This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft File: ePsJmqQwgayDle4LkMzxqIRPjWQ.mft (raw, json) Hash identifier: XTZaqD3Q3T/TggxnIjUFe25x+MfKRE2bT+xIJNffPSA= Subject key identifier: DF:D5:85:67:12:8C:2F:01:01:1E:58:AA:07:BE:9A:0A:26:24:EE:E4 Authority key identifier: 78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 Certificate issuer: /CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Certificate serial: 019AF276D3C3BDA063CE1B9224D97C4CFBE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft Manifest number: 0EBF Signing time: Sat 06 Dec 2025 07:01:04 +0000 Manifest this update: Sat 06 Dec 2025 07:01:04 +0000 Manifest next update: Sun 07 Dec 2025 07:01:04 +0000 Files and hashes: 1: OJTbvvzGPXknTcn0a0PisGO6RMs.roa (hash: uuBkvJW42/0DIxeQ/apWNWGffvOofFBXJM//FCrkhBE=) 2: ePsJmqQwgayDle4LkMzxqIRPjWQ.crl (hash: QtGcmW0TiS+sKQpj6xOLlg9atmpmLg7VJxXrRK0HbPQ=) 3: nArRHp-4C_xfVc5I0xzODMyX0Wc.roa (hash: unbAaPNeb8ss923AiSBNv55C1f+CW+UAKQwmAnYXVMU=) 4: ykzqitomWOX9VDgPXh0lfRNIPGs.roa (hash: sexKwZGXJqgH8EP0OUhLDrGvQUeJF4VTHV0LtWwcjpQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d3:c3:bd:a0:63:ce:1b:92:24:d9:7c:4c:fb:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fb099aa43081ac8395ee0b90ccf1a8844f8d64 Validity Not Before: Dec 6 07:01:04 2025 GMT Not After : Dec 7 07:01:04 2025 GMT Subject: CN=dfd58567128c2f01011e58aa07be9a0a2624eee4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:78:20:5f:4c:ca:32:bc:ff:2c:d9:36:aa:02: 1c:8a:67:85:5e:6b:94:4f:6b:4c:87:69:bc:2c:d6: a8:d9:23:10:5c:a0:8d:3c:21:c0:b2:6c:c5:80:e6: b7:87:77:53:e3:19:bb:10:98:38:e4:40:17:1f:db: cc:a0:36:13:c9:c9:c4:37:db:8e:80:cc:4a:53:ad: 60:2e:e5:60:5b:ac:d0:a0:af:e9:f2:34:29:9b:19: de:1e:86:e7:49:66:80:60:3e:55:67:01:dd:f9:0c: 66:41:03:21:04:ec:c3:34:fb:ac:ef:e0:40:e4:70: b8:c3:c3:ed:be:a7:68:fe:23:28:b0:34:6c:e2:c5: 6b:68:47:2b:56:f0:f2:7e:01:02:5c:2e:52:50:a7: d3:82:1d:be:60:b1:c1:cc:24:ac:99:e9:66:e0:f3: f7:98:d2:4a:e1:bb:8e:20:7a:db:1a:fa:56:8b:0f: 06:9e:19:21:c7:d1:98:a0:02:3a:c9:bf:f5:cf:ee: e8:c8:7c:cc:61:f1:c1:cf:96:24:57:b9:3c:08:c7: 47:cc:6e:63:04:4a:32:0e:7e:96:fd:8f:35:63:55: f3:d1:e6:59:0f:22:bc:63:f3:18:52:2e:ca:24:21: 73:49:ef:18:f8:5a:7f:9c:19:d5:43:11:57:06:dc: eb:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D5:85:67:12:8C:2F:01:01:1E:58:AA:07:BE:9A:0A:26:24:EE:E4 X509v3 Authority Key Identifier: keyid:78:FB:09:9A:A4:30:81:AC:83:95:EE:0B:90:CC:F1:A8:84:4F:8D:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ePsJmqQwgayDle4LkMzxqIRPjWQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cd17fe-e44a-4b98-9f1c-2d8a8d9669f8/1/ePsJmqQwgayDle4LkMzxqIRPjWQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:58:07:03:83:46:36:19:5b:d1:bf:4d:4a:07:21:4d:12:5c: 9b:1d:d3:ba:7c:19:b7:f5:d7:7e:9d:5c:05:47:5f:14:95:14: 78:51:13:ef:e7:4b:fa:ed:ce:27:91:8e:77:e8:e3:2e:34:20: 37:62:77:e2:bb:dc:f3:61:11:12:69:e3:5e:d1:d3:2a:a3:b0: 3b:8b:f7:5e:d8:05:4f:97:e2:a8:7a:b6:9f:53:2c:4e:ae:f9: b3:b4:5a:b9:25:98:4e:74:7b:fb:ec:6c:8c:39:4e:b4:d1:f1: 6b:13:53:56:5f:6b:d1:0b:93:b6:2b:21:bc:b3:90:55:2f:d9: 9d:74:de:fe:d1:e4:1d:b9:f7:0c:ba:9b:df:f1:0c:0f:83:98: 99:93:20:4d:e1:19:03:ad:0c:72:2b:d9:cc:43:62:7c:eb:62: 58:95:07:cb:08:13:f1:2f:a9:38:05:b6:bf:ab:c8:7f:f8:84: f2:d0:02:4f:56:9f:46:a8:7c:3d:bb:98:28:36:4f:c9:93:ba: b9:d4:10:a7:bd:01:2f:21:06:74:8e:a4:3a:1a:d9:43:f8:5a: 0b:9e:45:17:0a:d8:19:93:40:a0:1c:02:d0:57:65:da:09:39: d2:c7:4b:da:03:fd:c9:6a:e5:b0:80:0b:6e:90:cc:1f:7e:63: 5a:0e:76:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtPDvaBjzhuSJNl8TPvmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmIwOTlhYTQzMDgxYWM4Mzk1ZWUwYjkwY2NmMWE4ODQ0 ZjhkNjQwHhcNMjUxMjA2MDcwMTA0WhcNMjUxMjA3MDcwMTA0WjAzMTEwLwYDVQQD EyhkZmQ1ODU2NzEyOGMyZjAxMDExZTU4YWEwN2JlOWEwYTI2MjRlZWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nggX0zKMrz/LNk2qgIcimeFXmuU T2tMh2m8LNao2SMQXKCNPCHAsmzFgOa3h3dT4xm7EJg45EAXH9vMoDYTycnEN9uO gMxKU61gLuVgW6zQoK/p8jQpmxneHobnSWaAYD5VZwHd+QxmQQMhBOzDNPus7+BA 5HC4w8Ptvqdo/iMosDRs4sVraEcrVvDyfgECXC5SUKfTgh2+YLHBzCSsmelm4PP3 mNJK4buOIHrbGvpWiw8Gnhkhx9GYoAI6yb/1z+7oyHzMYfHBz5YkV7k8CMdHzG5j BEoyDn6W/Y81Y1Xz0eZZDyK8Y/MYUi7KJCFzSe8Y+Fp/nBnVQxFXBtzrKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/VhWcSjC8BAR5Yqge+mgomJO7kMB8GA1UdIwQY MBaAFHj7CZqkMIGsg5XuC5DM8aiET41kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMt MmQ4YThkOTY2OWY4LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9jZDE3ZmUtZTQ0YS00Yjk4LTlmMWMtMmQ4YThkOTY2OWY4 LzEvZVBzSm1xUXdnYXlEbGU0TGtNenhxSVJQaldRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlgHA4NG Nhlb0b9NSgchTRJcmx3TunwZt/XXfp1cBUdfFJUUeFET7+dL+u3OJ5GOd+jjLjQg N2J34rvc82EREmnjXtHTKqOwO4v3XtgFT5fiqHq2n1MsTq75s7RauSWYTnR7++xs jDlOtNHxaxNTVl9r0QuTtishvLOQVS/ZnXTe/tHkHbn3DLqb3/EMD4OYmZMgTeEZ A60McivZzENifOtiWJUHywgT8S+pOAW2v6vIf/iE8tACT1afRqh8PbuYKDZPyZO6 udQQp70BLyEGdI6kOhrZQ/haC55FFwrYGZNAoBwC0Fdl2gk50sdL2gP9yWrlsIAL bpDMH35jWg52Gg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:56 2025 by rpki-client