This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft File: S-EpiiFeXkt9HgWoX7xZHDifnd0.mft (raw, json) Hash identifier: 18XAuL6txmBi1EZKrsYKXQnRLGLbsGNm+5t81CuonEI= Subject key identifier: D5:AB:2B:2B:1E:E3:7C:29:FB:29:78:4C:8C:5D:63:06:DC:68:33:60 Authority key identifier: 4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD Certificate issuer: /CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Certificate serial: 019AF276622C47051E35EB15CBE040E4E96C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft Manifest number: 143A Signing time: Sat 06 Dec 2025 07:00:35 +0000 Manifest this update: Sat 06 Dec 2025 07:00:35 +0000 Manifest next update: Sun 07 Dec 2025 07:00:35 +0000 Files and hashes: 1: S-EpiiFeXkt9HgWoX7xZHDifnd0.crl (hash: AgEXTmpDhSvJpN8jYserCsB3FjTgXNLZz0Hb8VPFUkE=) 2: s1JSRv9qjaGD9ezms7UcWMZoLZc.roa (hash: m1XaHhOIwQT47gv3DHtN00RXZ5ujYkmfy6Ne91kvsN4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:62:2c:47:05:1e:35:eb:15:cb:e0:40:e4:e9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4be1298a215e5e4b7d1e05a85fbc591c389f9ddd Validity Not Before: Dec 6 07:00:35 2025 GMT Not After : Dec 7 07:00:35 2025 GMT Subject: CN=d5ab2b2b1ee37c29fb29784c8c5d6306dc683360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ac:d7:dc:87:dc:a4:d0:09:a3:b7:d9:2c:87: 72:b4:d1:46:a0:16:38:33:6b:93:b6:4a:56:e3:aa: b7:b7:0e:a8:ae:f9:55:37:57:b5:e0:52:6f:2b:0e: 1f:e3:d4:ba:75:08:1b:4e:e9:04:44:c4:00:06:0b: ea:89:81:a2:e8:b4:23:57:0c:46:3d:9d:90:f3:a8: d4:ed:7e:04:3c:57:d2:84:0e:66:57:63:e3:15:c4: 37:a5:c3:63:49:91:c1:ac:c3:38:b1:35:94:2d:e1: 1a:22:c2:3b:f6:63:d5:14:3d:14:ad:c1:ec:e4:bd: 41:66:16:b5:03:14:85:ed:74:f4:bd:e4:ac:d0:4c: 60:f2:3b:e5:a4:ac:ba:2a:99:5b:e8:e7:21:4a:b6: c2:58:48:3a:4f:75:13:2d:ed:11:54:34:cd:46:69: dd:12:2a:2f:27:44:14:27:a2:63:66:b2:ed:7c:8a: 02:b1:06:d7:fc:b9:6f:70:ab:d5:1a:dd:1a:db:4a: 07:b1:a2:0e:ec:4a:26:4a:ed:a0:80:81:ea:08:5c: 80:6d:06:3e:91:7c:28:83:0a:84:49:ba:15:3e:da: 03:a5:77:45:34:a2:17:0e:5d:39:a0:1d:0f:1f:2b: c7:99:90:df:90:cd:c5:3f:de:ba:c9:de:05:93:6d: d8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:AB:2B:2B:1E:E3:7C:29:FB:29:78:4C:8C:5D:63:06:DC:68:33:60 X509v3 Authority Key Identifier: keyid:4B:E1:29:8A:21:5E:5E:4B:7D:1E:05:A8:5F:BC:59:1C:38:9F:9D:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-EpiiFeXkt9HgWoX7xZHDifnd0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/399271-5d4a-4320-82ed-aad61639d9d6/1/S-EpiiFeXkt9HgWoX7xZHDifnd0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:fc:5d:15:11:56:5b:58:df:2d:1e:ff:57:60:0f:0d:88:5a: 0d:2d:78:8a:de:d5:9a:71:10:d1:2c:c3:cf:61:8c:0d:32:41: 07:1b:92:e9:a5:24:cf:3c:13:cf:e6:2e:6c:1f:f7:87:7e:ac: a6:d0:d9:71:81:b1:8c:7d:8d:48:9d:91:50:b0:24:88:f6:76: 95:d5:7a:d0:d7:af:62:11:dc:17:3d:04:c3:93:19:ec:23:e7: e3:d1:14:98:d3:56:1e:3a:8b:dc:af:2d:42:81:21:89:4c:22: af:19:08:a7:b6:71:80:b9:49:64:8c:ba:0a:7a:7a:db:ab:dc: 9e:a7:29:30:7e:a0:8d:a5:c7:fe:38:34:83:32:55:56:2b:fa: e7:df:39:ae:b2:10:6b:31:26:d2:c7:14:35:f6:e8:1c:c2:4f: a4:07:06:98:57:f7:a2:c9:5d:83:11:05:03:f3:d6:8c:b9:00: 16:97:e8:31:68:18:75:7f:2d:93:4f:d0:af:32:07:39:ce:c7: 48:67:fa:dd:25:4c:c8:38:cc:34:5e:39:67:d3:87:1e:38:08: f0:00:66:6b:a9:67:24:77:e8:fc:4d:d2:73:d5:e4:73:8e:d2: af:69:4d:52:a4:b1:26:09:ff:25:04:44:0a:4a:e5:48:56:8d: a1:3b:38:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydmIsRwUeNesVy+BA5OlsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiZTEyOThhMjE1ZTVlNGI3ZDFlMDVhODVmYmM1OTFjMzg5 ZjlkZGQwHhcNMjUxMjA2MDcwMDM1WhcNMjUxMjA3MDcwMDM1WjAzMTEwLwYDVQQD EyhkNWFiMmIyYjFlZTM3YzI5ZmIyOTc4NGM4YzVkNjMwNmRjNjgzMzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6zX3IfcpNAJo7fZLIdytNFGoBY4 M2uTtkpW46q3tw6orvlVN1e14FJvKw4f49S6dQgbTukERMQABgvqiYGi6LQjVwxG PZ2Q86jU7X4EPFfShA5mV2PjFcQ3pcNjSZHBrMM4sTWULeEaIsI79mPVFD0UrcHs 5L1BZha1AxSF7XT0veSs0Exg8jvlpKy6Kplb6OchSrbCWEg6T3UTLe0RVDTNRmnd EiovJ0QUJ6JjZrLtfIoCsQbX/LlvcKvVGt0a20oHsaIO7EomSu2ggIHqCFyAbQY+ kXwogwqESboVPtoDpXdFNKIXDl05oB0PHyvHmZDfkM3FP966yd4Fk23YbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWrKyse43wp+yl4TIxdYwbcaDNgMB8GA1UdIwQY MBaAFEvhKYohXl5LfR4FqF+8WRw4n53dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQt YWFkNjE2MzlkOWQ2LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8zOTkyNzEtNWQ0YS00MzIwLTgyZWQtYWFkNjE2MzlkOWQ2 LzEvUy1FcGlpRmVYa3Q5SGdXb1g3eFpIRGlmbmQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/xdFRFW W1jfLR7/V2APDYhaDS14it7VmnEQ0SzDz2GMDTJBBxuS6aUkzzwTz+YubB/3h36s ptDZcYGxjH2NSJ2RULAkiPZ2ldV60NevYhHcFz0Ew5MZ7CPn49EUmNNWHjqL3K8t QoEhiUwirxkIp7ZxgLlJZIy6Cnp626vcnqcpMH6gjaXH/jg0gzJVViv65985rrIQ azEm0scUNfboHMJPpAcGmFf3osldgxEFA/PWjLkAFpfoMWgYdX8tk0/QrzIHOc7H SGf63SVMyDjMNF45Z9OHHjgI8ABma6lnJHfo/E3Sc9Xkc47Sr2lNUqSxJgn/JQRE CkrlSFaNoTs4MQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:07 2025 by rpki-client