This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json) Hash identifier: P54C81ngMH6khq1ZVe04PCwAbNXSh7aNk9H0z1alHts= Subject key identifier: AB:44:9D:EC:B4:40:73:1D:AE:FD:59:D5:63:47:33:FF:23:2B:29:60 Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Certificate serial: 019B62AFEC50771C185AB1406A4C19323A75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft Manifest number: 0570 Signing time: Sun 28 Dec 2025 02:00:55 +0000 Manifest this update: Sun 28 Dec 2025 02:00:55 +0000 Manifest next update: Mon 29 Dec 2025 02:00:55 +0000 Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: mxaNHCJaTEVGfOU/7p29RpptnB/exMHzmwiXYGf2nLc=) 2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:62:af:ec:50:77:1c:18:5a:b1:40:6a:4c:19:32:3a:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Validity Not Before: Dec 28 02:00:55 2025 GMT Not After : Dec 29 02:00:55 2025 GMT Subject: CN=ab449decb440731daefd59d5634733ff232b2960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:54:e6:64:ad:fb:23:ac:76:40:71:99:e7:33: 0d:e1:b8:73:d6:d5:08:57:2f:21:ef:e1:e6:f7:89: aa:55:b5:24:1c:81:85:22:04:9a:56:44:1b:7a:69: df:ed:a2:26:1b:78:26:65:25:b3:a7:6a:f9:2c:ac: cc:84:4f:ae:2c:bc:3b:3f:db:59:ef:75:fb:56:f5: f8:0e:b0:5e:7f:58:94:a8:65:23:d5:59:27:8f:92: e4:ed:ef:99:34:d3:42:31:8f:ef:36:b5:95:9e:c3: 9c:34:93:fb:f4:23:db:e2:4d:6e:8a:60:16:61:f8: b4:45:98:f1:79:ea:17:f8:d1:b7:55:17:c7:da:30: 9e:9d:e3:5d:6f:fd:37:64:67:c4:0d:4c:29:62:10: 57:fa:05:67:99:3b:67:f8:6c:5f:77:cf:e0:ed:b5: a6:d6:a6:9c:fe:36:c8:cf:09:f2:e3:cc:56:ea:93: da:af:84:eb:bf:be:df:79:27:ff:6b:53:86:cd:ff: 52:c2:d6:af:11:8a:df:03:4c:66:32:21:c6:66:ea: 5c:58:dd:f5:db:44:8a:7c:4d:3c:28:e7:1e:af:a6: 8d:4c:76:37:c8:cf:57:6d:d4:77:22:25:af:3e:45: f1:6f:16:1d:4f:51:5e:4e:4c:79:f4:76:ce:47:4b: 22:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:44:9D:EC:B4:40:73:1D:AE:FD:59:D5:63:47:33:FF:23:2B:29:60 X509v3 Authority Key Identifier: keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:c5:a7:e5:ac:91:29:ea:af:0b:07:49:16:f9:19:94:3d:99: bf:25:5a:5b:49:a5:53:4d:d0:e4:dc:cf:fb:5a:df:e2:eb:ab: 64:4a:0d:74:c2:48:3c:be:05:34:41:c4:b5:f7:62:b4:92:dc: 43:05:3c:67:7d:87:70:47:ba:c0:18:31:3f:7e:10:68:e4:b9: d6:a8:a5:8f:21:2c:a7:cc:e1:d8:db:f7:03:6f:53:cf:99:e5: 4e:76:26:32:c5:54:10:41:9b:ec:b6:2b:d8:67:cf:7e:8f:44: fc:0c:61:9c:ff:e4:e1:4c:e1:f1:ae:51:5d:a7:68:7d:6f:43: 1f:7d:c2:c6:f4:f4:c4:17:91:c3:2b:83:77:7c:2c:a7:50:e1: 0a:e5:04:57:83:4d:89:fd:e5:46:3d:95:71:60:8b:98:de:31: c6:e3:fb:39:89:bc:02:1e:a3:30:13:69:77:b4:e4:97:92:34: 46:0d:65:25:b4:62:8d:9b:0a:96:65:9a:ae:1e:61:cd:6e:0d: 09:6f:7d:27:36:34:9c:cb:ed:79:b1:bf:3a:71:a0:61:8e:75: 51:9c:fd:ba:c1:fc:a5:31:22:5e:66:37:32:55:6f:51:57:02: a0:ab:22:c6:22:ea:e4:31:a8:0d:6f:73:db:c1:f3:9e:ea:31: 51:e3:1a:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtir+xQdxwYWrFAakwZMjp1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw MjBhOWQwHhcNMjUxMjI4MDIwMDU1WhcNMjUxMjI5MDIwMDU1WjAzMTEwLwYDVQQD EyhhYjQ0OWRlY2I0NDA3MzFkYWVmZDU5ZDU2MzQ3MzNmZjIzMmIyOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FTmZK37I6x2QHGZ5zMN4bhz1tUI Vy8h7+Hm94mqVbUkHIGFIgSaVkQbemnf7aImG3gmZSWzp2r5LKzMhE+uLLw7P9tZ 73X7VvX4DrBef1iUqGUj1Vknj5Lk7e+ZNNNCMY/vNrWVnsOcNJP79CPb4k1uimAW Yfi0RZjxeeoX+NG3VRfH2jCeneNdb/03ZGfEDUwpYhBX+gVnmTtn+Gxfd8/g7bWm 1qac/jbIzwny48xW6pPar4Trv77feSf/a1OGzf9SwtavEYrfA0xmMiHGZupcWN31 20SKfE08KOcer6aNTHY3yM9XbdR3IiWvPkXxbxYdT1FeTkx59HbOR0sizQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtEney0QHMdrv1Z1WNHM/8jKylgMB8GA1UdIwQY MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2 LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC8Wn5ayR KeqvCwdJFvkZlD2ZvyVaW0mlU03Q5NzP+1rf4uurZEoNdMJIPL4FNEHEtfditJLc QwU8Z32HcEe6wBgxP34QaOS51qiljyEsp8zh2Nv3A29Tz5nlTnYmMsVUEEGb7LYr 2GfPfo9E/AxhnP/k4Uzh8a5RXadofW9DH33CxvT0xBeRwyuDd3wsp1DhCuUEV4NN if3lRj2VcWCLmN4xxuP7OYm8Ah6jMBNpd7Tkl5I0Rg1lJbRijZsKlmWarh5hzW4N CW99JzY0nMvtebG/OnGgYY51UZz9usH8pTEiXmY3MlVvUVcCoKsixiLq5DGoDW9z 28HznuoxUeMa2g== -----END CERTIFICATE-----Generated at Sun Dec 28 08:09:08 2025 by rpki-client