This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json) Hash identifier: 98nV0hUkNR6hhB+3aNN/VvrClS3b15RKVXduJ1rL1MU= Subject key identifier: CD:71:03:78:7F:A6:41:F8:33:89:09:55:10:F8:A5:2E:3B:16:74:55 Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f Certificate serial: 019AF240250A1D27AB2EFBCA95E4AD55556F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: vcOsD7870kLI2TpCLo2byirKzMGT05P6pMyLhZIHX6E=) 2: avJEaghetulkdy61P3vVvRtnwao.roa (hash: isq8BGshz+w5RQmqprep+yBn/iuxAmpetPcOYQFYWJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:25:0a:1d:27:ab:2e:fb:ca:95:e4:ad:55:55:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=cd7103787fa641f83389095510f8a52e3b167455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ae:26:b2:4e:51:7f:60:e0:6c:b7:cb:79:a9: 39:79:4f:f7:d6:7c:de:27:de:53:6b:56:33:7c:eb: 18:1f:e6:23:58:ab:86:63:b4:63:1d:89:4f:b7:bc: 28:01:b4:6f:96:dc:a7:a4:a2:05:d3:9a:a0:ff:55: d5:ff:d2:9a:85:97:df:3c:57:0b:96:e1:73:bb:ce: 47:7f:20:00:d5:2a:9e:1f:6c:57:41:6a:da:46:19: 40:c9:10:47:47:57:ff:3a:c0:6e:c8:e8:af:14:7f: 82:77:1d:8a:fa:aa:91:49:19:b8:20:f9:c3:e4:e4: 1f:f3:82:18:32:87:d1:d0:f2:e2:ce:45:e9:c1:15: 3d:9f:17:72:bf:f3:d4:5e:27:da:4d:34:55:e7:66: 8b:db:d6:e0:3e:79:97:20:2d:56:d9:29:76:0d:46: 8b:33:d0:b7:74:81:e1:ae:71:d8:5a:f1:ba:92:2b: 32:2d:09:c8:96:47:76:6b:b9:3f:fa:8b:d0:e3:bd: e4:c7:4e:2b:be:d7:f6:4d:7c:2e:ce:1b:4b:7c:80: a4:b3:7e:e6:40:35:bf:0b:87:28:f4:34:26:d9:dc: 38:24:4e:85:78:6e:97:5a:1c:32:a6:5c:85:30:52: fc:76:c0:a7:03:6a:e8:16:48:11:c2:71:b4:dc:7a: fe:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:71:03:78:7F:A6:41:F8:33:89:09:55:10:F8:A5:2E:3B:16:74:55 X509v3 Authority Key Identifier: keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:70:1e:f3:f1:4f:eb:b8:8a:df:75:3a:f5:37:b6:12:b5:00: d3:3d:60:73:b5:93:39:8c:a1:6a:1c:b9:1b:2e:08:d0:46:ea: aa:c0:1f:0f:bf:9d:41:96:7a:ec:04:80:9b:c0:97:e9:b9:e0: 26:7b:aa:e3:32:88:3f:11:5a:cd:8c:59:0a:4a:c5:2a:f2:03: 26:8c:53:36:73:5a:bf:fe:34:41:92:c6:c9:27:3d:1a:a8:ab: a6:4b:68:39:82:45:30:f9:74:95:63:30:f9:fc:3a:d3:12:8e: 01:46:21:f7:93:94:3c:cf:eb:49:d3:c9:e1:ae:c9:d6:c3:2b: e6:6f:52:db:d5:75:53:e5:19:9f:88:40:8f:bf:c0:c0:12:2c: 77:35:9f:62:cf:f3:ee:07:c0:c1:09:96:22:18:ce:b7:75:8b: 3f:94:2f:1c:01:89:12:51:e2:93:16:7d:87:1a:e6:b3:2e:de: 2c:5f:99:40:cf:ba:d0:b3:16:50:b6:1f:39:b4:8d:50:6f:7d: 22:e9:8d:3c:ed:b7:fe:2c:bc:eb:75:36:0e:ec:05:a7:9e:77: 8e:c7:12:85:c2:ac:fa:33:aa:fa:ba:52:b8:37:87:40:b6:e1: 6a:24:27:c2:29:da:13:31:2a:40:aa:79:53:4d:34:3c:b2:54: d7:b4:e1:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCUKHSerLvvKleStVVVvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDFjYzM0MzA3NDEwMmVmYTdmMGMzMGYyOTQ5OWUxYWQ1 NmUyOWYwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD EyhjZDcxMDM3ODdmYTY0MWY4MzM4OTA5NTUxMGY4YTUyZTNiMTY3NDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzK4msk5Rf2DgbLfLeak5eU/31nze J95Ta1YzfOsYH+YjWKuGY7RjHYlPt7woAbRvltynpKIF05qg/1XV/9KahZffPFcL luFzu85HfyAA1SqeH2xXQWraRhlAyRBHR1f/OsBuyOivFH+Cdx2K+qqRSRm4IPnD 5OQf84IYMofR0PLizkXpwRU9nxdyv/PUXifaTTRV52aL29bgPnmXIC1W2Sl2DUaL M9C3dIHhrnHYWvG6kisyLQnIlkd2a7k/+ovQ473kx04rvtf2TXwuzhtLfICks37m QDW/C4co9DQm2dw4JE6FeG6XWhwyplyFMFL8dsCnA2roFkgRwnG03Hr+mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM1xA3h/pkH4M4kJVRD4pS47FnRVMB8GA1UdIwQY MBaAFBIBzDQwdBAu+n8MMPKUmeGtVuKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQt OTllZDY3MzBmODRhLzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQtOTllZDY3MzBmODRh LzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnAe8/FP 67iK33U69Te2ErUA0z1gc7WTOYyhahy5Gy4I0EbqqsAfD7+dQZZ67ASAm8CX6bng Jnuq4zKIPxFazYxZCkrFKvIDJoxTNnNav/40QZLGySc9GqirpktoOYJFMPl0lWMw +fw60xKOAUYh95OUPM/rSdPJ4a7J1sMr5m9S29V1U+UZn4hAj7/AwBIsdzWfYs/z 7gfAwQmWIhjOt3WLP5QvHAGJElHikxZ9hxrmsy7eLF+ZQM+60LMWULYfObSNUG99 IumNPO23/iy863U2DuwFp553jscShcKs+jOq+rpSuDeHQLbhaiQnwinaEzEqQKp5 U000PLJU17ThPQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:06 2025 by rpki-client