This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json) Hash identifier: ZfQFhcbf9PNk/01OjWwKzFsm2xD6h6pvsUNYCnBOvew= Subject key identifier: 43:04:88:C1:AA:1C:19:46:1E:FE:45:95:0A:A0:1B:BF:07:F9:F0:1A Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019AF0510AC9F87FED24BF61607C647E581D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft Manifest number: 0A08 Signing time: Fri 05 Dec 2025 21:00:34 +0000 Manifest this update: Fri 05 Dec 2025 21:00:34 +0000 Manifest next update: Sat 06 Dec 2025 21:00:34 +0000 Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: jVHW3V26FmAZFLlHkmHyfAVg5SnwbxEh58ajyT2trNY=) 2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 17:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:0a:c9:f8:7f:ed:24:bf:61:60:7c:64:7e:58:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Dec 5 21:00:34 2025 GMT Not After : Dec 6 21:00:34 2025 GMT Subject: CN=430488c1aa1c19461efe45950aa01bbf07f9f01a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:88:7c:7d:13:4a:40:f1:57:25:41:ae:d0:30: ab:20:35:48:7b:27:a5:e4:4b:47:a5:60:57:06:24: 5f:de:45:90:68:e5:ee:11:6d:88:ad:2f:b3:8b:0f: d0:4b:b8:2f:1d:9c:8c:9f:c0:2f:6f:33:32:c3:12: 40:0f:70:4b:a8:d9:10:f5:c7:21:1a:0a:71:eb:16: e3:f1:a6:57:39:58:7c:4c:ad:15:0d:05:22:6f:00: ec:78:07:34:dc:a3:a4:3e:a4:2f:a6:dc:72:b8:af: 8a:a5:2b:0f:8e:ba:50:22:45:ac:da:cb:19:d5:aa: d2:75:18:6d:9e:14:02:9d:41:ec:3e:96:81:14:46: 9d:ec:3c:86:f7:77:99:91:d8:4b:85:1d:08:45:7e: de:0a:bd:7b:13:7d:79:92:a6:3f:27:ed:8d:78:fe: 80:a0:17:1a:c2:b0:95:a7:7d:e2:e2:ff:23:97:b3: bd:6c:b6:1f:a5:6d:f7:d5:26:81:ea:8e:b1:b2:03: 75:c0:fb:2c:50:bc:f0:3e:bb:a1:18:08:a5:7f:51: 48:4a:b9:1b:32:ba:7c:15:39:bd:4c:a6:bb:01:1b: 7a:97:69:ba:26:4e:31:80:a9:2a:5c:39:18:30:a8: 85:8d:8a:1a:f8:65:60:84:de:ef:92:45:40:1a:f3: e5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:04:88:C1:AA:1C:19:46:1E:FE:45:95:0A:A0:1B:BF:07:F9:F0:1A X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:96:15:0d:7b:35:fc:a4:50:76:a0:b8:b3:23:1d:93:b0:1b: 4f:78:12:a3:c6:0a:39:04:7a:dc:af:49:01:eb:dc:75:13:15: 7c:ff:13:ec:3f:95:2b:19:db:42:d0:d5:d1:44:a2:9a:23:01: 59:89:e1:31:43:8e:b1:e9:1f:89:fa:88:a8:75:0b:8c:02:25: 2b:11:65:44:6a:3f:f3:41:6d:8e:3e:4a:2a:50:7a:0e:0a:32: 22:88:8d:4d:1a:1f:2e:b7:83:c0:8a:fc:ec:bc:4b:8a:3a:76: 23:f4:d5:a6:ba:86:75:74:19:53:05:44:62:23:9e:65:1c:84: 72:89:ef:7c:50:fa:37:50:ed:39:a7:b5:6d:03:b2:31:12:e8: 40:1c:5e:a0:f0:a7:cd:4c:22:36:3e:00:6e:bb:d5:ef:c9:65: be:2b:3d:d3:19:c7:2e:cb:b6:39:57:5b:4b:c0:e4:83:1c:8e: 47:e8:ba:14:a3:86:7e:f1:ad:ef:95:84:03:49:ab:ba:5a:14: 8a:7d:aa:9e:39:7a:e4:ec:02:d1:31:d0:3b:a7:39:73:9c:26: 5a:68:51:c2:8b:45:20:4a:82:30:1e:37:c4:1e:b6:ca:6e:6a: bf:61:e3:0d:12:25:93:b5:c1:2f:f2:dd:18:5b:40:fb:41:d1: 82:46:00:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUQrJ+H/tJL9hYHxkflgdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjUxMjA1MjEwMDM0WhcNMjUxMjA2MjEwMDM0WjAzMTEwLwYDVQQD Eyg0MzA0ODhjMWFhMWMxOTQ2MWVmZTQ1OTUwYWEwMWJiZjA3ZjlmMDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYh8fRNKQPFXJUGu0DCrIDVIeyel 5EtHpWBXBiRf3kWQaOXuEW2IrS+ziw/QS7gvHZyMn8AvbzMywxJAD3BLqNkQ9cch Ggpx6xbj8aZXOVh8TK0VDQUibwDseAc03KOkPqQvptxyuK+KpSsPjrpQIkWs2ssZ 1arSdRhtnhQCnUHsPpaBFEad7DyG93eZkdhLhR0IRX7eCr17E315kqY/J+2NeP6A oBcawrCVp33i4v8jl7O9bLYfpW331SaB6o6xsgN1wPssULzwPruhGAilf1FISrkb Mrp8FTm9TKa7ARt6l2m6Jk4xgKkqXDkYMKiFjYoa+GVghN7vkkVAGvPlqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEMEiMGqHBlGHv5FlQqgG78H+fAaMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpYVDXs1 /KRQdqC4syMdk7AbT3gSo8YKOQR63K9JAevcdRMVfP8T7D+VKxnbQtDV0USimiMB WYnhMUOOsekfifqIqHULjAIlKxFlRGo/80Ftjj5KKlB6DgoyIoiNTRofLreDwIr8 7LxLijp2I/TVprqGdXQZUwVEYiOeZRyEconvfFD6N1DtOae1bQOyMRLoQBxeoPCn zUwiNj4AbrvV78llvis90xnHLsu2OVdbS8DkgxyOR+i6FKOGfvGt75WEA0mruloU in2qnjl65OwC0THQO6c5c5wmWmhRwotFIEqCMB43xB62ym5qv2HjDRIlk7XBL/Ld GFtA+0HRgkYAlw== -----END CERTIFICATE-----Generated at Sat Dec 6 02:47:43 2025 by rpki-client