This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft File: Eioro8wYyZhQEwns3gQnBq9bhFo.mft (raw, json) Hash identifier: lyGDTeSsjo+kdYAm3+bScYofWYoUqgk1FIZCRqnWgGI= Subject key identifier: 26:4A:98:94:0F:91:9D:62:E0:AC:69:38:C4:CE:92:1B:91:A3:97:5B Authority key identifier: 12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A Certificate issuer: /CN=122a2ba3cc18c998501309ecde042706af5b845a Certificate serial: 019B6D6A9CA356101F4BE481E4DA9F4618C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft Manifest number: 17A2 Signing time: Tue 30 Dec 2025 04:01:01 +0000 Manifest this update: Tue 30 Dec 2025 04:01:01 +0000 Manifest next update: Wed 31 Dec 2025 04:01:01 +0000 Files and hashes: 1: Eioro8wYyZhQEwns3gQnBq9bhFo.crl (hash: hmFWNDn5aUfNZB6t61KxE3mR6Q+LCZ97BpjCPZXFJ8g=) 2: dFWtNsDJ-mUPtxThTA2MYEV4hMw.roa (hash: ixgpNKTZ9Dv34+AbK1Jrz2N3i33IFdJsOuKPNGIdi1E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 04:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:9c:a3:56:10:1f:4b:e4:81:e4:da:9f:46:18:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a2ba3cc18c998501309ecde042706af5b845a Validity Not Before: Dec 30 04:01:01 2025 GMT Not After : Dec 31 04:01:01 2025 GMT Subject: CN=264a98940f919d62e0ac6938c4ce921b91a3975b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d0:b6:a9:ad:23:27:e6:a3:49:37:fd:3d:d7: 81:f6:46:3b:19:e1:66:c3:f1:22:88:17:d7:3c:f0: b7:f3:56:2b:2e:b6:6c:9e:79:6c:af:d8:55:7c:8c: c4:c9:3e:f8:df:78:83:14:f4:e5:2f:cd:ba:e1:50: 60:4c:4b:79:67:64:13:66:d9:92:72:19:e1:19:25: 4e:4d:73:84:92:17:a5:46:d2:d9:51:5e:7d:70:94: f0:16:81:20:79:2c:8f:51:fa:a3:78:78:0f:5e:49: 12:2e:51:ce:44:66:f2:5a:46:f7:3f:a5:ca:a3:c8: a8:05:7a:28:cf:a0:cd:e4:dc:49:ee:d3:76:a7:15: 60:ff:a9:2e:52:9f:12:56:5f:14:9a:19:a8:05:9f: c9:31:60:84:d4:da:51:93:d2:a6:82:8c:69:37:16: 78:1c:4f:5a:4e:a9:14:9f:e8:21:a1:98:78:b7:fd: e0:f1:c6:98:05:8f:dc:27:35:0d:06:e6:d0:83:33: 39:1b:33:4e:2b:c3:9d:80:2a:c8:1d:2f:37:68:61: 02:2d:3a:4d:d2:63:fe:58:c9:9b:5b:4d:9d:22:08: e4:01:fe:71:54:ee:b4:04:91:4d:8b:de:61:fb:e3: 68:26:63:b8:74:45:f6:ed:24:45:ed:07:c8:ff:bb: 3a:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:4A:98:94:0F:91:9D:62:E0:AC:69:38:C4:CE:92:1B:91:A3:97:5B X509v3 Authority Key Identifier: keyid:12:2A:2B:A3:CC:18:C9:98:50:13:09:EC:DE:04:27:06:AF:5B:84:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eioro8wYyZhQEwns3gQnBq9bhFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f96430-62d4-4310-8493-ae1aa1654cde/1/Eioro8wYyZhQEwns3gQnBq9bhFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:da:61:01:39:8c:39:90:11:e5:bd:8b:a2:5f:85:bc:ba:2c: 73:c4:4f:d7:f4:b0:ab:d8:cf:8f:a7:85:24:49:a4:de:2d:a5: c0:01:5e:b0:3e:05:60:60:67:b0:c9:63:ea:a4:30:92:e0:02: 39:d4:11:8c:52:64:14:86:24:9c:32:02:4d:e1:a6:23:c6:8c: 7f:73:68:39:ab:33:9f:e3:86:0e:9e:f3:6f:8a:7a:19:41:c1: 2f:b2:60:5f:a6:ab:be:c2:fb:bb:c9:cd:c7:d2:0e:46:5c:de: cc:e3:ed:da:6f:c8:e0:52:54:df:2a:1d:bb:e4:4a:c1:54:91: 54:84:dc:5e:9a:e2:ce:64:7e:ae:6e:f5:c8:1d:2c:79:27:60: 20:0f:78:aa:89:5b:97:60:b5:da:af:84:3b:c5:1c:89:7a:98: e5:8c:f0:ba:c2:ab:c7:1f:a9:63:c2:47:89:b7:43:54:25:aa: 18:60:7f:b4:33:c5:c2:5d:47:17:1b:33:c3:ff:72:ae:d9:6f: 03:c9:66:99:5f:c4:49:fd:4b:87:af:f9:cd:0d:89:e6:9a:d8: 0e:08:6e:cd:17:cd:41:be:ec:63:7c:3f:be:72:d0:fd:1e:35: b8:82:07:49:a9:6c:ba:50:bf:e8:86:57:0b:81:9e:74:32:d7: 18:9a:c5:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttapyjVhAfS+SB5NqfRhjIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmEyYmEzY2MxOGM5OTg1MDEzMDllY2RlMDQyNzA2YWY1 Yjg0NWEwHhcNMjUxMjMwMDQwMTAxWhcNMjUxMjMxMDQwMTAxWjAzMTEwLwYDVQQD EygyNjRhOTg5NDBmOTE5ZDYyZTBhYzY5MzhjNGNlOTIxYjkxYTM5NzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dC2qa0jJ+ajSTf9PdeB9kY7GeFm w/EiiBfXPPC381YrLrZsnnlsr9hVfIzEyT7433iDFPTlL8264VBgTEt5Z2QTZtmS chnhGSVOTXOEkhelRtLZUV59cJTwFoEgeSyPUfqjeHgPXkkSLlHORGbyWkb3P6XK o8ioBXooz6DN5NxJ7tN2pxVg/6kuUp8SVl8UmhmoBZ/JMWCE1NpRk9KmgoxpNxZ4 HE9aTqkUn+ghoZh4t/3g8caYBY/cJzUNBubQgzM5GzNOK8OdgCrIHS83aGECLTpN 0mP+WMmbW02dIgjkAf5xVO60BJFNi95h++NoJmO4dEX27SRF7QfI/7s6twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZKmJQPkZ1i4KxpOMTOkhuRo5dbMB8GA1UdIwQY MBaAFBIqK6PMGMmYUBMJ7N4EJwavW4RaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMt YWUxYWExNjU0Y2RlLzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mOTY0MzAtNjJkNC00MzEwLTg0OTMtYWUxYWExNjU0Y2Rl LzEvRWlvcm84d1l5WmhRRXduczNnUW5CcTliaEZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtphATmM OZAR5b2Lol+FvLosc8RP1/Swq9jPj6eFJEmk3i2lwAFesD4FYGBnsMlj6qQwkuAC OdQRjFJkFIYknDICTeGmI8aMf3NoOaszn+OGDp7zb4p6GUHBL7JgX6arvsL7u8nN x9IORlzezOPt2m/I4FJU3yodu+RKwVSRVITcXprizmR+rm71yB0seSdgIA94qolb l2C12q+EO8UciXqY5YzwusKrxx+pY8JHibdDVCWqGGB/tDPFwl1HFxszw/9yrtlv A8lmmV/ESf1Lh6/5zQ2J5prYDghuzRfNQb7sY3w/vnLQ/R41uIIHSalsulC/6IZX C4GedDLXGJrFYw== -----END CERTIFICATE-----Generated at Tue Dec 30 12:13:56 2025 by rpki-client