This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft File: EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft (raw, json) Hash identifier: 8lK9M+omqdQ2SyB/sLHp+HiMExmKBBTuhuHHBFFUKOg= Subject key identifier: 93:B1:0B:91:D4:C4:25:B2:7E:D4:D2:BC:6C:31:6D:4F:8A:CD:21:D3 Authority key identifier: 10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D Certificate issuer: /CN=1003cd25315330350d73f2a3579aa95e052b718d Certificate serial: 019AF20947CCFE44F840BB7C38A8918870FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft Manifest number: 0B95 Signing time: Sat 06 Dec 2025 05:01:25 +0000 Manifest this update: Sat 06 Dec 2025 05:01:25 +0000 Manifest next update: Sun 07 Dec 2025 05:01:25 +0000 Files and hashes: 1: EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl (hash: mEJwjkQTS7XeJTW3N69ecrzhPh9oKcHb+zNpwmPzfPM=) 2: m05UFQfMUkm8RmzIuHOsksJMdP0.roa (hash: yGsV8HL3U4MAtVDLG2EGnsRjRnklyUH2zR9pUN6kEek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:47:cc:fe:44:f8:40:bb:7c:38:a8:91:88:70:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1003cd25315330350d73f2a3579aa95e052b718d Validity Not Before: Dec 6 05:01:25 2025 GMT Not After : Dec 7 05:01:25 2025 GMT Subject: CN=93b10b91d4c425b27ed4d2bc6c316d4f8acd21d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ef:72:0d:bf:65:35:87:19:d6:7a:26:31:d6: 6e:9c:6a:df:85:78:f0:4b:eb:3c:73:70:17:14:1a: fd:e2:10:d8:5f:4b:ef:8e:93:51:a3:d0:4e:65:d2: 28:7a:3e:6e:29:e1:e1:14:27:da:be:cd:bd:df:eb: b5:53:a4:d1:04:22:ef:82:24:a2:17:2f:95:8a:92: bd:0a:05:6d:62:55:2a:39:24:d7:91:ff:d0:5f:a5: 66:a6:1d:e8:97:20:4f:69:1b:e0:c1:d5:52:05:03: 0f:c2:0b:20:62:5f:ab:6f:31:c4:e8:d5:b8:59:4f: 49:03:e2:29:99:09:70:cb:98:1c:3c:3d:08:4e:bc: 11:5a:b3:5b:5a:1b:66:7a:b8:ba:c8:1a:c3:1b:cc: 36:7d:75:a4:ab:41:61:f9:fb:a3:3a:31:62:e1:2c: 26:64:d1:a7:a0:68:d5:ea:c3:e4:54:fb:04:18:2f: e0:39:13:cf:d2:f6:d5:e2:89:16:f4:a1:64:75:ff: ae:1e:4c:0c:38:59:15:03:0d:76:69:43:26:90:4d: 7c:35:8d:7a:b0:f1:92:e1:23:a8:f2:e3:de:20:c5: e5:54:6e:eb:52:dd:cc:92:e4:83:4c:f8:8c:74:a3: 1c:98:70:80:30:35:f6:cb:7a:18:45:3a:d9:8e:db: da:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B1:0B:91:D4:C4:25:B2:7E:D4:D2:BC:6C:31:6D:4F:8A:CD:21:D3 X509v3 Authority Key Identifier: keyid:10:03:CD:25:31:53:30:35:0D:73:F2:A3:57:9A:A9:5E:05:2B:71:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EAPNJTFTMDUNc_KjV5qpXgUrcY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/597232-f846-4fd7-bcc2-6afef5d0daa6/1/EAPNJTFTMDUNc_KjV5qpXgUrcY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8c:7c:81:42:53:e9:8e:a5:97:6f:46:ea:93:ab:ff:a8:b4: 5c:b1:de:36:6a:e8:ee:60:ff:bb:6e:51:8e:4a:d4:3e:fa:50: b6:7d:31:4e:fc:8a:9a:18:bb:89:a5:d8:7d:0c:2b:13:c1:31: 92:2e:c7:2f:0e:36:fc:53:13:48:9c:fc:5e:8f:05:c0:5b:77: a9:ff:e0:31:8c:b1:71:a2:41:84:a7:c8:bf:af:92:d7:b9:db: ef:30:4e:c6:fa:df:7e:76:a6:42:38:9c:4e:e2:6e:1b:bb:51: eb:47:e3:59:46:3f:35:af:5a:7f:e5:53:7a:0d:71:4a:7a:e7: 73:b0:a5:9f:9a:e1:17:ed:4c:e1:57:a1:71:84:c1:c5:fd:19: 26:c8:31:e5:8b:42:d8:90:09:f2:8c:a4:12:d8:6b:54:76:d2: 87:f7:71:66:c7:4f:f4:06:4c:6e:97:b4:30:91:dc:18:9f:f0: 42:95:b3:eb:7a:e9:6c:ad:0b:a0:30:c8:0b:fd:b2:35:00:e9: c9:f9:f9:95:22:d0:37:9d:e0:dd:58:4f:08:f5:17:af:2c:b9: d0:92:d4:15:9e:f2:75:5e:8d:d6:3a:b0:a8:7c:2e:d8:52:23: d0:1c:de:d5:39:c1:f6:d5:63:52:39:3b:88:e3:1a:55:76:02: 13:f8:de:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUfM/kT4QLt8OKiRiHD+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMDNjZDI1MzE1MzMwMzUwZDczZjJhMzU3OWFhOTVlMDUy YjcxOGQwHhcNMjUxMjA2MDUwMTI1WhcNMjUxMjA3MDUwMTI1WjAzMTEwLwYDVQQD Eyg5M2IxMGI5MWQ0YzQyNWIyN2VkNGQyYmM2YzMxNmQ0ZjhhY2QyMWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoO9yDb9lNYcZ1nomMdZunGrfhXjw S+s8c3AXFBr94hDYX0vvjpNRo9BOZdIoej5uKeHhFCfavs293+u1U6TRBCLvgiSi Fy+VipK9CgVtYlUqOSTXkf/QX6Vmph3olyBPaRvgwdVSBQMPwgsgYl+rbzHE6NW4 WU9JA+IpmQlwy5gcPD0ITrwRWrNbWhtmeri6yBrDG8w2fXWkq0Fh+fujOjFi4Swm ZNGnoGjV6sPkVPsEGC/gORPP0vbV4okW9KFkdf+uHkwMOFkVAw12aUMmkE18NY16 sPGS4SOo8uPeIMXlVG7rUt3MkuSDTPiMdKMcmHCAMDX2y3oYRTrZjtvaGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJOxC5HUxCWyftTSvGwxbU+KzSHTMB8GA1UdIwQY MBaAFBADzSUxUzA1DXPyo1eaqV4FK3GNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUFQTkpURlRNRFVOY19LalY1cXBYZ1VyY1kwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC81OTcyMzItZjg0Ni00ZmQ3LWJjYzIt NmFmZWY1ZDBkYWE2LzEvRUFQTkpURlRNRFVOY19LalY1cXBYZ1VyY1kwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC81OTcyMzItZjg0Ni00ZmQ3LWJjYzItNmFmZWY1ZDBkYWE2 LzEvRUFQTkpURlRNRFVOY19LalY1cXBYZ1VyY1kwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS4x8gUJT 6Y6ll29G6pOr/6i0XLHeNmro7mD/u25RjkrUPvpQtn0xTvyKmhi7iaXYfQwrE8Ex ki7HLw42/FMTSJz8Xo8FwFt3qf/gMYyxcaJBhKfIv6+S17nb7zBOxvrffnamQjic TuJuG7tR60fjWUY/Na9af+VTeg1xSnrnc7Cln5rhF+1M4VehcYTBxf0ZJsgx5YtC 2JAJ8oykEthrVHbSh/dxZsdP9AZMbpe0MJHcGJ/wQpWz63rpbK0LoDDIC/2yNQDp yfn5lSLQN53g3VhPCPUXryy50JLUFZ7ydV6N1jqwqHwu2FIj0Bze1TnB9tVjUjk7 iOMaVXYCE/je/g== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:05 2025 by rpki-client