This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json) Hash identifier: +MSqZLj5v0q9izNDMHrOB6Ke6OTJ2oPg9NZiFytksx8= Subject key identifier: A7:8C:0F:E3:8F:51:A6:5A:48:C0:7C:88:46:15:38:EE:3D:EB:27:59 Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9 Certificate serial: 019B66FC053FB96A853132CA3BDB7468E167 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft Manifest number: 0926 Signing time: Sun 28 Dec 2025 22:02:30 +0000 Manifest this update: Sun 28 Dec 2025 22:02:30 +0000 Manifest next update: Mon 29 Dec 2025 22:02:30 +0000 Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: G8VoULDDLHDDX03fVNZaw3NMdpM9R6aG/zg2VCGpCDQ=) 2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 20:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:66:fc:05:3f:b9:6a:85:31:32:ca:3b:db:74:68:e1:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9 Validity Not Before: Dec 28 22:02:30 2025 GMT Not After : Dec 29 22:02:30 2025 GMT Subject: CN=a78c0fe38f51a65a48c07c88461538ee3deb2759 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2b:74:76:31:b0:6a:56:e2:77:c6:cd:0c:c1: 33:68:10:8f:5f:8c:87:d1:32:f2:17:ef:03:09:52: ad:91:3b:a9:e3:e7:2c:35:40:3a:01:5d:f5:9d:e5: 53:1e:1b:5c:af:05:13:9f:21:a7:f9:6f:bf:43:ed: 5d:71:fe:51:df:cc:e1:cf:a0:99:51:f5:ce:b0:21: c9:72:34:2e:ef:85:35:35:2c:60:04:b0:88:c5:54: fe:4a:65:86:10:16:31:1b:26:42:d8:e9:30:c5:db: ac:4e:28:6c:05:48:67:80:34:6e:25:6c:a3:8f:95: dd:99:f9:ad:dc:d9:8c:77:97:05:57:72:ff:db:5f: 91:7b:c5:b2:f9:45:83:11:19:61:22:20:b6:9f:64: 6a:3f:ce:e1:7b:1a:ff:3a:24:bc:25:9f:dc:a6:13: 70:ec:81:9b:9e:4c:b0:e8:d2:09:d2:ed:72:d1:ad: be:e9:0a:dc:d5:1b:66:03:70:b9:3f:36:b9:b6:8e: 14:fc:c6:52:cd:0d:8a:3f:93:80:26:cf:79:6d:eb: f9:4e:02:8a:96:3f:8f:82:51:d3:fc:91:fe:c5:7f: f4:78:8e:1b:40:03:69:37:a0:1b:f9:d3:74:d1:48: 7d:f6:a7:10:0c:4c:32:c2:92:a3:fb:4c:3e:c2:7d: 49:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8C:0F:E3:8F:51:A6:5A:48:C0:7C:88:46:15:38:EE:3D:EB:27:59 X509v3 Authority Key Identifier: keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a0:96:66:5d:af:56:20:d2:13:90:7c:1a:84:e8:60:2f:f4: 97:98:24:f8:e7:f8:be:0b:f5:44:0a:c9:c8:75:be:42:3b:85: 0d:a7:64:b2:99:a4:3f:9d:c3:d4:03:18:2d:b7:77:f3:19:bc: 03:99:9a:6d:ad:d4:3f:a0:bc:a1:b1:7d:aa:58:11:26:7d:93: f6:1a:55:6b:ef:b6:29:ae:55:bb:f4:65:dc:77:8b:4c:be:b9: 44:6d:32:4d:6b:fc:5a:b7:ab:61:82:08:cb:fb:41:13:fd:76: 30:79:af:0e:c3:05:96:32:83:11:23:78:73:bf:0e:f4:be:09: ce:ef:37:84:a8:51:2b:5e:7a:57:17:c6:9f:25:6a:a8:61:b3: a3:e1:b2:1d:db:8e:dc:f6:03:e3:03:e2:e1:8b:5d:74:52:27: 3f:ca:1a:46:f2:92:fa:e1:ed:a5:2a:f8:e9:3e:e5:4a:a4:6f: 26:a2:45:46:8b:b6:01:72:d0:25:cd:b8:c5:d0:77:88:88:2d: 70:64:f6:16:56:ed:ca:1b:f3:22:95:72:48:d6:f5:b1:72:10: e3:81:4d:a7:c4:68:a2:3d:dd:d6:cf:0c:35:5c:6e:1f:f3:e0: 1b:bb:99:ba:96:a6:35:f0:80:2c:df:9e:94:fe:15:55:1c:46: 52:2e:64:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtm/AU/uWqFMTLKO9t0aOFnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0 MzU3YjkwHhcNMjUxMjI4MjIwMjMwWhcNMjUxMjI5MjIwMjMwWjAzMTEwLwYDVQQD EyhhNzhjMGZlMzhmNTFhNjVhNDhjMDdjODg0NjE1MzhlZTNkZWIyNzU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyt0djGwalbid8bNDMEzaBCPX4yH 0TLyF+8DCVKtkTup4+csNUA6AV31neVTHhtcrwUTnyGn+W+/Q+1dcf5R38zhz6CZ UfXOsCHJcjQu74U1NSxgBLCIxVT+SmWGEBYxGyZC2OkwxdusTihsBUhngDRuJWyj j5Xdmfmt3NmMd5cFV3L/21+Re8Wy+UWDERlhIiC2n2RqP87hexr/OiS8JZ/cphNw 7IGbnkyw6NIJ0u1y0a2+6Qrc1RtmA3C5Pza5to4U/MZSzQ2KP5OAJs95bev5TgKK lj+PglHT/JH+xX/0eI4bQANpN6Ab+dN00Uh99qcQDEwywpKj+0w+wn1JZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeMD+OPUaZaSMB8iEYVOO496ydZMB8GA1UdIwQY MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6CWZl2v ViDSE5B8GoToYC/0l5gk+Of4vgv1RArJyHW+QjuFDadkspmkP53D1AMYLbd38xm8 A5maba3UP6C8obF9qlgRJn2T9hpVa++2Ka5Vu/Rl3HeLTL65RG0yTWv8WrerYYII y/tBE/12MHmvDsMFljKDESN4c78O9L4Jzu83hKhRK156VxfGnyVqqGGzo+GyHduO 3PYD4wPi4YtddFInP8oaRvKS+uHtpSr46T7lSqRvJqJFRou2AXLQJc24xdB3iIgt cGT2FlbtyhvzIpVySNb1sXIQ44FNp8Rooj3d1s8MNVxuH/PgG7uZupamNfCALN+e lP4VVRxGUi5kQg== -----END CERTIFICATE-----Generated at Sun Dec 28 23:39:11 2025 by rpki-client