This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json) Hash identifier: n38STAAO7XCqnLDVRon/T8dCrPknurccgGYfHC6OBCs= Subject key identifier: 9B:2C:66:17:EF:BA:35:C3:D1:CB:E7:4F:3B:DA:13:C6:48:5E:01:71 Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019AF208D25EF99B98C8C0CE4337AB2E75D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft Manifest number: 0142 Signing time: Sat 06 Dec 2025 05:00:55 +0000 Manifest this update: Sat 06 Dec 2025 05:00:55 +0000 Manifest next update: Sun 07 Dec 2025 05:00:55 +0000 Files and hashes: 1: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=) 2: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: ckMWOECoS5eQ3nimHR7kT36zl/OEq263mv9wiZ0q830=) 3: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=) 4: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=) 5: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=) 6: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d2:5e:f9:9b:98:c8:c0:ce:43:37:ab:2e:75:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Dec 6 05:00:55 2025 GMT Not After : Dec 7 05:00:55 2025 GMT Subject: CN=9b2c6617efba35c3d1cbe74f3bda13c6485e0171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:00:f3:c6:a2:fe:5e:2f:ab:b4:0c:7d:2d: 66:90:a1:95:4b:1e:1e:2c:24:f8:4b:6e:44:d0:99: 18:f5:40:f8:8e:12:9f:d4:07:9c:df:7b:1c:ef:70: b1:1e:6d:51:bb:23:92:45:68:2d:11:2e:34:cb:5e: b2:b3:d4:14:29:af:50:2e:f1:04:a5:ca:4a:ac:eb: ad:ef:71:9c:cc:8b:53:f3:00:d4:d8:78:76:77:0d: 4a:d8:35:74:9d:12:98:a1:80:02:12:bd:2f:e5:fb: 8f:9a:6f:2e:71:22:6f:b2:3a:42:66:ac:e4:aa:06: c0:12:31:16:ac:69:ae:22:67:eb:77:a5:77:1d:d5: ce:22:b5:7a:94:8b:e6:10:f7:57:93:4c:ee:2b:a3: 29:cf:a0:81:95:5c:98:1c:c6:c3:60:cb:73:ce:88: b3:50:a6:0b:9e:6f:bd:b7:67:48:6a:55:26:95:a1: f3:19:74:bf:55:9a:29:57:74:c2:e4:ce:96:95:3c: 45:58:9e:43:66:60:16:0e:a9:48:9c:8a:cf:d2:3f: 13:65:4a:eb:44:65:4e:ee:12:20:0d:66:95:1e:61: 8b:91:e0:a6:cc:64:a4:e2:eb:4b:5f:7d:3c:ac:88: 75:6b:de:03:cf:24:a9:e4:6d:9b:14:f9:44:69:7b: 32:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:2C:66:17:EF:BA:35:C3:D1:CB:E7:4F:3B:DA:13:C6:48:5E:01:71 X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:80:85:88:60:17:88:60:fc:ff:31:b2:47:74:89:20:70:b3: 06:c3:8d:be:f0:5b:c1:dd:df:c4:96:a2:59:22:77:ba:95:7b: 4c:87:43:2b:58:79:09:ba:d7:56:bc:08:f0:9f:06:7a:c4:bf: 38:ac:5d:76:69:aa:9d:81:38:da:21:1d:1d:22:c3:bc:30:97: aa:16:a7:a4:00:4e:60:d0:e8:f9:6b:4b:c8:10:1f:a1:1c:21: 45:f7:d8:1d:ee:b7:0a:bb:64:d0:f3:eb:24:46:23:22:e4:0f: 79:60:af:d2:87:a3:eb:5d:6b:00:88:ef:cf:1f:98:0d:d1:2a: ee:15:fd:da:84:b4:c3:69:c1:63:df:a6:22:15:18:55:7f:40: 7d:44:0b:50:db:7e:1a:b4:ef:27:12:52:09:41:0b:cd:65:d3: ca:8d:43:03:ef:c9:a6:f9:bb:16:af:2b:01:66:0d:60:89:c0: b1:c1:d9:7d:71:59:1b:73:9b:c9:13:e9:f3:24:97:4a:fe:4c: 94:05:8e:37:8f:4d:fd:6c:ee:a4:af:49:33:99:27:dd:bf:6c: ce:5d:7e:ff:99:e7:0c:6b:54:05:c9:ef:4b:a9:4e:4c:10:b6: a3:47:d7:20:b9:19:2c:a8:71:d3:83:4d:ca:4b:df:80:38:41: 86:8e:a7:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNJe+ZuYyMDOQzerLnXYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjUxMjA2MDUwMDU1WhcNMjUxMjA3MDUwMDU1WjAzMTEwLwYDVQQD Eyg5YjJjNjYxN2VmYmEzNWMzZDFjYmU3NGYzYmRhMTNjNjQ4NWUwMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYcA88ai/l4vq7QMfS1mkKGVSx4e LCT4S25E0JkY9UD4jhKf1Aec33sc73CxHm1RuyOSRWgtES40y16ys9QUKa9QLvEE pcpKrOut73GczItT8wDU2Hh2dw1K2DV0nRKYoYACEr0v5fuPmm8ucSJvsjpCZqzk qgbAEjEWrGmuImfrd6V3HdXOIrV6lIvmEPdXk0zuK6Mpz6CBlVyYHMbDYMtzzoiz UKYLnm+9t2dIalUmlaHzGXS/VZopV3TC5M6WlTxFWJ5DZmAWDqlInIrP0j8TZUrr RGVO7hIgDWaVHmGLkeCmzGSk4utLX308rIh1a94DzySp5G2bFPlEaXsyfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJssZhfvujXD0cvnTzvaE8ZIXgFxMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoCFiGAX iGD8/zGyR3SJIHCzBsONvvBbwd3fxJaiWSJ3upV7TIdDK1h5CbrXVrwI8J8GesS/ OKxddmmqnYE42iEdHSLDvDCXqhanpABOYNDo+WtLyBAfoRwhRffYHe63Crtk0PPr JEYjIuQPeWCv0oej611rAIjvzx+YDdEq7hX92oS0w2nBY9+mIhUYVX9AfUQLUNt+ GrTvJxJSCUELzWXTyo1DA+/Jpvm7Fq8rAWYNYInAscHZfXFZG3ObyRPp8ySXSv5M lAWON49N/WzupK9JM5kn3b9szl1+/5nnDGtUBcnvS6lOTBC2o0fXILkZLKhx04NN ykvfgDhBho6njw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:04:51 2025 by rpki-client