This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft File: 1EggcpoPmr-2ysO1-WwnGY12ORs.mft (raw, json) Hash identifier: e5U8anJziEn44mY0lyHTdqI49AcTuIHZQGvlE+PNBO4= Subject key identifier: 3F:F9:5A:34:30:EF:9C:9B:C8:DC:4D:2F:E5:76:2F:06:B5:4D:10:F2 Authority key identifier: D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B Certificate issuer: /CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Certificate serial: 019AF3C03E77D32A88C2037BB343CF8A2ECC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft Manifest number: 1761 Signing time: Sat 06 Dec 2025 13:00:53 +0000 Manifest this update: Sat 06 Dec 2025 13:00:53 +0000 Manifest next update: Sun 07 Dec 2025 13:00:53 +0000 Files and hashes: 1: 1EggcpoPmr-2ysO1-WwnGY12ORs.crl (hash: 6TIKTokKZ8+pritNNirO4yD9WioDm+413wheuHbXaes=) 2: 90qeQZqwuh0oi-oH9Ho2Hr4JeqU.roa (hash: yAfSfLIB/wlDkdhF0bN4I000INgGh/D9HhTP3okCxDk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:3e:77:d3:2a:88:c2:03:7b:b3:43:cf:8a:2e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d44820729a0f9abfb6cac3b5f96c27198d76391b Validity Not Before: Dec 6 13:00:53 2025 GMT Not After : Dec 7 13:00:53 2025 GMT Subject: CN=3ff95a3430ef9c9bc8dc4d2fe5762f06b54d10f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9b:96:f7:35:e9:66:09:3c:6b:5c:03:b2:8d: 22:9d:53:55:e6:ac:55:0a:ec:57:4b:9f:d2:38:ec: 77:7b:29:c9:ed:eb:b2:41:c3:f1:db:90:85:97:9b: 7e:0e:5d:a7:07:0d:2d:00:72:5a:71:3b:fc:46:20: af:d9:cf:57:98:dd:a6:73:4e:f1:96:6f:d0:d8:90: 60:64:a7:51:3f:bd:f9:ca:5d:f1:de:17:ad:7c:eb: 46:df:57:e0:6e:f3:77:d2:05:47:18:0a:dc:b0:18: bd:68:d2:59:8c:85:be:2a:d2:43:5b:1f:47:bd:f5: 00:60:75:2c:4e:c6:09:64:c8:8e:ba:4d:ed:cc:1a: c2:5a:a6:66:23:47:40:33:46:8d:d1:db:28:3c:81: 62:d9:1a:6e:74:9a:6e:f3:6b:26:2f:55:0f:c1:51: 3e:bf:a4:b6:ee:94:48:8a:2c:c7:56:43:25:67:04: 01:15:56:ec:f1:5d:94:27:03:de:e6:21:8d:9b:5e: 3e:47:a0:ec:08:3b:ea:0d:dd:ea:9f:72:ad:f9:82: c9:61:2a:ec:b6:37:e3:47:cd:7c:8e:31:36:0f:6b: a3:d6:7e:a4:8e:ae:c2:e1:3b:79:59:f1:95:ca:6e: 4b:1e:a7:05:7d:de:a3:50:1b:e8:25:17:02:b7:37: c7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:F9:5A:34:30:EF:9C:9B:C8:DC:4D:2F:E5:76:2F:06:B5:4D:10:F2 X509v3 Authority Key Identifier: keyid:D4:48:20:72:9A:0F:9A:BF:B6:CA:C3:B5:F9:6C:27:19:8D:76:39:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EggcpoPmr-2ysO1-WwnGY12ORs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4ba46f-3469-42b0-9b9e-61949356a9a0/1/1EggcpoPmr-2ysO1-WwnGY12ORs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c4:e7:8e:38:e1:21:4c:96:f3:c1:82:08:e6:a8:42:ff:23: aa:5b:8f:3c:bd:04:df:78:e6:b9:a5:18:59:95:d5:9e:de:fd: 90:6e:6c:49:03:9b:41:ac:e7:b0:a0:e3:29:37:47:ae:16:f4: 57:77:cd:4d:67:99:e7:9e:9e:59:b3:ab:62:83:0c:ac:1b:9f: 7b:23:c6:f0:3f:8e:c3:eb:cc:2d:0d:10:73:1b:ab:70:6a:f3: cb:f6:25:50:6f:7c:ae:49:38:6b:f3:c3:c6:b3:04:c3:78:82: c8:16:0c:9a:13:f7:42:8d:36:32:09:43:33:ba:9a:d9:9e:dd: 14:be:40:b6:8a:49:fe:b6:5d:7c:10:9a:7a:c0:1b:9c:27:cc: f4:ca:44:9a:aa:01:04:aa:9b:a3:db:03:df:bc:2e:3c:54:69: 50:83:96:ed:33:bd:8f:7a:03:aa:10:05:3c:8a:45:a0:85:5f: b9:dc:1c:b5:85:41:b1:7f:3e:15:c3:ed:b5:14:de:88:18:75: 7b:5e:54:b1:7c:85:a4:79:ee:ba:f0:60:64:89:c2:4d:fe:d7: 5c:79:4c:91:99:b6:25:59:67:3a:2b:c0:27:39:cd:ce:a9:28: 10:00:dc:73:f1:ea:20:d6:31:92:cb:6a:1b:41:ee:6c:00:d5: 04:61:c4:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwD530yqIwgN7s0PPii7MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NDgyMDcyOWEwZjlhYmZiNmNhYzNiNWY5NmMyNzE5OGQ3 NjM5MWIwHhcNMjUxMjA2MTMwMDUzWhcNMjUxMjA3MTMwMDUzWjAzMTEwLwYDVQQD EygzZmY5NWEzNDMwZWY5YzliYzhkYzRkMmZlNTc2MmYwNmI1NGQxMGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZuW9zXpZgk8a1wDso0inVNV5qxV CuxXS5/SOOx3eynJ7euyQcPx25CFl5t+Dl2nBw0tAHJacTv8RiCv2c9XmN2mc07x lm/Q2JBgZKdRP735yl3x3hetfOtG31fgbvN30gVHGArcsBi9aNJZjIW+KtJDWx9H vfUAYHUsTsYJZMiOuk3tzBrCWqZmI0dAM0aN0dsoPIFi2RpudJpu82smL1UPwVE+ v6S27pRIiizHVkMlZwQBFVbs8V2UJwPe5iGNm14+R6DsCDvqDd3qn3Kt+YLJYSrs tjfjR818jjE2D2uj1n6kjq7C4Tt5WfGVym5LHqcFfd6jUBvoJRcCtzfHCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/5WjQw75ybyNxNL+V2Lwa1TRDyMB8GA1UdIwQY MBaAFNRIIHKaD5q/tsrDtflsJxmNdjkbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUt NjE5NDkzNTZhOWEwLzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi80YmE0NmYtMzQ2OS00MmIwLTliOWUtNjE5NDkzNTZhOWEw LzEvMUVnZ2Nwb1Btci0yeXNPMS1Xd25HWTEyT1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMTnjjjh IUyW88GCCOaoQv8jqluPPL0E33jmuaUYWZXVnt79kG5sSQObQaznsKDjKTdHrhb0 V3fNTWeZ556eWbOrYoMMrBufeyPG8D+Ow+vMLQ0QcxurcGrzy/YlUG98rkk4a/PD xrMEw3iCyBYMmhP3Qo02MglDM7qa2Z7dFL5AtopJ/rZdfBCaesAbnCfM9MpEmqoB BKqbo9sD37wuPFRpUIOW7TO9j3oDqhAFPIpFoIVfudwctYVBsX8+FcPttRTeiBh1 e15UsXyFpHnuuvBgZInCTf7XXHlMkZm2JVlnOivAJznNzqkoEADcc/HqINYxkstq G0HubADVBGHEXQ== -----END CERTIFICATE-----Generated at Sat Dec 6 16:23:54 2025 by rpki-client