This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft File: EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft (raw, json) Hash identifier: w7TQt4OE5tGofTRnSba/AiUcphuCsZI5ZTdvXZsGixs= Subject key identifier: 9E:57:73:22:B0:8F:48:9D:A0:80:AB:3D:22:D4:D8:8B:44:F3:31:D0 Authority key identifier: 12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD Certificate issuer: /CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd Certificate serial: 019AF164904EF66FA3E155419F9E6DCA8A66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft Manifest number: 095C Signing time: Sat 06 Dec 2025 02:01:30 +0000 Manifest this update: Sat 06 Dec 2025 02:01:30 +0000 Manifest next update: Sun 07 Dec 2025 02:01:30 +0000 Files and hashes: 1: EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl (hash: L8XEWzdIBAzTxAuRkZOI7vdCYLI0ca61EvNY6ClHom0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:90:4e:f6:6f:a3:e1:55:41:9f:9e:6d:ca:8a:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=129462d45b8ab95d4c35c40265b31b52bf1e8dbd Validity Not Before: Dec 6 02:01:30 2025 GMT Not After : Dec 7 02:01:30 2025 GMT Subject: CN=9e577322b08f489da080ab3d22d4d88b44f331d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:86:47:71:ee:4d:b4:64:1e:c6:b5:27:95:e7: 86:a2:28:6c:f3:d7:77:71:c0:53:42:1f:4f:50:b2: 74:5b:a2:5e:e6:98:3e:e5:60:6d:8c:1a:9d:38:8a: 74:50:97:16:ac:0c:d0:23:73:97:7c:64:65:29:fa: b3:54:2f:a5:43:d9:78:13:8d:fb:86:f3:0b:12:88: 6f:d1:8e:3e:03:34:e2:5b:88:11:c6:ca:a8:e1:9a: 6c:fd:45:44:9a:9a:70:25:f6:7f:0b:ec:58:55:60: f2:fe:90:60:d8:28:c4:11:9f:3e:35:5e:e1:40:fc: 4a:82:29:eb:3c:ea:2d:b6:00:4d:b9:ad:ce:1f:55: 7a:e9:40:d7:bd:6a:2c:54:53:8c:c5:47:6b:2c:21: cc:4d:1a:66:23:82:b1:33:22:00:7f:61:cb:1d:0e: 08:29:16:2e:34:af:e0:a7:3f:fd:0c:b2:1f:3f:6d: 86:c7:7e:35:0f:b6:49:33:f6:6b:53:1e:82:2c:47: a5:df:e6:33:7c:68:55:0c:4b:da:b5:3c:df:3c:de: af:11:40:2e:a6:43:53:11:53:b7:7a:18:b1:6e:ea: f3:23:a0:04:45:f3:9b:7f:ef:a2:cd:76:b0:af:1f: 46:06:dd:66:9a:88:aa:94:b9:26:f5:6f:38:0d:19: 55:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:57:73:22:B0:8F:48:9D:A0:80:AB:3D:22:D4:D8:8B:44:F3:31:D0 X509v3 Authority Key Identifier: keyid:12:94:62:D4:5B:8A:B9:5D:4C:35:C4:02:65:B3:1B:52:BF:1E:8D:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EpRi1FuKuV1MNcQCZbMbUr8ejb0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/999509-bdc0-4e07-8774-3a389332f79f/1/EpRi1FuKuV1MNcQCZbMbUr8ejb0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b3:4d:9e:5a:5b:8f:e5:d4:7e:e6:36:02:38:12:37:e8:fe: 1c:8a:a2:46:7c:62:68:8c:19:05:3d:e6:08:1d:57:8e:c1:b5: de:0e:98:51:50:81:46:d0:bf:d8:9d:87:54:91:a5:18:00:dd: 17:ee:8d:6c:6e:46:41:e6:d5:c6:0e:cd:a5:c3:f0:ba:88:57: 06:f5:e6:9a:97:23:74:a0:94:35:46:ee:3e:9b:ff:f2:88:21: b5:93:cf:0d:b6:25:05:ca:e9:c2:f8:d5:e5:11:a9:6c:33:d3: 6d:13:46:64:be:76:60:67:a7:ef:9b:6b:6e:75:c1:86:f3:a0: cc:59:06:07:4c:03:ba:37:27:74:43:e3:6b:39:05:17:7d:c2: bf:ec:89:95:d0:34:54:c4:d3:84:19:50:15:dd:52:bf:83:c6: cb:61:75:92:0c:45:5f:f6:79:14:77:d6:8c:47:35:44:cf:c7: 6b:4d:f3:4b:18:4e:33:6c:de:d8:ad:27:55:91:58:bc:a1:2f: 99:5f:17:98:da:c8:4d:f2:1d:53:a3:a6:b7:f4:ef:2d:40:3d: 76:af:28:99:12:fe:3b:f4:d7:82:50:d3:65:1b:e9:fd:b2:e0: 0f:d0:40:9f:40:83:32:aa:5c:8e:5c:b1:dd:bc:04:d1:ca:f9: d2:87:7b:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZJBO9m+j4VVBn55tyopmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyOTQ2MmQ0NWI4YWI5NWQ0YzM1YzQwMjY1YjMxYjUyYmYx ZThkYmQwHhcNMjUxMjA2MDIwMTMwWhcNMjUxMjA3MDIwMTMwWjAzMTEwLwYDVQQD Eyg5ZTU3NzMyMmIwOGY0ODlkYTA4MGFiM2QyMmQ0ZDg4YjQ0ZjMzMWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIZHce5NtGQexrUnleeGoihs89d3 ccBTQh9PULJ0W6Je5pg+5WBtjBqdOIp0UJcWrAzQI3OXfGRlKfqzVC+lQ9l4E437 hvMLEohv0Y4+AzTiW4gRxsqo4Zps/UVEmppwJfZ/C+xYVWDy/pBg2CjEEZ8+NV7h QPxKginrPOottgBNua3OH1V66UDXvWosVFOMxUdrLCHMTRpmI4KxMyIAf2HLHQ4I KRYuNK/gpz/9DLIfP22Gx341D7ZJM/ZrUx6CLEel3+YzfGhVDEvatTzfPN6vEUAu pkNTEVO3ehixburzI6AERfObf++izXawrx9GBt1mmoiqlLkm9W84DRlV7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ5XcyKwj0idoICrPSLU2ItE8zHQMB8GA1UdIwQY MBaAFBKUYtRbirldTDXEAmWzG1K/Ho29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQt M2EzODkzMzJmNzlmLzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85OTk1MDktYmRjMC00ZTA3LTg3NzQtM2EzODkzMzJmNzlm LzEvRXBSaTFGdUt1VjFNTmNRQ1piTWJVcjhlamIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7NNnlpb j+XUfuY2AjgSN+j+HIqiRnxiaIwZBT3mCB1XjsG13g6YUVCBRtC/2J2HVJGlGADd F+6NbG5GQebVxg7NpcPwuohXBvXmmpcjdKCUNUbuPpv/8oghtZPPDbYlBcrpwvjV 5RGpbDPTbRNGZL52YGen75trbnXBhvOgzFkGB0wDujcndEPjazkFF33Cv+yJldA0 VMTThBlQFd1Sv4PGy2F1kgxFX/Z5FHfWjEc1RM/Ha03zSxhOM2ze2K0nVZFYvKEv mV8XmNrITfIdU6Omt/TvLUA9dq8omRL+O/TXglDTZRvp/bLgD9BAn0CDMqpcjlyx 3bwE0cr50od7WQ== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:58 2025 by rpki-client