This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json) Hash identifier: r4LbJxpw0t3oj96cEhUlrPYuFb7JzdZIEfI4ITSsF1Y= Subject key identifier: E9:5A:D2:79:6F:9B:14:49:24:3F:3D:40:20:67:80:9D:89:0F:78:5D Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Certificate serial: 019B3CB50AA3C979E9810DD0169D200966F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft Manifest number: 1788 Signing time: Sat 20 Dec 2025 17:00:56 +0000 Manifest this update: Sat 20 Dec 2025 17:00:56 +0000 Manifest next update: Sun 21 Dec 2025 17:00:56 +0000 Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: 2nE9csqz3BPfmznw9e4ORbS2gf3aaEtFRnDs7LLlSQg=) 2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=) 3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:0a:a3:c9:79:e9:81:0d:d0:16:9d:20:09:66:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Validity Not Before: Dec 20 17:00:56 2025 GMT Not After : Dec 21 17:00:56 2025 GMT Subject: CN=e95ad2796f9b1449243f3d402067809d890f785d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:85:2e:a2:b8:fd:52:66:19:2c:be:8b:e5:20: e0:5b:39:6f:b0:81:90:02:c3:1a:7b:d0:47:f1:4b: e4:a5:22:20:7b:48:22:c5:79:3a:5f:d7:82:56:5b: 45:c6:24:05:9b:9a:8d:8a:a9:29:74:14:ed:44:1d: d5:e8:3c:e4:8e:47:90:44:77:6d:0a:ae:0f:a2:ee: 9d:ae:f0:29:49:7b:91:48:04:98:23:67:cb:3f:ad: ce:1b:13:86:7e:51:c3:7f:ea:60:d1:1e:49:a2:02: 61:c6:80:b9:3e:eb:4d:8b:6d:b7:37:30:f1:19:44: dc:41:f1:5d:d5:07:67:a0:f8:6d:68:f4:5e:79:2a: 06:6e:bb:1b:1c:10:05:69:ea:de:0c:af:21:e9:87: 37:20:d4:b8:60:ad:eb:93:0a:c3:85:6e:c4:5b:a0: b7:8a:6a:5f:1e:09:e4:46:84:42:c1:76:8e:31:21: e0:3f:d2:c3:5c:0e:a7:25:8b:49:13:33:85:67:5d: 50:d9:8f:27:62:53:8a:e6:d8:4d:c0:64:9e:89:ca: e3:7c:38:8e:45:91:6a:c0:2a:16:ca:74:e4:9f:05: b3:7c:24:66:42:fd:fe:fb:34:ff:f9:c1:44:48:21: 3c:cd:d9:12:9f:c4:a8:79:1f:f8:7e:50:b3:df:17: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5A:D2:79:6F:9B:14:49:24:3F:3D:40:20:67:80:9D:89:0F:78:5D X509v3 Authority Key Identifier: keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:04:ee:dc:14:e3:fb:ca:73:f9:1e:b4:1e:54:02:2d:db:bb: 8a:26:b4:59:7d:cc:02:93:9e:14:f4:d6:b2:6b:d3:b1:e6:2b: 00:49:c0:79:86:18:92:96:3c:cf:24:aa:69:6b:f2:62:db:98: bb:06:9a:8f:0e:f2:06:da:9d:97:2c:88:50:8d:ac:50:7b:09: a3:91:08:63:9b:98:42:82:1a:e0:7f:11:bd:d1:12:b1:19:95: 6f:ad:e0:fc:1c:e0:a5:54:53:bd:87:82:3b:1b:46:6c:55:18: e1:b0:f1:5a:c8:8e:4b:8c:c8:52:00:26:32:fc:33:42:2a:4c: 61:3c:62:6e:11:d6:9a:b2:35:74:bd:8e:6a:49:03:a1:57:9a: ba:e2:5f:88:96:7e:5b:75:67:26:28:c6:b0:60:c5:c0:87:ea: 54:26:13:32:17:42:5a:1a:0e:62:cc:10:6c:64:3b:f5:13:27: c1:4a:e7:84:03:10:fc:1c:7d:8c:43:35:12:17:5b:b4:3e:1a: bb:32:fd:c3:a9:cd:21:48:93:dd:7c:87:7d:85:6e:61:f7:00: 84:03:80:ad:32:b5:65:2e:a3:1a:c9:7b:b2:92:40:b0:9a:10: 0b:8d:cc:d4:78:d9:4e:7b:89:a7:b5:31:3c:f3:7b:6f:40:85: 2b:a6:8c:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tQqjyXnpgQ3QFp0gCWb4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5 NjhkMGQwHhcNMjUxMjIwMTcwMDU2WhcNMjUxMjIxMTcwMDU2WjAzMTEwLwYDVQQD EyhlOTVhZDI3OTZmOWIxNDQ5MjQzZjNkNDAyMDY3ODA5ZDg5MGY3ODVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYUuorj9UmYZLL6L5SDgWzlvsIGQ AsMae9BH8UvkpSIge0gixXk6X9eCVltFxiQFm5qNiqkpdBTtRB3V6DzkjkeQRHdt Cq4Pou6drvApSXuRSASYI2fLP63OGxOGflHDf+pg0R5JogJhxoC5PutNi223NzDx GUTcQfFd1QdnoPhtaPReeSoGbrsbHBAFaereDK8h6Yc3INS4YK3rkwrDhW7EW6C3 impfHgnkRoRCwXaOMSHgP9LDXA6nJYtJEzOFZ11Q2Y8nYlOK5thNwGSeicrjfDiO RZFqwCoWynTknwWzfCRmQv3++zT/+cFESCE8zdkSn8SoeR/4flCz3xctiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOla0nlvmxRJJD89QCBngJ2JD3hdMB8GA1UdIwQY MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0 LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgTu3BTj +8pz+R60HlQCLdu7iia0WX3MApOeFPTWsmvTseYrAEnAeYYYkpY8zySqaWvyYtuY uwaajw7yBtqdlyyIUI2sUHsJo5EIY5uYQoIa4H8RvdESsRmVb63g/BzgpVRTvYeC OxtGbFUY4bDxWsiOS4zIUgAmMvwzQipMYTxibhHWmrI1dL2OakkDoVeauuJfiJZ+ W3VnJijGsGDFwIfqVCYTMhdCWhoOYswQbGQ79RMnwUrnhAMQ/Bx9jEM1EhdbtD4a uzL9w6nNIUiT3XyHfYVuYfcAhAOArTK1ZS6jGsl7spJAsJoQC43M1HjZTnuJp7Ux PPN7b0CFK6aMZQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:19:49 2025 by rpki-client