This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json) Hash identifier: oSTPXNjl123O8P8yXIYAqtvqpRFeZPkT0A1msJ+WSOQ= Subject key identifier: 62:6F:4F:84:2C:FB:B3:0E:51:B8:5E:2A:CA:FD:29:F3:5F:C9:3C:F2 Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Certificate serial: 019B4C27C47D793CF3C61F702464D32B52CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft Manifest number: 1790 Signing time: Tue 23 Dec 2025 17:00:33 +0000 Manifest this update: Tue 23 Dec 2025 17:00:33 +0000 Manifest next update: Wed 24 Dec 2025 17:00:33 +0000 Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: zNcGPYpkpQIhfFjCsM2GIstkjQhbDggJPbCS0x8O4sw=) 2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=) 3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 17:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:27:c4:7d:79:3c:f3:c6:1f:70:24:64:d3:2b:52:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Validity Not Before: Dec 23 17:00:33 2025 GMT Not After : Dec 24 17:00:33 2025 GMT Subject: CN=626f4f842cfbb30e51b85e2acafd29f35fc93cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:e9:f3:27:0d:d6:31:11:e1:89:75:15:c8: a0:16:a4:eb:e8:33:de:ec:14:c4:f8:aa:80:57:34: c6:5e:de:8e:94:4d:c4:37:d4:a9:50:1d:75:be:a0: d1:8d:d6:a8:fa:6e:10:0e:1f:a0:e1:09:f3:37:b1: c3:08:ea:5f:1a:53:5c:d0:5d:6d:4d:f6:e8:80:80: 5d:49:e3:4a:a1:b9:af:9d:5d:50:43:6f:bc:4b:a1: 61:ec:5a:1b:cd:49:98:48:5c:f0:8c:5f:35:66:2c: de:ab:6f:19:9e:29:a0:9e:85:0f:66:d2:e0:f7:a6: 18:ac:f7:a9:f1:1e:4e:83:68:b3:3b:29:6b:94:fa: 56:6d:d3:8e:93:ee:3b:7f:2e:0a:c6:34:ff:95:5c: 6e:bc:46:19:7e:a0:59:8c:47:03:1c:21:b6:51:94: 79:94:0b:85:94:b9:52:7d:6b:bb:81:13:b2:e8:10: 77:7d:23:c0:1d:52:34:57:7a:38:ef:81:72:70:bd: e8:bd:9d:6a:d2:50:5f:de:34:35:28:43:f9:fe:1b: fc:56:fe:0d:5f:79:37:1a:8e:fd:3c:0a:e0:5d:2d: 57:b7:19:29:8e:9a:7c:1f:fb:98:da:57:ec:db:13: 90:7a:3e:dc:a6:f5:df:cc:53:46:1e:3d:c4:ec:84: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6F:4F:84:2C:FB:B3:0E:51:B8:5E:2A:CA:FD:29:F3:5F:C9:3C:F2 X509v3 Authority Key Identifier: keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:31:ed:df:c4:20:91:1a:92:bc:1f:77:b1:1b:fc:51:93:de: 07:48:15:41:00:74:3d:cf:7c:22:c8:70:19:b1:ab:db:b9:ca: 79:85:38:fe:a6:60:6f:6f:cd:62:c7:08:ff:22:1e:87:ab:71: 06:8b:ef:5d:a0:f9:46:e9:05:74:68:9d:33:48:e1:7a:78:2d: 89:4a:62:9a:07:d8:88:54:d1:ca:a1:7d:c2:9e:97:29:e3:f7: 67:10:eb:04:84:b3:78:7d:ac:1d:4d:ad:ad:68:3d:39:ea:43: 95:68:63:f2:d2:30:56:64:7d:ba:12:2c:a6:0f:55:b0:12:fd: 85:95:07:c4:38:61:ad:1f:3d:14:27:60:24:3a:e0:d6:0f:69: bc:c8:14:de:84:6b:22:ea:e1:fb:2b:a0:0a:1a:d1:39:69:9e: 18:c2:5b:b4:49:d2:f7:69:d7:f3:93:d4:ee:16:4f:33:bb:a6: 20:ec:4b:d4:18:03:58:7e:5e:84:fd:33:ba:09:a0:77:b9:f8: d2:c6:fe:1f:93:d8:1a:45:5b:2b:46:fb:df:80:67:b9:6b:07: f2:39:44:c6:39:af:f8:13:d5:a9:b3:20:ff:a0:81:a9:c2:f4: 98:9a:99:30:fd:e1:50:2c:ef:e3:e0:2a:0a:4d:87:e5:ab:68: 71:c3:de:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMJ8R9eTzzxh9wJGTTK1LLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5 NjhkMGQwHhcNMjUxMjIzMTcwMDMzWhcNMjUxMjI0MTcwMDMzWjAzMTEwLwYDVQQD Eyg2MjZmNGY4NDJjZmJiMzBlNTFiODVlMmFjYWZkMjlmMzVmYzkzY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmInp8ycN1jER4Yl1FcigFqTr6DPe 7BTE+KqAVzTGXt6OlE3EN9SpUB11vqDRjdao+m4QDh+g4QnzN7HDCOpfGlNc0F1t TfbogIBdSeNKobmvnV1QQ2+8S6Fh7FobzUmYSFzwjF81Zizeq28ZnimgnoUPZtLg 96YYrPep8R5Og2izOylrlPpWbdOOk+47fy4KxjT/lVxuvEYZfqBZjEcDHCG2UZR5 lAuFlLlSfWu7gROy6BB3fSPAHVI0V3o474FycL3ovZ1q0lBf3jQ1KEP5/hv8Vv4N X3k3Go79PArgXS1Xtxkpjpp8H/uY2lfs2xOQej7cpvXfzFNGHj3E7ISQGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJvT4Qs+7MOUbheKsr9KfNfyTzyMB8GA1UdIwQY MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0 LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzHt38Qg kRqSvB93sRv8UZPeB0gVQQB0Pc98IshwGbGr27nKeYU4/qZgb2/NYscI/yIeh6tx BovvXaD5RukFdGidM0jhengtiUpimgfYiFTRyqF9wp6XKeP3ZxDrBISzeH2sHU2t rWg9OepDlWhj8tIwVmR9uhIspg9VsBL9hZUHxDhhrR89FCdgJDrg1g9pvMgU3oRr Iurh+yugChrROWmeGMJbtEnS92nX85PU7hZPM7umIOxL1BgDWH5ehP0zugmgd7n4 0sb+H5PYGkVbK0b734BnuWsH8jlExjmv+BPVqbMg/6CBqcL0mJqZMP3hUCzv4+Aq Ck2H5atoccPeeA== -----END CERTIFICATE-----Generated at Wed Dec 24 02:59:16 2025 by rpki-client