This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft File: ePDYlQwP20Hf1XxZSCglIGEcFsM.mft (raw, json) Hash identifier: AHZ7Ik++ufDStJK1KZT8BomT+MK37JSyEFJEgOoh290= Subject key identifier: 7E:31:9B:05:59:72:BF:BA:DE:83:3C:72:83:84:D6:86:79:F4:EA:51 Authority key identifier: 78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3 Certificate issuer: /CN=78f0d8950c0fdb41dfd57c5948282520611c16c3 Certificate serial: 019AF20972F618049E158AC0E00833369D41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft Manifest number: 0571 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: ePDYlQwP20Hf1XxZSCglIGEcFsM.crl (hash: wLwWnPOng7v17r4Gx4VN9npldjh8OOFI5YvPCJNkhOI=) 2: uI19goGgOdv56r27gyNLoOu7fK8.roa (hash: aRMcCZp6MU/f16sSAZBSSpBFMChXSvZTJUWHCtQ3+qI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:72:f6:18:04:9e:15:8a:c0:e0:08:33:36:9d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78f0d8950c0fdb41dfd57c5948282520611c16c3 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=7e319b055972bfbade833c728384d68679f4ea51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:70:58:3e:75:ed:0e:2f:19:41:f8:78:cc: e4:d3:60:22:57:6d:ba:14:da:a1:52:5b:3c:0b:74: fc:98:14:03:52:d5:e9:42:da:f4:28:e4:e1:9d:4f: 4f:e1:0f:de:1d:fd:52:1d:83:8c:ec:50:a9:12:ad: cb:0a:be:a3:46:ef:43:e8:d6:48:5f:30:8d:24:d8: ae:77:6a:15:b0:40:fa:fc:84:24:4f:0b:3c:3f:95: 26:4f:10:ad:51:17:61:a3:a1:42:cf:c4:d8:c5:43: 49:ec:47:c7:5a:4c:e8:71:48:e9:14:e7:6e:d9:b5: a9:cc:2f:4e:5d:83:09:64:bf:82:4f:9d:79:be:31: 45:81:a7:cb:12:2a:4b:67:35:82:a2:28:0f:e2:f3: 69:e7:c7:7b:eb:52:23:14:66:ce:56:a6:2e:fb:51: 76:40:2e:6d:75:00:9c:82:00:71:57:8e:e2:be:79: 95:a0:b0:31:5c:bf:70:08:79:41:08:f2:2c:fc:dc: 39:67:db:c5:df:d4:98:8f:1c:44:a1:1a:1f:51:d5: cc:22:d8:27:87:8d:dd:3f:f0:7d:25:5d:64:8d:4c: 16:69:76:1f:29:54:04:74:c4:fc:d5:70:db:19:e6: bf:3f:6b:38:e1:be:f4:df:6d:c8:85:41:6f:e6:5e: 9a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:31:9B:05:59:72:BF:BA:DE:83:3C:72:83:84:D6:86:79:F4:EA:51 X509v3 Authority Key Identifier: keyid:78:F0:D8:95:0C:0F:DB:41:DF:D5:7C:59:48:28:25:20:61:1C:16:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePDYlQwP20Hf1XxZSCglIGEcFsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/a267f0-9efb-44af-a06a-61ddbf1c349b/1/ePDYlQwP20Hf1XxZSCglIGEcFsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9d:51:22:2c:51:dd:52:ab:0c:0d:7b:34:15:00:d8:a3:bb: a2:ed:d1:0f:04:c6:b7:8f:07:c7:65:0a:48:51:48:ca:d7:50: d8:8a:4e:6b:bc:be:5c:ef:72:df:ff:4f:f5:d9:c6:f2:3a:d6: ad:ca:9e:49:4d:5b:be:a5:01:69:ca:3e:18:48:bf:5c:a1:5b: ae:d2:24:62:8a:ff:3f:f8:7e:f2:00:8d:35:2a:c2:15:32:8d: 85:6e:63:94:c1:16:80:47:33:39:a1:39:e9:d3:89:3d:db:22: 23:fa:40:ec:c9:c2:07:36:e7:ab:f1:7e:b3:e2:f7:b7:d9:bb: 62:9e:f5:04:2c:2f:ad:d1:d9:28:89:b9:21:cc:96:12:35:62: cf:97:33:2f:74:e5:29:8b:35:7f:28:aa:c3:d8:4d:cd:ec:a0: cc:1d:db:79:82:87:7f:42:32:d6:89:41:c0:b2:f1:4d:74:35: 16:f6:ce:14:e9:50:1c:02:21:73:af:38:d5:5d:4f:e9:ef:72: fd:47:09:d3:5b:82:e5:b0:ea:c9:79:51:5b:a6:bd:bd:d6:7d: 21:fb:e2:e3:60:68:ba:0b:42:3c:e5:e6:aa:d0:70:d8:78:48: 4e:41:48:60:33:b6:f5:12:b1:72:99:60:31:81:3a:89:52:2e: 50:eb:19:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXL2GASeFYrA4AgzNp1BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZjBkODk1MGMwZmRiNDFkZmQ1N2M1OTQ4MjgyNTIwNjEx YzE2YzMwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD Eyg3ZTMxOWIwNTU5NzJiZmJhZGU4MzNjNzI4Mzg0ZDY4Njc5ZjRlYTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUpwWD517Q4vGUH4eMzk02AiV226 FNqhUls8C3T8mBQDUtXpQtr0KOThnU9P4Q/eHf1SHYOM7FCpEq3LCr6jRu9D6NZI XzCNJNiud2oVsED6/IQkTws8P5UmTxCtURdho6FCz8TYxUNJ7EfHWkzocUjpFOdu 2bWpzC9OXYMJZL+CT515vjFFgafLEipLZzWCoigP4vNp58d761IjFGbOVqYu+1F2 QC5tdQCcggBxV47ivnmVoLAxXL9wCHlBCPIs/Nw5Z9vF39SYjxxEoRofUdXMItgn h43dP/B9JV1kjUwWaXYfKVQEdMT81XDbGea/P2s44b70323IhUFv5l6aNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4xmwVZcr+63oM8coOE1oZ59OpRMB8GA1UdIwQY MBaAFHjw2JUMD9tB39V8WUgoJSBhHBbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hMjY3ZjAtOWVmYi00NGFmLWEwNmEt NjFkZGJmMWMzNDliLzEvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9hMjY3ZjAtOWVmYi00NGFmLWEwNmEtNjFkZGJmMWMzNDli LzEvZVBEWWxRd1AyMEhmMVh4WlNDZ2xJR0VjRnNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKp1RIixR 3VKrDA17NBUA2KO7ou3RDwTGt48Hx2UKSFFIytdQ2IpOa7y+XO9y3/9P9dnG8jrW rcqeSU1bvqUBaco+GEi/XKFbrtIkYor/P/h+8gCNNSrCFTKNhW5jlMEWgEczOaE5 6dOJPdsiI/pA7MnCBzbnq/F+s+L3t9m7Yp71BCwvrdHZKIm5IcyWEjViz5czL3Tl KYs1fyiqw9hNzeygzB3beYKHf0Iy1olBwLLxTXQ1FvbOFOlQHAIhc6841V1P6e9y /UcJ01uC5bDqyXlRW6a9vdZ9Ifvi42BougtCPOXmqtBw2HhITkFIYDO29RKxcplg MYE6iVIuUOsZww== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:04 2025 by rpki-client