This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft File: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft (raw, json) Hash identifier: fLBXO92JFN0U7ewigAq0IznSKsVP34q05D1QgIZVZhI= Subject key identifier: 17:C6:F0:36:57:12:37:CB:69:5C:BD:A8:FD:78:5D:36:B9:22:7F:1F Authority key identifier: 10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 Certificate issuer: /CN=10e5efe934cf377ddf373b366721f1339243f907 Certificate serial: 019B34FB84ED5EA8126944B8C22F06EDB036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft Manifest number: 0232 Signing time: Fri 19 Dec 2025 05:00:57 +0000 Manifest this update: Fri 19 Dec 2025 05:00:57 +0000 Manifest next update: Sat 20 Dec 2025 05:00:57 +0000 Files and hashes: 1: EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl (hash: 0c1BT+gPXW/KkLuLkqFseNWs9UeHbDjRcjnW+MiAmM4=) 2: lexK-PZGa0dRIxHrAucmPZfoZH8.roa (hash: BTYzPVVTX+QrUsB9dt95kpnERBtDlHXeueDyzr/RAhM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 05:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:84:ed:5e:a8:12:69:44:b8:c2:2f:06:ed:b0:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e5efe934cf377ddf373b366721f1339243f907 Validity Not Before: Dec 19 05:00:57 2025 GMT Not After : Dec 20 05:00:57 2025 GMT Subject: CN=17c6f036571237cb695cbda8fd785d36b9227f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:66:e2:81:e4:b3:31:a0:ec:f1:a4:07:9d:da: 7e:af:c9:65:6a:f3:e4:f2:b5:ab:95:30:db:64:b2: e4:fb:f7:03:93:3e:cb:f9:29:8e:3e:46:3c:85:7a: 76:ac:a6:f8:00:2d:3e:40:9d:08:b5:f8:dd:d0:45: d4:f5:96:06:cb:b4:6c:a6:27:92:b8:32:aa:f8:e6: 06:85:db:45:c0:1e:1d:43:05:44:a3:a4:e1:a4:3c: be:5a:70:3d:8f:ce:ed:11:a2:63:9b:90:40:16:1e: 3c:34:16:4f:fb:2a:cf:87:3c:45:83:be:34:db:3d: 8f:a0:c8:e4:0e:8e:0f:30:78:22:7c:13:db:6d:db: 12:75:42:9a:28:36:e9:ca:65:b6:19:fe:97:16:16: ef:fd:ed:26:10:de:8f:17:52:eb:b7:08:b1:20:b8: 2a:cd:2f:ee:a9:57:52:1f:39:66:89:54:ad:a3:ab: 4d:4f:11:b9:c7:4a:fe:47:95:a8:16:76:2d:c5:03: 68:8e:88:0e:ea:a3:1c:d0:aa:81:f5:df:89:1b:9d: b5:9f:11:d2:72:2b:9f:d9:d0:01:41:b2:a0:7f:71: fa:f3:5f:e3:f6:d1:98:81:0b:a5:07:da:84:ce:73: 07:8b:d3:03:8b:a3:99:a7:64:dc:e8:78:b2:63:34: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:C6:F0:36:57:12:37:CB:69:5C:BD:A8:FD:78:5D:36:B9:22:7F:1F X509v3 Authority Key Identifier: keyid:10:E5:EF:E9:34:CF:37:7D:DF:37:3B:36:67:21:F1:33:92:43:F9:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/282c30-739d-49cc-8d92-95c0a3d95cd4/1/EOXv6TTPN33fNzs2ZyHxM5JD-Qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:cb:8a:2a:5c:8e:66:90:42:77:8e:08:8c:2e:85:4b:da:90: 5a:59:62:4d:a3:89:ba:67:73:a4:54:ed:f3:4c:d1:96:70:1f: c5:b2:c5:d7:a7:ce:c1:35:05:5e:36:44:99:3e:f3:6f:6b:2b: d1:3d:bc:67:fa:f1:9b:7d:67:31:82:a6:10:70:3c:70:b7:b2: 6b:17:30:7b:5f:f8:10:34:ef:91:c1:40:1e:72:e6:dc:b1:cb: f2:c1:d0:0c:be:c8:2a:49:69:4b:fe:11:a7:ba:da:58:29:6b: ea:41:0e:5b:95:1a:1d:f3:1f:24:4c:09:48:c1:ee:6f:52:9f: bb:2c:56:d9:ae:36:85:6d:22:14:a4:2e:50:e4:d2:86:85:d8: c2:3c:90:65:14:f1:b2:f1:d2:fd:5c:c5:eb:53:ed:22:67:c3: 55:91:e9:f3:83:1f:d6:55:8a:8f:e8:b3:8c:42:b8:9d:ba:f8: 81:29:c1:24:57:28:24:37:b7:1a:8e:1f:2f:bf:7a:ef:c0:9b: fc:97:08:2d:bf:8c:48:75:dc:16:17:5b:e7:6e:c3:6a:4e:17: 12:a2:97:f6:aa:95:6c:c9:75:f1:6a:e3:9e:63:48:e0:39:c4: 99:1a:a8:4d:d5:cc:84:ff:28:5b:fd:43:78:66:6a:67:c3:37: e4:7f:25:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+4TtXqgSaUS4wi8G7bA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZTVlZmU5MzRjZjM3N2RkZjM3M2IzNjY3MjFmMTMzOTI0 M2Y5MDcwHhcNMjUxMjE5MDUwMDU3WhcNMjUxMjIwMDUwMDU3WjAzMTEwLwYDVQQD EygxN2M2ZjAzNjU3MTIzN2NiNjk1Y2JkYThmZDc4NWQzNmI5MjI3ZjFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2bigeSzMaDs8aQHndp+r8llavPk 8rWrlTDbZLLk+/cDkz7L+SmOPkY8hXp2rKb4AC0+QJ0Itfjd0EXU9ZYGy7RspieS uDKq+OYGhdtFwB4dQwVEo6ThpDy+WnA9j87tEaJjm5BAFh48NBZP+yrPhzxFg740 2z2PoMjkDo4PMHgifBPbbdsSdUKaKDbpymW2Gf6XFhbv/e0mEN6PF1LrtwixILgq zS/uqVdSHzlmiVSto6tNTxG5x0r+R5WoFnYtxQNojogO6qMc0KqB9d+JG521nxHS ciuf2dABQbKgf3H681/j9tGYgQulB9qEznMHi9MDi6OZp2Tc6HiyYzTBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBfG8DZXEjfLaVy9qP14XTa5In8fMB8GA1UdIwQY MBaAFBDl7+k0zzd93zc7Nmch8TOSQ/kHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTIt OTVjMGEzZDk1Y2Q0LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8yODJjMzAtNzM5ZC00OWNjLThkOTItOTVjMGEzZDk1Y2Q0 LzEvRU9YdjZUVFBOMzNmTnpzMlp5SHhNNUpELVFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcuKKlyO ZpBCd44IjC6FS9qQWlliTaOJumdzpFTt80zRlnAfxbLF16fOwTUFXjZEmT7zb2sr 0T28Z/rxm31nMYKmEHA8cLeyaxcwe1/4EDTvkcFAHnLm3LHL8sHQDL7IKklpS/4R p7raWClr6kEOW5UaHfMfJEwJSMHub1KfuyxW2a42hW0iFKQuUOTShoXYwjyQZRTx svHS/VzF61PtImfDVZHp84Mf1lWKj+izjEK4nbr4gSnBJFcoJDe3Go4fL79678Cb /JcILb+MSHXcFhdb527Dak4XEqKX9qqVbMl18WrjnmNI4DnEmRqoTdXMhP8oW/1D eGZqZ8M35H8l5w== -----END CERTIFICATE-----Generated at Fri Dec 19 10:54:51 2025 by rpki-client