This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json) Hash identifier: ZWj6fkQT0JGGrHjrTm1agbyBdOxuJxDN4IWwpqVQKsM= Subject key identifier: F5:E8:BA:DA:A2:FF:61:62:89:A1:C0:71:3A:D7:27:0B:6E:66:56:77 Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Certificate serial: 019AF5AE9ACEFBDD9C0F7BB7F37CFA32BA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft Manifest number: 0D02 Signing time: Sat 06 Dec 2025 22:00:52 +0000 Manifest this update: Sat 06 Dec 2025 22:00:52 +0000 Manifest next update: Sun 07 Dec 2025 22:00:52 +0000 Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: OzCnNkS1NtMZa+Me1+eCe858GgmQhmIPvQtLcD8yYqg=) 2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:ae:9a:ce:fb:dd:9c:0f:7b:b7:f3:7c:fa:32:ba:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Validity Not Before: Dec 6 22:00:52 2025 GMT Not After : Dec 7 22:00:52 2025 GMT Subject: CN=f5e8badaa2ff616289a1c0713ad7270b6e665677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:9f:c2:30:8f:f5:2c:05:7b:25:5f:b9:24: ce:1f:93:8f:dc:4e:71:7d:9b:fd:c6:ee:c3:85:db: 4d:0f:1e:c2:72:bd:1e:6f:9c:25:9c:81:c7:aa:5f: b8:c7:a6:a6:c4:4c:6f:d2:aa:e4:9a:bb:9c:49:49: 10:3c:0c:fd:60:49:b5:fc:56:c6:a3:11:75:22:eb: 1d:ea:8a:7f:99:57:81:dc:98:a6:c0:ee:3e:f0:34: cb:59:f4:fb:50:01:20:c4:92:ac:9b:c4:2d:f7:a9: 2f:03:ea:50:9e:7a:8c:c9:4e:06:b6:a7:fe:3a:59: 60:85:1d:dc:3c:18:e0:73:30:77:ff:83:f5:f2:ac: 28:93:69:40:9a:02:c3:2e:d1:91:6d:52:e6:ee:3e: 48:24:56:30:8e:59:3c:8a:eb:ba:bd:7d:7b:cd:df: 75:da:3c:39:b3:5b:1e:f9:c4:50:b5:11:b9:00:26: 19:35:bd:29:f4:bd:9e:25:8f:5e:19:33:18:02:f4: fc:a5:1a:69:af:fe:fd:13:2c:e6:77:e1:12:76:5a: 13:c2:44:4f:38:99:31:09:ed:e1:b2:89:38:23:70: 51:19:40:50:5b:ce:56:75:9e:ac:bb:3f:eb:4b:fd: bc:d6:55:1e:d4:c7:c9:b6:d0:a7:2c:7a:6a:06:37: e8:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E8:BA:DA:A2:FF:61:62:89:A1:C0:71:3A:D7:27:0B:6E:66:56:77 X509v3 Authority Key Identifier: keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:32:11:b0:ab:b4:fd:81:ef:7b:ed:99:93:c7:28:eb:5c:9c: 38:6f:0c:6b:a0:a9:c7:3a:60:71:2d:f5:87:d4:c9:3a:eb:85: 01:cf:64:0f:a1:90:87:57:f2:4e:11:ca:f7:c2:01:0a:ce:83: 99:21:be:aa:3b:1a:7a:d3:c2:3b:51:73:5e:f5:da:61:82:04: 28:41:65:22:f0:5e:60:ca:5b:4c:c7:b0:f2:77:1c:bc:c2:22: ce:40:4d:70:67:49:27:cc:92:a7:7b:77:55:c9:79:2e:9e:37: 9a:18:61:4a:ec:6b:17:e7:a5:8c:91:af:b7:d7:01:e3:5b:fa: e6:85:84:3b:88:90:99:58:ff:96:54:f6:87:56:f2:a7:fd:7d: 19:37:7c:ae:03:23:38:72:0c:76:e5:28:d9:de:60:a9:4f:73: ff:c0:1c:d1:ff:1f:e5:61:a2:8a:fb:48:4c:e4:e5:ed:f9:e7: bc:56:35:c3:c9:6c:3a:bc:15:03:14:e9:83:e5:ca:98:12:fe: cf:6d:a5:e8:1f:46:e3:21:b2:bc:5f:24:9e:6d:1c:f8:b0:a4: 3c:d9:d9:20:70:92:73:8d:c2:db:32:7d:c7:ac:16:d0:39:f3: b3:05:b5:fd:86:65:54:5b:47:79:d6:62:39:da:45:81:ed:cf: dc:b6:d3:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZr1rprO+92cD3u383z6MroZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi ODUzZDEwHhcNMjUxMjA2MjIwMDUyWhcNMjUxMjA3MjIwMDUyWjAzMTEwLwYDVQQD EyhmNWU4YmFkYWEyZmY2MTYyODlhMWMwNzEzYWQ3MjcwYjZlNjY1Njc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxmfwjCP9SwFeyVfuSTOH5OP3E5x fZv9xu7DhdtNDx7Ccr0eb5wlnIHHql+4x6amxExv0qrkmrucSUkQPAz9YEm1/FbG oxF1Iusd6op/mVeB3JimwO4+8DTLWfT7UAEgxJKsm8Qt96kvA+pQnnqMyU4Gtqf+ OllghR3cPBjgczB3/4P18qwok2lAmgLDLtGRbVLm7j5IJFYwjlk8iuu6vX17zd91 2jw5s1se+cRQtRG5ACYZNb0p9L2eJY9eGTMYAvT8pRppr/79Eyzmd+ESdloTwkRP OJkxCe3hsok4I3BRGUBQW85WdZ6suz/rS/281lUe1MfJttCnLHpqBjfoxwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFPXoutqi/2FiiaHAcTrXJwtuZlZ3MB8GA1UdIwQY MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1 LTgxMTVkZjMxNzIzNS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxLzU2NTdjOC01MDM3LTQ4Y2QtOGRiNS04MTE1ZGYzMTcy MzUvMS8xLUVwbFdacjduWWNudzl1VWZ2LTY0dVc0VTlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQTIR sKu0/YHve+2Zk8co61ycOG8Ma6CpxzpgcS31h9TJOuuFAc9kD6GQh1fyThHK98IB Cs6DmSG+qjsaetPCO1FzXvXaYYIEKEFlIvBeYMpbTMew8nccvMIizkBNcGdJJ8yS p3t3Vcl5Lp43mhhhSuxrF+eljJGvt9cB41v65oWEO4iQmVj/llT2h1byp/19GTd8 rgMjOHIMduUo2d5gqU9z/8Ac0f8f5WGiivtITOTl7fnnvFY1w8lsOrwVAxTpg+XK mBL+z22l6B9G4yGyvF8knm0c+LCkPNnZIHCSc43C2zJ9x6wW0DnzswW1/YZlVFtH edZiOdpFge3P3LbT2A== -----END CERTIFICATE-----Generated at Sat Dec 6 23:21:12 2025 by rpki-client