This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json) Hash identifier: atS6SPAD6mQfuQJRQ8jE9Z2oElUc/4tz2llIX96jnqI= Subject key identifier: 40:1F:86:E4:5A:96:DA:58:57:A1:81:4B:61:E5:60:1D:54:FE:B7:1E Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85 Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085 Certificate serial: 019B3344B526798207066ADEC7A7DBD6116A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft Manifest number: 1780 Signing time: Thu 18 Dec 2025 21:01:39 +0000 Manifest this update: Thu 18 Dec 2025 21:01:39 +0000 Manifest next update: Fri 19 Dec 2025 21:01:39 +0000 Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: 9ssjOnIODzNfVQ6eYSd84uLW9j70Q9jsEYCpfV2ldVY=) 2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b5:26:79:82:07:06:6a:de:c7:a7:db:d6:11:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085 Validity Not Before: Dec 18 21:01:39 2025 GMT Not After : Dec 19 21:01:39 2025 GMT Subject: CN=401f86e45a96da5857a1814b61e5601d54feb71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ba:a8:4b:61:ad:b6:8a:d8:ea:7e:a1:57:5c: 73:a9:96:ce:61:9e:5d:a8:df:1c:12:3e:ca:fe:9b: 73:b0:d4:e3:51:cc:06:25:6f:3f:ea:51:59:86:50: 2b:95:31:fd:28:66:7d:0e:61:14:bb:13:a4:77:b1: b4:c2:c2:49:83:9a:5f:8d:62:ba:03:48:a5:61:71: 68:7a:08:d7:de:96:fe:36:5a:0d:2e:12:57:f9:ee: d9:32:3a:ef:f3:02:e0:82:36:05:10:e4:01:2f:c2: 93:82:0c:b4:89:5a:d0:62:b5:a4:76:4d:fa:f2:7d: 57:3d:a1:79:5f:3d:26:3d:f7:7a:b2:68:89:9c:40: 7e:e7:fd:32:04:43:1f:d9:d9:5b:8f:24:aa:b4:a1: 8f:f8:79:aa:17:cf:34:8a:66:26:1f:ca:0a:91:5e: ce:74:5e:5e:1a:31:52:66:b5:af:81:5d:d6:06:bc: 51:c9:4c:c4:78:60:a2:d9:01:19:68:d6:56:ec:f2: da:dd:93:78:a8:92:ee:5a:98:d6:a8:df:e1:73:44: 3f:6e:85:2d:59:91:da:cb:62:84:03:96:be:01:cf: cc:19:1d:c8:ee:09:7c:0f:ab:b6:0b:86:a2:6d:a2: 0c:9b:3a:c0:b1:57:66:d2:44:9c:12:a5:6f:ad:e4: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:1F:86:E4:5A:96:DA:58:57:A1:81:4B:61:E5:60:1D:54:FE:B7:1E X509v3 Authority Key Identifier: keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:de:31:fc:df:36:d6:e3:36:6e:0b:84:4e:62:ae:34:26:96: 2e:94:f6:9d:ce:a6:48:43:ff:62:6c:4f:90:d4:d6:c4:9c:2d: 7d:dc:89:05:3e:b4:a8:99:33:49:5d:6a:c1:44:f4:d7:00:0d: a3:50:7f:80:3a:1c:de:92:46:0a:a6:0c:7a:f5:4a:fa:e9:eb: 33:b6:25:32:76:e5:e0:cd:74:79:25:d6:d6:0f:aa:b4:63:cd: e7:7c:8d:6b:9e:28:ef:dd:ac:4b:d5:e6:64:63:bb:9f:ba:ee: ba:01:7b:1b:e8:51:4d:8f:ca:d4:cd:e7:48:37:34:c5:da:31: ea:b0:22:07:48:85:cb:e5:20:ed:e1:c6:40:64:0b:d9:60:45: 67:d8:e4:d8:76:79:92:cb:9c:0b:9e:95:dd:42:57:7f:b7:16: 9e:8c:5f:3d:d1:a2:0e:3a:fd:f5:10:c1:1d:45:2a:31:56:3a: cd:c3:5d:bc:c1:71:6d:3b:d9:e7:02:1b:3b:89:ff:24:1a:dc: 18:59:65:ea:e0:7e:a8:77:e4:3c:b4:e8:2c:1d:ca:2e:cf:04: 2f:dc:0f:c0:b0:54:d5:8f:0b:0e:1d:df:40:5d:74:1f:69:94: 9f:0e:26:c0:2c:10:d5:f2:34:f9:24:f7:ad:97:4d:a7:8f:73: 62:85:13:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLUmeYIHBmrex6fb1hFqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTI0YjhlNWM5MGJhYjMwYWU1OGIzNTY0ZGRhYTE3Y2Rm YjEwODUwHhcNMjUxMjE4MjEwMTM5WhcNMjUxMjE5MjEwMTM5WjAzMTEwLwYDVQQD Eyg0MDFmODZlNDVhOTZkYTU4NTdhMTgxNGI2MWU1NjAxZDU0ZmViNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7qoS2GttorY6n6hV1xzqZbOYZ5d qN8cEj7K/ptzsNTjUcwGJW8/6lFZhlArlTH9KGZ9DmEUuxOkd7G0wsJJg5pfjWK6 A0ilYXFoegjX3pb+NloNLhJX+e7ZMjrv8wLggjYFEOQBL8KTggy0iVrQYrWkdk36 8n1XPaF5Xz0mPfd6smiJnEB+5/0yBEMf2dlbjySqtKGP+HmqF880imYmH8oKkV7O dF5eGjFSZrWvgV3WBrxRyUzEeGCi2QEZaNZW7PLa3ZN4qJLuWpjWqN/hc0Q/boUt WZHay2KEA5a+Ac/MGR3I7gl8D6u2C4aibaIMmzrAsVdm0kScEqVvreQ68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAfhuRaltpYV6GBS2HlYB1U/rceMB8GA1UdIwQY MBaAFHqSS45ckLqzCuWLNWTdqhfN+xCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUt ZWRiMzBiMDJiNWJhLzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUtZWRiMzBiMDJiNWJh LzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt4x/N82 1uM2bguETmKuNCaWLpT2nc6mSEP/YmxPkNTWxJwtfdyJBT60qJkzSV1qwUT01wAN o1B/gDoc3pJGCqYMevVK+unrM7YlMnbl4M10eSXW1g+qtGPN53yNa54o792sS9Xm ZGO7n7ruugF7G+hRTY/K1M3nSDc0xdox6rAiB0iFy+Ug7eHGQGQL2WBFZ9jk2HZ5 ksucC56V3UJXf7cWnoxfPdGiDjr99RDBHUUqMVY6zcNdvMFxbTvZ5wIbO4n/JBrc GFll6uB+qHfkPLToLB3KLs8EL9wPwLBU1Y8LDh3fQF10H2mUnw4mwCwQ1fI0+ST3 rZdNp49zYoUTjg== -----END CERTIFICATE-----Generated at Fri Dec 19 01:24:52 2025 by rpki-client