This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json) Hash identifier: 9yebWy618+EdtL9hXQvoV/8jmPF0PWjr5sdJLlvFVxQ= Subject key identifier: 52:5A:6F:BF:AD:43:85:D5:26:39:CB:56:BC:21:E1:D7:F2:D6:D0:B2 Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Certificate serial: 019B40FFD4ED4AAD2A3D59C9868A2DCC3D10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft Manifest number: 1789 Signing time: Sun 21 Dec 2025 13:01:06 +0000 Manifest this update: Sun 21 Dec 2025 13:01:06 +0000 Manifest next update: Mon 22 Dec 2025 13:01:06 +0000 Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: 5OfCV7dRZZO4b/wTck6obWMrmu+sRexMhXIhmmY9Z8k=) 2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:d4:ed:4a:ad:2a:3d:59:c9:86:8a:2d:cc:3d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Validity Not Before: Dec 21 13:01:06 2025 GMT Not After : Dec 22 13:01:06 2025 GMT Subject: CN=525a6fbfad4385d52639cb56bc21e1d7f2d6d0b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a8:15:dc:0d:26:ab:df:e1:5a:24:05:34:7f: 0a:7f:4d:20:04:d7:6d:cb:d3:88:5e:2e:2b:63:a5: 00:86:bd:4c:bf:b3:bb:0f:fc:66:02:61:51:50:8e: ef:7f:96:dd:f1:e8:95:ca:c3:bb:c1:38:f8:dc:8c: 0f:19:16:b7:1f:81:9d:42:c1:c2:f5:41:55:3c:e1: 87:8d:a4:ed:72:6e:ff:33:24:ff:f9:66:73:ac:d6: f1:7d:69:e3:92:ab:2d:58:69:ae:4d:80:47:f2:c6: 68:1e:7f:67:47:73:ad:99:f2:00:a1:4e:b8:35:c6: cd:8a:cf:09:a9:fd:14:b8:85:31:96:c3:57:3a:93: d1:76:75:8a:5b:23:5c:1d:a8:fe:85:f4:21:2f:4a: 63:f7:cf:84:74:d2:37:47:03:7e:97:05:73:ef:c9: c6:7b:40:3a:54:0d:f2:56:9b:58:29:ec:6e:eb:2a: df:07:32:9a:5f:cd:62:5e:9c:49:96:86:4a:b4:93: ac:b5:0c:b7:6e:f9:24:dc:d2:40:27:0b:14:fc:e7: 58:cd:5e:00:2e:f9:d7:73:a2:a5:48:b1:cd:cf:24: 43:d4:05:f2:e2:95:33:c4:20:67:4c:ae:7d:3c:51: 2f:4f:a3:9f:3f:ec:0d:3b:5e:4a:75:0c:d4:76:f9: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5A:6F:BF:AD:43:85:D5:26:39:CB:56:BC:21:E1:D7:F2:D6:D0:B2 X509v3 Authority Key Identifier: keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:bf:55:e6:c1:4f:a6:7e:70:97:06:4a:e4:f9:1b:b8:91:09: 3d:e2:9b:6e:bf:b9:4f:6c:57:58:33:90:4d:2d:c1:2c:49:c3: 73:fe:eb:c0:92:66:47:d0:4e:41:db:3b:7e:c4:ba:3c:d7:ec: 0b:cc:23:95:92:2f:d1:c5:63:f0:e3:de:04:9d:40:ad:71:e2: a3:21:2a:6e:34:31:c2:77:8f:35:ec:c0:20:5a:a1:46:50:05: 49:06:9e:75:2d:03:e5:1f:27:54:79:a5:26:57:35:fd:6e:df: 98:00:1b:a6:91:11:b5:61:9a:28:4a:de:79:80:54:1f:db:78: f0:5b:b8:ce:ac:c3:77:02:d3:59:db:b6:da:76:f2:76:81:c9: 9f:44:c1:69:94:df:ce:3b:7d:3d:96:be:ad:6f:7a:66:90:9b: 84:f2:73:0c:16:8a:aa:9e:72:29:63:ee:17:13:d6:32:99:a0: 51:a6:5b:8d:c6:a4:c6:be:bb:1d:f8:af:3a:0c:56:1b:64:85: cd:11:2d:91:3a:80:29:75:05:2f:c0:6b:4b:e3:6e:e7:3b:91: 4c:a8:aa:26:94:12:5d:8a:d6:79:29:49:b5:76:0b:c8:0a:45: 47:a4:8d:26:69:9d:db:45:0a:b3:d4:05:74:27:55:da:ed:c6: a2:fd:e9:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/9TtSq0qPVnJhootzD0QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3 NjM5MWIwHhcNMjUxMjIxMTMwMTA2WhcNMjUxMjIyMTMwMTA2WjAzMTEwLwYDVQQD Eyg1MjVhNmZiZmFkNDM4NWQ1MjYzOWNiNTZiYzIxZTFkN2YyZDZkMGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAragV3A0mq9/hWiQFNH8Kf00gBNdt y9OIXi4rY6UAhr1Mv7O7D/xmAmFRUI7vf5bd8eiVysO7wTj43IwPGRa3H4GdQsHC 9UFVPOGHjaTtcm7/MyT/+WZzrNbxfWnjkqstWGmuTYBH8sZoHn9nR3OtmfIAoU64 NcbNis8Jqf0UuIUxlsNXOpPRdnWKWyNcHaj+hfQhL0pj98+EdNI3RwN+lwVz78nG e0A6VA3yVptYKexu6yrfBzKaX81iXpxJloZKtJOstQy3bvkk3NJAJwsU/OdYzV4A LvnXc6KlSLHNzyRD1AXy4pUzxCBnTK59PFEvT6OfP+wNO15KdQzUdvnMWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJab7+tQ4XVJjnLVrwh4dfy1tCyMB8GA1UdIwQY MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG79V5sFP pn5wlwZK5PkbuJEJPeKbbr+5T2xXWDOQTS3BLEnDc/7rwJJmR9BOQds7fsS6PNfs C8wjlZIv0cVj8OPeBJ1ArXHioyEqbjQxwnePNezAIFqhRlAFSQaedS0D5R8nVHml Jlc1/W7fmAAbppERtWGaKEreeYBUH9t48Fu4zqzDdwLTWdu22nbydoHJn0TBaZTf zjt9PZa+rW96ZpCbhPJzDBaKqp5yKWPuFxPWMpmgUaZbjcakxr67HfivOgxWG2SF zREtkTqAKXUFL8BrS+Nu5zuRTKiqJpQSXYrWeSlJtXYLyApFR6SNJmmd20UKs9QF dCdV2u3Gov3pCg== -----END CERTIFICATE-----Generated at Sun Dec 21 19:17:09 2025 by rpki-client