This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft File: EPm9HHFv0ulaydYQddcJYhroBgA.mft (raw, json) Hash identifier: GAiqoI6vZ8D7tS1cBhxSf6QMDpD7FSGWvXmY53gBJMs= Subject key identifier: 2A:34:A5:0B:B4:CF:EA:2D:23:C7:D4:FA:A3:27:8B:96:A6:8E:EE:BB Authority key identifier: 10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 Certificate issuer: /CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Certificate serial: 019B2F67EAEFDF2F40A182B08A1A4490DE2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft Manifest number: 09BF Signing time: Thu 18 Dec 2025 03:01:38 +0000 Manifest this update: Thu 18 Dec 2025 03:01:38 +0000 Manifest next update: Fri 19 Dec 2025 03:01:38 +0000 Files and hashes: 1: EPm9HHFv0ulaydYQddcJYhroBgA.crl (hash: YI7A+ElxdE4G9RhNXLYTCLmETrYC8SCorgqfFvAe8Ww=) 2: Rm4G8KwJAms34HdBJGkkvyGyVeo.roa (hash: /H/EXJlnlnkPcjJyZSTq8hc9wXqmJ/nwbv9HzKcNsm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:18:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:ea:ef:df:2f:40:a1:82:b0:8a:1a:44:90:de:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f9bd1c716fd2e95ac9d61075d709621ae80600 Validity Not Before: Dec 18 03:01:38 2025 GMT Not After : Dec 19 03:01:38 2025 GMT Subject: CN=2a34a50bb4cfea2d23c7d4faa3278b96a68eeebb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:ec:d6:7e:a3:be:25:3e:ae:9e:d9:78:bd:88: f0:5d:6d:12:49:82:dd:a6:17:cd:91:3a:32:e2:dd: e1:34:03:3b:03:d8:78:be:ed:08:d7:df:da:dc:39: 70:29:2e:d2:b2:e5:0d:56:9d:5b:84:35:60:a1:e7: 43:bd:ae:e4:26:49:2e:0b:dc:79:a9:2e:c4:8f:2c: ae:cd:b0:e7:18:bc:38:4b:18:a7:0c:a8:6a:80:bf: 30:a0:86:69:25:f0:d6:33:01:5b:ef:47:a4:d0:c5: 6a:85:c9:47:9c:fd:b6:d1:7e:ca:00:b7:8a:84:fb: 46:b2:92:6f:0c:7f:ba:aa:05:d3:6d:7f:81:e2:82: d4:51:31:af:92:fc:a6:cd:88:e3:74:41:71:6d:ae: 02:11:2a:25:5f:71:85:ca:2b:10:60:83:bc:83:d3: 67:b7:95:f3:f0:07:83:43:b7:7c:e3:89:fc:90:ff: 5d:b2:ba:0a:5d:46:65:09:08:bc:7d:d2:e0:67:35: 73:70:89:c9:bd:94:ee:4a:14:b9:31:ab:9b:ba:5f: 4d:16:b5:b2:57:c6:fe:5e:df:97:c6:3f:ea:cc:9e: 99:b4:44:c5:8e:56:6d:e2:d3:66:89:87:f1:03:37: bf:70:43:5b:49:a5:81:a6:a5:73:13:3a:d6:29:50: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:34:A5:0B:B4:CF:EA:2D:23:C7:D4:FA:A3:27:8B:96:A6:8E:EE:BB X509v3 Authority Key Identifier: keyid:10:F9:BD:1C:71:6F:D2:E9:5A:C9:D6:10:75:D7:09:62:1A:E8:06:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPm9HHFv0ulaydYQddcJYhroBgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/e7df1b-7abb-45fb-babe-d2af1cc3fa31/1/EPm9HHFv0ulaydYQddcJYhroBgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:e5:67:e9:c3:d1:3b:9d:07:85:b7:d0:1d:16:60:5b:da:a8: c6:7d:ec:3e:ae:c5:84:a8:63:8b:ff:e6:10:e9:78:37:51:74: 2c:9c:96:5b:46:92:08:22:e6:06:7a:07:f4:63:f6:fb:3e:2a: 24:0a:b4:f1:4e:80:51:75:54:2c:61:8c:3a:36:da:1e:1f:a8: f4:3a:69:ee:46:30:75:bb:00:93:5b:6b:10:8c:04:85:63:19: c2:67:ce:16:4d:8d:cf:62:cb:44:26:5f:79:a1:64:d9:3a:09: 63:b1:ea:eb:75:7d:f7:37:d0:08:e8:7f:ba:ca:12:52:2b:a4: 39:1d:c2:8e:87:e6:f5:98:de:83:c5:a2:f4:63:3c:31:8d:a2: b6:8a:5f:cc:98:ee:e0:bd:44:0d:75:12:e5:06:bf:9f:6d:38: bd:5d:1d:06:47:51:b0:14:b0:4e:01:2d:b3:b0:45:a8:7f:cd: f0:a7:36:a9:c2:5b:05:71:f9:05:9e:38:8d:e3:7f:56:fc:31: 10:0a:42:e5:86:da:d8:54:0f:28:0e:8a:d6:58:7f:fa:d4:53: e7:ce:d7:aa:d2:82:20:a2:8b:4d:a8:49:7b:ac:de:18:a1:5f: fa:38:34:57:d8:c2:bb:1e:36:2d:28:54:b1:9b:9b:2e:f5:60: c9:96:df:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ+rv3y9AoYKwihpEkN4sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjliZDFjNzE2ZmQyZTk1YWM5ZDYxMDc1ZDcwOTYyMWFl ODA2MDAwHhcNMjUxMjE4MDMwMTM4WhcNMjUxMjE5MDMwMTM4WjAzMTEwLwYDVQQD EygyYTM0YTUwYmI0Y2ZlYTJkMjNjN2Q0ZmFhMzI3OGI5NmE2OGVlZWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuzWfqO+JT6untl4vYjwXW0SSYLd phfNkToy4t3hNAM7A9h4vu0I19/a3DlwKS7SsuUNVp1bhDVgoedDva7kJkkuC9x5 qS7EjyyuzbDnGLw4SxinDKhqgL8woIZpJfDWMwFb70ek0MVqhclHnP220X7KALeK hPtGspJvDH+6qgXTbX+B4oLUUTGvkvymzYjjdEFxba4CESolX3GFyisQYIO8g9Nn t5Xz8AeDQ7d844n8kP9dsroKXUZlCQi8fdLgZzVzcInJvZTuShS5Maubul9NFrWy V8b+Xt+Xxj/qzJ6ZtETFjlZt4tNmiYfxAze/cENbSaWBpqVzEzrWKVBY0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo0pQu0z+otI8fU+qMni5amju67MB8GA1UdIwQY MBaAFBD5vRxxb9LpWsnWEHXXCWIa6AYAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUt ZDJhZjFjYzNmYTMxLzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy9lN2RmMWItN2FiYi00NWZiLWJhYmUtZDJhZjFjYzNmYTMx LzEvRVBtOUhIRnYwdWxheWRZUWRkY0pZaHJvQmdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWOVn6cPR O50HhbfQHRZgW9qoxn3sPq7FhKhji//mEOl4N1F0LJyWW0aSCCLmBnoH9GP2+z4q JAq08U6AUXVULGGMOjbaHh+o9Dpp7kYwdbsAk1trEIwEhWMZwmfOFk2Nz2LLRCZf eaFk2ToJY7Hq63V99zfQCOh/usoSUiukOR3Cjofm9Zjeg8Wi9GM8MY2itopfzJju 4L1EDXUS5Qa/n204vV0dBkdRsBSwTgEts7BFqH/N8Kc2qcJbBXH5BZ44jeN/Vvwx EApC5Yba2FQPKA6K1lh/+tRT587XqtKCIKKLTahJe6zeGKFf+jg0V9jCux42LShU sZubLvVgyZbf4Q== -----END CERTIFICATE-----Generated at Thu Dec 18 07:09:20 2025 by rpki-client