This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft File: EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft (raw, json) Hash identifier: OnxtFB/CcMYDe+UPFI2m+tpINxmFnbUG3iHDmSoVi7I= Subject key identifier: 8A:D3:1E:B5:62:F1:AC:4A:0C:59:41:DC:69:12:93:3D:6D:A2:E4:C0 Authority key identifier: 10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B Certificate issuer: /CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Certificate serial: 019AF50A93C114F29F619AC0814928671149 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft Manifest number: 157D Signing time: Sat 06 Dec 2025 19:01:42 +0000 Manifest this update: Sat 06 Dec 2025 19:01:42 +0000 Manifest next update: Sun 07 Dec 2025 19:01:42 +0000 Files and hashes: 1: APdV8HOuK_baV9w8xFhYPy7-2P4.roa (hash: IitULqtIj0Y4YtBexT7yVT81AkWjJbb2T56Qs1uC9QM=) 2: EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl (hash: MMDaESF9g2+mHSaCtmZ5yRgvUN+DCUOjFWICfdOMOYk=) 3: Fb0skEyX6qOFH4mxiCD0y38K50g.roa (hash: WuLRLLi+4HFH3PUcwNxaQ3ghnNVvZQgN47f0xDAHYEw=) 4: fcEGyk-ShkerhmvdFRcRV3UxI0Q.roa (hash: j94ZQOuH+xS4iNOpDw2YYuethGcrhVLCQhL5yC+U8s8=) 5: jGYUYth-JS9LpEgUYHaooWrb7Tc.roa (hash: frlNr3HLKX2GRFBcwYSe2xt1qGCkZ5xJR/twdkhb4cE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:93:c1:14:f2:9f:61:9a:c0:81:49:28:67:11:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1062bc36512658a0f7d3f96bc1d8e67d9fd4918b Validity Not Before: Dec 6 19:01:42 2025 GMT Not After : Dec 7 19:01:42 2025 GMT Subject: CN=8ad31eb562f1ac4a0c5941dc6912933d6da2e4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:23:61:ed:cc:fd:16:d1:14:9b:34:97:6c: 53:1c:69:1d:e9:c6:7a:82:f9:b0:21:e7:64:24:e3: 12:67:a0:2c:37:58:0d:fc:04:e1:0e:1e:1e:06:9b: 14:18:59:49:91:4e:fd:12:93:7d:eb:a3:1d:d9:21: 81:28:06:40:24:0d:35:a0:64:99:23:ed:29:6e:26: 5c:3b:03:00:71:37:1f:45:b9:ad:34:5d:98:b5:da: 4f:b6:2b:f2:2f:cb:32:97:c2:e3:fb:b8:26:bf:e2: 4b:b5:8e:6e:35:9d:da:95:cc:de:58:f3:4a:c6:ab: a5:8f:e7:39:8b:2b:9f:89:a7:63:97:44:89:ff:42: 1c:40:af:fa:ac:1f:9d:39:fb:ba:5a:07:b5:96:50: d1:f3:ed:69:79:c0:4f:fd:3a:5a:8d:73:39:3f:f4: 92:41:dc:7f:ed:82:ff:91:89:18:e1:65:60:b4:5a: 27:6c:d2:fb:b0:3c:2a:d7:70:27:e8:ea:c4:e8:9b: 4a:11:9f:45:76:0c:34:54:ab:8b:09:a9:07:97:5e: ea:4b:e6:ad:f2:f2:c3:d6:4e:52:8c:ce:e7:29:5b: 88:73:a7:ba:bf:de:9a:be:85:52:bb:bc:8b:98:16: bb:92:2b:66:ea:41:57:f3:73:a2:bb:25:21:19:24: 3c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D3:1E:B5:62:F1:AC:4A:0C:59:41:DC:69:12:93:3D:6D:A2:E4:C0 X509v3 Authority Key Identifier: keyid:10:62:BC:36:51:26:58:A0:F7:D3:F9:6B:C1:D8:E6:7D:9F:D4:91:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGK8NlEmWKD30_lrwdjmfZ_UkYs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/669ebf-ee7f-4eb7-8486-95ad92ac8698/1/EGK8NlEmWKD30_lrwdjmfZ_UkYs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:56:e8:0c:41:b9:99:11:76:b7:53:04:5d:ad:9a:5f:4e:58: 7e:36:94:e9:bc:13:5a:11:79:99:57:02:9d:d1:d9:ac:34:d5: b7:a3:69:23:58:af:23:a4:1a:ea:ae:a0:7e:8d:07:8e:80:fc: 62:4a:24:fc:b9:bb:c2:ad:d7:0c:95:71:b0:19:91:ec:7a:0f: 96:17:3f:69:6e:5c:33:a5:84:5d:4d:43:f2:d4:12:dc:16:14: 2e:f4:ca:26:bb:b5:9a:83:b0:75:9a:6c:d5:a0:b5:2a:8a:8d: d9:b7:59:e5:87:7e:94:2c:8c:30:55:38:20:1e:3f:2b:d9:2b: 31:54:6c:fd:ec:0e:5b:d2:53:d5:2e:8f:90:80:9e:90:34:c4: bd:08:1f:3f:82:56:cc:3b:e7:35:ab:27:3d:d4:1a:cf:4d:6b: c4:58:b8:d9:43:85:9e:2d:1f:df:3a:60:85:7f:d0:0f:0a:aa: ad:fa:1e:f0:91:a7:98:38:3d:5b:28:37:96:5a:a8:63:9f:82: 6a:b6:82:d5:1e:c8:14:67:50:bd:a2:d8:50:c0:31:62:a8:8a: 59:0b:7c:87:cf:50:1c:49:5a:12:e8:b6:8d:bb:28:8d:70:5b: 83:6d:01:e5:5b:54:9a:97:d8:d5:d7:f0:3d:d2:e7:51:96:92: e7:11:1a:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CpPBFPKfYZrAgUkoZxFJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNjJiYzM2NTEyNjU4YTBmN2QzZjk2YmMxZDhlNjdkOWZk NDkxOGIwHhcNMjUxMjA2MTkwMTQyWhcNMjUxMjA3MTkwMTQyWjAzMTEwLwYDVQQD Eyg4YWQzMWViNTYyZjFhYzRhMGM1OTQxZGM2OTEyOTMzZDZkYTJlNGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcsjYe3M/RbRFJs0l2xTHGkd6cZ6 gvmwIedkJOMSZ6AsN1gN/AThDh4eBpsUGFlJkU79EpN966Md2SGBKAZAJA01oGSZ I+0pbiZcOwMAcTcfRbmtNF2YtdpPtivyL8syl8Lj+7gmv+JLtY5uNZ3alczeWPNK xqulj+c5iyufiadjl0SJ/0IcQK/6rB+dOfu6Wge1llDR8+1pecBP/TpajXM5P/SS Qdx/7YL/kYkY4WVgtFonbNL7sDwq13An6OrE6JtKEZ9Fdgw0VKuLCakHl17qS+at 8vLD1k5SjM7nKVuIc6e6v96avoVSu7yLmBa7kitm6kFX83OiuyUhGSQ8mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrTHrVi8axKDFlB3GkSkz1touTAMB8GA1UdIwQY MBaAFBBivDZRJlig99P5a8HY5n2f1JGLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYt OTVhZDkyYWM4Njk4LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC82NjllYmYtZWU3Zi00ZWI3LTg0ODYtOTVhZDkyYWM4Njk4 LzEvRUdLOE5sRW1XS0QzMF9scndkam1mWl9Va1lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFboDEG5 mRF2t1MEXa2aX05YfjaU6bwTWhF5mVcCndHZrDTVt6NpI1ivI6Qa6q6gfo0HjoD8 Ykok/Lm7wq3XDJVxsBmR7HoPlhc/aW5cM6WEXU1D8tQS3BYULvTKJru1moOwdZps 1aC1KoqN2bdZ5Yd+lCyMMFU4IB4/K9krMVRs/ewOW9JT1S6PkICekDTEvQgfP4JW zDvnNasnPdQaz01rxFi42UOFni0f3zpghX/QDwqqrfoe8JGnmDg9Wyg3llqoY5+C araC1R7IFGdQvaLYUMAxYqiKWQt8h89QHElaEui2jbsojXBbg20B5VtUmpfY1dfw PdLnUZaS5xEaew== -----END CERTIFICATE-----Generated at Sat Dec 6 22:03:40 2025 by rpki-client