This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft File: EyhoZEV55uth9HcdZ7QGZPUBFvo.mft (raw, json) Hash identifier: cNMQcVgZsvEFdjO5s1JgAEGiC6KpQmjhD5cUuTIdHLU= Subject key identifier: 8B:EB:5D:53:37:91:D8:32:B1:A5:9F:D7:50:1E:B7:D8:8B:82:C1:D0 Authority key identifier: 13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA Certificate issuer: /CN=132868644579e6eb61f4771d67b40664f50116fa Certificate serial: 019AF12E546A1357390476E21BE99909FD24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft Manifest number: 12F9 Signing time: Sat 06 Dec 2025 01:02:16 +0000 Manifest this update: Sat 06 Dec 2025 01:02:16 +0000 Manifest next update: Sun 07 Dec 2025 01:02:16 +0000 Files and hashes: 1: EyhoZEV55uth9HcdZ7QGZPUBFvo.crl (hash: KhB1FFxjVrVr5Mqhd9WexP5WolTi7qjDDIDYrJk/ab8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:54:6a:13:57:39:04:76:e2:1b:e9:99:09:fd:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=132868644579e6eb61f4771d67b40664f50116fa Validity Not Before: Dec 6 01:02:16 2025 GMT Not After : Dec 7 01:02:16 2025 GMT Subject: CN=8beb5d533791d832b1a59fd7501eb7d88b82c1d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7d:05:54:72:32:4e:cf:e9:c2:c0:2b:41:8a: 0a:d8:f1:aa:1e:a5:4b:ed:fa:e8:be:73:c3:47:a8: f9:f9:6b:3a:3c:06:1d:5b:9f:1d:06:7b:e6:57:5f: c3:b5:d9:b1:67:0b:09:43:62:37:ae:a7:f6:6c:97: e5:ad:d9:e3:30:01:2d:d3:dc:26:08:c0:e5:55:e0: 54:86:2b:55:72:72:1c:82:85:8e:d4:bf:18:81:b4: be:97:7b:92:41:2f:d0:cc:c8:08:20:73:45:c8:94: e9:c3:03:6e:2f:8a:3c:d4:26:83:0f:66:89:e0:00: b9:07:e2:25:da:6c:1a:7c:26:dd:59:69:05:63:07: 53:b2:17:ba:ca:ba:f4:18:76:da:a9:7d:76:d1:bc: 8f:c2:08:b8:36:7e:fb:68:97:e9:72:84:08:02:64: b8:a3:da:97:93:48:dd:37:1a:28:46:e1:0c:f0:27: a4:b0:0b:cc:94:5e:79:4e:72:88:42:18:4a:c6:3b: 86:e9:0c:12:da:0b:18:5c:0d:4d:f2:07:c1:0f:30: 81:60:7b:16:7f:0d:78:69:20:28:7f:bf:8b:5d:1e: e6:3c:e4:be:14:46:3f:a4:ac:d0:31:3c:9f:14:d3: f3:ef:de:e4:05:4d:e4:28:57:bc:9c:89:40:2b:bc: fe:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:EB:5D:53:37:91:D8:32:B1:A5:9F:D7:50:1E:B7:D8:8B:82:C1:D0 X509v3 Authority Key Identifier: keyid:13:28:68:64:45:79:E6:EB:61:F4:77:1D:67:B4:06:64:F5:01:16:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EyhoZEV55uth9HcdZ7QGZPUBFvo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3de5-9586-41c6-ade5-f2d8df8eaad9/1/EyhoZEV55uth9HcdZ7QGZPUBFvo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:e1:8c:99:fd:36:36:66:62:20:89:10:79:16:86:73:1e: a3:1e:d6:3d:84:bd:1e:c6:6d:e5:c0:86:a6:99:56:22:99:f2: e8:67:96:fd:0c:7c:fc:0b:dd:8a:e2:cf:0a:81:6e:ce:fa:9d: fe:d3:53:b1:b1:53:e4:28:e6:8c:a4:ca:e0:12:34:f6:7d:73: c8:e4:c4:6f:11:17:82:ec:23:7c:f8:9c:b6:77:87:37:16:8c: 9c:29:5c:2a:d3:58:79:b3:42:25:40:c0:78:d2:1c:16:fa:25: f1:3a:3b:dc:31:8a:a9:e8:8b:6a:a0:6c:50:1d:08:dd:41:3e: c1:ea:09:99:56:fd:0a:03:3b:83:01:25:c8:4a:83:f5:a6:c5: 76:02:07:aa:96:f7:f6:23:d7:f8:b2:2a:02:20:ad:53:26:57: 8e:f6:fe:f8:d8:52:56:b9:3e:42:26:e4:df:13:dc:6c:65:d3: 21:13:40:8b:ec:ec:e9:06:e3:4d:f8:a7:f1:0c:c4:08:82:a5: 32:05:7a:70:a7:9f:4d:57:4f:ee:ce:f8:5a:57:9a:8b:cb:81: ff:e7:f2:7e:03:39:f6:29:d1:94:fb:f4:56:65:e0:74:1c:d5: ed:6f:9f:b8:42:ae:07:c2:85:7a:d4:e3:c6:96:e3:41:b9:a5: 83:27:11:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLlRqE1c5BHbiG+mZCf0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMjg2ODY0NDU3OWU2ZWI2MWY0NzcxZDY3YjQwNjY0ZjUw MTE2ZmEwHhcNMjUxMjA2MDEwMjE2WhcNMjUxMjA3MDEwMjE2WjAzMTEwLwYDVQQD Eyg4YmViNWQ1MzM3OTFkODMyYjFhNTlmZDc1MDFlYjdkODhiODJjMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzn0FVHIyTs/pwsArQYoK2PGqHqVL 7frovnPDR6j5+Ws6PAYdW58dBnvmV1/DtdmxZwsJQ2I3rqf2bJflrdnjMAEt09wm CMDlVeBUhitVcnIcgoWO1L8YgbS+l3uSQS/QzMgIIHNFyJTpwwNuL4o81CaDD2aJ 4AC5B+Il2mwafCbdWWkFYwdTshe6yrr0GHbaqX120byPwgi4Nn77aJfpcoQIAmS4 o9qXk0jdNxooRuEM8CeksAvMlF55TnKIQhhKxjuG6QwS2gsYXA1N8gfBDzCBYHsW fw14aSAof7+LXR7mPOS+FEY/pKzQMTyfFNPz797kBU3kKFe8nIlAK7z+SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvrXVM3kdgysaWf11Aet9iLgsHQMB8GA1UdIwQY MBaAFBMoaGRFeebrYfR3HWe0BmT1ARb6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUt ZjJkOGRmOGVhYWQ5LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jYzNkZTUtOTU4Ni00MWM2LWFkZTUtZjJkOGRmOGVhYWQ5 LzEvRXlob1pFVjU1dXRoOUhjZFo3UUdaUFVCRnZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWaDhjJn9 NjZmYiCJEHkWhnMeox7WPYS9HsZt5cCGpplWIpny6GeW/Qx8/AvdiuLPCoFuzvqd /tNTsbFT5CjmjKTK4BI09n1zyOTEbxEXguwjfPictneHNxaMnClcKtNYebNCJUDA eNIcFvol8To73DGKqeiLaqBsUB0I3UE+weoJmVb9CgM7gwElyEqD9abFdgIHqpb3 9iPX+LIqAiCtUyZXjvb++NhSVrk+Qibk3xPcbGXTIRNAi+zs6QbjTfin8QzECIKl MgV6cKefTVdP7s74Wleai8uB/+fyfgM59inRlPv0VmXgdBzV7W+fuEKuB8KFetTj xpbjQbmlgycRKA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:45:19 2025 by rpki-client