This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft File: egz9WlEBPl_WyvgJh4BHpgXunW0.mft (raw, json) Hash identifier: d8+y7kpdzop6PqRadgZi6U3hSTN7999V8xfwusnsnZQ= Subject key identifier: AD:63:9D:4F:83:74:AD:9F:33:FB:AA:84:56:3B:60:C1:D6:60:BB:55 Authority key identifier: 7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D Certificate issuer: /CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d Certificate serial: 019AF31C2F357E3DAE180C8BD4D1F9A43BBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 10:01:41 +0000 Manifest this update: Sat 06 Dec 2025 10:01:41 +0000 Manifest next update: Sun 07 Dec 2025 10:01:41 +0000 Files and hashes: 1: RHlWpFi-cDo-cyvs-sRaiXiZbg8.roa (hash: 1PWadJWZ+l1enHDdWPnllLiQPr55+3WUCTN9xqnYDuA=) 2: egz9WlEBPl_WyvgJh4BHpgXunW0.crl (hash: zRh/alKrO5sNJcn+x+oYVzeLo8c0w5uLssVyukx8/O0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:2f:35:7e:3d:ae:18:0c:8b:d4:d1:f9:a4:3b:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a0cfd5a51013e5fd6caf809878047a605ee9d6d Validity Not Before: Dec 6 10:01:41 2025 GMT Not After : Dec 7 10:01:41 2025 GMT Subject: CN=ad639d4f8374ad9f33fbaa84563b60c1d660bb55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:38:30:3d:4c:59:f1:f1:b6:d4:d9:63:80:82: 11:0e:91:4e:f0:5a:80:5d:05:63:1f:e0:0e:f9:b7: 15:42:7c:4a:73:24:51:11:5c:91:13:3c:2b:6d:cd: 03:60:10:52:aa:68:8d:24:6e:d5:2e:a9:6a:da:f9: 96:6d:21:52:f8:f1:40:5e:13:69:b8:27:37:b9:f0: 52:42:2e:8c:1b:5f:1f:d1:60:59:c7:9d:25:26:2c: a6:50:26:2a:f2:e5:a0:b2:ea:06:6a:ca:98:d5:eb: a0:36:85:2e:78:8f:03:61:7c:ef:4c:7c:f6:ac:b1: 10:67:15:eb:68:34:80:5e:34:5c:3e:1e:06:bb:f2: 5b:48:80:96:94:6b:4b:24:93:8c:c6:94:56:11:89: a3:9d:82:99:b2:b9:43:c0:0f:c6:ce:09:08:a0:5e: 93:30:ee:95:1e:7d:a4:19:b8:46:2b:d7:46:4b:07: 78:59:ec:1c:1a:bb:3a:44:da:56:58:9d:65:16:bc: 46:0c:41:df:3d:b4:6a:2d:57:2b:0c:f0:c0:33:d4: 3f:57:d1:5e:99:c8:fb:43:95:c7:1c:a9:27:22:a6: 4e:9b:8d:b9:e7:51:22:12:af:1b:30:1b:f5:90:0e: 07:c1:63:ae:1b:ec:78:95:57:d4:66:ce:59:b8:a6: ce:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:63:9D:4F:83:74:AD:9F:33:FB:AA:84:56:3B:60:C1:D6:60:BB:55 X509v3 Authority Key Identifier: keyid:7A:0C:FD:5A:51:01:3E:5F:D6:CA:F8:09:87:80:47:A6:05:EE:9D:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egz9WlEBPl_WyvgJh4BHpgXunW0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee04d8-49dc-409f-92fc-dd5623048ea2/1/egz9WlEBPl_WyvgJh4BHpgXunW0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b3:a6:97:e6:15:d6:a8:58:3d:10:dc:4c:c9:70:fb:9b:7b: c7:68:7e:db:6a:17:fd:7f:be:60:c6:64:f4:e8:3b:0e:6b:c3: 25:29:84:4e:19:24:86:6b:5b:d2:3f:05:94:6a:1d:f2:d7:e9: 57:f9:fb:30:61:da:f8:e4:f1:14:f7:69:44:59:2a:79:90:e1: 1c:67:53:7d:7e:5a:55:26:77:c2:95:73:e6:b8:98:4e:05:1a: e2:88:06:cc:5b:30:f7:a7:6c:15:e8:84:d5:b9:a9:ea:f9:ec: 26:f1:99:35:98:69:a1:01:b3:6e:b6:3e:7b:f6:35:6b:d3:6b: f7:13:cf:b8:12:f3:ca:ff:7e:e3:18:0f:68:14:67:3d:d5:e4: 50:19:76:e1:db:21:54:95:8c:1d:96:0d:f4:57:99:05:34:cd: 14:6a:0a:da:ee:ff:99:dd:b0:7a:2d:be:24:17:23:67:d8:a0: 8e:a7:17:08:bb:67:ed:aa:25:89:a8:d3:55:d8:0a:b1:fd:5a: 0b:09:72:a0:e0:32:5e:dd:4b:98:6b:92:7f:13:dd:43:68:b6: 38:98:ed:bb:d0:45:1d:12:1c:11:b6:4e:8b:e1:d0:c7:c3:5f: 88:20:e9:81:6a:de:53:dd:a5:25:63:f7:95:9c:cc:d8:42:d3: 4e:9c:f7:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHC81fj2uGAyL1NH5pDu+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMGNmZDVhNTEwMTNlNWZkNmNhZjgwOTg3ODA0N2E2MDVl ZTlkNmQwHhcNMjUxMjA2MTAwMTQxWhcNMjUxMjA3MTAwMTQxWjAzMTEwLwYDVQQD EyhhZDYzOWQ0ZjgzNzRhZDlmMzNmYmFhODQ1NjNiNjBjMWQ2NjBiYjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozgwPUxZ8fG21NljgIIRDpFO8FqA XQVjH+AO+bcVQnxKcyRREVyREzwrbc0DYBBSqmiNJG7VLqlq2vmWbSFS+PFAXhNp uCc3ufBSQi6MG18f0WBZx50lJiymUCYq8uWgsuoGasqY1eugNoUueI8DYXzvTHz2 rLEQZxXraDSAXjRcPh4Gu/JbSICWlGtLJJOMxpRWEYmjnYKZsrlDwA/GzgkIoF6T MO6VHn2kGbhGK9dGSwd4WewcGrs6RNpWWJ1lFrxGDEHfPbRqLVcrDPDAM9Q/V9Fe mcj7Q5XHHKknIqZOm42551EiEq8bMBv1kA4HwWOuG+x4lVfUZs5ZuKbOlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK1jnU+DdK2fM/uqhFY7YMHWYLtVMB8GA1UdIwQY MBaAFHoM/VpRAT5f1sr4CYeAR6YF7p1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMt ZGQ1NjIzMDQ4ZWEyLzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTA0ZDgtNDlkYy00MDlmLTkyZmMtZGQ1NjIzMDQ4ZWEy LzEvZWd6OVdsRUJQbF9XeXZnSmg0QkhwZ1h1blcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7Oml+YV 1qhYPRDcTMlw+5t7x2h+22oX/X++YMZk9Og7DmvDJSmEThkkhmtb0j8FlGod8tfp V/n7MGHa+OTxFPdpRFkqeZDhHGdTfX5aVSZ3wpVz5riYTgUa4ogGzFsw96dsFeiE 1bmp6vnsJvGZNZhpoQGzbrY+e/Y1a9Nr9xPPuBLzyv9+4xgPaBRnPdXkUBl24dsh VJWMHZYN9FeZBTTNFGoK2u7/md2wei2+JBcjZ9igjqcXCLtn7aoliajTVdgKsf1a CwlyoOAyXt1LmGuSfxPdQ2i2OJjtu9BFHRIcEbZOi+HQx8NfiCDpgWreU92lJWP3 lZzM2ELTTpz3ZQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:15:47 2025 by rpki-client