This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft File: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft (raw, json) Hash identifier: IeMveFwGxsnFRDCJCQKcKAXpz2ay+IGJUpiss4vO19w= Subject key identifier: C2:5C:A0:32:A5:38:EE:6C:29:10:3F:BF:99:61:4D:24:7E:CA:9C:4B Authority key identifier: 10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 Certificate issuer: /CN=10f1d0dbe093c722350618f4045c25ba94317f87 Certificate serial: 019AF0516CFCE24B89DE378DA90AEAEB3FD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft Manifest number: 1768 Signing time: Fri 05 Dec 2025 21:00:59 +0000 Manifest this update: Fri 05 Dec 2025 21:00:59 +0000 Manifest next update: Sat 06 Dec 2025 21:00:59 +0000 Files and hashes: 1: 2CKju1sFnZ0dhsD0IYQZTaEskZg.roa (hash: hgm4YcpbD+zZdUyJsK5xaCbHCgY7kvAz52Dw1xev4OE=) 2: 4-AjoNA7VOJ_UiimHqze6-r8mOc.roa (hash: JTkL4x5ahR/KwObF9hG8YAZtFMXcuYYdoh4Dfvy4fEs=) 3: 4yjEk3uPQykpRiAtMe9Ta3puC7E.asa (hash: /0Qgnk924zcdudhtbYhG9R/tRH1/XpJIF8EVd02x/IA=) 4: EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl (hash: Oen7qXq14kBXeJl0geK1FiLxzL4d035JpGPaHdiogTU=) 5: HISyPiu1Sf9BM-utlQgfw6elKBg.asa (hash: 2blxjr0KAyVnqaVerF5uOf5vVRYxEmJeqdEF7pf0GuU=) 6: UvLx2oYNdW2PyKjvMGN1IVTdYiI.asa (hash: +lC0mXrpgZ1tOZxPiTgy4U3EyPLtAIoTSYA360OOcCQ=) 7: d20O9emcn7CjuDmJRpHLCr299Xc.roa (hash: rl+B2eBW+ldlkZ8XO+QKbvyeN9kIzHzzXRoP3cWB2GM=) 8: gtefixppHDgPkEEMhZq1SfvWirQ.roa (hash: vn3uTTSXJsi+O61TM8/AR6beVW9RqmzQLNC3wyKaQ10=) 9: uCmthxTnbqdkSLFGPv0UNVxzqDY.asa (hash: TNBaBUAmHIyFe5yNbVfJyI5tV+81P/QpUH3D7yPhDjc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:51:6c:fc:e2:4b:89:de:37:8d:a9:0a:ea:eb:3f:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f1d0dbe093c722350618f4045c25ba94317f87 Validity Not Before: Dec 5 21:00:59 2025 GMT Not After : Dec 6 21:00:59 2025 GMT Subject: CN=c25ca032a538ee6c29103fbf99614d247eca9c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ee:68:04:e3:ba:9f:e0:44:c2:d7:3f:d6:f3: c6:f5:31:a7:2c:cd:ef:fe:12:58:cc:6c:d5:0f:fc: 7a:80:7a:27:b8:2e:9f:76:b1:f7:8b:f9:a1:75:96: e1:63:4a:25:89:1c:49:87:76:7e:50:9b:8d:6d:9e: dd:98:42:08:42:89:79:bc:e4:46:03:5d:4d:7f:dd: df:35:aa:46:74:84:e8:ed:b6:c1:22:79:e2:49:8c: f1:dc:3e:72:08:eb:90:ca:08:a8:ac:3c:a4:c7:1d: 2f:06:aa:44:07:4e:b8:bc:b2:f0:bc:5f:1d:f4:ee: df:a3:0b:ee:7d:e2:a7:fd:84:f3:24:96:b3:4d:ae: 52:94:c1:fd:cf:ab:c1:2e:b7:c3:ac:a6:03:92:e5: 5b:21:58:74:34:4f:45:f8:80:2e:a6:f5:cd:5a:ae: 5d:9a:ce:b9:4c:0d:e4:7a:a6:fb:a5:57:e3:57:81: 7a:34:f9:ec:ef:3a:86:ca:0c:48:4f:35:74:48:d4: 3d:cc:bd:9d:1c:a5:4d:d0:cb:6e:cc:2f:fb:51:2e: e9:27:bc:1a:ee:a5:8c:e4:69:2a:f7:7b:12:66:9a: 04:8e:a9:45:84:b0:d1:ea:f3:d9:58:8a:17:d8:50: 28:f3:42:19:a4:2b:00:9c:2f:2e:85:61:55:0f:1d: 51:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5C:A0:32:A5:38:EE:6C:29:10:3F:BF:99:61:4D:24:7E:CA:9C:4B X509v3 Authority Key Identifier: keyid:10:F1:D0:DB:E0:93:C7:22:35:06:18:F4:04:5C:25:BA:94:31:7F:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/605f1c-0d7a-4bd3-88b6-2f0a6bdbbe51/1/EPHQ2-CTxyI1Bhj0BFwlupQxf4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:87:68:e4:9e:4e:47:38:93:ec:16:ab:e6:72:49:81:ad:16: b4:2a:29:4f:48:72:19:3a:87:38:4a:c2:09:94:fc:9d:0d:e0: dc:a3:78:06:63:76:42:2a:00:87:38:93:1a:4e:99:f2:7e:7a: 23:69:80:a4:f3:14:3c:00:c7:dd:b7:13:52:e5:92:4f:f9:c0: 78:be:2f:bf:15:c0:22:c6:a2:ac:b7:83:9e:f8:4b:1a:9b:04: b9:c3:fa:bb:70:1d:39:ae:33:83:53:41:cd:2d:3d:f5:5f:b6: 70:2a:c5:ad:b5:9c:42:d3:a4:bd:d7:74:45:2c:02:5e:51:b6: 42:e9:26:4d:54:5f:5f:eb:b9:3f:bf:67:7f:90:33:53:3d:a6: f6:cb:6b:9b:39:0d:90:5b:0e:0e:35:f2:f2:d7:6b:2e:53:0b: 44:92:2e:6b:6e:ba:31:d3:1d:ae:cb:0f:5b:24:c0:99:69:82: 64:1b:22:f4:ee:c0:49:fa:9e:cf:d5:85:f3:a0:d8:d3:03:6d: ac:dd:2e:0e:4b:b8:d8:86:0b:d9:ff:7c:4b:10:41:22:53:76: c4:09:c1:e3:6b:5b:6c:a9:e9:80:53:c8:ba:1e:05:a9:f0:88: a4:77:26:14:fb:de:99:32:b8:1a:7d:a0:00:be:39:a2:41:ff: 68:a0:15:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwUWz84kuJ3jeNqQrq6z/YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjFkMGRiZTA5M2M3MjIzNTA2MThmNDA0NWMyNWJhOTQz MTdmODcwHhcNMjUxMjA1MjEwMDU5WhcNMjUxMjA2MjEwMDU5WjAzMTEwLwYDVQQD EyhjMjVjYTAzMmE1MzhlZTZjMjkxMDNmYmY5OTYxNGQyNDdlY2E5YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+5oBOO6n+BEwtc/1vPG9TGnLM3v /hJYzGzVD/x6gHonuC6fdrH3i/mhdZbhY0oliRxJh3Z+UJuNbZ7dmEIIQol5vORG A11Nf93fNapGdITo7bbBInniSYzx3D5yCOuQygiorDykxx0vBqpEB064vLLwvF8d 9O7fowvufeKn/YTzJJazTa5SlMH9z6vBLrfDrKYDkuVbIVh0NE9F+IAupvXNWq5d ms65TA3keqb7pVfjV4F6NPns7zqGygxITzV0SNQ9zL2dHKVN0MtuzC/7US7pJ7wa 7qWM5Gkq93sSZpoEjqlFhLDR6vPZWIoX2FAo80IZpCsAnC8uhWFVDx1RbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMJcoDKlOO5sKRA/v5lhTSR+ypxLMB8GA1UdIwQY MBaAFBDx0Nvgk8ciNQYY9ARcJbqUMX+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYt MmYwYTZiZGJiZTUxLzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC82MDVmMWMtMGQ3YS00YmQzLTg4YjYtMmYwYTZiZGJiZTUx LzEvRVBIUTItQ1R4eUkxQmhqMEJGd2x1cFF4ZjRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4do5J5O RziT7Bar5nJJga0WtCopT0hyGTqHOErCCZT8nQ3g3KN4BmN2QioAhziTGk6Z8n56 I2mApPMUPADH3bcTUuWST/nAeL4vvxXAIsairLeDnvhLGpsEucP6u3AdOa4zg1NB zS099V+2cCrFrbWcQtOkvdd0RSwCXlG2QukmTVRfX+u5P79nf5AzUz2m9strmzkN kFsODjXy8tdrLlMLRJIua266MdMdrssPWyTAmWmCZBsi9O7ASfqez9WF86DY0wNt rN0uDku42IYL2f98SxBBIlN2xAnB42tbbKnpgFPIuh4FqfCIpHcmFPvemTK4Gn2g AL45okH/aKAVUg== -----END CERTIFICATE-----Generated at Sat Dec 6 04:58:43 2025 by rpki-client