This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: wSGgs5iONPbjn2/aNjwMuZskqVAzVRR6vuSbCL3XijE= Subject key identifier: 22:23:0E:51:72:CC:91:D5:32:96:44:03:C2:50:3D:F9:8B:AC:DB:43 Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019B6D6ABB01D67A51F351860C53DA09A7A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 17A0 Signing time: Tue 30 Dec 2025 04:01:09 +0000 Manifest this update: Tue 30 Dec 2025 04:01:09 +0000 Manifest next update: Wed 31 Dec 2025 04:01:09 +0000 Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: nBq1LYHKfAcLeZlDnuK5mv0BCeXl/J0OTOf2/QsV48w=) 2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 00:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:6a:bb:01:d6:7a:51:f3:51:86:0c:53:da:09:a7:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Dec 30 04:01:09 2025 GMT Not After : Dec 31 04:01:09 2025 GMT Subject: CN=22230e5172cc91d532964403c2503df98bacdb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:20:80:03:64:b8:bb:a8:49:6f:da:92:83:9a: 5a:d1:2a:c2:8c:2e:e8:9c:80:9c:48:97:95:79:0e: 60:f3:30:93:e7:2a:1f:47:ae:7e:de:11:5d:e3:f3: 13:ab:77:6f:4f:0a:b9:3c:66:71:42:9e:0c:ea:03: 23:97:b3:5e:cf:ff:6d:4d:1f:d6:35:9d:78:14:d9: db:33:ab:e9:4c:84:e7:06:04:09:9b:07:9a:06:ee: 86:da:cf:7b:b2:ad:86:5b:df:33:6a:3a:6d:81:b6: 73:ee:4e:b3:58:c9:7c:fd:c7:35:68:a1:ce:af:b7: 58:c3:82:ee:68:f7:97:a1:a6:0a:73:bc:55:c7:a4: 01:cc:59:97:ff:69:d5:ea:6c:af:04:2d:29:ef:cb: ef:96:c4:1a:c3:15:c7:73:cf:73:1c:85:a1:c5:c9: 3e:91:23:88:e5:1b:0c:38:17:49:25:34:1f:18:21: ea:40:ae:95:5c:1b:f5:19:89:d1:d9:09:0d:ce:09: c2:fd:8d:a0:6e:b2:a9:01:8b:fd:a3:22:a8:b8:51: bb:7c:8e:97:4e:7b:10:89:25:c4:20:e9:af:bb:5b: 6c:88:a6:c5:74:cc:d1:da:fd:76:ed:de:8f:7d:5d: ab:c8:73:6b:8a:bb:48:fb:a2:27:1d:ed:b1:94:54: d7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:23:0E:51:72:CC:91:D5:32:96:44:03:C2:50:3D:F9:8B:AC:DB:43 X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:71:5d:29:d8:0a:8e:74:c3:0d:81:3b:f6:9f:29:dd:b5:3d: 65:53:c0:93:41:cb:e8:97:4c:68:fe:a4:b1:7e:41:3c:83:7f: d6:f1:39:b5:35:26:32:d0:8f:f3:f7:1a:a1:f9:17:ef:70:f6: ba:1d:d8:b6:1e:a1:08:4e:c0:99:0f:3a:43:4c:59:60:18:24: 42:01:32:f6:73:10:b1:83:9b:66:da:90:83:0d:97:a1:09:22: 30:96:73:c0:24:26:5c:1b:71:54:0d:04:8f:d5:82:b6:95:53: 43:44:c3:15:b3:d7:32:41:9d:5d:47:48:1d:07:8e:63:96:4a: d0:df:c6:6f:3e:e1:d1:07:e8:3a:73:88:2d:4b:34:a3:3a:96: 50:3e:b0:3a:e5:d3:e9:41:15:87:3e:5a:eb:fe:27:c8:6f:3c: 5b:05:cd:86:2e:ab:c3:c1:77:64:92:04:f8:ab:19:3f:45:c7: 3f:68:53:23:47:93:1d:d7:07:b2:ef:c8:bc:40:f2:91:6e:24: 24:cd:a5:1b:26:8f:ec:e9:24:ee:d4:e2:2e:0a:59:3c:ec:cd: 51:b5:ca:02:c9:ed:c1:ee:a6:ab:47:8d:7c:af:fd:8e:05:5a: 61:e8:92:60:29:a2:d1:6e:33:38:49:50:76:5c:85:14:c1:e9: 14:45:82:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttarsB1npR81GGDFPaCaeiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjUxMjMwMDQwMTA5WhcNMjUxMjMxMDQwMTA5WjAzMTEwLwYDVQQD EygyMjIzMGU1MTcyY2M5MWQ1MzI5NjQ0MDNjMjUwM2RmOThiYWNkYjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iCAA2S4u6hJb9qSg5pa0SrCjC7o nICcSJeVeQ5g8zCT5yofR65+3hFd4/MTq3dvTwq5PGZxQp4M6gMjl7Nez/9tTR/W NZ14FNnbM6vpTITnBgQJmweaBu6G2s97sq2GW98zajptgbZz7k6zWMl8/cc1aKHO r7dYw4LuaPeXoaYKc7xVx6QBzFmX/2nV6myvBC0p78vvlsQawxXHc89zHIWhxck+ kSOI5RsMOBdJJTQfGCHqQK6VXBv1GYnR2QkNzgnC/Y2gbrKpAYv9oyKouFG7fI6X TnsQiSXEIOmvu1tsiKbFdMzR2v127d6PfV2ryHNrirtI+6InHe2xlFTX8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIjDlFyzJHVMpZEA8JQPfmLrNtDMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXFdKdgK jnTDDYE79p8p3bU9ZVPAk0HL6JdMaP6ksX5BPIN/1vE5tTUmMtCP8/caofkX73D2 uh3Yth6hCE7AmQ86Q0xZYBgkQgEy9nMQsYObZtqQgw2XoQkiMJZzwCQmXBtxVA0E j9WCtpVTQ0TDFbPXMkGdXUdIHQeOY5ZK0N/Gbz7h0QfoOnOILUs0ozqWUD6wOuXT 6UEVhz5a6/4nyG88WwXNhi6rw8F3ZJIE+KsZP0XHP2hTI0eTHdcHsu/IvEDykW4k JM2lGyaP7Okk7tTiLgpZPOzNUbXKAsntwe6mq0eNfK/9jgVaYeiSYCmi0W4zOElQ dlyFFMHpFEWCGQ== -----END CERTIFICATE-----Generated at Tue Dec 30 09:05:23 2025 by rpki-client