This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft File: EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft (raw, json) Hash identifier: 4oa9TyTMBzdWKhHolAkCIgwpbt6n1AvNdju6RU4kxR4= Subject key identifier: 22:47:3C:BD:7C:69:4E:2A:7D:6E:93:AB:B1:28:2B:2F:32:94:8D:D7 Authority key identifier: 12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41 Certificate issuer: /CN=122a541caf138341bd32798940de206052910341 Certificate serial: 019AF276A9EC5EE68B4A6A3BA44E4D75719C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft Manifest number: 0DE3 Signing time: Sat 06 Dec 2025 07:00:54 +0000 Manifest this update: Sat 06 Dec 2025 07:00:54 +0000 Manifest next update: Sun 07 Dec 2025 07:00:54 +0000 Files and hashes: 1: EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl (hash: Mvt0RqeORvWbKXyXPZQAxI0gIxqrTSPLhCgphVBavQw=) 2: N9zcYe5ReKGYCwNwcNWVqIdGiS0.roa (hash: VpzrJQRuZQfy5BAF/SwMEyOY3wzqdR1C+GvTYF7gE24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:a9:ec:5e:e6:8b:4a:6a:3b:a4:4e:4d:75:71:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=122a541caf138341bd32798940de206052910341 Validity Not Before: Dec 6 07:00:54 2025 GMT Not After : Dec 7 07:00:54 2025 GMT Subject: CN=22473cbd7c694e2a7d6e93abb1282b2f32948dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7c:94:c1:9c:12:0b:f6:b1:2b:02:f5:e4:b4: 5d:dd:40:2a:fc:e2:4c:80:06:b6:ee:76:16:5c:31: 75:fc:18:7b:99:25:6d:f4:2b:ca:9e:7d:5c:cf:c1: 09:59:ba:9d:70:d4:55:ab:91:4c:eb:fe:3a:a5:b6: 65:b9:ff:74:3d:26:15:ef:09:17:5d:90:c7:85:07: 79:da:fd:f8:81:33:72:e6:12:b1:20:fa:e4:48:d8: 47:6f:20:67:0b:d5:cb:d4:4d:ea:e3:7a:62:8d:eb: cf:f9:1a:49:39:be:ee:02:a1:67:80:8a:c5:7e:5a: 36:a8:71:0a:bd:d3:49:4e:14:68:b0:63:00:29:9c: 59:01:3d:76:40:d0:df:e6:24:58:63:03:a2:f0:9b: d8:4b:bb:c7:f8:e1:e8:66:95:af:69:59:7f:86:58: 15:38:c8:ec:e8:98:f2:33:ba:d4:0a:04:91:11:0a: 8b:8e:30:0a:d6:a5:eb:c3:4b:21:29:9a:cf:ab:0b: 1c:07:56:e6:7a:94:e0:30:04:fb:b6:f8:50:b0:5c: 75:16:a5:94:65:dd:93:df:9e:81:32:54:06:57:b7: 7e:b4:37:fb:57:3e:b7:16:6e:f6:b3:8f:eb:5b:51: 9a:64:92:aa:94:59:bf:8a:b3:73:1a:fc:31:9d:c0: ab:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:47:3C:BD:7C:69:4E:2A:7D:6E:93:AB:B1:28:2B:2F:32:94:8D:D7 X509v3 Authority Key Identifier: keyid:12:2A:54:1C:AF:13:83:41:BD:32:79:89:40:DE:20:60:52:91:03:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EipUHK8Tg0G9MnmJQN4gYFKRA0E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/252718-8025-43c3-b871-7fd9adf08030/1/EipUHK8Tg0G9MnmJQN4gYFKRA0E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:73:7a:5c:16:49:28:4b:84:4a:12:8a:79:fa:0a:91:a0:20: f3:54:61:1f:c9:88:0a:fb:fc:77:59:3d:8a:eb:2e:b0:79:d7: 2b:0e:77:6f:b1:76:8f:54:e5:fd:24:62:c4:47:68:5f:dc:3b: 52:4f:6f:40:de:d8:eb:09:a8:ad:78:5b:29:29:a4:8d:9f:5e: 18:f3:ca:65:16:65:35:db:78:2d:dd:61:75:c2:05:d6:26:bb: 75:b2:52:8b:46:71:fa:fb:16:f8:ee:c8:6d:ba:ee:33:f4:50: 8f:bd:40:ad:b1:6e:94:a8:8a:9a:35:70:83:8d:b0:46:28:1a: c2:29:cf:f4:c1:81:23:2c:37:e0:ed:81:29:9b:e2:83:9e:ba: 24:7b:9b:a1:80:55:6f:b1:b9:67:12:ab:f3:18:1f:02:3a:3a: 86:dd:af:c3:99:ca:41:e0:ef:31:40:da:fd:05:ba:fc:01:d8: ad:d2:6b:9b:87:54:fb:08:05:ca:86:b4:d4:18:07:44:9c:ee: 56:17:8a:78:8b:33:9f:e3:da:7c:cc:b7:ad:05:1e:7b:5e:0b: 24:55:24:ca:d8:0a:fe:60:4d:e6:5c:0c:c9:e8:b5:ac:33:69: 09:e7:ba:73:27:36:cf:a7:3d:55:f8:21:f5:cf:eb:c3:9d:78: ae:24:9c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydqnsXuaLSmo7pE5NdXGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMmE1NDFjYWYxMzgzNDFiZDMyNzk4OTQwZGUyMDYwNTI5 MTAzNDEwHhcNMjUxMjA2MDcwMDU0WhcNMjUxMjA3MDcwMDU0WjAzMTEwLwYDVQQD EygyMjQ3M2NiZDdjNjk0ZTJhN2Q2ZTkzYWJiMTI4MmIyZjMyOTQ4ZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXyUwZwSC/axKwL15LRd3UAq/OJM gAa27nYWXDF1/Bh7mSVt9CvKnn1cz8EJWbqdcNRVq5FM6/46pbZluf90PSYV7wkX XZDHhQd52v34gTNy5hKxIPrkSNhHbyBnC9XL1E3q43pijevP+RpJOb7uAqFngIrF flo2qHEKvdNJThRosGMAKZxZAT12QNDf5iRYYwOi8JvYS7vH+OHoZpWvaVl/hlgV OMjs6JjyM7rUCgSREQqLjjAK1qXrw0shKZrPqwscB1bmepTgMAT7tvhQsFx1FqWU Zd2T356BMlQGV7d+tDf7Vz63Fm72s4/rW1GaZJKqlFm/irNzGvwxncCrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJHPL18aU4qfW6Tq7EoKy8ylI3XMB8GA1UdIwQY MBaAFBIqVByvE4NBvTJ5iUDeIGBSkQNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8yNTI3MTgtODAyNS00M2MzLWI4NzEt N2ZkOWFkZjA4MDMwLzEvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi8yNTI3MTgtODAyNS00M2MzLWI4NzEtN2ZkOWFkZjA4MDMw LzEvRWlwVUhLOFRnMEc5TW5tSlFONGdZRktSQTBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi3N6XBZJ KEuEShKKefoKkaAg81RhH8mICvv8d1k9iususHnXKw53b7F2j1Tl/SRixEdoX9w7 Uk9vQN7Y6wmorXhbKSmkjZ9eGPPKZRZlNdt4Ld1hdcIF1ia7dbJSi0Zx+vsW+O7I bbruM/RQj71ArbFulKiKmjVwg42wRigawinP9MGBIyw34O2BKZvig566JHuboYBV b7G5ZxKr8xgfAjo6ht2vw5nKQeDvMUDa/QW6/AHYrdJrm4dU+wgFyoa01BgHRJzu VheKeIszn+PafMy3rQUee14LJFUkytgK/mBN5lwMyei1rDNpCee6cyc2z6c9Vfgh 9c/rw514riScig== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:08 2025 by rpki-client