This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft File: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft (raw, json) Hash identifier: LPUE8SGJFtt6YJ6saA404Cgnmke2yi+RTQ731FD4Kco= Subject key identifier: EF:75:53:E8:AA:1C:CF:F7:46:DD:84:1D:57:6F:D8:00:B4:B7:DC:40 Authority key identifier: 11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 Certificate issuer: /CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Certificate serial: 019AF23F6E4D14065483083227E44EA6C1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft Manifest number: 0A09 Signing time: Sat 06 Dec 2025 06:00:34 +0000 Manifest this update: Sat 06 Dec 2025 06:00:34 +0000 Manifest next update: Sun 07 Dec 2025 06:00:34 +0000 Files and hashes: 1: EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl (hash: axSTzuy6jFUErPvkJvgcZZG5h4gnw2vD8MftVyuSHOM=) 2: WQLBymqnHEPqWCxtCicxi2cKp-4.roa (hash: +9NIzXALGtkqTPG9vs1CbkFB05k1fHs0XykT9xFFJ/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:6e:4d:14:06:54:83:08:32:27:e4:4e:a6:c1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11836ccc1935aeb97d67cb46bdd0c6107f8610e4 Validity Not Before: Dec 6 06:00:34 2025 GMT Not After : Dec 7 06:00:34 2025 GMT Subject: CN=ef7553e8aa1ccff746dd841d576fd800b4b7dc40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:eb:80:f0:63:e5:74:03:0f:62:03:ca:b0: 98:2f:86:f9:69:2f:c8:b9:96:c8:0e:31:67:56:f9: 2d:ee:4a:2e:08:ee:bb:1e:81:63:1a:50:a5:c8:65: 25:66:75:cf:e8:8b:a1:51:f7:f5:83:20:5e:3a:63: aa:eb:37:4c:fa:3b:ec:b0:95:7a:fe:2b:b1:61:38: 39:ff:cc:00:ef:97:9d:c2:48:60:03:ff:ef:1d:80: 3e:be:e9:c8:ad:c0:f2:f6:06:eb:0c:7e:c9:4b:ee: 25:f1:bf:41:3d:7d:4c:8a:61:13:7e:46:78:9c:37: 02:98:bd:0c:07:fa:f9:c3:e5:b9:1e:6c:49:3d:fa: 4e:64:9e:84:02:af:e5:71:9e:ce:ed:12:a1:9a:2a: 1b:4d:41:eb:c6:ef:14:d3:eb:d0:75:72:77:1b:fb: 00:3f:32:39:d1:95:30:38:74:a6:54:c7:55:d8:7b: 52:67:ad:72:4d:32:9d:8f:75:f4:7d:52:5c:c0:d2: f2:ce:ba:eb:25:cd:96:42:56:40:4d:4c:35:c7:fc: 73:e2:3f:52:b4:51:7d:4b:58:5e:bd:9f:ca:19:da: d3:f3:19:46:a5:a6:65:0a:42:45:dc:1f:85:a3:83: d9:02:4b:17:d7:01:9c:36:dd:65:ce:12:81:0f:9a: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:75:53:E8:AA:1C:CF:F7:46:DD:84:1D:57:6F:D8:00:B4:B7:DC:40 X509v3 Authority Key Identifier: keyid:11:83:6C:CC:19:35:AE:B9:7D:67:CB:46:BD:D0:C6:10:7F:86:10:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/940d84-a6ba-4219-ae11-7427f541b3df/1/EYNszBk1rrl9Z8tGvdDGEH-GEOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:da:79:83:1a:c2:56:5c:44:06:37:b2:9b:b1:ea:44:d9:13: a1:4b:3f:fd:4c:f9:04:a0:d6:36:98:f8:ab:4f:95:5b:5b:be: 42:0e:02:43:6f:94:4d:b8:e7:39:8d:85:89:34:5b:0b:24:1a: 3a:3f:be:30:79:4a:8d:05:8e:a2:55:04:ba:90:99:92:39:6c: b0:d4:09:29:67:b6:4f:78:7a:05:12:c6:f6:9e:e6:f4:9a:38: c6:49:80:96:1a:fc:47:b4:63:f4:44:4d:0d:9d:de:27:17:49: 84:74:9a:0e:ae:62:49:08:28:5f:b1:06:ed:c3:7e:80:26:8c: 95:af:f4:4a:22:9f:d6:8c:db:11:fc:92:38:1c:45:19:27:1b: 61:95:4e:a1:9c:74:db:f1:4a:a9:be:7e:d8:6d:8a:f0:25:38: 11:10:f0:2f:f0:7e:eb:c2:7a:c6:d4:ea:f7:dc:a9:2f:42:d0: a2:25:11:af:08:41:35:77:57:74:fd:7c:c9:90:77:eb:76:d7: 92:77:98:3d:d6:53:39:f9:fd:89:17:e4:06:8c:43:f0:35:e2: 74:4e:09:bd:65:e5:d9:92:bc:e1:55:6c:09:04:b4:e6:37:da: db:ce:f3:1a:85:bb:13:b4:d2:21:2a:86:02:ce:32:b3:2d:7c: 57:9c:bf:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP25NFAZUgwgyJ+ROpsHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExODM2Y2NjMTkzNWFlYjk3ZDY3Y2I0NmJkZDBjNjEwN2Y4 NjEwZTQwHhcNMjUxMjA2MDYwMDM0WhcNMjUxMjA3MDYwMDM0WjAzMTEwLwYDVQQD EyhlZjc1NTNlOGFhMWNjZmY3NDZkZDg0MWQ1NzZmZDgwMGI0YjdkYzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg7rgPBj5XQDD2IDyrCYL4b5aS/I uZbIDjFnVvkt7kouCO67HoFjGlClyGUlZnXP6IuhUff1gyBeOmOq6zdM+jvssJV6 /iuxYTg5/8wA75edwkhgA//vHYA+vunIrcDy9gbrDH7JS+4l8b9BPX1MimETfkZ4 nDcCmL0MB/r5w+W5HmxJPfpOZJ6EAq/lcZ7O7RKhmiobTUHrxu8U0+vQdXJ3G/sA PzI50ZUwOHSmVMdV2HtSZ61yTTKdj3X0fVJcwNLyzrrrJc2WQlZATUw1x/xz4j9S tFF9S1hevZ/KGdrT8xlGpaZlCkJF3B+Fo4PZAksX1wGcNt1lzhKBD5q02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO91U+iqHM/3Rt2EHVdv2AC0t9xAMB8GA1UdIwQY MBaAFBGDbMwZNa65fWfLRr3QxhB/hhDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEt NzQyN2Y1NDFiM2RmLzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NDBkODQtYTZiYS00MjE5LWFlMTEtNzQyN2Y1NDFiM2Rm LzEvRVlOc3pCazFycmw5Wjh0R3ZkREdFSC1HRU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2dp5gxrC VlxEBjeym7HqRNkToUs//Uz5BKDWNpj4q0+VW1u+Qg4CQ2+UTbjnOY2FiTRbCyQa Oj++MHlKjQWOolUEupCZkjlssNQJKWe2T3h6BRLG9p7m9Jo4xkmAlhr8R7Rj9ERN DZ3eJxdJhHSaDq5iSQgoX7EG7cN+gCaMla/0SiKf1ozbEfySOBxFGScbYZVOoZx0 2/FKqb5+2G2K8CU4ERDwL/B+68J6xtTq99ypL0LQoiURrwhBNXdXdP18yZB363bX kneYPdZTOfn9iRfkBoxD8DXidE4JvWXl2ZK84VVsCQS05jfa287zGoW7E7TSISqG As4ysy18V5y/IA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:25:28 2025 by rpki-client