This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json) Hash identifier: LOtXeVWuOuP/xqrADx41bCe/i0kjDrJ3iRW2khJVvZc= Subject key identifier: 97:EC:CC:5E:62:EF:C5:C5:1B:DE:3D:1C:66:0E:B2:05:6E:C0:50:F5 Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Certificate serial: 019AF19B9B03BE311999DF6405CB7124CD15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft Manifest number: 099F Signing time: Sat 06 Dec 2025 03:01:38 +0000 Manifest this update: Sat 06 Dec 2025 03:01:38 +0000 Manifest next update: Sun 07 Dec 2025 03:01:38 +0000 Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: TaPYvR+8TQDzoU5q7mWGVAaFf/ke+5/e63+vQ5MeesM=) 2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:9b:03:be:31:19:99:df:64:05:cb:71:24:cd:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Validity Not Before: Dec 6 03:01:38 2025 GMT Not After : Dec 7 03:01:38 2025 GMT Subject: CN=97eccc5e62efc5c51bde3d1c660eb2056ec050f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e1:01:f1:ad:94:a5:4a:ae:66:71:4e:33:b4: cf:34:e3:d3:bb:a0:ae:59:c3:f6:cb:57:ce:30:e5: 80:a6:45:a1:76:5d:3e:68:76:6d:23:3a:3e:45:ee: 7d:14:ab:e6:15:8b:d3:c2:02:bd:75:c2:ce:ab:64: e6:26:a0:bb:59:7a:f6:f0:d4:67:0f:cb:46:16:d5: 19:f8:9d:10:de:f7:3b:a4:c3:bc:43:fa:35:21:01: 3c:e3:d3:bc:81:91:d9:7f:73:55:f2:50:cf:7d:57: 40:f4:ef:ab:76:81:70:c7:91:ac:a4:c2:87:2e:32: f6:25:5a:04:1f:cb:38:09:6b:b4:f1:f6:19:98:c0: c2:3c:03:c2:31:39:5b:b5:c3:45:04:fb:1b:d0:bf: 11:d6:cc:34:69:52:68:6e:82:de:0e:98:05:48:7d: b0:3d:2f:be:36:e2:f6:a0:45:bc:59:22:e0:92:64: f8:37:69:5d:48:2b:12:8f:2e:7a:09:50:7d:0b:0e: 5c:b9:1c:fd:1c:c0:30:6a:32:a5:e6:23:b2:bc:41: 74:b1:ae:1c:d5:cf:64:d8:0c:c6:cd:73:f8:48:5a: 09:32:3a:c7:b6:2f:d4:5b:44:ef:e0:95:b2:ca:e0: 8f:8e:9f:65:3d:83:1f:ea:e1:b8:b9:17:ca:f5:3c: aa:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:EC:CC:5E:62:EF:C5:C5:1B:DE:3D:1C:66:0E:B2:05:6E:C0:50:F5 X509v3 Authority Key Identifier: keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:8f:35:81:40:69:5f:6b:14:e0:ff:c9:26:93:f1:49:4a:4f: 74:52:64:b0:9f:7a:d2:dd:16:56:1a:d7:db:1d:3d:84:4c:23: 80:7d:f2:e4:89:13:7a:f3:bf:d5:78:b6:e5:a6:0f:1b:fb:ad: 2b:f7:ca:f5:75:49:f8:73:40:e6:04:23:46:82:12:3a:da:9b: 76:ec:f7:b6:2c:9d:1e:22:e0:7a:1d:7c:e4:58:6a:da:ba:7c: 3c:86:2b:cb:df:71:45:13:cc:12:f4:2f:05:4f:ae:9d:c1:dd: 98:a2:74:a5:0d:05:0a:d6:15:8c:cb:78:a9:d6:53:15:3b:54: c1:44:a3:31:fd:a7:a5:47:8c:44:8a:f7:1b:17:2a:44:3c:ec: b6:35:d3:57:96:48:42:f5:f4:64:78:2e:19:c3:ba:98:a3:e6: af:ea:8e:86:2a:02:3d:0e:4f:10:5a:1b:1b:3c:00:ad:29:81: c1:fa:65:be:9b:56:b2:9a:b3:13:11:50:7f:04:af:fb:69:bd: e9:c4:56:9e:f0:de:a1:4e:8d:fb:31:8e:1f:d2:67:e2:37:0f: 71:81:01:79:a1:44:0b:3f:0a:f3:c2:57:cf:bf:92:ef:b6:e4: c2:2c:89:45:bf:b8:e4:85:9b:40:f1:30:5c:32:03:21:fc:95: 92:b9:33:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5sDvjEZmd9kBctxJM0VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl ODA2MDAwHhcNMjUxMjA2MDMwMTM4WhcNMjUxMjA3MDMwMTM4WjAzMTEwLwYDVQQD Eyg5N2VjY2M1ZTYyZWZjNWM1MWJkZTNkMWM2NjBlYjIwNTZlYzA1MGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+EB8a2UpUquZnFOM7TPNOPTu6Cu WcP2y1fOMOWApkWhdl0+aHZtIzo+Re59FKvmFYvTwgK9dcLOq2TmJqC7WXr28NRn D8tGFtUZ+J0Q3vc7pMO8Q/o1IQE849O8gZHZf3NV8lDPfVdA9O+rdoFwx5GspMKH LjL2JVoEH8s4CWu08fYZmMDCPAPCMTlbtcNFBPsb0L8R1sw0aVJoboLeDpgFSH2w PS++NuL2oEW8WSLgkmT4N2ldSCsSjy56CVB9Cw5cuRz9HMAwajKl5iOyvEF0sa4c 1c9k2AzGzXP4SFoJMjrHti/UW0Tv4JWyyuCPjp9lPYMf6uG4uRfK9TyqNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJfszF5i78XFG949HGYOsgVuwFD1MB8GA1UdIwQY MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt ZDJhZjFjYzNmYTMxLzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPI81gUBp X2sU4P/JJpPxSUpPdFJksJ960t0WVhrX2x09hEwjgH3y5IkTevO/1Xi25aYPG/ut K/fK9XVJ+HNA5gQjRoISOtqbduz3tiydHiLgeh185Fhq2rp8PIYry99xRRPMEvQv BU+uncHdmKJ0pQ0FCtYVjMt4qdZTFTtUwUSjMf2npUeMRIr3GxcqRDzstjXTV5ZI QvX0ZHguGcO6mKPmr+qOhioCPQ5PEFobGzwArSmBwfplvptWspqzExFQfwSv+2m9 6cRWnvDeoU6N+zGOH9Jn4jcPcYEBeaFECz8K88JXz7+S77bkwiyJRb+45IWbQPEw XDIDIfyVkrkzdA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:59:55 2025 by rpki-client