This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft File: eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json) Hash identifier: ItuBgVfcP7BDd10vFNw5k497JZ7+nNJwC4ptiJcW7JU= Subject key identifier: EA:14:6D:51:59:36:52:A7:02:AE:BE:83:15:95:49:CE:2D:A4:F1:8E Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Certificate serial: 019AF12D91C346B4656F548B2BF2FB4BFCF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft Manifest number: 10CC Signing time: Sat 06 Dec 2025 01:01:26 +0000 Manifest this update: Sat 06 Dec 2025 01:01:26 +0000 Manifest next update: Sun 07 Dec 2025 01:01:26 +0000 Files and hashes: 1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=) 2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: jYjqzbq6Af+htnWU//Fnk1gXNFeHopnsVmVJUBd7Dhg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:91:c3:46:b4:65:6f:54:8b:2b:f2:fb:4b:fc:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Validity Not Before: Dec 6 01:01:26 2025 GMT Not After : Dec 7 01:01:26 2025 GMT Subject: CN=ea146d51593652a702aebe83159549ce2da4f18e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:9c:70:3d:27:d7:49:85:18:8c:a5:f3:78: ee:09:53:66:04:e3:a9:29:9c:e2:d6:16:20:96:8a: 96:4c:f2:6e:7f:d0:d3:ef:d4:4b:fa:66:74:2b:9b: 82:c8:5a:7b:74:f6:25:21:f8:ae:9a:58:76:41:5c: d6:20:0e:a6:05:28:4e:e0:bf:e3:f2:1d:77:99:d0: ef:3d:40:57:c8:68:0f:e7:a7:99:5c:64:11:ca:88: f4:38:7b:a0:1c:c7:e6:83:b3:7a:55:c7:f7:93:6d: bf:66:03:c9:36:05:57:cf:7f:f9:2c:be:9b:96:5e: 9b:cc:d1:cb:8d:90:72:ad:17:69:97:a2:4e:d6:00: f8:ab:d8:e6:56:5d:60:c9:e4:b7:a4:86:ad:c3:8a: fb:0e:d3:f7:e8:80:b3:1d:d3:95:ae:dc:ab:d8:37: 1e:a6:54:4c:00:e9:b2:0b:0a:4f:d5:22:f7:a4:d3: 90:58:93:6f:53:69:ab:dc:8d:b8:82:fc:54:7d:5a: d9:3f:6e:76:42:4f:86:d6:1d:16:83:aa:72:7c:db: 3a:03:b8:2d:e2:eb:fb:3b:2e:b9:c1:96:3b:66:d0: 3e:a3:60:04:c8:2c:ff:a7:b1:65:a0:c9:64:63:c7: a8:52:b5:e3:d3:90:77:9f:f4:17:e9:1c:6d:eb:51: 01:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:14:6D:51:59:36:52:A7:02:AE:BE:83:15:95:49:CE:2D:A4:F1:8E X509v3 Authority Key Identifier: keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e0:6d:24:9a:d0:7b:4c:7e:59:0b:6d:48:50:83:22:37:d5: 97:98:3c:65:26:52:28:93:8a:5d:11:25:7a:40:39:6f:18:c4: 08:7b:a0:14:89:5f:f4:1a:8f:89:48:5f:e1:3c:a2:03:82:c0: 29:1c:1c:21:4f:c5:9e:98:ed:49:4d:d3:4d:40:73:2f:7d:c2: d2:7f:2c:a4:d0:6c:3f:91:67:2a:70:a0:e6:24:2a:6a:e7:61: 7a:12:bc:2a:87:71:7a:84:3c:a7:63:a9:87:22:bd:ed:33:c8: b6:94:fe:78:c1:6f:13:69:60:0a:fe:6b:6a:13:81:e1:05:5f: fc:75:a1:df:33:bf:9d:8e:35:e7:5d:07:f1:54:c3:5f:1f:fd: 9d:54:0c:f0:b0:2c:e6:59:99:7a:61:e5:42:d4:10:9e:61:c1: de:df:7d:23:9d:09:53:e9:28:75:6c:9c:55:e7:8d:18:d5:78: ac:16:5a:46:79:2c:1b:15:b0:fa:ab:38:1c:09:76:05:9f:02: 88:6d:af:bb:e8:2e:37:15:36:a5:db:2b:38:f6:1a:04:55:84: 2c:cb:c3:cb:71:8d:90:d5:86:f7:bc:5b:9e:28:94:6b:16:79: 9f:62:a7:9f:7b:91:86:c0:6f:ad:49:9e:37:25:05:60:64:35: 02:81:ac:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLZHDRrRlb1SLK/L7S/z3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj M2RjMGIwHhcNMjUxMjA2MDEwMTI2WhcNMjUxMjA3MDEwMTI2WjAzMTEwLwYDVQQD EyhlYTE0NmQ1MTU5MzY1MmE3MDJhZWJlODMxNTk1NDljZTJkYTRmMThlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxF+ccD0n10mFGIyl83juCVNmBOOp KZzi1hYgloqWTPJuf9DT79RL+mZ0K5uCyFp7dPYlIfiumlh2QVzWIA6mBShO4L/j 8h13mdDvPUBXyGgP56eZXGQRyoj0OHugHMfmg7N6Vcf3k22/ZgPJNgVXz3/5LL6b ll6bzNHLjZByrRdpl6JO1gD4q9jmVl1gyeS3pIatw4r7DtP36ICzHdOVrtyr2Dce plRMAOmyCwpP1SL3pNOQWJNvU2mr3I24gvxUfVrZP252Qk+G1h0Wg6pyfNs6A7gt 4uv7Oy65wZY7ZtA+o2AEyCz/p7FloMlkY8eoUrXj05B3n/QX6Rxt61EBwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOoUbVFZNlKnAq6+gxWVSc4tpPGOMB8GA1UdIwQY MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1 LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV+BtJJrQ e0x+WQttSFCDIjfVl5g8ZSZSKJOKXRElekA5bxjECHugFIlf9BqPiUhf4TyiA4LA KRwcIU/FnpjtSU3TTUBzL33C0n8spNBsP5FnKnCg5iQqaudhehK8KodxeoQ8p2Op hyK97TPItpT+eMFvE2lgCv5rahOB4QVf/HWh3zO/nY41510H8VTDXx/9nVQM8LAs 5lmZemHlQtQQnmHB3t99I50JU+kodWycVeeNGNV4rBZaRnksGxWw+qs4HAl2BZ8C iG2vu+guNxU2pdsrOPYaBFWELMvDy3GNkNWG97xbniiUaxZ5n2Knn3uRhsBvrUme NyUFYGQ1AoGsAQ== -----END CERTIFICATE-----Generated at Sat Dec 6 10:20:46 2025 by rpki-client