This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft File: EoEZrBeON5iQNuoposD0YwaWz-g.mft (raw, json) Hash identifier: QefzhfmF1UOczHLtGVff+gGoRLoAsUoR/ye8Dc9DBHM= Subject key identifier: 59:5C:AF:89:19:0C:55:5F:03:41:23:95:83:A1:E8:38:BE:C5:44:A8 Authority key identifier: 12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8 Certificate issuer: /CN=128119ac178e37989036ea29a2c0f4630696cfe8 Certificate serial: 019B5A1AF01B565E1E56F176092836CA0F0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft Manifest number: 0E Signing time: Fri 26 Dec 2025 10:01:13 +0000 Manifest this update: Fri 26 Dec 2025 10:01:13 +0000 Manifest next update: Sat 27 Dec 2025 10:01:13 +0000 Files and hashes: 1: 263aCZuGSnOQtZUuvPPijDVTZSc.roa (hash: DAj4P0HCku/MmHa3cvQupHFR7QX9AGvlQEPPvscGm7A=) 2: EoEZrBeON5iQNuoposD0YwaWz-g.crl (hash: 3JPxDQbjouvAKykQM8TSf+fjSos3IcT+ZOfshJRLgqM=) 3: dfjch8XLq-4wXUHU0X4FRj8rZtw.asa (hash: LprVvfFT3+5D2/SGgkoYdn2pNQPb3rgY3LcWQ8dnja0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:f0:1b:56:5e:1e:56:f1:76:09:28:36:ca:0f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128119ac178e37989036ea29a2c0f4630696cfe8 Validity Not Before: Dec 26 10:01:13 2025 GMT Not After : Dec 27 10:01:13 2025 GMT Subject: CN=595caf89190c555f0341239583a1e838bec544a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:53:fe:fb:cb:36:bd:93:58:85:15:9c:cd:9f: 92:c3:d0:7d:b6:a7:9d:98:4f:cd:14:27:bb:78:b8: 68:6f:2b:62:1e:7d:0e:51:c7:b8:5b:11:f6:af:4e: 95:1f:ee:6f:6d:70:9c:78:4b:49:56:01:79:a5:ec: a8:5c:1e:ad:10:a4:4f:fc:d1:15:7f:72:ca:97:f5: 32:a1:69:e9:36:83:b6:bc:d7:3e:41:2c:72:83:2b: 7c:a9:55:30:ff:13:6e:6f:e1:67:4e:8b:60:1f:36: 9e:57:a9:0f:55:b8:72:c1:3d:bf:b3:1f:bb:43:d3: db:96:55:f5:67:97:5e:e4:0b:f9:c1:18:18:16:fb: ab:0c:7a:50:25:8e:52:7f:11:50:b6:18:f0:4d:b4: 1a:14:27:d7:d4:a1:83:ea:02:46:53:fb:89:db:ef: cc:6d:27:0b:af:3f:f2:2f:36:4d:39:88:10:af:c6: a5:b1:92:24:18:68:ec:6f:5b:86:5e:bc:ed:f4:16: bf:4a:12:eb:a6:19:c5:66:70:10:31:9a:26:40:50: 63:f3:c7:d1:e7:66:43:48:fd:83:39:74:4c:24:21: 2c:e8:61:cf:34:4f:7a:fb:e4:95:5b:8e:0c:d5:0b: d4:b2:f3:41:80:e4:fe:53:a0:cf:dd:f8:50:b7:e8: b9:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5C:AF:89:19:0C:55:5F:03:41:23:95:83:A1:E8:38:BE:C5:44:A8 X509v3 Authority Key Identifier: keyid:12:81:19:AC:17:8E:37:98:90:36:EA:29:A2:C0:F4:63:06:96:CF:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EoEZrBeON5iQNuoposD0YwaWz-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/80c83b-4706-4d16-9f20-7ea0deb830ab/1/EoEZrBeON5iQNuoposD0YwaWz-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:e1:1c:05:14:c6:1d:06:56:b1:cd:81:6e:d8:bc:85:b3:03: af:e6:a4:58:d3:ba:34:08:44:ec:a0:00:87:40:b1:0a:0b:e9: e0:f3:4d:9c:78:e3:96:52:b2:41:c3:42:0f:ec:c4:40:6d:b3: de:a3:b6:f6:29:59:2e:1e:6b:71:ad:e6:5f:d0:b9:14:c6:a8: dd:fc:00:4f:ba:87:fd:0b:f4:e8:a0:ac:56:8c:66:69:df:bd: a8:7d:0d:bd:96:e8:8c:c2:2a:3d:18:ff:23:b4:32:23:0e:8b: 12:f1:0c:bc:cb:ed:60:be:bd:84:1f:e3:f2:8a:db:5b:7a:d4: dc:c7:25:21:6c:94:02:96:57:04:d9:1d:c2:d9:db:cc:ce:63: c9:08:29:3c:4b:bf:ae:8e:df:d4:8a:91:89:40:e5:35:69:97: 53:88:d2:f3:5e:4d:e5:64:3a:85:ed:fa:b4:55:37:6e:fe:8c: 7b:b5:a5:d4:d9:3a:89:69:d9:9d:a0:62:20:32:80:db:0d:5c: 21:03:87:76:7f:5c:bf:fd:38:95:2f:26:6a:2c:ef:eb:d5:27: 41:23:69:ca:ad:69:56:a9:fa:a4:40:95:1a:77:f8:45:fc:cb: 81:7f:ea:9d:d0:20:3e:f7:de:6d:72:84:51:ed:be:ee:3e:12: 56:84:b6:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGvAbVl4eVvF2CSg2yg8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyODExOWFjMTc4ZTM3OTg5MDM2ZWEyOWEyYzBmNDYzMDY5 NmNmZTgwHhcNMjUxMjI2MTAwMTEzWhcNMjUxMjI3MTAwMTEzWjAzMTEwLwYDVQQD Eyg1OTVjYWY4OTE5MGM1NTVmMDM0MTIzOTU4M2ExZTgzOGJlYzU0NGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41P++8s2vZNYhRWczZ+Sw9B9tqed mE/NFCe7eLhobytiHn0OUce4WxH2r06VH+5vbXCceEtJVgF5peyoXB6tEKRP/NEV f3LKl/UyoWnpNoO2vNc+QSxygyt8qVUw/xNub+FnTotgHzaeV6kPVbhywT2/sx+7 Q9PbllX1Z5de5Av5wRgYFvurDHpQJY5SfxFQthjwTbQaFCfX1KGD6gJGU/uJ2+/M bScLrz/yLzZNOYgQr8alsZIkGGjsb1uGXrzt9Ba/ShLrphnFZnAQMZomQFBj88fR 52ZDSP2DOXRMJCEs6GHPNE96++SVW44M1QvUsvNBgOT+U6DP3fhQt+i5iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFlcr4kZDFVfA0EjlYOh6Di+xUSoMB8GA1UdIwQY MBaAFBKBGawXjjeYkDbqKaLA9GMGls/oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAt N2VhMGRlYjgzMGFiLzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC84MGM4M2ItNDcwNi00ZDE2LTlmMjAtN2VhMGRlYjgzMGFi LzEvRW9FWnJCZU9ONWlRTnVvcG9zRDBZd2FXei1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4uEcBRTG HQZWsc2Bbti8hbMDr+akWNO6NAhE7KAAh0CxCgvp4PNNnHjjllKyQcNCD+zEQG2z 3qO29ilZLh5rca3mX9C5FMao3fwAT7qH/Qv06KCsVoxmad+9qH0NvZbojMIqPRj/ I7QyIw6LEvEMvMvtYL69hB/j8orbW3rU3MclIWyUApZXBNkdwtnbzM5jyQgpPEu/ ro7f1IqRiUDlNWmXU4jS815N5WQ6he36tFU3bv6Me7Wl1Nk6iWnZnaBiIDKA2w1c IQOHdn9cv/04lS8maizv69UnQSNpyq1pVqn6pECVGnf4RfzLgX/qndAgPvfebXKE Ue2+7j4SVoS2fQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:33 2025 by rpki-client