This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: 2lhB7NKszeXhA/kViQTF09Gt6d4OSRtns/1cI3Dt124= Subject key identifier: EF:D4:71:42:C3:93:82:BC:78:72:DF:AC:A7:50:06:81:13:A9:A4:95 Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019AF1D1BD1A813B8A0326CC3924374DC19A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:00:45 +0000 Manifest this update: Sat 06 Dec 2025 04:00:45 +0000 Manifest next update: Sun 07 Dec 2025 04:00:45 +0000 Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: 26tDDM7nTK8dTN6O6Edf016XC9IeBLBhStIei1SyLlw=) 2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:bd:1a:81:3b:8a:03:26:cc:39:24:37:4d:c1:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Dec 6 04:00:45 2025 GMT Not After : Dec 7 04:00:45 2025 GMT Subject: CN=efd47142c39382bc7872dfaca750068113a9a495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:74:9e:75:93:10:5d:67:a3:94:54:fc:b3: be:e2:d3:84:f2:35:af:78:62:e9:6c:2d:8c:ec:db: bb:4b:bd:8e:75:b1:5e:eb:40:79:98:ac:9f:c7:ba: 45:8d:ee:6f:23:d0:07:0b:60:97:7b:d1:91:17:26: e6:44:c0:c1:51:c5:24:fb:72:83:b1:a8:6a:55:b3: f7:53:ea:df:49:a5:c0:bd:8c:1c:12:a2:23:40:96: c8:fb:ae:e1:a2:cb:a0:85:d8:9d:08:ee:d6:d7:a9: ac:c9:fb:c7:d4:71:1b:a5:6d:76:f5:55:80:0e:e4: bb:e1:86:c7:ab:57:77:ac:18:53:d1:c0:f4:51:9c: 0a:71:b4:57:db:d1:f1:96:e8:c4:c1:f9:da:c8:fb: e3:71:db:04:bb:99:1b:0d:b2:93:ca:46:b1:9d:46: da:1c:bc:32:8a:22:1c:24:a4:56:32:c0:dd:bb:bb: a1:93:31:de:31:c8:62:7f:d3:8a:94:24:63:9e:0c: b6:3e:d9:d7:41:87:91:a3:a5:41:81:22:c7:22:86: ff:6a:bc:c7:f2:88:c2:2a:be:a2:76:82:51:fe:18: ca:f7:9e:67:90:eb:79:0b:2d:c8:34:cd:16:22:16: c0:83:11:d4:b1:a6:16:f2:af:5a:23:03:e2:9a:ec: db:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:71:42:C3:93:82:BC:78:72:DF:AC:A7:50:06:81:13:A9:A4:95 X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:08:85:d6:91:d0:f4:b1:f9:d0:2d:15:48:89:c3:c6:2c:f8: 29:b3:0b:be:d6:a4:3d:e3:a1:5a:48:81:04:67:86:00:b7:63: e6:b4:89:4d:70:5d:f0:7f:08:0f:04:68:26:f5:4c:cf:b1:99: 14:1e:11:d2:00:8d:76:a5:ad:e0:6a:24:d7:a2:a7:ea:ee:5d: b2:2d:9c:49:57:e9:73:70:6b:3a:22:35:ce:54:b4:c9:47:62: 33:b1:1c:e6:1f:f6:09:4a:b7:bb:17:0e:09:75:db:c2:c9:2e: ab:34:4a:96:4d:94:c0:3a:44:b4:6e:91:90:68:8c:11:76:76: 14:6d:81:a6:93:21:ac:db:e5:9b:7a:44:0d:14:76:07:17:9e: 5a:af:ac:07:40:97:78:79:7f:cb:f7:8c:8d:2f:d7:ee:1c:d2: 51:b1:b9:e8:15:f3:7a:f8:89:10:bb:81:75:16:29:6e:26:7c: 07:c8:22:2a:16:04:2f:32:ce:34:ee:64:aa:51:ad:b0:39:92: 16:bb:cf:f8:c5:36:a4:54:8c:1d:35:3c:67:04:a6:f2:d3:01: 0e:85:0f:16:fc:07:2f:e5:7d:29:3d:b9:9b:91:8f:76:9c:00: 98:40:6f:47:50:65:fe:64:5f:ba:1d:44:21:f5:20:4a:7a:f7: de:74:af:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0b0agTuKAybMOSQ3TcGaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjUxMjA2MDQwMDQ1WhcNMjUxMjA3MDQwMDQ1WjAzMTEwLwYDVQQD EyhlZmQ0NzE0MmMzOTM4MmJjNzg3MmRmYWNhNzUwMDY4MTEzYTlhNDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfd0nnWTEF1no5RU/LO+4tOE8jWv eGLpbC2M7Nu7S72OdbFe60B5mKyfx7pFje5vI9AHC2CXe9GRFybmRMDBUcUk+3KD sahqVbP3U+rfSaXAvYwcEqIjQJbI+67hosughdidCO7W16msyfvH1HEbpW129VWA DuS74YbHq1d3rBhT0cD0UZwKcbRX29HxlujEwfnayPvjcdsEu5kbDbKTykaxnUba HLwyiiIcJKRWMsDdu7uhkzHeMchif9OKlCRjngy2PtnXQYeRo6VBgSLHIob/arzH 8ojCKr6idoJR/hjK955nkOt5Cy3INM0WIhbAgxHUsaYW8q9aIwPimuzbXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO/UcULDk4K8eHLfrKdQBoETqaSVMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgiF1pHQ 9LH50C0VSInDxiz4KbMLvtakPeOhWkiBBGeGALdj5rSJTXBd8H8IDwRoJvVMz7GZ FB4R0gCNdqWt4Gok16Kn6u5dsi2cSVfpc3BrOiI1zlS0yUdiM7Ec5h/2CUq3uxcO CXXbwskuqzRKlk2UwDpEtG6RkGiMEXZ2FG2BppMhrNvlm3pEDRR2BxeeWq+sB0CX eHl/y/eMjS/X7hzSUbG56BXzeviJELuBdRYpbiZ8B8giKhYELzLONO5kqlGtsDmS FrvP+MU2pFSMHTU8ZwSm8tMBDoUPFvwHL+V9KT25m5GPdpwAmEBvR1Bl/mRfuh1E IfUgSnr33nSvLg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:43 2025 by rpki-client