This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json) Hash identifier: Esrv8WR1QiTKKaw3yPvkMbh3VWzpGvxrNMGQ4OCElQE= Subject key identifier: 68:A2:5C:F2:D5:CB:06:75:3A:66:A6:77:B2:75:A1:65:86:AA:71:F2 Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7 Certificate serial: 019AF50ACE096B72C6EF43F0DECAE0D748D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 19:01:57 +0000 Manifest this update: Sat 06 Dec 2025 19:01:57 +0000 Manifest next update: Sun 07 Dec 2025 19:01:57 +0000 Files and hashes: 1: 8ZJIQFfkXuRXaMfNIj1AaOQgmmY.roa (hash: fkS7EU1BD9C9b8dqx8W2IP5DewkFREbnFMqYxIgMiJw=) 2: Dw9LWwQEkFlvEEtQubiLXetc3pc.roa (hash: jU2F3DfrdPn0GZZk1xUCaPCNuSats7670fToq4AErzE=) 3: SBxAIWFNuQGrCTAH53EhdnL2yps.roa (hash: iy20UXGCUBS93Bj86SsCQ9ZfK3kFCwdnihkcjNjnF+o=) 4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: 3uu9qdaKPfiCc8hZf0oNm/q0qVets4mFlkL3VqI9X58=) 5: jHpbkP7Y7SL4FQAQOS01aN05aWw.roa (hash: jBc6Yfacl3zknfr5K+ara9iVbORR1iTOe0kex0C2UTY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:ce:09:6b:72:c6:ef:43:f0:de:ca:e0:d7:48:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7 Validity Not Before: Dec 6 19:01:57 2025 GMT Not After : Dec 7 19:01:57 2025 GMT Subject: CN=68a25cf2d5cb06753a66a677b275a16586aa71f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d1:6a:c2:02:e2:50:0a:80:58:ee:1c:75:e7: c8:0b:e0:c0:7a:10:e7:85:45:f9:b6:9a:e1:9a:67: ac:82:52:a8:8a:a2:4b:c7:ce:1b:41:00:c6:f0:95: 2d:ce:62:a1:4c:86:65:2b:65:c6:17:2b:46:b5:f7: fe:22:62:6a:39:f8:51:e8:24:26:fe:d3:10:60:63: d5:49:81:76:d9:29:a4:3b:d2:38:5f:ab:9c:0c:a2: 1e:d1:d9:c5:ad:72:92:37:68:ee:6b:89:98:a7:2b: 80:c5:23:93:04:94:55:e1:2b:b4:2f:2e:83:de:8e: 4a:95:64:63:be:d4:ce:57:52:75:57:15:7c:fe:1d: de:89:76:f6:42:60:ea:a3:e4:81:04:2a:e9:d2:77: 0e:ea:22:f2:2c:cb:fb:ea:5f:5d:5f:64:55:c7:d0: 95:89:68:e8:65:0c:51:4b:94:02:3e:db:d6:55:34: e7:fe:db:fa:c0:60:7f:75:13:93:32:04:63:ae:f9: 8e:75:bb:7f:bb:f6:7d:d9:33:e1:89:7c:02:2b:19: f0:9a:77:80:c7:9a:30:1f:ab:68:e7:92:8d:29:0e: 37:dd:f1:b3:9e:da:58:0d:d2:88:71:35:47:e9:a7: c0:ba:60:17:a2:23:8c:3f:af:7b:42:aa:38:d8:75: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A2:5C:F2:D5:CB:06:75:3A:66:A6:77:B2:75:A1:65:86:AA:71:F2 X509v3 Authority Key Identifier: keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7f:ea:3a:ca:2b:28:b1:1c:f3:30:2a:00:fe:c9:dc:81:e4: 78:1b:af:07:6c:1d:04:ed:8d:2c:51:b0:3b:c0:90:d4:d0:3e: d1:5e:01:08:64:b0:03:f2:b1:8c:9f:b8:b9:b4:1b:96:fa:db: f8:61:f7:27:f6:7f:e0:fa:d7:27:8c:6b:e5:82:48:58:86:c6: 8a:3c:9f:19:9e:29:00:0c:64:d9:50:ae:f1:b3:a9:7c:4a:08: 65:87:13:83:bc:83:db:56:a6:f7:1c:9f:6d:7f:c4:8a:32:53: 58:8d:67:ff:b2:a7:81:b3:69:64:f1:68:3e:6e:d5:00:b2:08: 2c:c2:8b:16:69:b9:ee:2a:9c:69:b7:e9:16:35:c0:1a:1a:33: c8:bd:6d:04:bf:dc:e6:81:c8:42:24:5f:8f:da:3c:42:6d:ad: fa:7d:e8:d0:64:e6:f8:e4:f6:72:0a:07:c6:27:46:59:80:f3: b7:49:5c:8f:af:01:92:64:4f:99:de:04:a6:e0:46:91:7b:32: 93:f9:12:0d:5c:65:4e:1a:79:46:6c:e9:57:86:8a:f0:67:2c: c1:f7:15:0c:07:7a:51:e9:a0:16:cb:06:3e:62:1d:52:e8:91: ee:ca:e8:eb:2d:91:41:9e:46:db:c5:c5:52:96:0e:34:dc:1c: a9:39:5b:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cs4Ja3LG70Pw3srg10jTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTM4YTkzNWY4YmFmOWNkOTMzOTA2NDE2NTkwZDc4MmU3 Mjg3YzcwHhcNMjUxMjA2MTkwMTU3WhcNMjUxMjA3MTkwMTU3WjAzMTEwLwYDVQQD Eyg2OGEyNWNmMmQ1Y2IwNjc1M2E2NmE2NzdiMjc1YTE2NTg2YWE3MWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9FqwgLiUAqAWO4cdefIC+DAehDn hUX5tprhmmesglKoiqJLx84bQQDG8JUtzmKhTIZlK2XGFytGtff+ImJqOfhR6CQm /tMQYGPVSYF22SmkO9I4X6ucDKIe0dnFrXKSN2jua4mYpyuAxSOTBJRV4Su0Ly6D 3o5KlWRjvtTOV1J1VxV8/h3eiXb2QmDqo+SBBCrp0ncO6iLyLMv76l9dX2RVx9CV iWjoZQxRS5QCPtvWVTTn/tv6wGB/dROTMgRjrvmOdbt/u/Z92TPhiXwCKxnwmneA x5owH6to55KNKQ433fGzntpYDdKIcTVH6afAumAXoiOMP697Qqo42HV5kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiiXPLVywZ1Omamd7J1oWWGqnHyMB8GA1UdIwQY MBaAFHqTipNfi6+c2TOQZBZZDXgucofHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzIt MzE5OTlmM2FkZDM2LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9mZjBiZmMtMjZmZS00NDEyLWEyMzItMzE5OTlmM2FkZDM2 LzEvZXBPS2sxLUxyNXpaTTVCa0Zsa05lQzV5aDhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3/qOsor KLEc8zAqAP7J3IHkeBuvB2wdBO2NLFGwO8CQ1NA+0V4BCGSwA/KxjJ+4ubQblvrb +GH3J/Z/4PrXJ4xr5YJIWIbGijyfGZ4pAAxk2VCu8bOpfEoIZYcTg7yD21am9xyf bX/EijJTWI1n/7KngbNpZPFoPm7VALIILMKLFmm57iqcabfpFjXAGhozyL1tBL/c 5oHIQiRfj9o8Qm2t+n3o0GTm+OT2cgoHxidGWYDzt0lcj68BkmRPmd4EpuBGkXsy k/kSDVxlThp5RmzpV4aK8GcswfcVDAd6UemgFssGPmIdUuiR7sro6y2RQZ5G28XF UpYONNwcqTlb0g== -----END CERTIFICATE-----Generated at Sat Dec 6 23:56:54 2025 by rpki-client