This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft File: EOjahAf590joH-nanrBrOxfQZ90.mft (raw, json) Hash identifier: 4oJUMy6XsN5frSUAuc2fNY/qVXSJEpapxzslYNrIFWs= Subject key identifier: C0:05:BD:D7:69:66:62:8F:39:91:45:71:25:35:6E:E9:06:40:D2:6A Authority key identifier: 10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD Certificate issuer: /CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Certificate serial: 019B4B82EC8D9968F329CEC0BF3B4A12DE1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft Manifest number: 1792 Signing time: Tue 23 Dec 2025 14:00:29 +0000 Manifest this update: Tue 23 Dec 2025 14:00:29 +0000 Manifest next update: Wed 24 Dec 2025 14:00:29 +0000 Files and hashes: 1: EOjahAf590joH-nanrBrOxfQZ90.crl (hash: nF36Xv4hdnm/uIOmaZlyIUZ46ZdEs90J7Wc5+FxUk0E=) 2: QKuSiZFk1wVsULwYb8XPnEDMMuM.roa (hash: KAQooRb0Ywlt3epgyVY+X2EZbQ9cRsRyjFwggfxa9E0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:82:ec:8d:99:68:f3:29:ce:c0:bf:3b:4a:12:de:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10e8da8407f9f748e81fe9da9eb06b3b17d067dd Validity Not Before: Dec 23 14:00:29 2025 GMT Not After : Dec 24 14:00:29 2025 GMT Subject: CN=c005bdd76966628f3991457125356ee90640d26a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:a2:9d:0f:5b:b7:e0:d4:95:8d:ad:99:b5: 46:74:2f:d1:85:10:b7:81:75:54:fc:9f:8e:5c:d3: c7:45:47:74:65:7b:e0:b7:dd:7c:d6:ba:b8:ea:c0: bf:db:37:7c:5c:f1:75:c6:eb:11:f4:34:a7:fd:be: 38:93:f5:71:fc:a4:b1:33:a6:c0:2a:bd:12:e4:e4: a8:8f:20:38:21:d0:d4:d9:d2:d4:76:99:0c:b1:b2: ed:8f:9f:a8:6b:c4:c9:0a:56:7f:93:95:2d:00:0a: 73:78:dd:80:fb:bb:2a:27:8a:07:87:e5:da:21:65: 73:50:5f:f2:f2:6c:e2:1f:8e:1f:da:c5:ba:69:8f: f8:c9:80:20:d5:03:3f:85:05:39:46:98:2d:e1:54: 7d:2a:42:f1:b7:f8:ea:fa:a1:59:92:15:4c:ce:6b: cb:37:9b:72:5d:b7:c6:dd:6d:62:d9:00:fa:6e:ca: eb:7b:5a:0a:62:f8:96:fe:8e:05:fc:e7:9f:50:a1: 1e:2b:03:27:04:ca:14:a1:b4:ef:cb:c2:83:ef:77: ba:94:69:e9:f2:6e:4f:46:5a:7b:a3:dc:10:65:51: 43:df:cd:b7:df:00:80:b7:43:1e:59:c5:ed:81:8f: 03:77:47:d2:bf:a1:e7:bd:e2:80:00:f6:78:e5:05: 03:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:05:BD:D7:69:66:62:8F:39:91:45:71:25:35:6E:E9:06:40:D2:6A X509v3 Authority Key Identifier: keyid:10:E8:DA:84:07:F9:F7:48:E8:1F:E9:DA:9E:B0:6B:3B:17:D0:67:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOjahAf590joH-nanrBrOxfQZ90.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/554988-d1a9-4b54-93ee-2ceea5caf3a0/1/EOjahAf590joH-nanrBrOxfQZ90.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:79:14:0a:dd:c5:da:e2:1e:f9:f6:ae:02:69:e4:e2:20:6a: fe:06:52:94:e1:b1:9b:5a:db:73:1f:47:03:8e:9d:78:7c:2b: de:73:5e:fa:2f:a5:95:50:a1:9e:1b:72:03:67:28:75:a8:1e: a2:19:d9:40:05:cc:ba:63:a2:5c:92:37:15:23:a5:fc:f0:36: ee:b3:9a:10:f2:1f:9b:f6:be:d3:dd:46:d5:a9:be:6f:5e:14: 81:a2:af:00:7a:5a:6d:74:00:46:d6:d7:91:12:a3:e3:76:93: e4:22:20:24:d5:45:72:a6:fa:2d:22:fb:3c:e6:be:9e:c3:e4: 07:12:4b:4c:c3:7b:05:67:6f:b0:4e:d4:ad:26:50:40:fb:7a: d2:9e:d2:bd:c2:5b:cb:eb:a1:2e:6b:c0:8e:39:90:d1:d5:24: 85:8e:ef:e2:86:8d:9b:95:97:d2:9a:77:f1:60:59:af:42:26: e8:1c:5b:34:ce:d3:62:66:86:98:37:78:0b:00:d5:36:7c:45: a1:ee:d3:10:3c:93:af:eb:56:e2:64:ee:7d:d0:94:53:9c:76: 86:82:14:12:27:b5:a2:f1:10:96:c4:34:db:d2:07:70:e0:df: d9:51:9a:96:5d:41:e9:7b:10:69:9a:4c:d6:8e:65:0c:61:66: e0:a9:ee:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLguyNmWjzKc7AvztKEt4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZThkYTg0MDdmOWY3NDhlODFmZTlkYTllYjA2YjNiMTdk MDY3ZGQwHhcNMjUxMjIzMTQwMDI5WhcNMjUxMjI0MTQwMDI5WjAzMTEwLwYDVQQD EyhjMDA1YmRkNzY5NjY2MjhmMzk5MTQ1NzEyNTM1NmVlOTA2NDBkMjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobainQ9bt+DUlY2tmbVGdC/RhRC3 gXVU/J+OXNPHRUd0ZXvgt9181rq46sC/2zd8XPF1xusR9DSn/b44k/Vx/KSxM6bA Kr0S5OSojyA4IdDU2dLUdpkMsbLtj5+oa8TJClZ/k5UtAApzeN2A+7sqJ4oHh+Xa IWVzUF/y8mziH44f2sW6aY/4yYAg1QM/hQU5Rpgt4VR9KkLxt/jq+qFZkhVMzmvL N5tyXbfG3W1i2QD6bsrre1oKYviW/o4F/OefUKEeKwMnBMoUobTvy8KD73e6lGnp 8m5PRlp7o9wQZVFD38233wCAt0MeWcXtgY8Dd0fSv6HnveKAAPZ45QUDYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMAFvddpZmKPOZFFcSU1bukGQNJqMB8GA1UdIwQY MBaAFBDo2oQH+fdI6B/p2p6wazsX0GfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUt MmNlZWE1Y2FmM2EwLzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS81NTQ5ODgtZDFhOS00YjU0LTkzZWUtMmNlZWE1Y2FmM2Ew LzEvRU9qYWhBZjU5MGpvSC1uYW5yQnJPeGZRWjkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAunkUCt3F 2uIe+fauAmnk4iBq/gZSlOGxm1rbcx9HA46deHwr3nNe+i+llVChnhtyA2codage ohnZQAXMumOiXJI3FSOl/PA27rOaEPIfm/a+091G1am+b14UgaKvAHpabXQARtbX kRKj43aT5CIgJNVFcqb6LSL7POa+nsPkBxJLTMN7BWdvsE7UrSZQQPt60p7SvcJb y+uhLmvAjjmQ0dUkhY7v4oaNm5WX0pp38WBZr0Im6BxbNM7TYmaGmDd4CwDVNnxF oe7TEDyTr+tW4mTufdCUU5x2hoIUEie1ovEQlsQ029IHcODf2VGall1B6XsQaZpM 1o5lDGFm4KnuYw== -----END CERTIFICATE-----Generated at Tue Dec 23 18:04:50 2025 by rpki-client