDVQQD Eyg4YTZmMjRlNzdkNjNkNTYxYTM0NzFmNDEzMjA1ODJlYmNiMjEzNGMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOJLr/RA8LraWJ4vdHWOTQqOPxBr 04SuRna8dryPzsxqlwjH+6nuYoGLAtFbCAFVGjdDd/OV/anbSdJ724HuTWnrOLys h9Ezv9aBHDaNSJsFRbAI/fEuiHhhvL2hojnqS0uRwLhNDRIUybhCFSqhjXrAtlfv MLDbY035BKO0yaPiYJHJ3ZywGxXMR08Ng+Q/wtSqPBecwvFcMZjWd2XYQu1pP72v ZGZtizjPN+yf5rianr9XfVljgoIEvknGaxQ61na3WpD8L9ChJf64uOpYN/rDjngh zxxW5NwHSIklzP1qeU7YgUl+nRIn0qY1yFdx9oxlYhjxd1Mjf/Otc+oqJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIpvJOd9Y9Vho0cfQTIFguvLITTBMB8GA1UdIwQY MBaAFBLmQEK25yiKSF2ycMVRMpuAL9jEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAt ZmNiMzZkODEyNTRhLzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZTM1ZjUtOTdkMy00MzUxLTliYjAtZmNiMzZkODEyNTRh LzEvRXVaQVFyYm5LSXBJWGJKd3hWRXltNEF2Mk1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkxZlkhw emzbflZj9/4HN50lsT8un2dqCeYRaQxstkl4DsR4B6ddTzNhgZSjE+X2acXEfid5 9w2qPvQEII9qqkSV2MHh+SLfZdQ4A0UJ9VZ0kFdqGw3pPKF8q8Ze05PXjngkTXgf GM7ddEwyCj3ygQMYP1bgFsDHyUhrb5LALOiniLa2LA2IESeApgKorhYxKewEH+mJ 5I2AgoZqVsmq0vqfmsRw4eRS/Xy9p8JmBYhXGeJMqdVis+BTCZTULFMOMWMVfQoM gJIZ0uNBIYruMczlUltrJcbOACCDf8puWVr8jS37F2j4eRuYOQPY7z7h14pcefCH q4RUxtYq2rnJnw== -----END CERTIFICATE-----Generated at Wed Dec 24 03:34:21 2025 by rpki-client