This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json) Hash identifier: Rje9ArxDfPuEIpBKX9gnjLaRxijNxSV7RvDKw3TEZjg= Subject key identifier: B1:9C:71:20:63:B8:75:37:59:DF:A9:0E:8B:9C:06:79:72:CC:9D:13 Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b Certificate serial: 019B24E3D46D951316E13EF8B578B7C67EC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft Manifest number: 18 Signing time: Tue 16 Dec 2025 02:01:09 +0000 Manifest this update: Tue 16 Dec 2025 02:01:09 +0000 Manifest next update: Wed 17 Dec 2025 02:01:09 +0000 Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: hNHizQB9p+8Qp1SH9uYXT8djfTb8KwIavwxJwvUM1aM=) 2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 22:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:d4:6d:95:13:16:e1:3e:f8:b5:78:b7:c6:7e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b Validity Not Before: Dec 16 02:01:09 2025 GMT Not After : Dec 17 02:01:09 2025 GMT Subject: CN=b19c712063b8753759dfa90e8b9c067972cc9d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a1:b3:a8:b9:59:20:f0:b1:f9:9b:d9:17:e6: 25:cc:06:d5:f3:19:58:53:7b:ed:ff:bf:10:17:d9: 8e:34:3d:1b:e1:c5:df:6a:37:9d:12:55:ea:1a:2d: 5e:ee:3f:70:f1:7a:61:22:39:e4:ed:03:ba:c6:e5: 4d:01:03:8f:be:63:a8:1f:48:54:6d:43:c0:91:bd: 76:65:a5:1b:e9:72:19:fc:f0:ec:90:b8:8a:62:f4: b5:4a:c2:ae:57:0f:9f:4d:32:84:91:50:d1:6a:db: 2f:50:7f:11:fb:2a:52:cd:81:11:51:d5:d7:50:4b: 1f:e9:10:00:86:51:6c:b7:d7:a9:f3:52:55:0a:c2: 69:e6:a0:35:9a:1f:8e:2e:94:e6:61:55:93:72:e4: b1:9b:76:42:71:9c:96:af:09:63:10:22:a2:12:9e: b0:de:24:5d:d5:7f:87:0f:e2:4a:e7:3b:f7:6e:86: 58:e3:20:d1:cf:c7:36:b2:a1:5a:0d:a5:c4:1c:21: 33:b6:72:20:0d:c4:de:5a:83:da:29:d8:29:43:cb: 08:0c:e5:d5:58:71:91:20:33:9a:44:a7:05:ac:da: c6:7a:f4:b4:0c:c2:d9:52:22:bf:53:3c:d3:10:2e: 01:4f:9a:83:aa:59:57:ff:d7:0e:6c:8c:bf:9b:b4: 33:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9C:71:20:63:B8:75:37:59:DF:A9:0E:8B:9C:06:79:72:CC:9D:13 X509v3 Authority Key Identifier: keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:23:8c:a9:7f:14:c7:39:eb:74:8a:80:03:f6:34:9f:94:3c: b1:a2:92:9f:a0:2e:01:0b:26:dc:d0:9c:ba:f7:68:d8:aa:c4: 5b:c9:1d:fa:a3:18:bc:b8:49:6e:b4:c0:fc:55:56:2c:e2:f0: 1e:88:23:1c:84:b2:8f:5a:8c:ab:9a:af:16:68:e0:90:c0:d6: eb:3c:5f:09:94:ca:1d:4b:62:d1:50:55:12:9b:2f:73:6b:d2: 2e:e6:42:22:97:29:61:b5:27:ca:0d:47:bb:48:27:92:d6:7b: 43:dc:46:ad:d9:a9:d4:0a:7f:87:a4:c4:a4:2c:bd:60:82:c9: 16:90:a9:0c:08:f7:66:22:84:24:be:5a:cc:b5:a5:13:67:7d: c8:7b:fd:68:69:3b:58:8e:41:c0:0b:b4:fa:6d:bf:99:42:31: 3d:6d:79:f9:86:b9:3c:de:90:a9:04:6d:e6:65:10:84:a6:c4: 83:b8:d6:1c:9e:aa:6b:3d:85:ae:e9:3f:65:f4:6e:c0:0b:af: 95:f3:80:7c:9d:67:da:71:bb:b4:e9:35:2b:90:17:6b:dd:70: 92:31:df:c1:82:a6:9f:11:35:fc:0c:72:7a:1c:73:10:e5:aa: ab:18:d1:33:73:eb:d0:d1:20:eb:ba:fb:cb:8a:14:dc:da:27: 51:9f:cd:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk49RtlRMW4T74tXi3xn7GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw Mjk1MGIwHhcNMjUxMjE2MDIwMTA5WhcNMjUxMjE3MDIwMTA5WjAzMTEwLwYDVQQD EyhiMTljNzEyMDYzYjg3NTM3NTlkZmE5MGU4YjljMDY3OTcyY2M5ZDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6GzqLlZIPCx+ZvZF+YlzAbV8xlY U3vt/78QF9mOND0b4cXfajedElXqGi1e7j9w8XphIjnk7QO6xuVNAQOPvmOoH0hU bUPAkb12ZaUb6XIZ/PDskLiKYvS1SsKuVw+fTTKEkVDRatsvUH8R+ypSzYERUdXX UEsf6RAAhlFst9ep81JVCsJp5qA1mh+OLpTmYVWTcuSxm3ZCcZyWrwljECKiEp6w 3iRd1X+HD+JK5zv3boZY4yDRz8c2sqFaDaXEHCEztnIgDcTeWoPaKdgpQ8sIDOXV WHGRIDOaRKcFrNrGevS0DMLZUiK/UzzTEC4BT5qDqllX/9cObIy/m7QzTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLGccSBjuHU3Wd+pDoucBnlyzJ0TMB8GA1UdIwQY MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYiOMqX8U xznrdIqAA/Y0n5Q8saKSn6AuAQsm3NCcuvdo2KrEW8kd+qMYvLhJbrTA/FVWLOLw HogjHISyj1qMq5qvFmjgkMDW6zxfCZTKHUti0VBVEpsvc2vSLuZCIpcpYbUnyg1H u0gnktZ7Q9xGrdmp1Ap/h6TEpCy9YILJFpCpDAj3ZiKEJL5azLWlE2d9yHv9aGk7 WI5BwAu0+m2/mUIxPW15+Ya5PN6QqQRt5mUQhKbEg7jWHJ6qaz2Fruk/ZfRuwAuv lfOAfJ1n2nG7tOk1K5AXa91wkjHfwYKmnxE1/AxyehxzEOWqqxjRM3Pr0NEg67r7 y4oU3NonUZ/N8w== -----END CERTIFICATE-----Generated at Tue Dec 16 04:32:42 2025 by rpki-client