This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json) Hash identifier: ENbuLjXDjPtT5VZ6qO+CCmsq36SZ2do893kwSfvxdis= Subject key identifier: 5A:4A:76:71:48:D3:E4:73:3E:80:4E:32:4F:5C:CA:85:7B:9A:32:60 Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019B3B6BE0DD3320DDF3B86DD1808CAA82C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft Manifest number: 0168 Signing time: Sat 20 Dec 2025 11:01:24 +0000 Manifest this update: Sat 20 Dec 2025 11:01:24 +0000 Manifest next update: Sun 21 Dec 2025 11:01:24 +0000 Files and hashes: 1: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=) 2: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: ivndmt4gAsLYStWW2/KN0Ii7vbuEM9XEr+V3qI8QTzs=) 3: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=) 4: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=) 5: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=) 6: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:e0:dd:33:20:dd:f3:b8:6d:d1:80:8c:aa:82:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Dec 20 11:01:24 2025 GMT Not After : Dec 21 11:01:24 2025 GMT Subject: CN=5a4a767148d3e4733e804e324f5cca857b9a3260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e7:b1:4f:a8:6e:dd:cb:13:af:eb:51:9d:b5: bc:18:31:01:6b:1e:64:66:ea:70:5c:31:7b:cc:d5: a1:9d:e5:2b:29:0f:07:9a:4a:44:ea:b1:b5:42:3b: 06:66:45:b9:57:ca:aa:95:a1:f4:ae:e4:5c:9d:e9: b3:e8:71:0f:27:95:59:40:36:4f:06:c8:d5:43:44: 98:74:21:fa:d0:17:e0:00:2a:d4:d2:52:10:47:c3: b9:71:c9:a6:e1:e2:a0:2a:c4:de:d6:87:e7:0b:0d: 3d:8f:d3:62:a8:7f:13:49:32:6f:b3:a8:7a:02:79: a4:a2:1c:e4:85:2e:05:ee:a2:03:83:04:d6:27:7d: af:f5:df:86:31:b2:d3:47:d8:b4:bd:66:1e:cb:f0: ad:f4:65:58:7e:1e:9f:1d:fa:cb:e0:b6:9e:0f:7b: dc:8c:38:fe:88:e4:fb:be:4d:35:67:4c:ce:ca:b8: 8e:7d:ba:a5:17:0e:b5:2b:79:f1:e4:21:14:dd:df: 22:96:19:1b:38:e6:f8:a3:23:c0:20:c4:b7:8d:2d: 8d:01:ad:43:25:48:00:01:3a:f0:73:8e:f5:8a:13: 8c:26:07:41:3a:3e:16:e8:58:59:d5:e7:e4:50:69: 69:8b:1c:80:b0:72:73:c7:5f:98:80:f3:3a:ac:03: 20:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:4A:76:71:48:D3:E4:73:3E:80:4E:32:4F:5C:CA:85:7B:9A:32:60 X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:41:19:96:33:4f:9b:90:ef:2b:04:1e:7b:fa:f7:8e:e6:d3: 40:b9:9a:61:c1:8f:dd:69:86:13:a8:74:56:f0:f0:79:e6:71: 9e:2b:9a:cf:04:86:b3:d3:8c:e4:e1:56:70:b4:ed:38:fc:6d: eb:c9:e2:d2:d2:30:21:32:56:d7:2f:f4:39:b5:06:79:a0:9d: 67:da:93:d2:4a:ac:ee:db:22:c7:93:8f:9e:b9:a1:7b:91:2b: ae:d0:0a:05:32:50:36:d9:04:d6:5b:8b:62:68:e7:36:cf:04: 54:13:5c:62:e0:6b:76:2d:de:4a:a6:f4:c7:4e:a9:e4:41:62: d2:86:9e:61:bc:e0:09:3b:cc:0d:80:6e:d7:ab:71:65:2c:92: ea:97:3a:93:4e:7e:21:3b:2e:a2:c1:f5:92:8b:f2:25:32:c2: e2:ae:ff:1e:a8:f1:06:58:53:24:18:d3:e7:c7:e2:a9:1c:41: 98:5c:e9:fe:a0:98:9d:d6:99:90:49:4c:09:ef:21:6f:69:a2: c6:6d:1a:6f:7b:a0:aa:92:14:d0:e3:8a:d8:c6:b8:27:a3:de: ce:c5:a1:30:75:57:87:51:f8:a5:c7:20:5f:9f:b4:da:42:d5: 9f:67:15:cb:d1:8b:87:2f:6d:7f:a8:ea:08:33:ec:6a:2f:1b: ff:5a:4a:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a+DdMyDd87ht0YCMqoLCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjUxMjIwMTEwMTI0WhcNMjUxMjIxMTEwMTI0WjAzMTEwLwYDVQQD Eyg1YTRhNzY3MTQ4ZDNlNDczM2U4MDRlMzI0ZjVjY2E4NTdiOWEzMjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeexT6hu3csTr+tRnbW8GDEBax5k ZupwXDF7zNWhneUrKQ8HmkpE6rG1QjsGZkW5V8qqlaH0ruRcnemz6HEPJ5VZQDZP BsjVQ0SYdCH60BfgACrU0lIQR8O5ccmm4eKgKsTe1ofnCw09j9NiqH8TSTJvs6h6 AnmkohzkhS4F7qIDgwTWJ32v9d+GMbLTR9i0vWYey/Ct9GVYfh6fHfrL4LaeD3vc jDj+iOT7vk01Z0zOyriOfbqlFw61K3nx5CEU3d8ilhkbOOb4oyPAIMS3jS2NAa1D JUgAATrwc471ihOMJgdBOj4W6FhZ1efkUGlpixyAsHJzx1+YgPM6rAMg9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFpKdnFI0+RzPoBOMk9cyoV7mjJgMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0EZljNP m5DvKwQee/r3jubTQLmaYcGP3WmGE6h0VvDweeZxniuazwSGs9OM5OFWcLTtOPxt 68ni0tIwITJW1y/0ObUGeaCdZ9qT0kqs7tsix5OPnrmhe5ErrtAKBTJQNtkE1luL YmjnNs8EVBNcYuBrdi3eSqb0x06p5EFi0oaeYbzgCTvMDYBu16txZSyS6pc6k05+ ITsuosH1kovyJTLC4q7/HqjxBlhTJBjT58fiqRxBmFzp/qCYndaZkElMCe8hb2mi xm0ab3ugqpIU0OOK2Ma4J6PezsWhMHVXh1H4pccgX5+02kLVn2cVy9GLhy9tf6jq CDPsai8b/1pK9g== -----END CERTIFICATE-----Generated at Sat Dec 20 13:01:53 2025 by rpki-client