This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft File: egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json) Hash identifier: w6w6K70AXLIqiNBbTEU2b/0/Zl6yXqGtKXfRFkPcwC4= Subject key identifier: D5:B2:8C:1D:95:85:17:88:D0:82:1D:24:B9:A6:09:74:74:55:83:42 Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A Certificate issuer: /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Certificate serial: 019AF389B44CF20CD90F01B1A63B558CA117 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft Manifest number: 10C1 Signing time: Sat 06 Dec 2025 12:01:19 +0000 Manifest this update: Sat 06 Dec 2025 12:01:19 +0000 Manifest next update: Sun 07 Dec 2025 12:01:19 +0000 Files and hashes: 1: BkC382kbRID_J9MdHf3y_ZWlEf8.roa (hash: ts/8AAif8Jl4mhcHO6WxEGvpSqp2TwktqqlEa+sbGTU=) 2: ONKHpYimKuwzn77m9LydYFbzpRY.roa (hash: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=) 3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: tbMljsW0LHWqzwC7I0JwcpRBPOwLAbW6/TFQqVafEXk=) 4: k2qVus75QweqwVLaTzgWKFt2l2k.roa (hash: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=) 5: kBFDTimH0wXzN6bZHwFh18BZ9YQ.roa (hash: gXdNyTqShsEpC9gTq8XtRziYkmToBDMK/+q0FeGIxLk=) 6: utnanlwrMPvqo9oUFO7C-isrnws.roa (hash: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:b4:4c:f2:0c:d9:0f:01:b1:a6:3b:55:8c:a1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a Validity Not Before: Dec 6 12:01:19 2025 GMT Not After : Dec 7 12:01:19 2025 GMT Subject: CN=d5b28c1d95851788d0821d24b9a6097474558342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bb:29:98:a4:bb:10:fe:54:08:e4:ee:75:b0: df:ba:fc:4e:3f:cf:da:7b:cd:9d:cf:7c:3f:38:c8: f6:0f:e8:46:46:db:ca:b3:e7:d5:6c:fb:02:e3:44: ac:bc:1f:63:c6:74:f0:e5:b9:3f:20:1b:b0:23:ac: d7:48:c5:83:26:02:dc:4e:45:e7:e0:15:9b:2e:d3: d4:28:f4:ee:be:c0:39:8f:44:51:0f:aa:d9:b2:ca: 76:ae:e8:78:0d:15:fc:14:76:07:c3:f6:82:f6:fa: 95:be:01:fb:0b:8a:df:ed:38:0b:0b:bc:92:f3:f5: 74:b8:85:8b:5c:09:ce:b4:ac:da:42:52:87:77:fd: e5:71:36:d8:5c:45:91:85:06:39:eb:6d:8d:31:23: 61:ab:b5:b7:a5:5c:c6:c6:b6:f1:38:8a:56:92:2d: a0:d3:bb:08:67:87:2e:26:d6:50:d1:6d:bf:a9:a8: ba:6e:89:48:6b:85:49:fb:5b:33:12:33:2b:7e:15: 03:90:0e:98:56:08:7b:e9:ab:80:5e:ff:41:39:52: 34:5f:a5:69:0b:a0:d1:86:bc:f2:36:00:cb:47:c8: 54:9c:05:15:7a:b7:ae:15:df:fb:3d:34:61:f7:40: 97:ed:2a:ad:52:a5:4c:9b:b9:62:85:d0:ba:bb:9f: cc:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:8C:1D:95:85:17:88:D0:82:1D:24:B9:A6:09:74:74:55:83:42 X509v3 Authority Key Identifier: keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:05:75:b1:37:8b:ef:0d:ea:4b:f9:5a:a4:b0:43:53:22: 00:1d:a9:c5:31:56:af:9a:a0:0e:19:e2:85:f5:30:3c:3a:c0: 39:80:42:fa:42:7b:96:14:dc:04:a6:c5:80:bc:cf:75:46:56: 34:7b:2d:b4:52:ae:01:b9:96:4f:8b:68:39:c7:16:74:de:67: 2a:8f:aa:0c:57:13:28:c6:fa:6a:0c:b8:4f:a3:ad:1d:76:70: 2f:6f:da:2e:77:d0:9b:fa:15:04:a9:a1:ea:dc:55:5e:f1:fa: a4:0f:f7:b6:ae:85:95:92:83:4a:92:a4:7d:39:aa:65:ea:a2: 82:b1:89:1c:cf:a3:34:ac:e5:08:f2:a7:44:f8:be:2e:62:f6: 53:ef:28:51:22:9b:0c:09:39:ef:b3:1f:4f:06:85:73:b5:0a: 61:2c:a2:b6:51:94:70:88:37:1d:83:86:72:a5:b4:85:f3:a6: ab:74:5b:d2:e0:f2:8a:71:2c:b4:1b:33:eb:57:61:7e:86:a3: dc:d4:a7:28:b9:e0:df:f2:58:d3:df:ed:3b:82:d9:00:c3:06: b2:65:83:c5:17:38:6e:3f:40:fb:f9:83:04:f9:09:a9:17:c8: 2f:08:c8:6a:a0:f8:a3:6c:53:f1:26:32:a1:b1:13:f5:3b:58: fb:7c:c0:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzibRM8gzZDwGxpjtVjKEXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGJjZGVlOGNlODM5YzRkMjA0MTNjODYyNDIzY2NhMDRm ZGM2MGEwHhcNMjUxMjA2MTIwMTE5WhcNMjUxMjA3MTIwMTE5WjAzMTEwLwYDVQQD EyhkNWIyOGMxZDk1ODUxNzg4ZDA4MjFkMjRiOWE2MDk3NDc0NTU4MzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LspmKS7EP5UCOTudbDfuvxOP8/a e82dz3w/OMj2D+hGRtvKs+fVbPsC40SsvB9jxnTw5bk/IBuwI6zXSMWDJgLcTkXn 4BWbLtPUKPTuvsA5j0RRD6rZssp2ruh4DRX8FHYHw/aC9vqVvgH7C4rf7TgLC7yS 8/V0uIWLXAnOtKzaQlKHd/3lcTbYXEWRhQY5622NMSNhq7W3pVzGxrbxOIpWki2g 07sIZ4cuJtZQ0W2/qai6bolIa4VJ+1szEjMrfhUDkA6YVgh76auAXv9BOVI0X6Vp C6DRhrzyNgDLR8hUnAUVereuFd/7PTRh90CX7SqtUqVMm7lihdC6u5/MpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWyjB2VhReI0IIdJLmmCXR0VYNCMB8GA1UdIwQY MBaAFHoLze6M6DnE0gQTyGJCPMoE/cYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMt NGRlZjU3MzY1MTY5LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC81NGU5MTItYjUwMy00NTRjLWE0MzMtNGRlZjU3MzY1MTY5 LzEvZWd2Tjdvem9PY1RTQkJQSVlrSTh5Z1Q5eGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUe8FdbE3 i+8N6kv5WqSwQ1MiAB2pxTFWr5qgDhnihfUwPDrAOYBC+kJ7lhTcBKbFgLzPdUZW NHsttFKuAbmWT4toOccWdN5nKo+qDFcTKMb6agy4T6OtHXZwL2/aLnfQm/oVBKmh 6txVXvH6pA/3tq6FlZKDSpKkfTmqZeqigrGJHM+jNKzlCPKnRPi+LmL2U+8oUSKb DAk577MfTwaFc7UKYSyitlGUcIg3HYOGcqW0hfOmq3Rb0uDyinEstBsz61dhfoaj 3NSnKLng3/JY09/tO4LZAMMGsmWDxRc4bj9A+/mDBPkJqRfILwjIaqD4o2xT8SYy obET9TtY+3zAOw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:27:22 2025 by rpki-client