This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft File: EYKb9HZLMe40tE2AYpIJqMcGXq8.mft (raw, json) Hash identifier: 0Vw4l8CXCZ5x1hAUo8jKIO3pdo25NuHSSaYaODJz6jE= Subject key identifier: 74:E7:27:8B:F3:03:A1:21:50:3C:C7:FA:7E:80:67:53:EE:F2:19:C5 Authority key identifier: 11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF Certificate issuer: /CN=11829bf4764b31ee34b44d80629209a8c7065eaf Certificate serial: 019AF509AF60221444C270B9FC37AB64D24A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft Manifest number: 0127 Signing time: Sat 06 Dec 2025 19:00:43 +0000 Manifest this update: Sat 06 Dec 2025 19:00:43 +0000 Manifest next update: Sun 07 Dec 2025 19:00:43 +0000 Files and hashes: 1: EYKb9HZLMe40tE2AYpIJqMcGXq8.crl (hash: ytFebsLIOi9Vmkmi20iWhpJwzbJeGxtiganaxGeQ5ck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:af:60:22:14:44:c2:70:b9:fc:37:ab:64:d2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11829bf4764b31ee34b44d80629209a8c7065eaf Validity Not Before: Dec 6 19:00:43 2025 GMT Not After : Dec 7 19:00:43 2025 GMT Subject: CN=74e7278bf303a121503cc7fa7e806753eef219c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:19:8e:23:5c:20:f0:61:b5:91:c9:0b:d1:ca: 52:80:bb:14:2b:9e:3b:7c:ab:4d:08:c9:5a:6e:12: 10:68:90:83:21:e3:4b:be:f0:05:c1:23:3c:c1:85: 18:f9:d8:19:89:bc:7c:ce:59:cf:99:b2:51:7a:70: 52:87:31:5c:17:32:60:e6:25:fb:09:54:39:5c:d0: 0d:89:c5:b4:c7:e6:f5:6a:cf:dd:5d:cf:75:c3:ef: 1b:19:a7:7a:c2:3c:9f:fa:ff:6e:da:1b:06:01:8a: 3e:b7:6c:7e:92:9b:dd:72:5b:db:40:54:4d:13:06: cc:48:73:5e:aa:6d:2e:a5:92:fa:e2:28:49:50:42: 23:ec:ce:46:4a:24:d7:13:80:f2:6e:6f:6e:2b:6d: 70:9e:f7:43:34:5d:06:31:83:f0:15:be:b1:79:66: dc:59:a4:72:44:25:a3:f4:06:7b:35:b5:49:4f:b1: ef:5c:6d:c8:c9:ad:9b:84:54:89:54:38:f2:4c:fc: 05:d4:63:de:7f:fe:78:17:57:49:b7:a1:90:98:af: e3:37:67:43:96:6b:37:00:fc:7e:86:67:8d:8c:fa: c5:3d:9d:81:6e:04:4d:f6:ad:d2:dc:38:c7:0d:7f: ff:d6:12:f5:31:36:46:ac:d7:3e:f4:ae:12:0e:5f: e5:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E7:27:8B:F3:03:A1:21:50:3C:C7:FA:7E:80:67:53:EE:F2:19:C5 X509v3 Authority Key Identifier: keyid:11:82:9B:F4:76:4B:31:EE:34:B4:4D:80:62:92:09:A8:C7:06:5E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYKb9HZLMe40tE2AYpIJqMcGXq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/41bf31-3eb6-4186-b164-eb341adc9b53/1/EYKb9HZLMe40tE2AYpIJqMcGXq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:42:6d:c7:c6:0e:c6:f1:28:06:62:2b:d7:a8:6f:cd:2c:bc: 71:c9:05:53:fb:59:ea:7d:d1:f6:4a:3f:eb:84:0e:18:6c:a9: 57:64:24:fd:4e:89:65:36:3f:81:7e:c0:7b:f5:92:68:80:7c: ec:af:92:51:68:f5:44:94:f6:f5:10:81:1d:15:6e:23:0e:56: e2:db:00:7f:33:b7:3e:f0:d9:66:e3:75:61:6b:ce:75:1b:03: 6f:d7:60:c8:da:cf:0d:91:8c:28:80:fc:ba:73:5b:61:86:67: da:8b:ef:81:f8:f5:09:c0:66:76:84:71:df:b7:a4:ce:28:96: 58:c8:0d:05:0c:ca:a9:98:ca:b5:74:05:82:d9:a8:7d:70:97: 2a:0e:04:01:0a:14:87:c4:9a:96:36:0b:06:80:5d:2b:7a:08: 3d:61:a3:53:a5:b9:27:69:fe:e8:ba:a5:1d:98:15:9d:80:99: 79:57:38:b8:d0:88:0e:e6:1d:68:2f:a0:c9:f8:bf:6c:f7:fe: d0:86:89:10:58:b0:01:e7:0a:0e:9d:c1:b9:7a:06:3c:97:ed: 69:86:d0:6e:39:80:91:9e:5e:67:34:00:6e:8f:30:d0:a2:09: 95:78:b7:1b:42:5a:1d:8b:a7:2e:7b:b8:ef:70:83:5b:18:41: 09:9a:68:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Ca9gIhREwnC5/DerZNJKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODI5YmY0NzY0YjMxZWUzNGI0NGQ4MDYyOTIwOWE4Yzcw NjVlYWYwHhcNMjUxMjA2MTkwMDQzWhcNMjUxMjA3MTkwMDQzWjAzMTEwLwYDVQQD Eyg3NGU3Mjc4YmYzMDNhMTIxNTAzY2M3ZmE3ZTgwNjc1M2VlZjIxOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxmOI1wg8GG1kckL0cpSgLsUK547 fKtNCMlabhIQaJCDIeNLvvAFwSM8wYUY+dgZibx8zlnPmbJRenBShzFcFzJg5iX7 CVQ5XNANicW0x+b1as/dXc91w+8bGad6wjyf+v9u2hsGAYo+t2x+kpvdclvbQFRN EwbMSHNeqm0upZL64ihJUEIj7M5GSiTXE4Dybm9uK21wnvdDNF0GMYPwFb6xeWbc WaRyRCWj9AZ7NbVJT7HvXG3Iya2bhFSJVDjyTPwF1GPef/54F1dJt6GQmK/jN2dD lms3APx+hmeNjPrFPZ2BbgRN9q3S3DjHDX//1hL1MTZGrNc+9K4SDl/lxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTnJ4vzA6EhUDzH+n6AZ1Pu8hnFMB8GA1UdIwQY MBaAFBGCm/R2SzHuNLRNgGKSCajHBl6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlLYjlIWkxNZTQwdEUyQVlwSUpxTWNHWHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS80MWJmMzEtM2ViNi00MTg2LWIxNjQt ZWIzNDFhZGM5YjUzLzEvRVlLYjlIWkxNZTQwdEUyQVlwSUpxTWNHWHE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS80MWJmMzEtM2ViNi00MTg2LWIxNjQtZWIzNDFhZGM5YjUz LzEvRVlLYjlIWkxNZTQwdEUyQVlwSUpxTWNHWHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEJtx8YO xvEoBmIr16hvzSy8cckFU/tZ6n3R9ko/64QOGGypV2Qk/U6JZTY/gX7Ae/WSaIB8 7K+SUWj1RJT29RCBHRVuIw5W4tsAfzO3PvDZZuN1YWvOdRsDb9dgyNrPDZGMKID8 unNbYYZn2ovvgfj1CcBmdoRx37ekziiWWMgNBQzKqZjKtXQFgtmofXCXKg4EAQoU h8SaljYLBoBdK3oIPWGjU6W5J2n+6LqlHZgVnYCZeVc4uNCIDuYdaC+gyfi/bPf+ 0IaJEFiwAecKDp3BuXoGPJftaYbQbjmAkZ5eZzQAbo8w0KIJlXi3G0JaHYunLnu4 73CDWxhBCZpoJA== -----END CERTIFICATE-----Generated at Sun Dec 7 01:38:19 2025 by rpki-client