This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft File: 0euG-JN4a8R309ALoP8eI57mIm0.mft (raw, json) Hash identifier: kl23lDjXtTyCZ3lkXlIKmqboyH1nlwuQLrg9yx0wuxU= Subject key identifier: 01:84:AF:52:64:29:BC:F9:29:56:94:B4:1C:CD:A5:7A:D7:C8:A7:67 Authority key identifier: D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D Certificate issuer: /CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d Certificate serial: 019B5A1A6B75AC6D6CD45168EF67F5E60E92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft Manifest number: 033E Signing time: Fri 26 Dec 2025 10:00:39 +0000 Manifest this update: Fri 26 Dec 2025 10:00:39 +0000 Manifest next update: Sat 27 Dec 2025 10:00:39 +0000 Files and hashes: 1: 0euG-JN4a8R309ALoP8eI57mIm0.crl (hash: +DZPrCkUx00dldeG4SrMztsBdSwwzobC+e1GUTwAJIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:6b:75:ac:6d:6c:d4:51:68:ef:67:f5:e6:0e:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1eb86f893786bc477d3d00ba0ff1e239ee6226d Validity Not Before: Dec 26 10:00:39 2025 GMT Not After : Dec 27 10:00:39 2025 GMT Subject: CN=0184af526429bcf9295694b41ccda57ad7c8a767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ce:76:95:90:81:e0:0b:1e:63:8b:bd:a7:3e: e1:61:75:56:d3:f4:1a:c7:11:db:d4:19:77:c1:49: ae:c0:a5:a3:53:04:bc:e8:e3:bd:6b:74:d5:78:e0: 52:be:ab:86:7d:ef:b1:69:e6:41:c0:93:c1:f3:8c: a5:4a:11:7b:fe:ef:f8:13:bc:89:fb:be:cf:fe:6f: 8d:d1:3d:87:e5:e6:92:0d:74:69:1d:a8:51:80:06: fb:71:58:35:de:64:36:24:7d:80:76:ec:00:28:5b: 33:e3:f1:17:14:03:10:f6:b4:9e:4f:fd:7b:39:f5: 75:cc:4a:95:7c:9e:de:b4:54:f1:dd:da:42:0c:9a: b6:25:35:01:11:9d:23:35:ac:fe:d5:aa:23:64:63: c3:d6:d1:c0:fa:78:54:af:6b:16:d0:77:f7:c7:b0: 04:93:5e:d0:87:13:1f:ce:fa:84:66:79:f6:3e:6c: a1:c9:07:56:f7:a0:5a:55:86:cc:ba:a5:a0:5c:b6: c3:2f:76:27:3e:68:e1:ad:2b:5e:a3:6a:1f:e4:fd: 06:5e:81:4f:90:a5:dd:3b:f2:26:8d:5a:a6:2f:27: 27:c1:5e:5b:a6:20:8f:e6:1a:9b:ad:bf:50:42:9e: fb:0d:af:35:40:7f:14:ae:23:65:f2:1b:d6:1e:6b: fc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:84:AF:52:64:29:BC:F9:29:56:94:B4:1C:CD:A5:7A:D7:C8:A7:67 X509v3 Authority Key Identifier: keyid:D1:EB:86:F8:93:78:6B:C4:77:D3:D0:0B:A0:FF:1E:23:9E:E6:22:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0euG-JN4a8R309ALoP8eI57mIm0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/711dd0-453a-45c7-8304-dc14e9c1b745/1/0euG-JN4a8R309ALoP8eI57mIm0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:66:c0:23:42:98:d5:9f:49:bb:10:41:be:d7:05:25:4b:2b: fb:12:66:b2:03:d1:21:d3:6a:bb:00:d1:1e:b1:80:2d:9b:e2: a6:df:0a:f8:4e:9b:34:15:d3:81:15:a3:fe:93:e7:57:a4:51: 46:e8:61:da:f1:81:7f:bd:d8:99:7b:d4:d6:6a:6b:c4:a0:38: b7:67:c4:a8:ce:cf:2e:9d:a3:7d:5e:d3:c0:df:ed:7f:2d:97: 3a:df:98:d3:c7:ab:6b:23:14:6c:ea:be:55:32:c3:4b:ae:10: fb:e4:2c:42:bc:87:1e:59:23:75:f8:b1:ac:3a:ba:13:83:5c: b6:ee:7e:59:f7:00:ff:2b:6b:35:e5:d4:80:08:97:43:cf:81: 3c:69:bd:72:19:9b:fc:76:4e:02:e3:5a:f6:f8:9a:09:c3:af: c5:1f:ef:c1:e3:3a:25:40:10:a5:85:77:08:b8:59:0e:26:77: b4:17:16:ec:2c:e9:57:f5:7e:ac:ad:e5:55:bd:3a:47:f1:85: 83:f6:d2:83:2a:09:a9:80:0d:df:9f:de:a4:37:44:36:f4:5b: 23:8c:71:4a:a7:06:9f:83:87:1d:6f:4f:ff:38:82:bc:4a:8a: fe:a7:76:d7:64:51:6d:dc:b6:b5:54:cd:2b:a9:11:e5:29:60: f3:b6:2b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGmt1rG1s1FFo72f15g6SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZWI4NmY4OTM3ODZiYzQ3N2QzZDAwYmEwZmYxZTIzOWVl NjIyNmQwHhcNMjUxMjI2MTAwMDM5WhcNMjUxMjI3MTAwMDM5WjAzMTEwLwYDVQQD EygwMTg0YWY1MjY0MjliY2Y5Mjk1Njk0YjQxY2NkYTU3YWQ3YzhhNzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6s52lZCB4AseY4u9pz7hYXVW0/Qa xxHb1Bl3wUmuwKWjUwS86OO9a3TVeOBSvquGfe+xaeZBwJPB84ylShF7/u/4E7yJ +77P/m+N0T2H5eaSDXRpHahRgAb7cVg13mQ2JH2AduwAKFsz4/EXFAMQ9rSeT/17 OfV1zEqVfJ7etFTx3dpCDJq2JTUBEZ0jNaz+1aojZGPD1tHA+nhUr2sW0Hf3x7AE k17QhxMfzvqEZnn2PmyhyQdW96BaVYbMuqWgXLbDL3YnPmjhrSteo2of5P0GXoFP kKXdO/ImjVqmLycnwV5bpiCP5hqbrb9QQp77Da81QH8UriNl8hvWHmv8LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAGEr1JkKbz5KVaUtBzNpXrXyKdnMB8GA1UdIwQY MBaAFNHrhviTeGvEd9PQC6D/HiOe5iJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQt ZGMxNGU5YzFiNzQ1LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83MTFkZDAtNDUzYS00NWM3LTgzMDQtZGMxNGU5YzFiNzQ1 LzEvMGV1Ry1KTjRhOFIzMDlBTG9QOGVJNTdtSW0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWbAI0KY 1Z9JuxBBvtcFJUsr+xJmsgPRIdNquwDRHrGALZvipt8K+E6bNBXTgRWj/pPnV6RR Ruhh2vGBf73YmXvU1mprxKA4t2fEqM7PLp2jfV7TwN/tfy2XOt+Y08erayMUbOq+ VTLDS64Q++QsQryHHlkjdfixrDq6E4Nctu5+WfcA/ytrNeXUgAiXQ8+BPGm9chmb /HZOAuNa9viaCcOvxR/vweM6JUAQpYV3CLhZDiZ3tBcW7CzpV/V+rK3lVb06R/GF g/bSgyoJqYAN35/epDdENvRbI4xxSqcGn4OHHW9P/ziCvEqK/qd212RRbdy2tVTN K6kR5Slg87YroQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:50 2025 by rpki-client