This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft File: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft (raw, json) Hash identifier: Wk6H+y9yJmMTf1Vu2tXZorFRiCiifmtBA3Uo1kWXqdA= Subject key identifier: FA:21:EB:88:00:7A:DD:47:F1:00:1B:61:69:E1:85:3E:32:03:B3:09 Authority key identifier: 13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 Certificate issuer: /CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Certificate serial: 019B2EC21E6045553D63C4ED3D0893267314 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 00:00:32 +0000 Manifest this update: Thu 18 Dec 2025 00:00:32 +0000 Manifest next update: Fri 19 Dec 2025 00:00:32 +0000 Files and hashes: 1: 4QTZEEeUUfJUNwHXx4zOsvEU6yM.roa (hash: evvo6uHGq7kJP+ZPZuimN/U9/7Mem374PjQw1Zrl8z0=) 2: EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl (hash: YGQPXit2L9agO2zfKrAhWtBQIN5BfhbLSXqttdCdaFg=) 3: dSwIHtxC0u8qG1ueqYtW3i5amv8.roa (hash: QLyGTOk3dWjVPkNifNVqdGuq0/tGZ+FpGJ8RyLY/su8=) 4: etXSflgmHv3Z7BTXQ40YtMmsSKQ.roa (hash: GKbNpLwYF4j7naon/02XUN5BlSA6xDoZ+15FoWpR1As=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 00:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:c2:1e:60:45:55:3d:63:c4:ed:3d:08:93:26:73:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1323be6d548145867863b7b2fa464bdf8518a0c9 Validity Not Before: Dec 18 00:00:32 2025 GMT Not After : Dec 19 00:00:32 2025 GMT Subject: CN=fa21eb88007add47f1001b6169e1853e3203b309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:ad:44:d7:90:69:7b:a5:18:f4:ec:dd:87: c0:5d:94:16:39:c3:32:1c:61:74:cd:82:4b:e2:ab: eb:2d:f4:b3:79:07:eb:33:cd:82:cb:5e:f9:96:45: a8:c4:09:90:33:f7:62:c2:76:a1:04:64:d8:9e:6e: c8:74:25:7f:1f:99:f3:e3:3b:7c:15:22:85:25:e3: 29:42:c1:14:d7:78:3c:8d:ce:af:92:bf:b2:ec:5f: 94:a4:2a:e7:9a:a9:fe:ef:3e:68:b3:93:be:4e:2f: 8f:50:7a:df:2e:25:a9:bb:b1:a4:77:21:9b:ec:0a: 6b:f3:e6:d6:ac:1a:1b:a5:20:2e:e9:5b:3b:77:95: 49:ae:51:3e:43:d1:b2:94:83:3d:3b:b0:64:2d:25: 2e:68:bb:47:b3:59:56:f0:5c:a0:dc:67:c7:f0:97: 77:6a:b3:06:e0:3d:58:71:b8:b1:2c:09:e3:16:16: be:fa:1a:45:49:a3:fb:df:9a:3e:c7:57:9a:dd:75: a2:e4:1e:dd:fd:c2:5c:3b:50:e0:62:23:8f:a9:09: 53:a2:94:9d:dd:91:9d:35:39:9b:6e:75:5d:d6:c0: ca:ee:29:2d:2f:75:5b:2c:97:2c:14:f8:03:2b:e9: df:7c:78:86:d0:4c:17:81:96:d8:e3:31:93:9c:3f: 4c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:21:EB:88:00:7A:DD:47:F1:00:1B:61:69:E1:85:3E:32:03:B3:09 X509v3 Authority Key Identifier: keyid:13:23:BE:6D:54:81:45:86:78:63:B7:B2:FA:46:4B:DF:85:18:A0:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/2a1fef-221d-4055-8c58-5de32b66db0a/1/EyO-bVSBRYZ4Y7ey-kZL34UYoMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b9:03:5c:9f:af:61:4a:d0:dc:08:87:6c:9a:4f:77:85:4d: 63:f4:b2:46:6d:a6:6e:13:b8:d2:16:69:43:f6:32:df:d1:51: 2c:a1:2f:64:e7:26:d6:52:43:f5:9b:9c:94:8d:9a:fe:ef:6c: b7:4a:c4:81:1b:99:c7:23:74:be:e5:90:a1:6d:c4:47:b2:0f: 8e:6f:9d:af:9e:d8:12:60:ae:ac:e9:1e:70:84:09:97:1a:48: fb:04:c9:19:37:d2:3f:9b:96:72:82:d0:5c:a7:5e:df:9b:4f: 51:86:24:57:d6:ab:ff:db:bf:38:6b:8a:03:39:ae:53:a0:8e: fb:05:a8:3d:34:7e:75:55:97:d7:03:c5:50:1e:11:14:da:f3: 6e:45:c8:28:82:74:a6:ec:b7:1c:84:c9:27:2c:38:df:d4:91: 99:08:78:68:73:bf:09:39:c7:fe:ff:52:ae:b6:d2:41:ab:52: 0f:52:4d:e5:00:8a:04:47:9d:a7:9b:9c:1c:f8:d0:bc:2b:87: 12:bd:93:6f:f0:c7:5e:1d:67:ca:f9:f9:d6:dc:d7:81:eb:16: b2:5d:7e:6d:0d:ee:2c:51:7d:98:e5:86:0a:c6:f7:a0:65:96: aa:de:e4:8b:2c:1d:01:67:f2:88:85:22:24:f5:57:9d:8f:1f: f4:0a:2f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuwh5gRVU9Y8TtPQiTJnMUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjNiZTZkNTQ4MTQ1ODY3ODYzYjdiMmZhNDY0YmRmODUx OGEwYzkwHhcNMjUxMjE4MDAwMDMyWhcNMjUxMjE5MDAwMDMyWjAzMTEwLwYDVQQD EyhmYTIxZWI4ODAwN2FkZDQ3ZjEwMDFiNjE2OWUxODUzZTMyMDNiMzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5ytRNeQaXulGPTs3YfAXZQWOcMy HGF0zYJL4qvrLfSzeQfrM82Cy175lkWoxAmQM/diwnahBGTYnm7IdCV/H5nz4zt8 FSKFJeMpQsEU13g8jc6vkr+y7F+UpCrnmqn+7z5os5O+Ti+PUHrfLiWpu7GkdyGb 7Apr8+bWrBobpSAu6Vs7d5VJrlE+Q9GylIM9O7BkLSUuaLtHs1lW8Fyg3GfH8Jd3 arMG4D1YcbixLAnjFha++hpFSaP735o+x1ea3XWi5B7d/cJcO1DgYiOPqQlTopSd 3ZGdNTmbbnVd1sDK7iktL3VbLJcsFPgDK+nffHiG0EwXgZbY4zGTnD9MswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPoh64gAet1H8QAbYWnhhT4yA7MJMB8GA1UdIwQY MBaAFBMjvm1UgUWGeGO3svpGS9+FGKDJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgt NWRlMzJiNjZkYjBhLzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8yYTFmZWYtMjIxZC00MDU1LThjNTgtNWRlMzJiNjZkYjBh LzEvRXlPLWJWU0JSWVo0WTdleS1rWkwzNFVZb01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbkDXJ+v YUrQ3AiHbJpPd4VNY/SyRm2mbhO40hZpQ/Yy39FRLKEvZOcm1lJD9ZuclI2a/u9s t0rEgRuZxyN0vuWQoW3ER7IPjm+dr57YEmCurOkecIQJlxpI+wTJGTfSP5uWcoLQ XKde35tPUYYkV9ar/9u/OGuKAzmuU6CO+wWoPTR+dVWX1wPFUB4RFNrzbkXIKIJ0 puy3HITJJyw439SRmQh4aHO/CTnH/v9SrrbSQatSD1JN5QCKBEedp5ucHPjQvCuH Er2Tb/DHXh1nyvn51tzXgesWsl1+bQ3uLFF9mOWGCsb3oGWWqt7kiywdAWfyiIUi JPVXnY8f9Aov4w== -----END CERTIFICATE-----Generated at Thu Dec 18 08:03:34 2025 by rpki-client