This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft File: EOuDUEaH-ei6SAzUbqCMdd2U15U.mft (raw, json) Hash identifier: TfLtjDlwDKgTop4LmcvHut3/dFbX4czpX9XyuUPmv98= Subject key identifier: 01:EB:8F:8E:F7:67:B8:B6:2C:98:4E:15:C5:76:F5:40:54:0B:1B:75 Authority key identifier: 10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 Certificate issuer: /CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Certificate serial: 019AF1D27DA8CD5CC12E936D28A219093093 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft Manifest number: 141C Signing time: Sat 06 Dec 2025 04:01:35 +0000 Manifest this update: Sat 06 Dec 2025 04:01:35 +0000 Manifest next update: Sun 07 Dec 2025 04:01:35 +0000 Files and hashes: 1: EOuDUEaH-ei6SAzUbqCMdd2U15U.crl (hash: tzX6ZQYWCMf+wmvQvhuXIwIgkfQlR3ZXAjoYmeqYd7E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:7d:a8:cd:5c:c1:2e:93:6d:28:a2:19:09:30:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10eb83504687f9e8ba480cd46ea08c75dd94d795 Validity Not Before: Dec 6 04:01:35 2025 GMT Not After : Dec 7 04:01:35 2025 GMT Subject: CN=01eb8f8ef767b8b62c984e15c576f540540b1b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c7:65:d9:0c:f6:00:b3:31:d7:f2:6e:37:12: 72:ea:f4:d1:47:7a:18:72:9a:5d:f8:f1:2e:81:91: 38:3d:5e:0d:5b:cc:12:58:d6:a6:0f:b0:b9:70:06: 16:8a:fd:f9:77:fc:09:8d:61:46:20:63:32:08:37: 01:35:fa:35:80:ad:2c:6e:3d:43:58:c5:93:8d:c3: e8:d6:10:5c:91:d9:01:00:d5:0a:0f:dc:c3:d8:76: 16:e4:d8:01:2c:bd:88:a5:b5:db:83:27:04:72:00: 19:70:38:4e:22:e4:4a:30:c0:71:de:58:58:d7:c1: 9c:ae:11:91:29:98:af:fb:80:69:d4:14:87:92:0e: 14:5a:3c:b9:a6:c8:49:16:5f:22:13:b1:f8:e8:af: d2:20:42:5c:a2:ea:20:73:05:ba:b3:fe:08:d2:c4: 5d:c9:f1:e9:f3:ca:13:a3:f9:f2:fc:c6:3a:a8:eb: 50:ca:0a:f8:be:f2:ec:41:7b:a6:d0:25:b6:43:53: 68:21:77:31:09:0c:15:e4:3f:bc:69:4d:4e:a0:9b: 02:e9:74:a1:53:74:d0:20:f9:2d:21:aa:38:7a:55: 79:0a:2e:d6:db:cd:98:0f:5a:55:cf:59:8f:51:b4: 1a:8f:06:4e:de:ca:f2:1e:69:a2:cf:72:bc:9b:97: 23:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EB:8F:8E:F7:67:B8:B6:2C:98:4E:15:C5:76:F5:40:54:0B:1B:75 X509v3 Authority Key Identifier: keyid:10:EB:83:50:46:87:F9:E8:BA:48:0C:D4:6E:A0:8C:75:DD:94:D7:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOuDUEaH-ei6SAzUbqCMdd2U15U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/54b596-6c23-48e6-9842-d9453c845272/1/EOuDUEaH-ei6SAzUbqCMdd2U15U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:18:b4:fc:6b:03:96:01:87:11:fd:77:91:2d:6f:dd:24:57: 5d:51:ab:a1:f5:35:10:73:9b:0a:dc:57:45:56:b9:ef:3c:85: 89:70:2c:2a:e4:b5:f7:36:60:c1:ab:19:cb:3a:44:ff:86:9d: 8e:83:1f:06:4d:2e:ce:ca:9b:33:d0:43:cf:21:22:67:08:a5: 05:d0:a1:ea:74:e1:81:f9:c8:c4:ff:be:75:31:50:d0:c8:04: 1b:c1:82:a6:08:4e:85:c3:8e:43:58:df:2f:f9:ca:f9:47:b6: 68:4c:17:6b:57:a9:a5:96:d4:cd:b7:8b:e4:91:30:d0:47:6f: 2d:d8:e8:87:99:b8:c5:1e:e0:a0:3e:e4:15:98:92:dc:9e:06: 3a:cc:a3:53:be:ae:c6:bc:38:27:d8:b0:26:bc:c9:49:f0:67: de:2a:36:f8:d9:3b:c4:15:b0:e1:5a:17:90:66:d7:98:3d:f5: b9:a1:2e:aa:d2:bb:c4:a0:af:f4:16:6a:ad:f7:ee:71:c1:46: ea:6a:e8:3e:d3:f3:04:7a:3a:f3:81:65:75:5b:58:1f:2c:04: d1:e4:59:83:96:11:4a:d3:d6:af:5f:f0:a7:d4:72:30:83:fd: d9:5c:7a:d1:26:fd:f7:3c:b1:1c:37:66:ec:b4:46:91:08:78: 68:3d:91:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0n2ozVzBLpNtKKIZCTCTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZWI4MzUwNDY4N2Y5ZThiYTQ4MGNkNDZlYTA4Yzc1ZGQ5 NGQ3OTUwHhcNMjUxMjA2MDQwMTM1WhcNMjUxMjA3MDQwMTM1WjAzMTEwLwYDVQQD EygwMWViOGY4ZWY3NjdiOGI2MmM5ODRlMTVjNTc2ZjU0MDU0MGIxYjc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosdl2Qz2ALMx1/JuNxJy6vTRR3oY cppd+PEugZE4PV4NW8wSWNamD7C5cAYWiv35d/wJjWFGIGMyCDcBNfo1gK0sbj1D WMWTjcPo1hBckdkBANUKD9zD2HYW5NgBLL2IpbXbgycEcgAZcDhOIuRKMMBx3lhY 18GcrhGRKZiv+4Bp1BSHkg4UWjy5pshJFl8iE7H46K/SIEJcouogcwW6s/4I0sRd yfHp88oTo/ny/MY6qOtQygr4vvLsQXum0CW2Q1NoIXcxCQwV5D+8aU1OoJsC6XSh U3TQIPktIao4elV5Ci7W282YD1pVz1mPUbQajwZO3sryHmmiz3K8m5cjRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAHrj473Z7i2LJhOFcV29UBUCxt1MB8GA1UdIwQY MBaAFBDrg1BGh/noukgM1G6gjHXdlNeVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDIt ZDk0NTNjODQ1MjcyLzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi81NGI1OTYtNmMyMy00OGU2LTk4NDItZDk0NTNjODQ1Mjcy LzEvRU91RFVFYUgtZWk2U0F6VWJxQ01kZDJVMTVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhi0/GsD lgGHEf13kS1v3SRXXVGrofU1EHObCtxXRVa57zyFiXAsKuS19zZgwasZyzpE/4ad joMfBk0uzsqbM9BDzyEiZwilBdCh6nThgfnIxP++dTFQ0MgEG8GCpghOhcOOQ1jf L/nK+Ue2aEwXa1eppZbUzbeL5JEw0EdvLdjoh5m4xR7goD7kFZiS3J4GOsyjU76u xrw4J9iwJrzJSfBn3io2+Nk7xBWw4VoXkGbXmD31uaEuqtK7xKCv9BZqrffuccFG 6mroPtPzBHo684FldVtYHywE0eRZg5YRStPWr1/wp9RyMIP92Vx60Sb99zyxHDdm 7LRGkQh4aD2REQ== -----END CERTIFICATE-----Generated at Sat Dec 6 08:11:21 2025 by rpki-client