This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft File: EghcVAwRT8iVegJQu0n0hLdDV7k.mft (raw, json) Hash identifier: pUPLjSEAtGPiYrTb3WEJmfVRhpj4xZQl+Ouqje37jAw= Subject key identifier: F3:F5:3C:A1:9F:34:3F:90:32:8A:0E:CF:87:1C:42:83:04:23:C7:DF Authority key identifier: 12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 Certificate issuer: /CN=12085c540c114fc8957a0250bb49f484b74357b9 Certificate serial: 019AF50AAED8A364978D911F7086FECCB3B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft Manifest number: 08EB Signing time: Sat 06 Dec 2025 19:01:49 +0000 Manifest this update: Sat 06 Dec 2025 19:01:49 +0000 Manifest next update: Sun 07 Dec 2025 19:01:49 +0000 Files and hashes: 1: EghcVAwRT8iVegJQu0n0hLdDV7k.crl (hash: oxV9zBUxT3tF8eN0pIzS+WqxCCcI9KsO3CWKe1wQEw0=) 2: s4gZLWdCbjdScQy92lhU1qj4INY.roa (hash: xkF7VCE+qi9EQz5A3LDxMLzmcYX7S6EBBQO/VGtQ7OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ae:d8:a3:64:97:8d:91:1f:70:86:fe:cc:b3:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12085c540c114fc8957a0250bb49f484b74357b9 Validity Not Before: Dec 6 19:01:49 2025 GMT Not After : Dec 7 19:01:49 2025 GMT Subject: CN=f3f53ca19f343f90328a0ecf871c42830423c7df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:86:15:d9:e4:01:cb:ef:3e:98:36:f0:e3: 82:dd:75:e9:bc:06:95:10:96:65:6a:d3:ec:6d:b4: 67:98:f9:f9:6a:c4:c2:a9:87:93:1f:68:c7:6f:30: 90:66:d5:16:60:bd:62:91:26:4e:9a:a0:f4:3c:97: bd:c3:87:0d:69:9d:0d:60:e6:1b:41:9d:fa:12:97: 26:86:37:c7:4f:2c:62:0b:ab:62:35:c7:0f:ca:60: e1:cb:2f:60:3e:15:b3:4f:7e:e0:6c:8e:c1:38:79: dd:24:9b:e2:c6:24:5a:e2:42:13:e8:b8:15:c1:f4: 0e:1c:33:0a:b3:dc:ce:a8:c9:33:b4:75:03:8e:9c: a0:9d:77:cb:91:1c:13:ff:05:ef:5c:e1:fa:3a:d8: f9:ed:e3:f1:5b:b8:80:36:72:aa:6b:25:9f:ef:57: 7b:e3:85:32:88:7f:19:84:42:7a:08:4a:fc:04:d8: 14:ef:e8:04:35:3d:97:59:17:7b:ab:e8:6b:86:73: 0b:0d:15:6f:67:9d:8d:5b:07:c4:8d:c3:47:5a:67: 85:f4:a3:a3:7e:6f:25:93:79:5d:94:7b:25:ce:90: c6:b0:89:e2:43:fa:56:2b:69:53:5e:f5:dc:cc:98: 45:3a:62:ee:c4:84:37:f2:7e:33:77:37:4e:4f:cc: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F5:3C:A1:9F:34:3F:90:32:8A:0E:CF:87:1C:42:83:04:23:C7:DF X509v3 Authority Key Identifier: keyid:12:08:5C:54:0C:11:4F:C8:95:7A:02:50:BB:49:F4:84:B7:43:57:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EghcVAwRT8iVegJQu0n0hLdDV7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9cf9d4-2ce9-424b-9cf0-8aa6f6c170ff/1/EghcVAwRT8iVegJQu0n0hLdDV7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fa:ff:1e:88:3e:4a:00:1c:57:5e:60:c3:af:6c:f8:b8:5c: 71:be:25:21:b8:8c:33:76:c9:6a:6d:f1:b9:16:ef:41:29:94: b9:41:64:9b:fc:b0:cd:78:d7:33:25:29:7a:ad:3b:92:33:1a: ae:5d:c4:f9:e7:ff:f4:fd:cb:4f:e6:16:40:22:28:74:b4:1f: 72:e5:48:42:06:c3:c4:7c:b2:3b:8e:02:55:04:11:e5:60:90: cc:50:d8:d1:8b:f7:ec:9d:ef:6b:74:32:8e:c1:6b:87:ce:68: 87:bc:c0:47:74:80:fb:ff:ce:9e:96:98:29:d8:f6:2a:ec:7c: 94:aa:38:43:2e:a2:d9:63:da:02:9e:17:c9:32:d5:ae:5a:aa: a3:2e:9e:9e:39:47:35:d8:32:31:81:c3:39:ff:7c:70:9e:3f: ee:cc:87:7f:f8:8e:3b:f6:a8:cb:99:0c:ba:99:15:1f:f3:ea: 21:45:31:39:d7:d5:fb:3a:1c:a3:49:cc:b1:b5:98:4b:51:3e: 4e:e1:36:b0:5b:14:bb:79:c1:66:d3:fa:71:98:4f:7b:52:e4: 3a:1f:1a:00:b0:69:b7:27:c7:03:52:06:01:ee:cd:6a:60:38: b5:77:73:aa:38:dd:35:65:05:59:f7:07:a7:55:3c:16:cc:37: ac:00:17:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cq7Yo2SXjZEfcIb+zLO0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDg1YzU0MGMxMTRmYzg5NTdhMDI1MGJiNDlmNDg0Yjc0 MzU3YjkwHhcNMjUxMjA2MTkwMTQ5WhcNMjUxMjA3MTkwMTQ5WjAzMTEwLwYDVQQD EyhmM2Y1M2NhMTlmMzQzZjkwMzI4YTBlY2Y4NzFjNDI4MzA0MjNjN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+GFdnkAcvvPpg28OOC3XXpvAaV EJZlatPsbbRnmPn5asTCqYeTH2jHbzCQZtUWYL1ikSZOmqD0PJe9w4cNaZ0NYOYb QZ36EpcmhjfHTyxiC6tiNccPymDhyy9gPhWzT37gbI7BOHndJJvixiRa4kIT6LgV wfQOHDMKs9zOqMkztHUDjpygnXfLkRwT/wXvXOH6Otj57ePxW7iANnKqayWf71d7 44UyiH8ZhEJ6CEr8BNgU7+gENT2XWRd7q+hrhnMLDRVvZ52NWwfEjcNHWmeF9KOj fm8lk3ldlHslzpDGsIniQ/pWK2lTXvXczJhFOmLuxIQ38n4zdzdOT8w8zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPP1PKGfND+QMooOz4ccQoMEI8ffMB8GA1UdIwQY MBaAFBIIXFQMEU/IlXoCULtJ9IS3Q1e5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAt OGFhNmY2YzE3MGZmLzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC85Y2Y5ZDQtMmNlOS00MjRiLTljZjAtOGFhNmY2YzE3MGZm LzEvRWdoY1ZBd1JUOGlWZWdKUXUwbjBoTGREVjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAfr/Hog+ SgAcV15gw69s+Lhccb4lIbiMM3bJam3xuRbvQSmUuUFkm/ywzXjXMyUpeq07kjMa rl3E+ef/9P3LT+YWQCIodLQfcuVIQgbDxHyyO44CVQQR5WCQzFDY0Yv37J3va3Qy jsFrh85oh7zAR3SA+//OnpaYKdj2Kux8lKo4Qy6i2WPaAp4XyTLVrlqqoy6enjlH NdgyMYHDOf98cJ4/7syHf/iOO/aoy5kMupkVH/PqIUUxOdfV+zoco0nMsbWYS1E+ TuE2sFsUu3nBZtP6cZhPe1LkOh8aALBptyfHA1IGAe7NamA4tXdzqjjdNWUFWfcH p1U8Fsw3rAAXhw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:41:00 2025 by rpki-client