This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json) Hash identifier: 1erX1aQIb5yHN1eLhNQM/k0fRcAOuvKcePheoQnRloA= Subject key identifier: F4:86:AC:F4:73:D7:13:66:94:10:5B:DE:68:38:0E:E8:57:E1:36:D8 Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6 Certificate serial: 019B2EF9193ACF6856BE6D396EB7FA03EC15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 01:00:35 +0000 Manifest this update: Thu 18 Dec 2025 01:00:35 +0000 Manifest next update: Fri 19 Dec 2025 01:00:35 +0000 Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: mcfGXs7HW1kiGX2M50diKNi2l5BVRNWQGiW3TQrpHxo=) 2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:19:3a:cf:68:56:be:6d:39:6e:b7:fa:03:ec:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6 Validity Not Before: Dec 18 01:00:35 2025 GMT Not After : Dec 19 01:00:35 2025 GMT Subject: CN=f486acf473d7136694105bde68380ee857e136d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:61:66:d9:a6:2e:f9:b7:07:58:3c:d6:7b: bc:b8:e4:7f:bd:8f:f2:c4:73:42:f3:7d:d4:8d:1e: 38:77:02:00:bf:2e:a5:71:c8:94:9c:d2:ce:38:88: 49:12:d2:26:96:8a:5a:5e:5e:d0:ab:54:cb:da:13: 7b:2c:a8:3d:be:3c:46:fe:4f:6b:a9:6e:94:b3:68: b6:70:3a:31:53:0f:e4:6e:f6:11:7b:b8:92:6b:84: 4b:d3:e5:27:b6:9a:87:81:58:55:99:87:4e:56:f4: fd:66:42:b5:a3:01:71:76:bf:9f:ec:56:5d:b0:3e: 34:56:79:a3:bb:f6:7c:af:53:6d:0c:33:43:ea:72: b1:00:13:88:2c:59:d8:99:02:0b:64:bf:60:c9:8e: 79:c9:ab:8f:8d:1a:c8:b7:f9:41:a1:2f:0c:38:22: 0a:bf:3b:ee:61:2e:2a:59:df:d5:eb:72:b9:88:9a: 02:48:99:21:14:c0:91:14:8a:1f:3d:1a:87:a2:d6: b3:be:17:4a:96:88:22:3a:88:2f:71:08:3d:94:c1: 7b:d3:2a:7a:0a:aa:53:db:42:c3:fe:bc:e1:e6:f8: 3e:60:ab:7f:04:a1:26:05:9f:24:b5:14:67:1e:00: 8f:8b:7f:be:30:5b:78:7b:4a:7d:0a:09:3b:ce:db: b0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:86:AC:F4:73:D7:13:66:94:10:5B:DE:68:38:0E:E8:57:E1:36:D8 X509v3 Authority Key Identifier: keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:c9:1e:58:04:a0:9a:05:80:56:39:5e:49:49:57:19:d3:20: c3:17:e8:d5:92:9a:a9:e4:5f:a5:78:3b:e5:7d:8d:d8:a0:51: 7e:28:8f:b1:3c:25:51:80:e0:55:d2:2e:a1:e5:48:5b:43:f2: bc:bb:d9:7b:ed:5d:2e:dd:30:83:d5:87:b8:f9:d1:37:e8:8e: 0c:6d:0f:ad:a2:fc:2e:41:cd:14:7e:0b:99:83:8d:49:0d:f3: 38:cb:44:fd:84:9b:2c:0b:92:f6:4b:d8:1b:16:e3:85:f2:2e: 3e:84:15:58:7c:4f:e1:70:9a:4a:ef:e7:28:69:83:ae:f9:95: c7:3a:17:04:c8:7f:05:49:bc:b4:7b:84:93:06:b5:a4:a0:c9: 8f:57:7c:4f:d1:a5:5d:09:dc:30:20:55:71:79:20:0b:bb:e2: 71:0f:a8:7e:b5:c4:3a:52:ed:0f:91:7e:3a:a8:ee:1c:cb:05: ab:9e:c4:3c:27:57:53:27:64:05:f4:0c:ec:76:09:1c:dc:00: fe:c1:13:b6:60:3c:3b:22:ce:2d:10:91:ae:db:ed:90:22:10: 97:b0:57:63:b3:1b:f2:3c:b3:53:a1:d1:02:77:b1:36:e8:88: fe:ba:bf:12:9f:68:13:91:14:9b:00:73:08:df:ba:46:c5:bb: d2:c3:89:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+Rk6z2hWvm05brf6A+wVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz Yjc3YTYwHhcNMjUxMjE4MDEwMDM1WhcNMjUxMjE5MDEwMDM1WjAzMTEwLwYDVQQD EyhmNDg2YWNmNDczZDcxMzY2OTQxMDViZGU2ODM4MGVlODU3ZTEzNmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUVhZtmmLvm3B1g81nu8uOR/vY/y xHNC833UjR44dwIAvy6lcciUnNLOOIhJEtImlopaXl7Qq1TL2hN7LKg9vjxG/k9r qW6Us2i2cDoxUw/kbvYRe7iSa4RL0+UntpqHgVhVmYdOVvT9ZkK1owFxdr+f7FZd sD40Vnmju/Z8r1NtDDND6nKxABOILFnYmQILZL9gyY55yauPjRrIt/lBoS8MOCIK vzvuYS4qWd/V63K5iJoCSJkhFMCRFIofPRqHotazvhdKlogiOogvcQg9lMF70yp6 CqpT20LD/rzh5vg+YKt/BKEmBZ8ktRRnHgCPi3++MFt4e0p9Cgk7ztuwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSGrPRz1xNmlBBb3mg4DuhX4TbYMB8GA1UdIwQY MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt OGYyOWYzZDk4MjE0LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0 LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKskeWASg mgWAVjleSUlXGdMgwxfo1ZKaqeRfpXg75X2N2KBRfiiPsTwlUYDgVdIuoeVIW0Py vLvZe+1dLt0wg9WHuPnRN+iODG0PraL8LkHNFH4LmYONSQ3zOMtE/YSbLAuS9kvY GxbjhfIuPoQVWHxP4XCaSu/nKGmDrvmVxzoXBMh/BUm8tHuEkwa1pKDJj1d8T9Gl XQncMCBVcXkgC7vicQ+ofrXEOlLtD5F+OqjuHMsFq57EPCdXUydkBfQM7HYJHNwA /sETtmA8OyLOLRCRrtvtkCIQl7BXY7Mb8jyzU6HRAnexNuiI/rq/Ep9oE5EUmwBz CN+6RsW70sOJBw== -----END CERTIFICATE-----Generated at Thu Dec 18 06:52:05 2025 by rpki-client