This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json) Hash identifier: 5P8U7wee8RbkI0fvzRSYY6fA9v0daCDMhTxd2DLvR1Y= Subject key identifier: F8:FA:5E:2D:66:E0:C3:9D:20:A5:34:81:D4:3D:DC:B5:3E:B6:49:95 Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9 Certificate serial: 019B53ABB20FCDD37B592F2C85183130C92F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft Manifest number: 091C Signing time: Thu 25 Dec 2025 04:01:59 +0000 Manifest this update: Thu 25 Dec 2025 04:01:59 +0000 Manifest next update: Fri 26 Dec 2025 04:01:59 +0000 Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: CGN8nk+xjjDUdqi1I8jkiAKgi74QqWfi+W5htbQNnVo=) 2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:21:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:ab:b2:0f:cd:d3:7b:59:2f:2c:85:18:31:30:c9:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9 Validity Not Before: Dec 25 04:01:59 2025 GMT Not After : Dec 26 04:01:59 2025 GMT Subject: CN=f8fa5e2d66e0c39d20a53481d43ddcb53eb64995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:78:2d:66:43:5a:55:49:eb:01:ef:c6:06:52: a3:8b:69:0e:e8:e5:e2:a9:f0:2b:f7:9d:34:82:ff: a9:bb:7b:48:d4:79:2f:8f:93:6f:8c:ca:4c:56:8c: 1d:1d:76:6e:b9:31:32:19:8b:dc:cd:59:28:c1:aa: 18:66:2c:e3:05:2d:bd:e9:d8:6a:23:3d:1a:8b:b4: db:25:99:5f:e4:81:20:24:f5:76:27:b4:29:fc:3b: c9:ba:29:89:d6:9b:22:8a:b2:f1:c0:69:4a:e9:09: 7b:7f:1d:43:06:e3:c5:60:a1:e8:1a:46:cb:cd:ae: dd:30:89:cc:c8:91:b6:e9:5a:39:b1:06:af:3e:6c: 93:9e:4d:58:52:16:b4:3e:c4:11:88:02:70:fd:7a: ac:46:d3:66:80:35:9e:ba:76:5b:0a:60:ce:9b:28: 4b:9f:c0:9b:3c:89:9c:2c:fa:37:16:4b:49:59:9d: 6d:95:2a:14:f2:de:56:d2:aa:f5:37:cf:24:24:09: 64:45:be:ed:8a:b3:58:4c:2c:49:ed:1f:4e:22:ce: 16:21:76:9b:05:f5:27:4f:49:4c:26:90:49:72:63: 19:11:aa:40:7b:88:bc:b6:eb:66:a8:06:8f:aa:5d: e9:d5:cb:bf:4f:4e:3e:8d:09:56:b3:84:b2:80:fe: c8:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:5E:2D:66:E0:C3:9D:20:A5:34:81:D4:3D:DC:B5:3E:B6:49:95 X509v3 Authority Key Identifier: keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c9:26:d9:3a:3a:88:4c:b5:7f:93:62:ec:63:9b:96:c4:1e: e1:9a:73:47:92:e3:e1:0c:c1:7f:39:29:8f:5f:91:09:e2:d4: 93:23:eb:3f:c0:d7:66:e5:d9:c2:71:fc:a1:b2:c9:4d:16:3b: 0c:ea:12:6f:85:71:4a:60:fb:43:bb:5c:fe:7f:74:af:36:e7: 57:b4:e7:bd:fe:bd:2a:f0:96:52:c0:7e:37:e9:78:7a:e2:9c: 40:c5:f3:2d:0a:28:55:a8:08:4b:76:cc:c6:0b:52:2c:d6:ba: 03:40:50:9f:e1:ee:7f:9b:b7:5d:78:79:7d:2d:03:1c:94:19: 79:1c:59:c7:f1:51:22:44:5d:73:60:b8:54:6f:3c:05:a6:9a: ca:4b:f8:cf:d9:5c:cb:70:8a:3e:25:cd:4f:78:e5:2c:48:08: 73:44:e4:a2:ad:a3:e1:cd:38:b0:22:19:8f:97:77:b0:e7:96: 53:1c:76:bb:ba:27:e2:94:ba:fb:f9:f3:3d:f8:30:9e:f8:b6: 4d:fc:c1:e0:a6:84:42:14:4a:40:47:6e:57:96:0f:b4:1e:c9: e5:19:31:87:dd:40:6e:03:57:d7:c9:d6:46:c1:72:94:ea:dd: de:2f:f0:3d:fe:5d:18:fc:c0:36:d5:5a:50:00:2d:0f:3b:9e: 06:60:2f:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTq7IPzdN7WS8shRgxMMkvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0 MzU3YjkwHhcNMjUxMjI1MDQwMTU5WhcNMjUxMjI2MDQwMTU5WjAzMTEwLwYDVQQD EyhmOGZhNWUyZDY2ZTBjMzlkMjBhNTM0ODFkNDNkZGNiNTNlYjY0OTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnngtZkNaVUnrAe/GBlKji2kO6OXi qfAr9500gv+pu3tI1Hkvj5NvjMpMVowdHXZuuTEyGYvczVkowaoYZizjBS296dhq Iz0ai7TbJZlf5IEgJPV2J7Qp/DvJuimJ1psiirLxwGlK6Ql7fx1DBuPFYKHoGkbL za7dMInMyJG26Vo5sQavPmyTnk1YUha0PsQRiAJw/XqsRtNmgDWeunZbCmDOmyhL n8CbPImcLPo3FktJWZ1tlSoU8t5W0qr1N88kJAlkRb7tirNYTCxJ7R9OIs4WIXab BfUnT0lMJpBJcmMZEapAe4i8tutmqAaPql3p1cu/T04+jQlWs4SygP7I1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj6Xi1m4MOdIKU0gdQ93LU+tkmVMB8GA1UdIwQY MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMkm2To6 iEy1f5Ni7GOblsQe4ZpzR5Lj4QzBfzkpj1+RCeLUkyPrP8DXZuXZwnH8obLJTRY7 DOoSb4VxSmD7Q7tc/n90rzbnV7Tnvf69KvCWUsB+N+l4euKcQMXzLQooVagIS3bM xgtSLNa6A0BQn+Huf5u3XXh5fS0DHJQZeRxZx/FRIkRdc2C4VG88Baaaykv4z9lc y3CKPiXNT3jlLEgIc0Tkoq2j4c04sCIZj5d3sOeWUxx2u7on4pS6+/nzPfgwnvi2 TfzB4KaEQhRKQEduV5YPtB7J5Rkxh91AbgNX18nWRsFylOrd3i/wPf5dGPzANtVa UAAtDzueBmAviQ== -----END CERTIFICATE-----Generated at Thu Dec 25 07:12:53 2025 by rpki-client