This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json) Hash identifier: qmHmr/FNgHQUX2E+upZ3RW7d8zZe3HKpSj6NWE/dSMw= Subject key identifier: 99:44:84:56:E7:EC:FB:1F:47:D6:29:DC:C4:B0:ED:F1:50:D3:7F:51 Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6 Certificate serial: 019B3C7DCFA780CB4AE585A29491E5E2423A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 16:00:36 +0000 Manifest this update: Sat 20 Dec 2025 16:00:36 +0000 Manifest next update: Sun 21 Dec 2025 16:00:36 +0000 Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: NS+ZoxtbPtOtKNKhLP/HCwher75gPuJzH/zoZrH0zWM=) 2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7d:cf:a7:80:cb:4a:e5:85:a2:94:91:e5:e2:42:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6 Validity Not Before: Dec 20 16:00:36 2025 GMT Not After : Dec 21 16:00:36 2025 GMT Subject: CN=99448456e7ecfb1f47d629dcc4b0edf150d37f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:98:02:b8:a1:10:20:1d:ee:ac:30:06:d5:a0: de:5e:29:19:07:4a:69:a3:04:41:22:0e:59:e9:7d: 59:61:15:ef:a1:e3:72:a7:bd:7c:4d:8a:13:cf:b5: d6:83:fd:c9:36:ca:e2:36:84:7f:c6:04:9e:ac:13: 3f:e3:50:5b:11:f7:36:25:5a:c7:1d:92:4b:7e:bd: 1d:8c:7c:e2:2e:7d:f4:07:da:66:e9:52:08:da:a0: 54:9a:83:89:a5:01:0f:40:aa:d7:66:a6:75:dd:30: 5b:d7:af:88:eb:42:06:ad:6d:41:2d:4c:2d:6d:d9: d6:43:26:6e:14:57:fa:be:18:a4:44:0a:7c:4f:af: 1d:72:0f:7f:34:dd:6b:37:61:de:d1:d3:ca:95:11: 7f:08:77:eb:dd:c5:b3:ee:52:ab:fb:5f:0a:ad:8a: 88:9a:7b:48:2e:52:01:b1:85:18:ad:71:da:19:9b: a6:09:d1:0b:76:ef:2d:14:f6:ae:98:8d:6a:6d:c7: fd:62:e5:a9:05:14:6a:47:be:3f:22:7b:2a:66:43: 53:ef:0e:50:54:8a:d6:d1:f6:55:5b:92:09:f7:ab: 55:54:1e:16:c3:f6:ac:f7:1f:ea:f0:a9:5f:b8:01: 95:0a:cb:b4:f2:f5:d4:31:49:ff:2c:a7:57:a3:b3: a6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:44:84:56:E7:EC:FB:1F:47:D6:29:DC:C4:B0:ED:F1:50:D3:7F:51 X509v3 Authority Key Identifier: keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:52:68:32:03:b7:a8:f7:b1:77:10:29:e9:03:ff:7f:66:12: 21:dc:80:ed:ef:43:27:b7:a3:92:e1:62:13:96:47:9e:f0:f3: 6d:2c:9d:e9:23:96:a8:08:c8:76:0a:a7:ff:84:a3:93:6c:46: 7d:18:84:f0:e8:4d:a5:89:58:57:3c:7e:54:42:27:26:8a:6f: 56:d9:79:5c:85:93:e5:83:89:17:28:26:29:04:e4:04:df:ff: 03:6e:9f:59:17:58:01:80:85:e1:ac:53:cd:ee:bb:48:3b:11: 5a:82:23:c2:43:aa:d7:67:51:c8:57:e1:f7:ed:10:0f:d9:03: 78:c2:93:49:71:7c:5a:04:f8:d5:4c:74:83:c6:20:d3:ae:16: 9b:8a:c2:26:39:a3:04:37:59:cb:5c:98:ca:d7:24:83:58:09: bd:ff:42:82:86:28:88:ab:ba:85:4e:8d:f9:63:57:37:d7:4f: 5a:1a:38:57:d7:50:9f:96:82:58:6b:1d:90:36:d3:f1:54:58: eb:e5:13:07:1c:19:18:2b:c9:7b:04:53:9f:82:e3:f1:f5:2d: b7:bd:15:46:80:4a:ea:3b:f0:d4:f8:c9:bc:f3:9a:e2:3f:20: c6:5b:e8:6b:c3:5a:38:d6:2a:07:06:f9:5c:5b:7a:1e:f6:50: 04:04:61:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fc+ngMtK5YWilJHl4kI6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz Yjc3YTYwHhcNMjUxMjIwMTYwMDM2WhcNMjUxMjIxMTYwMDM2WjAzMTEwLwYDVQQD Eyg5OTQ0ODQ1NmU3ZWNmYjFmNDdkNjI5ZGNjNGIwZWRmMTUwZDM3ZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpgCuKEQIB3urDAG1aDeXikZB0pp owRBIg5Z6X1ZYRXvoeNyp718TYoTz7XWg/3JNsriNoR/xgSerBM/41BbEfc2JVrH HZJLfr0djHziLn30B9pm6VII2qBUmoOJpQEPQKrXZqZ13TBb16+I60IGrW1BLUwt bdnWQyZuFFf6vhikRAp8T68dcg9/NN1rN2He0dPKlRF/CHfr3cWz7lKr+18KrYqI mntILlIBsYUYrXHaGZumCdELdu8tFPaumI1qbcf9YuWpBRRqR74/InsqZkNT7w5Q VIrW0fZVW5IJ96tVVB4Ww/as9x/q8KlfuAGVCsu08vXUMUn/LKdXo7OmnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJlEhFbn7PsfR9Yp3MSw7fFQ039RMB8GA1UdIwQY MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt OGYyOWYzZDk4MjE0LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0 LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlJoMgO3 qPexdxAp6QP/f2YSIdyA7e9DJ7ejkuFiE5ZHnvDzbSyd6SOWqAjIdgqn/4Sjk2xG fRiE8OhNpYlYVzx+VEInJopvVtl5XIWT5YOJFygmKQTkBN//A26fWRdYAYCF4axT ze67SDsRWoIjwkOq12dRyFfh9+0QD9kDeMKTSXF8WgT41Ux0g8Yg064Wm4rCJjmj BDdZy1yYytckg1gJvf9CgoYoiKu6hU6N+WNXN9dPWho4V9dQn5aCWGsdkDbT8VRY 6+UTBxwZGCvJewRTn4Lj8fUtt70VRoBK6jvw1PjJvPOa4j8gxlvoa8NaONYqBwb5 XFt6HvZQBARhyQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:42:49 2025 by rpki-client