This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft File: EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json) Hash identifier: x2COID91GnB4knVz9zyLzoCWfu+Dp+g0IidLZysXfYI= Subject key identifier: 39:7D:03:2D:3D:65:25:AA:18:99:C0:59:DF:80:82:65:79:F4:6D:98 Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 Certificate issuer: /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Certificate serial: 019B5A1A4C494573C1D7AF6C1C8F5503A442 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft Manifest number: 1452 Signing time: Fri 26 Dec 2025 10:00:31 +0000 Manifest this update: Fri 26 Dec 2025 10:00:31 +0000 Manifest next update: Sat 27 Dec 2025 10:00:31 +0000 Files and hashes: 1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: FTj9gt09chgQ3+K91ofEDHm8szdPOYm1+T2tRSofEU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:4c:49:45:73:c1:d7:af:6c:1c:8f:55:03:a4:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Validity Not Before: Dec 26 10:00:31 2025 GMT Not After : Dec 27 10:00:31 2025 GMT Subject: CN=397d032d3d6525aa1899c059df80826579f46d98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:e6:ec:62:b9:e3:be:20:6d:8f:31:dd:71: ec:83:2d:0c:43:82:7f:df:1e:3b:73:2d:a0:a5:bc: 98:fd:ef:6d:dd:42:9a:dd:4c:6f:af:30:73:df:1f: e9:8c:bc:b0:4c:be:9c:a4:29:45:ef:be:f8:b8:1d: 42:76:1f:f5:6c:81:3d:15:f7:eb:1e:0e:37:be:a0: 9f:65:7c:40:c7:76:cd:c8:ac:59:fe:5c:52:9c:b4: fc:b9:cd:0b:71:84:c3:e9:84:d6:17:31:47:fc:59: 91:e7:49:dc:50:ee:12:d7:55:58:6d:11:e2:57:ad: ca:01:58:e5:e5:60:ee:10:43:67:f5:43:c8:7d:ff: 29:b1:8d:ff:85:fa:51:4a:5f:9e:e7:a9:69:5c:34: 81:5d:9b:62:cf:fd:71:7b:4f:1f:da:a4:58:9a:6b: c1:44:42:09:45:82:bf:66:00:02:ae:b4:01:60:2e: 2f:57:c7:47:77:e0:a0:55:3d:f9:dc:df:32:86:f3: 4d:1b:eb:5b:93:f0:db:f3:40:f1:6e:5b:f2:4e:9e: ca:2c:05:de:80:b0:50:40:9d:ee:eb:01:78:39:6c: 05:ed:b8:d1:98:1c:fd:ca:be:ad:cf:ec:f4:51:e4: 05:bf:58:6f:d4:c1:cd:97:24:6e:16:9c:ed:0a:64: cd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7D:03:2D:3D:65:25:AA:18:99:C0:59:DF:80:82:65:79:F4:6D:98 X509v3 Authority Key Identifier: keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b4:44:b6:61:e2:5e:43:db:62:73:fa:5f:ba:bf:34:38:4b: 5e:e1:f1:ed:40:81:fd:da:00:13:6d:73:b5:8c:58:00:cd:3a: 73:bc:3c:9c:98:92:fa:bb:ab:3e:16:67:a3:6f:d0:f7:68:e2: 75:ba:1f:57:1c:b9:a2:2f:0a:f0:90:0f:9b:46:47:39:f4:70: e8:ec:02:b8:75:28:73:d4:dc:33:5a:52:df:11:a1:5b:b0:bd: 9a:a4:bd:51:9a:79:8c:40:90:fb:9e:47:a2:c5:2a:60:c9:91: ea:e5:87:62:96:87:84:00:7d:56:00:18:26:cc:ae:2e:e5:ef: 74:3a:14:71:c8:f3:46:7b:fd:83:08:d2:7f:93:2a:e3:e9:67: a5:eb:61:bc:75:96:eb:1a:6d:35:51:b3:53:18:36:82:df:87: fc:5f:4f:3b:4e:b6:33:7e:2e:d2:48:17:a2:e6:4c:7c:93:88: 3d:70:9f:7a:9d:08:8e:e2:47:31:1c:33:f4:aa:bb:9c:23:fe: a0:d2:30:75:11:3c:ba:eb:18:0e:1a:21:a3:9d:c4:6f:64:e5: 28:25:e6:1a:2e:99:69:e3:61:06:f0:3f:35:c3:10:01:bf:5b: e1:2c:1a:35:a8:a4:55:44:c6:b2:2b:11:72:59:71:fa:2f:01: 5d:a1:83:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGkxJRXPB169sHI9VA6RCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWI4MzUwNDY4N2Y5ZThiYTQ4MGNkNDZlYTA4Yzc1ZGQ5 NGQ3OTUwHhcNMjUxMjI2MTAwMDMxWhcNMjUxMjI3MTAwMDMxWjAzMTEwLwYDVQQD EygzOTdkMDMyZDNkNjUyNWFhMTg5OWMwNTlkZjgwODI2NTc5ZjQ2ZDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQDm7GK5474gbY8x3XHsgy0MQ4J/ 3x47cy2gpbyY/e9t3UKa3UxvrzBz3x/pjLywTL6cpClF7774uB1Cdh/1bIE9Fffr Hg43vqCfZXxAx3bNyKxZ/lxSnLT8uc0LcYTD6YTWFzFH/FmR50ncUO4S11VYbRHi V63KAVjl5WDuEENn9UPIff8psY3/hfpRSl+e56lpXDSBXZtiz/1xe08f2qRYmmvB REIJRYK/ZgACrrQBYC4vV8dHd+CgVT353N8yhvNNG+tbk/Db80DxblvyTp7KLAXe gLBQQJ3u6wF4OWwF7bjRmBz9yr6tz+z0UeQFv1hv1MHNlyRuFpztCmTNtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl9Ay09ZSWqGJnAWd+AgmV59G2YMB8GA1UdIwQY MBaAFBDrg1BGh/noukgM1G6gjHXdlNeVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDIt ZDk0NTNjODQ1MjcyLzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDItZDk0NTNjODQ1Mjcy LzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobREtmHi XkPbYnP6X7q/NDhLXuHx7UCB/doAE21ztYxYAM06c7w8nJiS+rurPhZno2/Q92ji dbofVxy5oi8K8JAPm0ZHOfRw6OwCuHUoc9TcM1pS3xGhW7C9mqS9UZp5jECQ+55H osUqYMmR6uWHYpaHhAB9VgAYJsyuLuXvdDoUccjzRnv9gwjSf5Mq4+lnpethvHWW 6xptNVGzUxg2gt+H/F9PO062M34u0kgXouZMfJOIPXCfep0IjuJHMRwz9Kq7nCP+ oNIwdRE8uusYDhoho53Eb2TlKCXmGi6ZaeNhBvA/NcMQAb9b4SwaNaikVUTGsisR cllx+i8BXaGDHA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client