This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: s+qmEDVhdSIceHTiZzuByZEAksnAVFwnOZFl+AqmGRg= Subject key identifier: 22:8D:A7:DC:0E:42:75:5C:DA:A2:85:F4:49:14:29:A4:B4:B1:6F:1D Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019B3D2320226B822EB294097C08A4BEF46B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: 5r2Bxo7DY0CYFrSMeGTEm7LFDXf0GskGTf2UdA1rFdM=) 2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:20:22:6b:82:2e:b2:94:09:7c:08:a4:be:f4:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=228da7dc0e42755cdaa285f4491429a4b4b16f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:fe:d6:95:f0:ae:12:e7:a3:51:e1:0d:38: a1:e4:ca:f2:f5:74:41:6d:26:d2:c0:49:70:7a:8a: 4a:6a:10:1f:82:6a:ba:6f:ec:dd:c0:44:b1:04:f0: bb:8f:e1:88:7c:d3:88:94:5a:06:e0:c0:27:a3:85: b9:2b:12:be:90:e3:ea:67:d8:af:4f:43:be:e2:66: 7c:61:88:cc:f7:03:da:0d:22:2c:0b:32:9c:e7:8c: f1:98:63:42:19:2a:97:9d:31:06:be:98:96:48:2b: 94:72:17:f2:21:8b:f3:de:64:fb:88:bb:f5:91:12: 31:fc:af:73:c9:03:76:49:5b:f3:98:d7:86:c1:d6: a1:90:a3:05:d1:72:95:4b:1e:85:4f:72:fb:d0:3d: 64:9a:15:ac:74:af:01:e4:c2:6f:fe:8c:cb:e9:ec: fa:f9:7b:1c:f1:81:09:db:d0:b4:a5:46:a3:57:e8: 09:3d:8f:70:12:0f:2e:36:83:60:5f:12:e2:69:07: 78:f9:f5:f8:21:df:df:17:43:8a:bb:bf:07:76:0c: 85:d0:8b:30:78:88:82:f9:fc:f2:d4:d7:75:b0:98: f3:cd:07:c9:14:41:74:44:19:8f:2f:a1:9c:26:6a: 1c:de:65:bf:20:1a:48:b4:48:46:e4:11:14:30:52: 35:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8D:A7:DC:0E:42:75:5C:DA:A2:85:F4:49:14:29:A4:B4:B1:6F:1D X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f4:3c:c5:56:97:f0:f7:ee:76:bf:3c:f0:b5:91:ed:cb:40: ef:f9:a8:9f:85:80:ed:bb:e2:59:81:19:cf:86:32:ab:cd:2c: 28:fd:e8:71:d7:c8:0e:98:0e:b1:8e:88:78:fe:d9:46:9d:66: 2c:f9:ca:5b:2a:5e:91:84:71:f0:39:ca:bc:05:75:45:93:b3: e6:8b:27:01:c4:d7:05:ba:6d:b8:1e:d2:ec:01:c5:bd:65:76: ce:d3:2b:af:ce:f8:2b:78:7c:37:c5:cf:1e:45:ce:10:d2:6a: 57:7d:6d:4f:eb:1e:ad:20:c0:c4:2b:27:53:03:90:d3:c6:89: e1:f6:b7:7c:ee:35:2c:6d:2a:9f:65:0d:1a:ee:5e:ea:4a:87: 5d:de:17:0a:d8:4f:c1:d4:59:c9:69:2f:e4:23:2c:8a:74:05: dc:f2:6c:71:5f:d8:23:8a:4e:db:e0:1f:29:f7:22:ec:ae:57: 10:11:05:f0:e5:86:f1:03:db:67:48:a0:98:a4:22:3c:27:3b: 57:eb:37:ef:1e:7e:8b:47:d0:a2:03:a3:cc:67:f9:fd:da:f6: fe:06:ff:ec:f1:80:3a:6f:7d:7a:5b:a6:89:82:ec:e4:a8:60: 16:3b:ee:25:8b:01:c0:38:82:42:1e:0b:6b:26:ec:86:12:93: 30:4e:ba:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IyAia4IuspQJfAikvvRrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD EygyMjhkYTdkYzBlNDI3NTVjZGFhMjg1ZjQ0OTE0MjlhNGI0YjE2ZjFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKn+1pXwrhLno1HhDTih5Mry9XRB bSbSwElweopKahAfgmq6b+zdwESxBPC7j+GIfNOIlFoG4MAno4W5KxK+kOPqZ9iv T0O+4mZ8YYjM9wPaDSIsCzKc54zxmGNCGSqXnTEGvpiWSCuUchfyIYvz3mT7iLv1 kRIx/K9zyQN2SVvzmNeGwdahkKMF0XKVSx6FT3L70D1kmhWsdK8B5MJv/ozL6ez6 +Xsc8YEJ29C0pUajV+gJPY9wEg8uNoNgXxLiaQd4+fX4Id/fF0OKu78HdgyF0Isw eIiC+fzy1Nd1sJjzzQfJFEF0RBmPL6GcJmoc3mW/IBpItEhG5BEUMFI16QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKNp9wOQnVc2qKF9EkUKaS0sW8dMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlvQ8xVaX 8Pfudr888LWR7ctA7/mon4WA7bviWYEZz4Yyq80sKP3ocdfIDpgOsY6IeP7ZRp1m LPnKWypekYRx8DnKvAV1RZOz5osnAcTXBbptuB7S7AHFvWV2ztMrr874K3h8N8XP HkXOENJqV31tT+serSDAxCsnUwOQ08aJ4fa3fO41LG0qn2UNGu5e6kqHXd4XCthP wdRZyWkv5CMsinQF3PJscV/YI4pO2+AfKfci7K5XEBEF8OWG8QPbZ0igmKQiPCc7 V+s37x5+i0fQogOjzGf5/dr2/gb/7PGAOm99elumiYLs5KhgFjvuJYsBwDiCQh4L aybshhKTME66Ag== -----END CERTIFICATE-----Generated at Sun Dec 21 02:06:29 2025 by rpki-client