This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json) Hash identifier: 2vMPUyZTDwDa+lbpDK7hykFYIdpS4XSvrAYUQozMCKE= Subject key identifier: DD:05:DC:EE:2A:0D:D3:C4:06:24:1D:0D:E5:53:A6:2B:9C:2A:0E:6D Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019B3C7E7761D0676272D95502ACE6B91A46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:01:19 +0000 Manifest this update: Sat 20 Dec 2025 16:01:19 +0000 Manifest next update: Sun 21 Dec 2025 16:01:19 +0000 Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=) 2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=) 3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=) 4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: xsbIw8o9DsEsoFgF0p3kBzktxtixSHIsE1ANDJqol7s=) 5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:77:61:d0:67:62:72:d9:55:02:ac:e6:b9:1a:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Dec 20 16:01:19 2025 GMT Not After : Dec 21 16:01:19 2025 GMT Subject: CN=dd05dcee2a0dd3c406241d0de553a62b9c2a0e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:40:9a:46:b6:91:05:22:da:7f:5a:59:af:d4: c8:98:5c:e9:43:b2:56:83:a6:21:36:db:74:6d:80: 08:ab:55:8e:77:41:e5:11:f3:63:37:21:36:df:45: de:96:ae:92:41:7a:04:49:70:d7:c1:66:68:a4:1e: b9:71:42:ca:bc:9b:77:bf:9b:a9:b0:47:f0:1f:13: a0:19:61:54:91:4c:bb:98:57:0e:4b:70:f2:56:58: 41:23:c3:b6:26:52:0c:f6:b7:80:8e:a6:01:e1:8d: d8:7e:4f:f2:b5:d8:3a:22:d6:d9:5a:5b:18:01:65: b8:c6:86:0c:d3:7a:d0:61:9f:56:ca:e0:2d:a3:c6: ed:e9:37:3c:b5:fb:6f:33:c2:4c:f8:8d:8c:29:ed: cc:38:20:f5:40:50:d1:58:62:14:f7:08:5f:8c:dd: 5e:f1:ee:f0:6f:ec:0b:5c:71:8f:9c:0c:da:82:d3: 60:55:ed:eb:61:34:3b:17:f1:84:aa:86:43:8d:86: 43:74:a9:91:49:c6:cb:85:ae:3e:1e:6c:21:f8:12: 44:4f:1c:66:30:77:e8:5f:f6:38:95:46:a8:89:7e: ad:26:75:80:50:86:67:0a:1e:3e:78:00:88:61:6b: 65:2e:0f:e7:81:7c:5c:b4:35:52:99:26:8a:32:94: f4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:DC:EE:2A:0D:D3:C4:06:24:1D:0D:E5:53:A6:2B:9C:2A:0E:6D X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:e7:24:ee:d9:85:6d:ac:d9:20:5a:1e:5b:b8:e7:c6:06:56: 52:10:86:5d:22:3c:4c:68:e4:ab:54:24:7b:e8:a7:84:2b:91: bd:58:9b:94:53:a5:1c:44:d3:98:e6:df:6c:da:1d:9d:d8:3d: aa:53:31:7a:d5:e4:cf:5b:5b:a4:a5:04:21:be:40:76:60:be: 7a:b8:0c:b7:23:13:79:07:ac:81:a5:08:79:ec:38:63:8d:2b: 9c:8a:c2:79:21:1b:00:5a:e9:c5:ec:b3:85:a8:40:3d:6a:da: 25:f9:81:a3:78:8f:b5:76:2e:76:56:6d:c4:50:3e:1e:d6:f3: ae:d1:0c:89:59:01:06:c0:86:1a:ed:0c:77:cd:00:02:96:34: ee:d5:aa:8d:93:c5:d1:f8:4d:a0:54:f1:0d:13:da:37:97:8e: ac:d1:3b:d7:f2:3e:68:88:1e:7b:21:6d:d0:2e:e3:56:0d:b7: 17:66:d4:b7:6e:fe:5e:ba:50:b1:38:f9:85:f2:95:8d:c6:5c: e5:98:6a:28:80:38:21:41:e3:3c:ed:a4:3d:99:9e:1a:67:9f: cd:66:b2:cb:a2:8c:c8:84:39:ab:ca:f5:20:e8:ff:5a:44:e9: 8d:e4:e3:05:ff:5a:41:f3:e5:b6:43:9c:aa:53:a1:c5:eb:67: c0:3b:bb:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fndh0GdictlVAqzmuRpGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjUxMjIwMTYwMTE5WhcNMjUxMjIxMTYwMTE5WjAzMTEwLwYDVQQD EyhkZDA1ZGNlZTJhMGRkM2M0MDYyNDFkMGRlNTUzYTYyYjljMmEwZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ECaRraRBSLaf1pZr9TImFzpQ7JW g6YhNtt0bYAIq1WOd0HlEfNjNyE230Xelq6SQXoESXDXwWZopB65cULKvJt3v5up sEfwHxOgGWFUkUy7mFcOS3DyVlhBI8O2JlIM9reAjqYB4Y3Yfk/ytdg6ItbZWlsY AWW4xoYM03rQYZ9WyuAto8bt6Tc8tftvM8JM+I2MKe3MOCD1QFDRWGIU9whfjN1e 8e7wb+wLXHGPnAzagtNgVe3rYTQ7F/GEqoZDjYZDdKmRScbLha4+Hmwh+BJETxxm MHfoX/Y4lUaoiX6tJnWAUIZnCh4+eACIYWtlLg/ngXxctDVSmSaKMpT0AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN0F3O4qDdPEBiQdDeVTpiucKg5tMB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsOck7tmF bazZIFoeW7jnxgZWUhCGXSI8TGjkq1Qke+inhCuRvViblFOlHETTmObfbNodndg9 qlMxetXkz1tbpKUEIb5AdmC+ergMtyMTeQesgaUIeew4Y40rnIrCeSEbAFrpxeyz hahAPWraJfmBo3iPtXYudlZtxFA+HtbzrtEMiVkBBsCGGu0Md80AApY07tWqjZPF 0fhNoFTxDRPaN5eOrNE71/I+aIgeeyFt0C7jVg23F2bUt27+XrpQsTj5hfKVjcZc 5ZhqKIA4IUHjPO2kPZmeGmefzWayy6KMyIQ5q8r1IOj/WkTpjeTjBf9aQfPltkOc qlOhxetnwDu7sA== -----END CERTIFICATE-----Generated at Sat Dec 20 18:10:00 2025 by rpki-client