This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft File: EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft (raw, json) Hash identifier: qsXE2MPb+m3tY7fYRS0kFTPWO/iDREUUBKX6GAHIDhQ= Subject key identifier: 2D:2B:01:D3:5B:93:45:01:A2:54:50:F5:A0:AB:30:E4:A3:13:BC:4F Authority key identifier: 12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18 Certificate issuer: /CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18 Certificate serial: 019B5A8841B8E872F201B735D56866784F86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft Manifest number: 13A4 Signing time: Fri 26 Dec 2025 12:00:37 +0000 Manifest this update: Fri 26 Dec 2025 12:00:37 +0000 Manifest next update: Sat 27 Dec 2025 12:00:37 +0000 Files and hashes: 1: EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl (hash: mUauHsXpMCHh4PPXXZ8WaEC8HUog/XGRAkC5+6T+lew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:41:b8:e8:72:f2:01:b7:35:d5:68:66:78:4f:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12e108b46c25d932b6506c3ef0a87e8b8212ea18 Validity Not Before: Dec 26 12:00:37 2025 GMT Not After : Dec 27 12:00:37 2025 GMT Subject: CN=2d2b01d35b934501a25450f5a0ab30e4a313bc4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:69:98:93:7b:58:f7:60:fe:ea:95:b7:7f:84: d1:77:24:51:64:49:69:49:5e:35:53:07:c9:7a:93: 9e:e6:67:6b:65:a5:1d:71:e9:b8:09:90:9e:3c:8a: eb:78:fd:da:8c:74:cf:17:8b:a3:8e:ef:30:a0:71: 16:9a:65:69:0b:1e:80:15:9a:bb:d6:60:f9:9f:3c: 77:62:db:b7:b0:e1:37:89:a1:9b:5e:06:5b:7a:7a: 26:7d:a4:0e:32:bf:ac:f8:ef:e9:74:c1:33:c1:b0: 36:f5:f7:95:77:96:50:12:0d:a6:43:ae:2d:51:c3: 5b:1f:c0:0b:1a:6f:ff:8d:a3:c9:d8:90:96:82:4f: da:93:a0:64:4c:e7:71:98:ce:e8:5e:25:d0:8e:3c: 45:2a:36:5c:f4:10:d4:2d:20:7d:48:0d:3d:43:ec: 45:77:4b:54:bb:12:95:2d:5d:a9:57:fc:3e:f8:39: 55:15:60:9d:c7:b7:50:dc:0e:eb:8d:6b:ed:39:d0: 2e:81:57:52:f6:f5:e9:47:6c:5d:5e:54:80:cb:bf: 2f:6b:d2:f7:2e:97:1f:4f:19:02:7a:1b:23:59:a1: 6d:bd:e2:22:84:8c:13:03:0b:aa:a4:2f:fe:f7:8e: 73:48:13:db:f4:1d:e5:fd:74:15:4c:92:04:34:db: 46:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:2B:01:D3:5B:93:45:01:A2:54:50:F5:A0:AB:30:E4:A3:13:BC:4F X509v3 Authority Key Identifier: keyid:12:E1:08:B4:6C:25:D9:32:B6:50:6C:3E:F0:A8:7E:8B:82:12:EA:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EuEItGwl2TK2UGw-8Kh-i4IS6hg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/74f9e0-1f4c-4720-8e69-ea4a6dc163c9/1/EuEItGwl2TK2UGw-8Kh-i4IS6hg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:16:e2:6f:b2:d5:f9:59:d9:ac:9c:64:74:9e:7f:12:92:a6: ce:ee:1d:47:f9:97:3d:73:6c:40:10:ce:16:d7:43:85:74:45: 63:bc:99:62:79:10:ba:a7:ba:9e:80:74:a4:9a:05:2d:ad:ed: c8:b4:9c:3a:39:4a:71:c6:2f:24:13:c7:94:72:bd:01:cc:90: 99:bf:b4:55:d4:71:87:c4:bc:ae:a6:25:8f:be:dc:22:f4:fe: 76:5e:b8:12:1d:f4:9c:92:dc:bd:c1:b4:ee:70:d4:e5:ae:3b: 77:3f:fa:c1:25:86:6d:6a:2c:2e:3c:88:b7:a3:f0:21:9f:69: 46:c3:aa:c9:02:e9:3b:b8:04:d5:74:75:63:78:63:1d:79:ba: c3:9b:0d:bc:be:d7:1f:13:86:04:44:b5:a9:dd:0f:bb:d3:21: 00:c5:1e:03:f9:ce:6a:1c:2c:66:f2:01:2d:81:ad:f8:01:b6: c3:17:a9:cb:12:3a:b0:5e:42:84:a3:46:dc:6e:0f:52:fa:d6: 81:fa:00:6b:11:c2:c8:81:d0:1d:53:dc:b5:84:4c:45:7c:87: 24:6c:94:73:76:35:60:3b:16:0a:81:45:c1:fd:9d:a8:1e:ed: d2:6e:c0:21:42:3e:25:a2:5a:5f:41:e1:89:04:1e:9d:88:68: 01:38:5b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiEG46HLyAbc11WhmeE+GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyZTEwOGI0NmMyNWQ5MzJiNjUwNmMzZWYwYTg3ZThiODIx MmVhMTgwHhcNMjUxMjI2MTIwMDM3WhcNMjUxMjI3MTIwMDM3WjAzMTEwLwYDVQQD EygyZDJiMDFkMzViOTM0NTAxYTI1NDUwZjVhMGFiMzBlNGEzMTNiYzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmmYk3tY92D+6pW3f4TRdyRRZElp SV41UwfJepOe5mdrZaUdcem4CZCePIrreP3ajHTPF4ujju8woHEWmmVpCx6AFZq7 1mD5nzx3Ytu3sOE3iaGbXgZbenomfaQOMr+s+O/pdMEzwbA29feVd5ZQEg2mQ64t UcNbH8ALGm//jaPJ2JCWgk/ak6BkTOdxmM7oXiXQjjxFKjZc9BDULSB9SA09Q+xF d0tUuxKVLV2pV/w++DlVFWCdx7dQ3A7rjWvtOdAugVdS9vXpR2xdXlSAy78va9L3 LpcfTxkCehsjWaFtveIihIwTAwuqpC/+945zSBPb9B3l/XQVTJIENNtGrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0rAdNbk0UBolRQ9aCrMOSjE7xPMB8GA1UdIwQY MBaAFBLhCLRsJdkytlBsPvCofouCEuoYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjkt ZWE0YTZkYzE2M2M5LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My83NGY5ZTAtMWY0Yy00NzIwLThlNjktZWE0YTZkYzE2M2M5 LzEvRXVFSXRHd2wyVEsyVUd3LThLaC1pNElTNmhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgBbib7LV +VnZrJxkdJ5/EpKmzu4dR/mXPXNsQBDOFtdDhXRFY7yZYnkQuqe6noB0pJoFLa3t yLScOjlKccYvJBPHlHK9AcyQmb+0VdRxh8S8rqYlj77cIvT+dl64Eh30nJLcvcG0 7nDU5a47dz/6wSWGbWosLjyIt6PwIZ9pRsOqyQLpO7gE1XR1Y3hjHXm6w5sNvL7X HxOGBES1qd0Pu9MhAMUeA/nOahwsZvIBLYGt+AG2wxepyxI6sF5ChKNG3G4PUvrW gfoAaxHCyIHQHVPctYRMRXyHJGyUc3Y1YDsWCoFFwf2dqB7t0m7AIUI+JaJaX0Hh iQQenYhoAThbEA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client