This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft File: EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft (raw, json) Hash identifier: /mc4sugXrBaO6PyBpABZzAdNpT3U2obtrwqJQA8w+GQ= Subject key identifier: B4:E0:8D:A7:18:3D:AD:A3:DC:31:3D:D0:8E:3F:40:36:B3:F4:27:B0 Authority key identifier: 11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA Certificate issuer: /CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Certificate serial: 019B405ADF1AFA92BCA828215F9FD4A15373 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft Manifest number: 0BED Signing time: Sun 21 Dec 2025 10:00:55 +0000 Manifest this update: Sun 21 Dec 2025 10:00:55 +0000 Manifest next update: Mon 22 Dec 2025 10:00:55 +0000 Files and hashes: 1: EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl (hash: JknfPYtj5aF9dYakIbRE0YSd6bMKwF55j3OtzMjI2uM=) 2: zKEsruxE4cDY7eG8e5BdPLgZZLk.roa (hash: Nz28QZnXJ3PO2kQqaWAGQuglhdiOX9sRFv6wk4pN+lA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5a:df:1a:fa:92:bc:a8:28:21:5f:9f:d4:a1:53:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1102fc0d9ff86fe65c14469d55046e2053bfe5ca Validity Not Before: Dec 21 10:00:55 2025 GMT Not After : Dec 22 10:00:55 2025 GMT Subject: CN=b4e08da7183dada3dc313dd08e3f4036b3f427b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8c:83:cd:66:d8:aa:66:01:c4:a0:9b:75:d5: 84:7a:f3:ca:b3:9e:2b:64:f4:6a:d5:7a:49:ad:2d: e9:4f:ca:a3:52:89:ec:83:3c:dd:86:17:bf:b5:2b: 01:e6:ff:1d:36:f1:e3:bc:73:f1:38:98:5d:09:9a: 53:4f:d6:55:64:4a:61:51:ba:e0:41:8a:e1:78:12: f7:87:30:50:48:89:f3:6c:db:9e:75:7a:cb:1e:90: 44:ff:5f:0b:12:c3:29:4d:e1:8b:cd:1f:8a:15:c3: 78:96:23:e9:27:d1:22:89:c1:3a:03:de:99:b4:1d: b3:d3:9c:24:e8:a2:b1:a9:d0:9a:a0:cf:52:73:b2: 68:65:f4:8a:df:1f:22:1e:fc:48:62:87:d4:ce:42: 90:cc:98:1b:ff:75:c3:95:1e:38:5b:a2:ac:1c:6d: d7:04:0e:46:11:c3:87:6c:13:31:78:89:cb:af:92: 51:3b:56:0e:98:23:12:ba:67:87:78:4f:dc:bb:59: c8:1b:67:97:13:07:b0:0d:8d:54:eb:7d:9d:cb:00: d8:1c:51:51:45:42:26:32:2a:b9:27:cb:72:bc:fa: 82:d5:98:e4:c0:5b:66:77:fd:57:25:69:93:b4:b0: 6b:2c:99:bc:34:7a:f9:bf:4d:a4:8f:fc:39:d2:b5: f8:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E0:8D:A7:18:3D:AD:A3:DC:31:3D:D0:8E:3F:40:36:B3:F4:27:B0 X509v3 Authority Key Identifier: keyid:11:02:FC:0D:9F:F8:6F:E6:5C:14:46:9D:55:04:6E:20:53:BF:E5:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EQL8DZ_4b-ZcFEadVQRuIFO_5co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/309d57-ec82-4b53-bee4-3403cdad2c67/1/EQL8DZ_4b-ZcFEadVQRuIFO_5co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:61:f7:97:19:52:49:33:98:8f:6f:4d:b4:f3:0f:83:4e:c2: 5c:00:5e:35:80:81:1e:a8:74:5b:c2:16:a5:fb:2d:b7:cb:cd: d0:c7:52:0a:01:8e:20:49:04:74:62:4e:f4:dd:1a:8f:6e:57: 87:80:b9:82:f6:f0:0a:b2:71:f2:26:3a:76:f1:4e:c9:5c:48: b9:23:7a:fe:ff:90:a2:9e:6d:5b:8b:ec:1f:c5:84:4f:f4:88: 35:e3:df:f4:cc:7f:2c:de:0c:78:0a:b5:96:98:90:56:88:67: 01:27:5e:e6:1e:07:57:53:5b:bd:92:1b:f7:5b:95:42:18:7a: e9:f3:39:34:24:04:f3:4d:23:d6:3d:3e:a9:3a:9c:99:d0:45: fe:29:35:c5:eb:4d:3a:ce:61:72:b5:61:93:17:73:f9:c5:45: 1e:8e:0c:ad:aa:7f:96:f2:2b:75:3d:ef:62:31:d5:8c:bc:cb: 8b:34:69:6c:55:fd:94:a9:47:3e:3d:fc:3a:58:18:0b:6c:28: 5f:46:83:62:a9:2e:7a:03:eb:05:d7:1c:1b:2f:ad:7e:a0:36: 1b:8f:1a:f6:08:b7:16:ec:4d:08:84:15:57:b0:ec:b6:00:d1: 06:1c:00:3d:d8:cc:a1:ca:7e:63:48:1b:dc:80:44:34:1e:e3: aa:4f:19:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAWt8a+pK8qCghX5/UoVNzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMDJmYzBkOWZmODZmZTY1YzE0NDY5ZDU1MDQ2ZTIwNTNi ZmU1Y2EwHhcNMjUxMjIxMTAwMDU1WhcNMjUxMjIyMTAwMDU1WjAzMTEwLwYDVQQD EyhiNGUwOGRhNzE4M2RhZGEzZGMzMTNkZDA4ZTNmNDAzNmIzZjQyN2IwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4yDzWbYqmYBxKCbddWEevPKs54r ZPRq1XpJrS3pT8qjUonsgzzdhhe/tSsB5v8dNvHjvHPxOJhdCZpTT9ZVZEphUbrg QYrheBL3hzBQSInzbNuedXrLHpBE/18LEsMpTeGLzR+KFcN4liPpJ9EiicE6A96Z tB2z05wk6KKxqdCaoM9Sc7JoZfSK3x8iHvxIYofUzkKQzJgb/3XDlR44W6KsHG3X BA5GEcOHbBMxeInLr5JRO1YOmCMSumeHeE/cu1nIG2eXEwewDY1U632dywDYHFFR RUImMiq5J8tyvPqC1ZjkwFtmd/1XJWmTtLBrLJm8NHr5v02kj/w50rX4qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTgjacYPa2j3DE90I4/QDaz9CewMB8GA1UdIwQY MBaAFBEC/A2f+G/mXBRGnVUEbiBTv+XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQt MzQwM2NkYWQyYzY3LzEvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS8zMDlkNTctZWM4Mi00YjUzLWJlZTQtMzQwM2NkYWQyYzY3 LzEvRVFMOERaXzRiLVpjRkVhZFZRUnVJRk9fNWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmH3lxlS STOYj29NtPMPg07CXABeNYCBHqh0W8IWpfstt8vN0MdSCgGOIEkEdGJO9N0aj25X h4C5gvbwCrJx8iY6dvFOyVxIuSN6/v+Qop5tW4vsH8WET/SINePf9Mx/LN4MeAq1 lpiQVohnASde5h4HV1NbvZIb91uVQhh66fM5NCQE800j1j0+qTqcmdBF/ik1xetN Os5hcrVhkxdz+cVFHo4Mrap/lvIrdT3vYjHVjLzLizRpbFX9lKlHPj38OlgYC2wo X0aDYqkuegPrBdccGy+tfqA2G48a9gi3FuxNCIQVV7DstgDRBhwAPdjMocp+Y0gb 3IBENB7jqk8ZCQ== -----END CERTIFICATE-----Generated at Sun Dec 21 15:31:16 2025 by rpki-client