This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft File: egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json) Hash identifier: TS3btwN5WbYkTSmkr68HW80MZjIWayPXhnn6iVhP6Hc= Subject key identifier: AE:1A:88:6E:CB:BB:D9:BC:69:7B:ED:7C:A9:B8:6D:1B:1C:CF:3A:3B Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Certificate serial: 019B3CECA8AC63875AC25B07D84D1B7BB29B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft Manifest number: 10E7 Signing time: Sat 20 Dec 2025 18:01:41 +0000 Manifest this update: Sat 20 Dec 2025 18:01:41 +0000 Manifest next update: Sun 21 Dec 2025 18:01:41 +0000 Files and hashes: 1: BkC382kbRID_J9MdHf3y_ZWlEf8.roa (hash: ts/8AAif8Jl4mhcHO6WxEGvpSqp2TwktqqlEa+sbGTU=) 2: ONKHpYimKuwzn77m9LydYFbzpRY.roa (hash: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=) 3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: 88rwLkcKMfC9voMfCsmtgxJzBkfQ22DL3Tf8J70LteY=) 4: k2qVus75QweqwVLaTzgWKFt2l2k.roa (hash: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=) 5: kBFDTimH0wXzN6bZHwFh18BZ9YQ.roa (hash: gXdNyTqShsEpC9gTq8XtRziYkmToBDMK/+q0FeGIxLk=) 6: utnanlwrMPvqo9oUFO7C-isrnws.roa (hash: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:a8:ac:63:87:5a:c2:5b:07:d8:4d:1b:7b:b2:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Validity Not Before: Dec 20 18:01:41 2025 GMT Not After : Dec 21 18:01:41 2025 GMT Subject: CN=ae1a886ecbbbd9bc697bed7ca9b86d1b1ccf3a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a2:24:9b:6d:8d:4d:1c:7a:d8:5d:72:29:6d: b0:0f:d3:02:cf:b4:61:5f:1f:d2:09:ef:03:6a:e3: 5c:51:fd:17:c5:45:ed:9a:2c:00:ba:c4:b2:d2:48: 11:8a:23:15:4f:e4:8c:2e:e7:30:c2:a2:43:cb:9f: 49:d9:3c:b5:84:0a:41:09:1f:44:fd:b1:e9:66:60: 66:33:b7:c6:da:de:ab:f3:db:f2:e5:9a:81:d4:ec: ac:08:18:7d:83:12:b2:89:e3:5f:51:af:ea:81:e1: 99:b1:3b:52:80:8e:06:f4:be:e3:f7:6a:e3:5e:05: 2b:09:15:ff:d6:16:14:e0:26:e5:f4:08:94:18:7f: 13:b0:7c:13:7c:d0:d1:18:47:46:d4:aa:ab:dd:0a: 4a:1a:87:28:83:a3:8d:d8:cf:fd:74:e9:ec:d0:0d: 98:2d:86:8c:08:81:fd:63:da:7b:95:f6:c9:80:2c: 3d:ad:83:b2:8b:0e:ca:34:69:dd:69:83:52:b6:42: 02:88:c2:ac:b4:98:82:f9:3d:da:8b:4c:54:df:0f: d3:43:cc:6f:c9:94:70:21:30:d0:42:f2:85:a6:74: 4a:af:4b:21:ab:0d:7e:fd:fd:34:1e:1d:36:85:13: 3d:59:13:a5:ca:50:ca:da:a3:03:98:09:a6:3a:78: 95:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:1A:88:6E:CB:BB:D9:BC:69:7B:ED:7C:A9:B8:6D:1B:1C:CF:3A:3B X509v3 Authority Key Identifier: keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:65:73:03:bf:02:01:a3:51:38:d6:2a:e0:0f:8d:63:0c:e0: a1:87:bd:38:49:93:83:c2:2c:0a:2c:3f:49:7f:ab:81:e7:d9: 2a:58:4f:90:42:dd:c9:dc:a0:6c:e2:23:10:1a:cf:d2:46:77: 26:c2:ed:9b:30:be:b3:7b:4e:8d:e3:b8:70:d7:bc:f9:6a:74: bc:15:0d:bb:9a:63:69:9e:ac:ac:eb:52:77:28:5f:cf:43:38: 1f:1a:e3:9f:44:da:31:6e:42:e0:ef:2a:dc:44:17:fd:4a:48: 7e:87:e8:f2:5a:f8:96:1c:31:e7:38:8c:b6:66:1d:50:07:e5: 42:8c:f9:72:37:3a:88:e8:49:09:8a:33:c0:38:96:a4:8a:41: b5:5b:34:44:37:5f:e4:92:f9:f1:2d:f7:5d:84:8c:fd:40:2d: a3:3b:cb:d5:eb:c3:f2:43:42:cc:8b:d2:5b:7b:32:27:b1:8f: 7a:02:72:1c:83:b9:a0:46:d2:21:ab:cb:92:08:8d:c8:83:86: ae:e2:29:c9:e3:9d:79:0d:67:77:8d:08:ca:ab:35:17:82:e9: 0f:1c:53:38:09:ac:80:a9:f7:d1:06:ab:af:5d:9f:df:cc:8f: 43:75:63:d7:bc:b2:29:33:30:d9:04:28:63:50:d6:02:2f:ae: d5:d4:ea:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87KisY4dawlsH2E0be7KbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm ZGM2MGEwHhcNMjUxMjIwMTgwMTQxWhcNMjUxMjIxMTgwMTQxWjAzMTEwLwYDVQQD EyhhZTFhODg2ZWNiYmJkOWJjNjk3YmVkN2NhOWI4NmQxYjFjY2YzYTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqIkm22NTRx62F1yKW2wD9MCz7Rh Xx/SCe8DauNcUf0XxUXtmiwAusSy0kgRiiMVT+SMLucwwqJDy59J2Ty1hApBCR9E /bHpZmBmM7fG2t6r89vy5ZqB1OysCBh9gxKyieNfUa/qgeGZsTtSgI4G9L7j92rj XgUrCRX/1hYU4Cbl9AiUGH8TsHwTfNDRGEdG1Kqr3QpKGocog6ON2M/9dOns0A2Y LYaMCIH9Y9p7lfbJgCw9rYOyiw7KNGndaYNStkICiMKstJiC+T3ai0xU3w/TQ8xv yZRwITDQQvKFpnRKr0shqw1+/f00Hh02hRM9WROlylDK2qMDmAmmOniVIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4aiG7Lu9m8aXvtfKm4bRsczzo7MB8GA1UdIwQY MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt NGRlZjU3MzY1MTY5LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5 LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPWVzA78C AaNRONYq4A+NYwzgoYe9OEmTg8IsCiw/SX+rgefZKlhPkELdydygbOIjEBrP0kZ3 JsLtmzC+s3tOjeO4cNe8+Wp0vBUNu5pjaZ6srOtSdyhfz0M4Hxrjn0TaMW5C4O8q 3EQX/UpIfofo8lr4lhwx5ziMtmYdUAflQoz5cjc6iOhJCYozwDiWpIpBtVs0RDdf 5JL58S33XYSM/UAtozvL1evD8kNCzIvSW3syJ7GPegJyHIO5oEbSIavLkgiNyIOG ruIpyeOdeQ1nd40Iyqs1F4LpDxxTOAmsgKn30Qarr12f38yPQ3Vj17yyKTMw2QQo Y1DWAi+u1dTquw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:28:05 2025 by rpki-client