This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json) Hash identifier: PbdiqIekkQqAEDIAut6daV9UvXbfB1FFbNgdfjBd9vg= Subject key identifier: 94:FF:B3:8C:68:89:27:CB:5D:22:63:05:1F:AB:BD:4A:CE:16:53:34 Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Certificate serial: 019B53063960887A272BED216B9063ACDD46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft Manifest number: 146C Signing time: Thu 25 Dec 2025 01:01:15 +0000 Manifest this update: Thu 25 Dec 2025 01:01:15 +0000 Manifest next update: Fri 26 Dec 2025 01:01:15 +0000 Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: LVdJgqzUjXMvpyHMOhOVYyNxXrAbhEc7nGOqP9FHd/A=) 2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:39:60:88:7a:27:2b:ed:21:6b:90:63:ac:dd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Validity Not Before: Dec 25 01:01:15 2025 GMT Not After : Dec 26 01:01:15 2025 GMT Subject: CN=94ffb38c688927cb5d2263051fabbd4ace165334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:12:0e:d8:41:92:18:d3:a4:91:93:0c:ea:91: 56:83:0b:53:a5:04:d2:d1:6a:1d:5b:e9:f8:77:ec: c7:f1:9c:70:de:2d:7a:c1:76:e4:14:cb:f2:f7:49: e7:8d:83:d1:8a:65:1d:ca:23:8c:cb:78:a8:6c:5e: a0:34:93:84:62:45:99:b1:b5:4d:2c:ef:96:e5:76: cc:d1:87:81:ac:81:76:80:0b:f0:8c:88:85:2e:d3: be:ca:19:9e:11:0a:c7:da:8b:a6:27:7d:1e:22:68: 6f:8e:5a:b8:5e:4d:be:74:bf:b5:fb:e9:26:79:2f: ce:38:df:9d:d8:a1:1e:c1:e3:03:00:2d:04:db:bc: a3:05:5a:4b:54:ee:48:cd:76:c3:4d:b2:23:eb:ac: 44:06:8b:dc:96:bb:bd:31:9d:c2:3c:78:e3:a1:b3: 6b:b9:a6:2b:d3:66:b1:16:00:b9:54:dd:b9:21:ae: a0:fb:f4:bf:e3:6f:10:31:65:9c:71:60:a1:f3:a0: 97:87:13:61:6b:e1:d5:8d:76:37:a9:4d:f9:c5:2e: 1d:b3:8f:bd:cf:19:f4:d7:29:f5:a6:b1:af:48:f4: e5:a2:3a:0f:40:c6:e3:95:6d:de:7c:08:7e:2d:c5: aa:d6:b0:ec:ba:80:e9:40:37:b3:bf:92:47:04:9e: 12:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FF:B3:8C:68:89:27:CB:5D:22:63:05:1F:AB:BD:4A:CE:16:53:34 X509v3 Authority Key Identifier: keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:7d:30:9b:9b:d8:d7:d2:54:37:ee:6f:2f:e2:13:3f:ab:5c: ce:6d:d2:3e:4d:58:18:62:ab:3f:d8:b6:c9:21:eb:9e:85:3e: 7c:dd:69:46:e7:08:55:d8:2f:db:46:b2:f5:1b:e8:62:48:15: 93:c0:1e:27:2f:f9:4e:9a:85:41:84:d4:77:f1:b8:94:ff:bd: 21:23:d8:ec:65:00:a1:f2:c1:bc:fc:06:52:8e:b9:ef:c6:c5: c6:e4:64:86:7d:62:38:79:0a:16:f7:8f:dc:2c:2c:f3:8f:18: ec:de:4f:4b:55:3d:79:e1:f1:cd:cd:71:29:61:98:50:4f:b2: ca:ab:92:55:43:a4:40:00:eb:88:9f:39:2b:77:95:e6:62:a3: f0:e2:2a:fd:6e:10:7f:fd:26:67:3e:00:43:65:83:95:bb:2e: bc:70:da:73:06:d8:07:e2:b3:1e:2f:1e:f5:51:2c:32:5c:37: 0b:13:17:28:1d:cb:70:bd:a0:4d:36:c9:e2:7d:35:0d:c3:43: 8b:51:99:e4:73:47:1f:05:d9:89:d1:e6:58:45:3a:96:83:25: 94:52:9b:df:5a:c9:51:d1:b2:4e:7d:f7:60:42:da:a9:d3:46: dc:82:fb:9e:6c:95:d7:54:74:86:52:27:b8:2c:6c:93:03:13: 83:37:24:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBjlgiHonK+0ha5BjrN1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5 ZjlkZGQwHhcNMjUxMjI1MDEwMTE1WhcNMjUxMjI2MDEwMTE1WjAzMTEwLwYDVQQD Eyg5NGZmYjM4YzY4ODkyN2NiNWQyMjYzMDUxZmFiYmQ0YWNlMTY1MzM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhIO2EGSGNOkkZMM6pFWgwtTpQTS 0WodW+n4d+zH8Zxw3i16wXbkFMvy90nnjYPRimUdyiOMy3iobF6gNJOEYkWZsbVN LO+W5XbM0YeBrIF2gAvwjIiFLtO+yhmeEQrH2oumJ30eImhvjlq4Xk2+dL+1++km eS/OON+d2KEeweMDAC0E27yjBVpLVO5IzXbDTbIj66xEBovclru9MZ3CPHjjobNr uaYr02axFgC5VN25Ia6g+/S/428QMWWccWCh86CXhxNha+HVjXY3qU35xS4ds4+9 zxn01yn1prGvSPTlojoPQMbjlW3efAh+LcWq1rDsuoDpQDezv5JHBJ4SewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJT/s4xoiSfLXSJjBR+rvUrOFlM0MB8GA1UdIwQY MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt YWFkNjE2MzlkOWQ2LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2 LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS30wm5vY 19JUN+5vL+ITP6tczm3SPk1YGGKrP9i2ySHrnoU+fN1pRucIVdgv20ay9RvoYkgV k8AeJy/5TpqFQYTUd/G4lP+9ISPY7GUAofLBvPwGUo6578bFxuRkhn1iOHkKFveP 3Cws848Y7N5PS1U9eeHxzc1xKWGYUE+yyquSVUOkQADriJ85K3eV5mKj8OIq/W4Q f/0mZz4AQ2WDlbsuvHDacwbYB+KzHi8e9VEsMlw3CxMXKB3LcL2gTTbJ4n01DcND i1GZ5HNHHwXZidHmWEU6loMllFKb31rJUdGyTn33YELaqdNG3IL7nmyV11R0hlIn uCxskwMTgzckIQ== -----END CERTIFICATE-----Generated at Thu Dec 25 06:24:51 2025 by rpki-client