This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft File: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json) Hash identifier: rH8xCe/EDXVvKo9OwntNTTORW0L5QK6XzLe9WEbC3Zk= Subject key identifier: 69:F5:D7:F6:A5:F0:6F:1B:46:6F:70:1F:E5:A1:27:8E:72:BD:74:A1 Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4 Certificate issuer: /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4 Certificate serial: 019B397D8E18C569317E53FB1A053B2CDF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft Manifest number: 13FE Signing time: Sat 20 Dec 2025 02:01:28 +0000 Manifest this update: Sat 20 Dec 2025 02:01:28 +0000 Manifest next update: Sun 21 Dec 2025 02:01:28 +0000 Files and hashes: 1: BdZzfpWUqYfKFqlermnKvlGhVqg.roa (hash: cnfauNqEx83yzpIrax/6Sz6YjPOm2320n5WGQAD+OeQ=) 2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: 55UDRY8/V9jeMAp5K/eKph+GaEqDQD66lhdOyDp7XJg=) 3: ra0nnbcZjMUUDlUlb-vmYcIyds0.roa (hash: 61VSpJ95ELuZw8iWy7GNiz4aAFsXsl/dAx+qYdFwNhU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:8e:18:c5:69:31:7e:53:fb:1a:05:3b:2c:df:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4 Validity Not Before: Dec 20 02:01:28 2025 GMT Not After : Dec 21 02:01:28 2025 GMT Subject: CN=69f5d7f6a5f06f1b466f701fe5a1278e72bd74a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ab:63:e1:87:13:a0:86:7e:31:85:33:0e:2d: 92:06:87:5b:5e:20:d0:ed:4f:8e:94:ba:51:03:14: 40:27:bb:3d:a5:09:9a:fc:2d:74:c5:e8:27:5a:c9: 13:0d:6e:41:6a:43:3c:f5:2f:fd:68:ef:bf:46:99: af:6e:f3:26:ab:b2:f2:37:a6:b9:d6:92:aa:ba:85: 26:3c:61:43:22:be:d4:27:a6:22:99:2f:15:7d:cf: ce:d3:57:54:ea:00:e1:b5:bf:69:7d:b8:05:0a:6e: e3:da:39:09:0f:8a:78:3b:fd:ab:85:c4:53:81:0e: 4d:ac:eb:b1:49:b3:62:2d:57:b2:1b:aa:2a:e2:9f: eb:10:30:24:b7:19:b8:6f:56:45:a4:71:c0:bc:5d: 91:e6:c1:f5:2a:4c:81:f8:28:69:76:44:49:30:73: 87:62:27:cc:47:d6:44:d1:ba:ac:d3:b6:e8:57:54: cd:4b:88:9b:d9:95:fa:34:e3:7e:9f:28:5e:35:5c: 56:98:85:84:27:33:11:4d:3a:10:92:cc:61:3a:6d: 30:ed:3d:fd:4b:cf:89:19:0d:30:93:c3:c8:79:7c: 0a:2f:d4:63:bb:9f:19:83:0a:c1:23:6f:c7:ad:e6: 72:40:66:fe:d4:45:33:a4:85:6f:ee:76:6e:a7:07: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:F5:D7:F6:A5:F0:6F:1B:46:6F:70:1F:E5:A1:27:8E:72:BD:74:A1 X509v3 Authority Key Identifier: keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:0f:58:bf:c4:d6:51:d4:8e:84:c6:8d:3d:88:c0:31:e8:82: 42:12:fb:55:6f:b1:c3:b1:59:02:89:de:2f:c1:cc:08:05:8b: 49:41:1b:91:b6:07:95:e1:2a:ab:58:17:0e:55:dc:55:7a:60: ad:62:4d:b0:3a:18:52:48:8e:01:32:76:fb:70:6e:3f:9e:b5: 8c:ce:cd:49:db:4e:83:e1:bd:55:4b:5a:e4:de:2e:b4:cd:05: a2:c4:c0:83:4b:7c:f4:1f:30:b9:cb:a9:6b:b1:af:15:62:33: 72:c1:77:f2:68:d2:08:bb:61:c8:e8:ab:34:dc:b0:e9:c8:5c: d5:f3:0f:e7:97:aa:3a:33:54:fa:24:7d:4a:3f:72:f4:1c:bc: 25:f3:35:94:06:c0:ab:41:77:92:5c:d7:3e:8f:21:4b:d7:2c: ad:5f:21:d3:10:57:79:0a:e0:78:70:77:df:dc:c4:db:2c:22: 38:75:e3:8a:ca:fa:d8:b4:a4:7f:b2:02:b2:b3:bb:9a:a7:fe: ed:53:87:9c:b5:b8:11:84:c7:d7:70:16:56:52:4b:c8:14:da: 3b:1c:92:11:14:59:ca:c0:8d:18:ee:32:41:c9:2c:e4:ff:ea: f4:0c:09:b0:dc:0d:f2:88:38:78:8b:e6:06:53:7d:60:7a:0b: c1:56:a8:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fY4YxWkxflP7GgU7LN87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTFiMzQxNTNkYTBkNWQxMjFjZmY0MzI1OWZjZDllM2Ri ZmM3ZDQwHhcNMjUxMjIwMDIwMTI4WhcNMjUxMjIxMDIwMTI4WjAzMTEwLwYDVQQD Eyg2OWY1ZDdmNmE1ZjA2ZjFiNDY2ZjcwMWZlNWExMjc4ZTcyYmQ3NGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKtj4YcToIZ+MYUzDi2SBodbXiDQ 7U+OlLpRAxRAJ7s9pQma/C10xegnWskTDW5BakM89S/9aO+/RpmvbvMmq7LyN6a5 1pKquoUmPGFDIr7UJ6YimS8Vfc/O01dU6gDhtb9pfbgFCm7j2jkJD4p4O/2rhcRT gQ5NrOuxSbNiLVeyG6oq4p/rEDAktxm4b1ZFpHHAvF2R5sH1KkyB+ChpdkRJMHOH YifMR9ZE0bqs07boV1TNS4ib2ZX6NON+nyheNVxWmIWEJzMRTToQksxhOm0w7T39 S8+JGQ0wk8PIeXwKL9Rju58ZgwrBI2/HreZyQGb+1EUzpIVv7nZupwfKJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn11/al8G8bRm9wH+WhJ45yvXShMB8GA1UdIwQY MBaAFHqRs0FT2g1dEhz/QyWfzZ49v8fUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTkt NGRjYjIzZmRiMDZhLzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81M2Y2NTItMDFiMS00MmYyLTg1ZTktNGRjYjIzZmRiMDZh LzEvZXBHelFWUGFEVjBTSFA5REpaX05uajJfeDlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIw9Yv8TW UdSOhMaNPYjAMeiCQhL7VW+xw7FZAoneL8HMCAWLSUEbkbYHleEqq1gXDlXcVXpg rWJNsDoYUkiOATJ2+3BuP561jM7NSdtOg+G9VUta5N4utM0FosTAg0t89B8wucup a7GvFWIzcsF38mjSCLthyOirNNyw6chc1fMP55eqOjNU+iR9Sj9y9By8JfM1lAbA q0F3klzXPo8hS9csrV8h0xBXeQrgeHB339zE2ywiOHXjisr62LSkf7ICsrO7mqf+ 7VOHnLW4EYTH13AWVlJLyBTaOxySERRZysCNGO4yQcks5P/q9AwJsNwN8og4eIvm BlN9YHoLwVao8A== -----END CERTIFICATE-----Generated at Sat Dec 20 07:29:30 2025 by rpki-client