This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft File: egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json) Hash identifier: FfGf1R/TMeINpueuw3NGmVsA/O3xHUHn0tQNjf6za/c= Subject key identifier: 4E:60:4F:7A:FE:6C:4F:43:79:EF:79:76:1D:D2:F2:97:DB:83:FF:F1 Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Certificate serial: 019B3C7F304ACED7A0BF9427CC865035E228 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft Manifest number: 12A0 Signing time: Sat 20 Dec 2025 16:02:06 +0000 Manifest this update: Sat 20 Dec 2025 16:02:06 +0000 Manifest next update: Sun 21 Dec 2025 16:02:06 +0000 Files and hashes: 1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: 8/5TG1dzB0Pfg5uQ9cDfmCTGRO6sOB3/soVS7jFMjN4=) 2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:30:4a:ce:d7:a0:bf:94:27:cc:86:50:35:e2:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Validity Not Before: Dec 20 16:02:06 2025 GMT Not After : Dec 21 16:02:06 2025 GMT Subject: CN=4e604f7afe6c4f4379ef79761dd2f297db83fff1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:70:90:ba:aa:49:80:2c:08:3f:0b:b5:a2:e0: bb:97:94:ed:f6:58:e0:c3:45:b3:f7:9b:4b:6b:af: fd:5c:17:bd:48:7d:57:4b:11:6e:1a:86:f2:da:cd: 41:0f:29:62:07:9a:f3:b2:81:49:b0:9b:0a:dc:20: 09:6d:bf:2a:77:a8:2b:93:96:7c:ef:27:6a:e3:28: 6b:0d:08:81:ed:d4:53:b2:1e:f0:30:b9:45:7e:63: 96:82:35:a8:90:31:db:d3:60:b2:13:fa:78:3d:6f: 48:7b:7b:1e:16:3b:08:73:a0:59:c7:28:c9:27:f6: 35:2f:7e:b1:d6:75:10:56:2c:c1:e1:df:a8:95:5f: c3:4e:c8:d4:2a:52:1a:3e:62:83:87:8c:a7:f2:c7: 44:3b:b2:7b:6c:9f:92:8c:b9:9c:22:9e:6c:52:0a: fd:f6:9a:28:54:86:61:c0:0d:3c:5e:b8:50:0d:23: a5:1a:66:9c:99:9a:6a:ba:bd:40:1f:08:a1:e7:92: 1f:54:6f:40:ae:1a:e0:d8:3b:4c:c0:5c:2d:e0:a9: 32:d6:37:be:4f:bb:16:8d:81:1d:09:76:eb:8b:03: 2c:c5:78:26:ae:94:52:a0:29:b4:6f:4c:aa:e3:7b: 27:d3:39:90:bc:7d:ea:9f:da:c3:08:85:46:62:20: 5a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:60:4F:7A:FE:6C:4F:43:79:EF:79:76:1D:D2:F2:97:DB:83:FF:F1 X509v3 Authority Key Identifier: keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:32:37:0c:f7:84:4d:a2:93:90:0e:33:4f:a6:5d:3b:7f:ec: 86:f9:01:c1:14:6f:4d:fd:e9:4d:9a:fc:82:39:bd:8c:95:87: 4b:ef:98:8f:ff:cf:43:2d:97:6a:a2:39:c8:1b:e6:1f:b7:b6: 2b:3c:75:6d:6b:6b:de:a4:bc:09:31:52:a3:64:21:1f:d4:eb: 0f:0e:ff:a8:7c:8a:6c:dc:e8:28:19:88:a4:c5:36:13:b7:bd: c6:ee:5f:3f:03:c1:fd:7f:33:dc:ee:df:2c:72:37:dd:ca:43: 50:b6:11:f2:ae:de:47:fa:72:84:b1:aa:12:ec:77:81:1c:70: 80:78:ec:61:d1:f0:5a:bb:9a:6a:9a:6f:e8:35:95:a2:30:c3: ec:9b:44:a4:f5:6c:ed:51:d1:b1:2a:7b:f2:50:43:b0:b5:42: 3d:a4:5f:a3:a8:b1:55:fa:2c:d3:05:96:46:db:e9:43:f3:12: 63:d2:93:3a:59:86:58:d9:1e:67:f7:af:65:bf:a3:0f:bf:7f: 3c:e2:f2:9f:89:9f:f8:35:5a:ba:68:55:15:05:46:11:fb:1d: d8:66:81:84:fb:54:cc:5f:b7:ba:88:5b:24:86:10:17:11:ec: 3b:53:a3:9e:af:54:7f:a6:6f:bf:05:ae:8f:82:f3:20:f0:f1: 90:36:f1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fzBKztegv5QnzIZQNeIoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDZlMzBhY2NkYjE3YTI1NTQ3M2JiNmMyMjRmMWZjMTU0 NThlOGIwHhcNMjUxMjIwMTYwMjA2WhcNMjUxMjIxMTYwMjA2WjAzMTEwLwYDVQQD Eyg0ZTYwNGY3YWZlNmM0ZjQzNzllZjc5NzYxZGQyZjI5N2RiODNmZmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnCQuqpJgCwIPwu1ouC7l5Tt9ljg w0Wz95tLa6/9XBe9SH1XSxFuGoby2s1BDyliB5rzsoFJsJsK3CAJbb8qd6grk5Z8 7ydq4yhrDQiB7dRTsh7wMLlFfmOWgjWokDHb02CyE/p4PW9Ie3seFjsIc6BZxyjJ J/Y1L36x1nUQVizB4d+olV/DTsjUKlIaPmKDh4yn8sdEO7J7bJ+SjLmcIp5sUgr9 9pooVIZhwA08XrhQDSOlGmacmZpqur1AHwih55IfVG9Arhrg2DtMwFwt4Kky1je+ T7sWjYEdCXbriwMsxXgmrpRSoCm0b0yq43sn0zmQvH3qn9rDCIVGYiBa5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5gT3r+bE9Dee95dh3S8pfbg//xMB8GA1UdIwQY MBaAFHoG4wrM2xeiVUc7tsIk8fwVRY6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgt ZjdjMGMyZjhhM2MxLzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgtZjdjMGMyZjhhM2Mx LzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjI3DPeE TaKTkA4zT6ZdO3/shvkBwRRvTf3pTZr8gjm9jJWHS++Yj//PQy2XaqI5yBvmH7e2 Kzx1bWtr3qS8CTFSo2QhH9TrDw7/qHyKbNzoKBmIpMU2E7e9xu5fPwPB/X8z3O7f LHI33cpDULYR8q7eR/pyhLGqEux3gRxwgHjsYdHwWruaappv6DWVojDD7JtEpPVs 7VHRsSp78lBDsLVCPaRfo6ixVfos0wWWRtvpQ/MSY9KTOlmGWNkeZ/evZb+jD79/ POLyn4mf+DVaumhVFQVGEfsd2GaBhPtUzF+3uohbJIYQFxHsO1Ojnq9Uf6ZvvwWu j4LzIPDxkDbxiQ== -----END CERTIFICATE-----Generated at Sun Dec 21 00:53:14 2025 by rpki-client