This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft File: egadopx7Yd3rzAUk_QjlTf80wWg.mft (raw, json) Hash identifier: PG6R5KzeInV04IJMysaPxcimqroHZufwAnDPO1aSBVE= Subject key identifier: 37:61:46:43:CF:38:04:7C:95:B1:5B:D1:73:89:97:94:D4:99:34:81 Authority key identifier: 7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68 Certificate issuer: /CN=7a069da29c7b61ddebcc0524fd08e54dff34c168 Certificate serial: 019B3C7F6A1A850EADE7FB0C2A361D762607 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 16:02:21 +0000 Manifest this update: Sat 20 Dec 2025 16:02:21 +0000 Manifest next update: Sun 21 Dec 2025 16:02:21 +0000 Files and hashes: 1: egadopx7Yd3rzAUk_QjlTf80wWg.crl (hash: Gh4vmfP6IgmF6dFXOAZBvgZoNk/QwTSE5Dx+4IGOOjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:6a:1a:85:0e:ad:e7:fb:0c:2a:36:1d:76:26:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a069da29c7b61ddebcc0524fd08e54dff34c168 Validity Not Before: Dec 20 16:02:21 2025 GMT Not After : Dec 21 16:02:21 2025 GMT Subject: CN=37614643cf38047c95b15bd173899794d4993481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:bf:bd:a3:f8:db:b0:6d:58:fb:7f:32:3f: 9d:e6:28:a5:0c:bc:71:03:e0:23:7d:7d:35:9b:65: 6d:49:77:7d:ab:5a:b4:da:2d:36:52:f6:aa:a1:cb: 15:0f:55:43:79:d1:38:56:6d:0d:c1:bf:bd:c7:33: f1:3a:74:00:f5:f9:1b:f8:50:12:17:c1:83:b1:53: de:14:d5:25:c7:d4:0e:ef:bc:db:3a:27:f6:a0:4e: 43:d9:d2:2c:41:c9:38:4f:06:8c:b6:ca:06:3b:ec: 40:b3:d5:d6:d9:da:53:a7:5f:bb:20:0e:6f:3d:b2: 35:58:af:d9:d9:ad:43:e3:d3:0d:52:16:27:bd:a5: d2:53:44:d3:d1:6d:d4:6f:eb:d9:ab:50:6d:29:80: da:76:fc:d5:14:c5:15:d8:e0:57:33:d6:0b:6c:cd: f8:c9:6b:83:d4:42:db:7f:82:20:da:20:23:ec:30: 0d:10:85:ce:c8:a3:99:b7:1c:28:b8:95:c5:ec:ab: f9:39:c7:8e:11:86:7e:a0:4e:0c:fe:9b:41:f0:cd: e2:3e:cf:38:57:19:76:8f:32:79:00:56:c5:15:f6: 38:03:53:32:13:35:2e:7b:a0:b3:22:d1:30:13:ae: 6a:26:34:89:be:67:38:3e:75:7f:58:8b:48:47:c0: 42:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:61:46:43:CF:38:04:7C:95:B1:5B:D1:73:89:97:94:D4:99:34:81 X509v3 Authority Key Identifier: keyid:7A:06:9D:A2:9C:7B:61:DD:EB:CC:05:24:FD:08:E5:4D:FF:34:C1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egadopx7Yd3rzAUk_QjlTf80wWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6039e8-2d68-4310-a3ac-4bfefe416f26/1/egadopx7Yd3rzAUk_QjlTf80wWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:b0:9f:f5:bb:4b:3f:1d:6e:d6:ae:58:11:84:7a:2a:15:b4: 14:69:e9:9e:e7:ee:3c:fe:12:8a:1f:05:87:8f:99:fd:a1:5c: a7:81:21:40:c9:d1:0e:da:40:90:bc:d6:12:45:98:38:61:56: da:c5:0a:59:55:61:1c:71:ab:00:25:78:78:59:65:f2:95:e1: e6:36:a9:8a:ca:39:0b:4d:a3:64:32:69:20:c7:a7:b9:eb:5d: d6:c2:65:17:79:4b:07:30:bf:63:19:fa:fd:d3:27:37:8c:d7: 60:8b:e9:bf:62:ef:a8:45:19:a2:96:b8:bc:77:19:e7:24:30: a7:41:74:7a:8b:99:ac:2f:e3:1e:c5:44:ff:c3:28:56:f5:1c: 24:77:63:1f:a1:c7:09:87:23:ba:98:a3:70:03:3f:ff:d1:49: 55:3e:f3:81:af:e8:da:9f:21:15:f4:86:69:03:e4:8f:39:92: ab:6b:bd:7d:c6:d2:f0:51:28:5f:94:3d:74:ee:9d:16:7c:f5: 55:03:11:f8:ca:65:67:6d:38:55:fe:ae:bb:8a:b4:c4:ed:22: 19:1c:1c:af:2a:48:fd:71:51:ef:e1:58:8f:cf:15:d7:98:01: cb:24:87:17:f9:35:0d:95:8e:f3:0d:71:ad:8e:e6:43:29:af: ed:81:fd:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f2oahQ6t5/sMKjYddiYHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDY5ZGEyOWM3YjYxZGRlYmNjMDUyNGZkMDhlNTRkZmYz NGMxNjgwHhcNMjUxMjIwMTYwMjIxWhcNMjUxMjIxMTYwMjIxWjAzMTEwLwYDVQQD EygzNzYxNDY0M2NmMzgwNDdjOTViMTViZDE3Mzg5OTc5NGQ0OTkzNDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk2/vaP427BtWPt/Mj+d5iilDLxx A+AjfX01m2VtSXd9q1q02i02UvaqocsVD1VDedE4Vm0Nwb+9xzPxOnQA9fkb+FAS F8GDsVPeFNUlx9QO77zbOif2oE5D2dIsQck4TwaMtsoGO+xAs9XW2dpTp1+7IA5v PbI1WK/Z2a1D49MNUhYnvaXSU0TT0W3Ub+vZq1BtKYDadvzVFMUV2OBXM9YLbM34 yWuD1ELbf4Ig2iAj7DANEIXOyKOZtxwouJXF7Kv5OceOEYZ+oE4M/ptB8M3iPs84 Vxl2jzJ5AFbFFfY4A1MyEzUue6CzItEwE65qJjSJvmc4PnV/WItIR8BCQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdhRkPPOAR8lbFb0XOJl5TUmTSBMB8GA1UdIwQY MBaAFHoGnaKce2Hd68wFJP0I5U3/NMFoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMt NGJmZWZlNDE2ZjI2LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC82MDM5ZTgtMmQ2OC00MzEwLWEzYWMtNGJmZWZlNDE2ZjI2 LzEvZWdhZG9weDdZZDNyekFVa19RamxUZjgwd1dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbCf9btL Px1u1q5YEYR6KhW0FGnpnufuPP4Sih8Fh4+Z/aFcp4EhQMnRDtpAkLzWEkWYOGFW 2sUKWVVhHHGrACV4eFll8pXh5japiso5C02jZDJpIMenuetd1sJlF3lLBzC/Yxn6 /dMnN4zXYIvpv2LvqEUZopa4vHcZ5yQwp0F0eouZrC/jHsVE/8MoVvUcJHdjH6HH CYcjupijcAM//9FJVT7zga/o2p8hFfSGaQPkjzmSq2u9fcbS8FEoX5Q9dO6dFnz1 VQMR+MplZ204Vf6uu4q0xO0iGRwcrypI/XFR7+FYj88V15gByySHF/k1DZWO8w1x rY7mQymv7YH9oQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:55:13 2025 by rpki-client