This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json) Hash identifier: dW5fv71lg3BX7FqFwF0EwfdTdEh3LOeVFN3PHxomQWM= Subject key identifier: 79:6C:EE:9A:88:7C:9A:4D:40:CF:05:2B:CC:B0:19:7D:7C:FB:AE:5F Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019B416D32778327951298E8740F2A70A2C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft Manifest number: 0A32 Signing time: Sun 21 Dec 2025 15:00:33 +0000 Manifest this update: Sun 21 Dec 2025 15:00:33 +0000 Manifest next update: Mon 22 Dec 2025 15:00:33 +0000 Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: INPUdHBuHBhtBp7+C2hi8JUYO1+bHvxRvNKYQHPTlP4=) 2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:6d:32:77:83:27:95:12:98:e8:74:0f:2a:70:a2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Dec 21 15:00:33 2025 GMT Not After : Dec 22 15:00:33 2025 GMT Subject: CN=796cee9a887c9a4d40cf052bccb0197d7cfbae5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:42:0c:60:6e:52:00:e4:ee:b4:b4:a3:12:af: 2a:a8:32:db:c6:d9:ed:1d:03:7d:22:4c:db:6c:b3: cf:3a:10:af:8b:a5:d0:c9:30:ac:8c:73:58:25:c2: 58:31:c8:59:1d:e8:5f:ec:33:90:3a:fc:47:5d:4a: d2:61:f8:ed:d1:11:66:cc:f2:3f:bf:d2:0b:77:2e: 91:94:eb:cf:f5:eb:94:d7:a6:61:cf:33:51:ee:52: 1c:87:40:c1:d0:8f:4f:18:2e:6c:a2:63:4f:b2:37: e7:51:00:e4:72:16:76:99:45:b9:4c:e1:db:f6:16: 5e:f6:b3:22:8c:3b:b6:67:4d:6a:eb:2c:e8:22:d8: 0b:f1:df:ce:ce:fd:4a:94:18:7b:97:94:17:74:ff: 7c:86:74:60:a2:19:46:18:2f:00:4c:2c:55:62:4a: e1:82:94:80:5e:6f:52:d5:56:16:d1:a4:25:f3:1d: 42:90:ee:72:37:f4:23:de:72:ef:cb:e5:c8:26:00: 71:78:d5:d8:7c:97:85:af:3a:af:ca:96:9d:74:31: 49:01:b4:26:8b:28:71:70:98:63:54:33:f4:5d:41: 00:89:db:1e:c3:5c:76:c3:c4:30:8b:88:53:f4:51: d0:36:a2:a5:27:51:ae:d9:cc:64:64:f9:51:1d:ff: 46:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6C:EE:9A:88:7C:9A:4D:40:CF:05:2B:CC:B0:19:7D:7C:FB:AE:5F X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:52:3f:ee:64:54:c6:85:75:5c:2a:70:6d:aa:26:7d:54: 8a:f5:75:bf:3f:08:0e:74:32:53:38:50:ac:87:e6:73:ff:85: cb:49:87:93:18:43:75:07:2e:06:78:0a:47:a4:ba:65:f3:35: 06:b7:69:d6:37:3b:fa:ae:0b:f8:4c:b4:57:2a:80:47:a2:1b: 99:ad:7c:1a:18:db:fb:0d:68:0d:2b:6c:92:bb:94:4a:2a:78: 38:86:00:49:e7:0d:bf:fe:b4:17:3c:03:4d:07:a7:f5:2e:71: f2:f1:d0:a6:68:17:52:43:43:2c:c1:1c:d7:c7:d6:61:90:3a: d0:91:4a:05:bb:7d:cd:5b:58:d1:34:2d:fa:3e:f6:81:f9:d3: 34:c7:3a:5f:b7:72:e1:6a:23:97:39:af:3c:9c:1a:02:95:cb: 97:bb:40:64:a9:25:8c:44:e7:6e:c0:e4:df:b6:24:b5:0c:5d: 0c:01:e3:81:81:0c:3a:9c:52:9c:bf:ef:35:0e:1b:05:6b:bf: a8:b9:f5:1c:6a:eb:e1:80:73:e9:66:f8:87:a3:58:93:dd:72: 45:88:85:c1:4d:8b:70:c3:da:72:00:3e:bc:11:82:31:c5:bc: 03:d8:99:a1:a1:68:8f:24:ab:9f:be:6e:e1:dc:c7:50:68:7d: a0:3c:7a:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBbTJ3gyeVEpjodA8qcKLEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjUxMjIxMTUwMDMzWhcNMjUxMjIyMTUwMDMzWjAzMTEwLwYDVQQD Eyg3OTZjZWU5YTg4N2M5YTRkNDBjZjA1MmJjY2IwMTk3ZDdjZmJhZTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkIMYG5SAOTutLSjEq8qqDLbxtnt HQN9IkzbbLPPOhCvi6XQyTCsjHNYJcJYMchZHehf7DOQOvxHXUrSYfjt0RFmzPI/ v9ILdy6RlOvP9euU16ZhzzNR7lIch0DB0I9PGC5somNPsjfnUQDkchZ2mUW5TOHb 9hZe9rMijDu2Z01q6yzoItgL8d/Ozv1KlBh7l5QXdP98hnRgohlGGC8ATCxVYkrh gpSAXm9S1VYW0aQl8x1CkO5yN/Qj3nLvy+XIJgBxeNXYfJeFrzqvypaddDFJAbQm iyhxcJhjVDP0XUEAidsew1x2w8Qwi4hT9FHQNqKlJ1Gu2cxkZPlRHf9GLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHls7pqIfJpNQM8FK8ywGX18+65fMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxtSP+5k VMaFdVwqcG2qJn1UivV1vz8IDnQyUzhQrIfmc/+Fy0mHkxhDdQcuBngKR6S6ZfM1 Brdp1jc7+q4L+Ey0VyqAR6Ibma18Ghjb+w1oDStskruUSip4OIYASecNv/60FzwD TQen9S5x8vHQpmgXUkNDLMEc18fWYZA60JFKBbt9zVtY0TQt+j72gfnTNMc6X7dy 4WojlzmvPJwaApXLl7tAZKkljETnbsDk37YktQxdDAHjgYEMOpxSnL/vNQ4bBWu/ qLn1HGrr4YBz6Wb4h6NYk91yRYiFwU2LcMPacgA+vBGCMcW8A9iZoaFojySrn75u 4dzHUGh9oDx62A== -----END CERTIFICATE-----Generated at Sun Dec 21 17:31:02 2025 by rpki-client