This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json) Hash identifier: X5lYxMwfxfnJ4FJrbnoE1QmrKCWTZTaTmz5FNQiq0cE= Subject key identifier: EE:6A:9C:A1:7D:75:2A:93:BC:75:79:D6:71:72:2D:BC:A9:AD:8F:B5 Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed Certificate serial: 019AF31CE86660393322D88473069AC984E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft Manifest number: 05C4 Signing time: Sat 06 Dec 2025 10:02:29 +0000 Manifest this update: Sat 06 Dec 2025 10:02:29 +0000 Manifest next update: Sun 07 Dec 2025 10:02:29 +0000 Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: rW9LRN8f3fZzD66+sLwPVVYW0U3WFnmaKi6vHmQ+yVA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:e8:66:60:39:33:22:d8:84:73:06:9a:c9:84:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed Validity Not Before: Dec 6 10:02:29 2025 GMT Not After : Dec 7 10:02:29 2025 GMT Subject: CN=ee6a9ca17d752a93bc7579d671722dbca9ad8fb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d1:7a:84:a1:08:c9:a3:98:6d:95:ba:1c:1a: 93:03:12:d8:e9:37:c5:5a:f8:a6:a5:4e:23:a0:fe: a7:dd:7a:76:23:ba:f9:0e:a4:10:e1:a5:5b:60:1e: 8e:18:d7:fc:b8:27:53:ec:f2:27:51:cf:a5:ab:42: 57:bc:32:c9:3c:38:ae:58:47:1e:ec:e7:98:ac:f6: 9e:37:67:0c:ce:0d:e4:f5:ff:bb:24:f7:ea:8c:1b: 0a:0b:a3:f1:f4:3a:c2:1c:cf:04:da:5d:b5:aa:50: 65:c0:13:c1:7b:e7:5b:a4:d1:72:1e:d0:bd:2c:97: 82:4a:c5:36:c1:8c:2f:b3:b6:2a:88:b5:68:5f:28: 2f:30:1b:02:fc:fa:51:44:c4:31:3d:b3:89:bb:df: 21:6f:ca:f4:4a:b3:44:d9:36:04:49:71:16:76:b9: 45:50:af:bd:76:0e:97:65:b3:fc:9c:a9:f3:a2:1c: 74:7f:7e:07:29:d7:c0:a9:d5:2b:c7:1f:34:b0:c0: 1f:dc:eb:d5:b5:e8:c3:53:81:ca:4e:c1:d9:0a:d8: 2e:78:7a:ea:0b:bd:26:26:fe:6d:f8:5d:74:23:8c: 13:7e:fd:ab:4d:87:1c:9d:b0:a6:c8:58:cc:67:74: 2e:29:70:f8:20:0f:4e:31:c1:73:60:0d:4a:b9:c6: 86:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:6A:9C:A1:7D:75:2A:93:BC:75:79:D6:71:72:2D:BC:A9:AD:8F:B5 X509v3 Authority Key Identifier: keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c2:f9:50:0b:fc:20:88:1d:b4:db:eb:74:ac:70:ea:50:b7: b3:4f:92:e9:af:9d:86:69:49:f3:05:c6:fc:2e:bf:89:30:7b: 3d:b2:c3:32:0b:6e:f7:7a:77:6f:35:0b:1b:eb:09:ca:53:5b: 9a:8d:16:bf:f1:70:ca:d3:ab:aa:61:de:bb:69:e6:c4:52:89: 16:62:f4:8b:30:ef:0a:9f:14:a0:38:6e:18:0a:ce:38:b7:b3: 34:53:bd:e5:ec:e2:a4:c0:29:95:84:d0:20:b7:bb:f4:b8:cb: 08:49:53:21:9d:df:d4:1e:63:3d:8c:2e:5c:7d:cf:3d:1d:e8: 11:57:04:22:b1:55:15:f7:d0:1d:08:52:28:0a:c4:b9:56:c7: 16:6e:20:cb:7f:2f:b5:63:b1:64:26:46:7b:5d:82:17:c9:a1: 82:11:12:47:13:3d:63:ff:49:f0:16:f4:21:a9:75:e8:da:fb: bf:76:94:b8:ff:28:d8:a9:94:76:5e:25:be:9d:12:3b:dc:ec: 6b:a3:d0:c7:59:0a:04:7d:88:77:b4:7c:87:b8:1a:bd:f7:8b: ee:e6:81:22:34:c5:1f:68:f3:75:91:b6:fd:c3:af:00:71:cc: f2:4a:0e:67:b2:6b:c5:17:81:6c:d4:d3:6c:37:e4:8b:f8:ac: 29:ed:2c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHOhmYDkzItiEcwaayYTiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmQ0MjJhMWRkZWUwMTZlZTVmNWEyMzEwMWI5MzA0M2Fm NzY0ZWQwHhcNMjUxMjA2MTAwMjI5WhcNMjUxMjA3MTAwMjI5WjAzMTEwLwYDVQQD EyhlZTZhOWNhMTdkNzUyYTkzYmM3NTc5ZDY3MTcyMmRiY2E5YWQ4ZmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNF6hKEIyaOYbZW6HBqTAxLY6TfF WvimpU4joP6n3Xp2I7r5DqQQ4aVbYB6OGNf8uCdT7PInUc+lq0JXvDLJPDiuWEce 7OeYrPaeN2cMzg3k9f+7JPfqjBsKC6Px9DrCHM8E2l21qlBlwBPBe+dbpNFyHtC9 LJeCSsU2wYwvs7YqiLVoXygvMBsC/PpRRMQxPbOJu98hb8r0SrNE2TYESXEWdrlF UK+9dg6XZbP8nKnzohx0f34HKdfAqdUrxx80sMAf3OvVtejDU4HKTsHZCtgueHrq C70mJv5t+F10I4wTfv2rTYccnbCmyFjMZ3QuKXD4IA9OMcFzYA1KucaGKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5qnKF9dSqTvHV51nFyLbyprY+1MB8GA1UdIwQY MBaAFHj9Qiod3uAW7l9aIxAbkwQ692TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzkt MmViMThiODg0MWU3LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzktMmViMThiODg0MWU3 LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjML5UAv8 IIgdtNvrdKxw6lC3s0+S6a+dhmlJ8wXG/C6/iTB7PbLDMgtu93p3bzULG+sJylNb mo0Wv/FwytOrqmHeu2nmxFKJFmL0izDvCp8UoDhuGArOOLezNFO95ezipMAplYTQ ILe79LjLCElTIZ3f1B5jPYwuXH3PPR3oEVcEIrFVFffQHQhSKArEuVbHFm4gy38v tWOxZCZGe12CF8mhghESRxM9Y/9J8Bb0Ial16Nr7v3aUuP8o2KmUdl4lvp0SO9zs a6PQx1kKBH2Id7R8h7gavfeL7uaBIjTFH2jzdZG2/cOvAHHM8koOZ7JrxReBbNTT bDfki/isKe0sfA== -----END CERTIFICATE-----Generated at Sat Dec 6 12:22:06 2025 by rpki-client