This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft File: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json) Hash identifier: znduWQLLKMwcaqfsWFaY+Ttz6leL5Z1hN8Xj7F3M12k= Subject key identifier: 84:62:68:5B:1C:12:F3:58:91:4A:A6:C5:CD:C0:A1:71:C2:3B:0A:93 Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Certificate serial: 019AF2770526772B1C5A836A1CA57CAD7FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 07:01:17 +0000 Manifest this update: Sat 06 Dec 2025 07:01:17 +0000 Manifest next update: Sun 07 Dec 2025 07:01:17 +0000 Files and hashes: 1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=) 2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: lX+CpU6gwQ5+e4CkVxWD7EGTySDJxCnYliJdys9plnY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:77:05:26:77:2b:1c:5a:83:6a:1c:a5:7c:ad:7f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Validity Not Before: Dec 6 07:01:17 2025 GMT Not After : Dec 7 07:01:17 2025 GMT Subject: CN=8462685b1c12f358914aa6c5cdc0a171c23b0a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:0e:e7:fe:cb:58:e9:b6:22:d6:5c:73:02:ee: 16:8e:5f:d9:64:c4:6c:4a:7b:9c:1c:ad:d3:4d:85: 63:11:3b:c8:76:af:25:81:06:cb:1c:e1:6c:fa:c5: 81:1f:ab:c9:8c:dd:16:e2:40:64:8b:3d:b8:0c:4d: b5:fa:17:67:d1:7f:07:ab:9c:ae:30:a7:34:3b:90: 9d:d8:bb:47:89:99:7d:98:72:53:c3:29:02:6a:22: b6:33:79:72:c3:5d:7b:ab:c4:5f:4d:fb:fc:4c:12: 0c:0f:cd:31:68:32:68:2e:74:15:4b:4a:9f:ca:d4: fd:34:9f:66:dc:ac:10:2e:15:4b:86:43:c8:c4:08: 20:a1:24:e9:88:ff:ac:3d:c3:b9:36:97:3a:9e:45: c1:f7:25:d6:13:da:86:72:78:87:67:73:eb:73:a2: d1:f2:bc:b2:18:fb:33:18:91:1c:24:13:0d:25:11: 2d:b2:b5:cf:c8:b4:11:b3:f9:36:b9:0c:bb:b6:c3: 12:03:28:01:bc:8c:9c:6d:4a:1e:bb:83:fa:80:e8: e1:38:1c:a5:e3:92:76:5e:e9:d9:4e:f8:82:c5:dd: 04:9f:af:38:00:75:c2:d8:8c:60:5b:ee:84:8f:d9: f1:1a:b7:b4:1c:b7:eb:49:57:fe:90:a9:00:3f:ce: b2:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:68:5B:1C:12:F3:58:91:4A:A6:C5:CD:C0:A1:71:C2:3B:0A:93 X509v3 Authority Key Identifier: keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:73:6b:6f:b6:9a:c9:2f:de:46:0a:a3:66:55:f6:45:70:d1: 82:96:98:f4:d0:0b:89:89:4a:1f:79:6a:46:1e:37:ee:23:af: fb:a2:6d:fa:4d:08:22:60:ac:cb:8d:e1:e2:51:f0:f3:86:cf: d8:5d:93:79:b8:fd:dc:96:21:cc:89:c2:3a:a7:3c:2f:ab:7c: fd:55:ea:3b:af:28:92:89:7c:0c:c8:bb:48:82:af:7e:cb:7e: 2b:f2:0b:87:5e:6a:3d:f2:aa:6e:e1:d6:0b:a8:d2:93:e1:fb: a8:46:51:70:18:e4:e5:10:bc:1b:d9:8c:54:d0:fd:7c:3f:29: 15:83:91:89:84:8d:d6:69:8d:2f:c7:8b:b9:bb:97:eb:ea:3d: 46:6c:d9:97:f7:03:7a:39:23:22:d0:e7:aa:79:1c:12:22:a3: bc:46:e5:b1:28:1e:47:83:49:d0:a4:df:29:25:11:89:18:da: a1:39:63:92:4a:85:c3:34:8b:cb:52:e4:4d:25:36:66:b6:f1: 05:ee:5d:aa:c0:95:0a:53:75:a8:26:d5:de:05:78:6f:2a:bf: c7:d1:0d:f9:e3:ca:c5:ee:8e:eb:fc:88:80:32:d1:1e:79:75: f9:81:1d:b4:99:b6:70:44:fa:b4:b6:39:7e:61:09:4b:8e:35: b1:67:27:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydwUmdyscWoNqHKV8rX/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTVlYWUzMGQxMGZhZjFkOTllYmYyY2ZkZmQ2NjJjZTc0 MGY4MzkwHhcNMjUxMjA2MDcwMTE3WhcNMjUxMjA3MDcwMTE3WjAzMTEwLwYDVQQD Eyg4NDYyNjg1YjFjMTJmMzU4OTE0YWE2YzVjZGMwYTE3MWMyM2IwYTkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg7n/stY6bYi1lxzAu4Wjl/ZZMRs SnucHK3TTYVjETvIdq8lgQbLHOFs+sWBH6vJjN0W4kBkiz24DE21+hdn0X8Hq5yu MKc0O5Cd2LtHiZl9mHJTwykCaiK2M3lyw117q8RfTfv8TBIMD80xaDJoLnQVS0qf ytT9NJ9m3KwQLhVLhkPIxAggoSTpiP+sPcO5Npc6nkXB9yXWE9qGcniHZ3Prc6LR 8ryyGPszGJEcJBMNJREtsrXPyLQRs/k2uQy7tsMSAygBvIycbUoeu4P6gOjhOByl 45J2XunZTviCxd0En684AHXC2IxgW+6Ej9nxGre0HLfrSVf+kKkAP86yVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIRiaFscEvNYkUqmxc3AoXHCOwqTMB8GA1UdIwQY MBaAFBBV6uMNEPrx2Z6/LP39ZiznQPg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQt MjczZTg2OGNlZGYwLzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQtMjczZTg2OGNlZGYw LzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlHNrb7aa yS/eRgqjZlX2RXDRgpaY9NALiYlKH3lqRh437iOv+6Jt+k0IImCsy43h4lHw84bP 2F2Tebj93JYhzInCOqc8L6t8/VXqO68okol8DMi7SIKvfst+K/ILh15qPfKqbuHW C6jSk+H7qEZRcBjk5RC8G9mMVND9fD8pFYORiYSN1mmNL8eLubuX6+o9RmzZl/cD ejkjItDnqnkcEiKjvEblsSgeR4NJ0KTfKSURiRjaoTljkkqFwzSLy1LkTSU2Zrbx Be5dqsCVClN1qCbV3gV4byq/x9EN+ePKxe6O6/yIgDLRHnl1+YEdtJm2cET6tLY5 fmEJS441sWcnUQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:07:07 2025 by rpki-client