This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft File: 1-EplWZr7nYcnw9uUfv-64uW4U9E.mft (raw, json) Hash identifier: 1f2O0bxY7A6gNmygjKO6AIM3bn9zl1DJM6OBQa+tODc= Subject key identifier: 11:71:FE:62:93:79:7A:75:5D:F7:F4:7F:72:D3:84:FC:5E:FE:B2:DB Authority key identifier: F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 Certificate issuer: /CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Certificate serial: 019B42EE4B432BDA969B1B1F04DFB70C1775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft Manifest number: 0D2A Signing time: Sun 21 Dec 2025 22:01:11 +0000 Manifest this update: Sun 21 Dec 2025 22:01:11 +0000 Manifest next update: Mon 22 Dec 2025 22:01:11 +0000 Files and hashes: 1: 1-EplWZr7nYcnw9uUfv-64uW4U9E.crl (hash: AaJ+PrRs5bOd3TZL7RU3KrSm66gGIMHC9KrqM6cl2K8=) 2: qhkV_8mdRTrAr8ppoZBKgyQkEdM.roa (hash: 4CEwpTBu9F/etnp1hwFBGYgZ3yLaMQ86KzOJL10qRmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:ee:4b:43:2b:da:96:9b:1b:1f:04:df:b7:0c:17:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f84a65599afb9d8727c3db947effbae2e5b853d1 Validity Not Before: Dec 21 22:01:11 2025 GMT Not After : Dec 22 22:01:11 2025 GMT Subject: CN=1171fe6293797a755df7f47f72d384fc5efeb2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:4c:0e:f9:8c:a2:86:c0:fe:aa:4d:b3:8e: 46:92:62:69:c6:05:e1:67:f9:14:7a:34:47:6f:89: 57:d9:32:98:a8:73:e2:7f:47:e4:77:cb:98:77:0a: 37:b2:15:c9:d8:76:0f:ae:b4:bb:25:8a:62:28:56: 0b:d4:74:36:f2:3d:3d:66:0b:34:37:57:4d:40:03: 4d:ef:8a:57:7c:99:7c:94:43:23:b7:99:11:d4:e3: 9d:88:05:94:96:84:1f:92:3a:ff:d8:11:0d:99:26: 98:72:ae:a1:d7:17:2d:8b:3c:30:f5:18:d5:da:1a: b8:b8:c2:89:b5:c2:dd:3b:6e:88:ff:ea:9b:6a:95: d2:d8:f9:7f:d3:f3:63:ad:c3:63:9b:cd:0f:6b:ce: b3:c4:23:7d:97:a7:b2:1c:94:53:63:00:b0:a5:b9: e2:65:30:13:43:de:6a:b0:00:36:60:5e:c7:f6:01: d0:2b:e8:0c:75:b3:2b:20:a8:23:cf:ee:7d:77:dc: 94:39:71:c0:5d:f6:e0:be:73:69:cb:17:a2:5a:6f: 26:a4:1a:15:b8:3d:ff:81:5f:25:41:ed:39:84:54: 9b:0e:48:3f:2b:56:12:44:70:12:5a:89:eb:f3:e2: d5:ec:37:9e:7b:9c:45:e4:cf:2a:47:a7:19:94:f9: ba:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:FE:62:93:79:7A:75:5D:F7:F4:7F:72:D3:84:FC:5E:FE:B2:DB X509v3 Authority Key Identifier: keyid:F8:4A:65:59:9A:FB:9D:87:27:C3:DB:94:7E:FF:BA:E2:E5:B8:53:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EplWZr7nYcnw9uUfv-64uW4U9E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5657c8-5037-48cd-8db5-8115df317235/1/1-EplWZr7nYcnw9uUfv-64uW4U9E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:cc:79:2f:e7:81:eb:1f:8c:82:b3:41:52:ba:de:88:b8:50: 83:b8:84:f8:c0:d7:9f:92:ae:6e:5a:4f:58:f4:04:21:17:d8: 46:1e:66:90:b3:01:bf:a2:48:02:7d:ff:4f:ad:9e:f2:10:fc: 6a:a6:46:a6:61:56:84:88:cf:4a:a0:c0:b1:5b:cf:da:47:72: 8b:9b:4a:46:0a:a2:0f:6f:bb:d8:6a:03:89:e2:9f:a8:10:71: dc:2c:95:a5:98:b6:92:9a:18:3c:f7:60:23:2b:fe:1b:0e:80: 83:9f:95:58:b6:11:b7:47:ec:b0:d7:30:fd:b5:90:75:f7:b2: 10:be:42:c1:f3:c1:26:ab:e3:dd:cb:7b:f7:8d:79:58:9a:17: b7:6e:e7:bb:f5:65:3a:79:1f:f4:bc:6a:80:d4:98:9d:6b:0c: 7c:13:7a:8b:7f:a5:44:05:c4:36:de:2c:23:69:8b:d7:8e:a5: 43:3e:ba:b8:cb:4a:fb:67:a0:fe:51:85:fc:67:3a:bf:ff:24: b4:6f:c8:63:a2:b0:45:d7:ed:15:83:7c:88:99:c5:64:e9:8b: 81:3f:4f:43:c5:fe:97:b5:1d:82:11:f1:16:3a:ef:cd:47:a9: fc:24:55:6f:d7:3b:c7:ac:1c:75:12:ee:24:b1:48:ac:80:97: e8:25:c5:97 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZtC7ktDK9qWmxsfBN+3DBd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4NGE2NTU5OWFmYjlkODcyN2MzZGI5NDdlZmZiYWUyZTVi ODUzZDEwHhcNMjUxMjIxMjIwMTExWhcNMjUxMjIyMjIwMTExWjAzMTEwLwYDVQQD EygxMTcxZmU2MjkzNzk3YTc1NWRmN2Y0N2Y3MmQzODRmYzVlZmViMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kdMDvmMoobA/qpNs45GkmJpxgXh Z/kUejRHb4lX2TKYqHPif0fkd8uYdwo3shXJ2HYPrrS7JYpiKFYL1HQ28j09Zgs0 N1dNQANN74pXfJl8lEMjt5kR1OOdiAWUloQfkjr/2BENmSaYcq6h1xctizww9RjV 2hq4uMKJtcLdO26I/+qbapXS2Pl/0/NjrcNjm80Pa86zxCN9l6eyHJRTYwCwpbni ZTATQ95qsAA2YF7H9gHQK+gMdbMrIKgjz+59d9yUOXHAXfbgvnNpyxeiWm8mpBoV uD3/gV8lQe05hFSbDkg/K1YSRHASWonr8+LV7Deee5xF5M8qR6cZlPm6JwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBFx/mKTeXp1Xff0f3LThPxe/rLbMB8GA1UdIwQY MBaAFPhKZVma+52HJ8PblH7/uuLluFPRMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1FcGxXWnI3blljbnc5dVVmdi02NHVXNFU5RS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDEvNTY1N2M4LTUwMzctNDhjZC04ZGI1 LTgxMTVkZjMxNzIzNS8xLzEtRXBsV1pyN25ZY253OXVVZnYtNjR1VzRVOUUubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQxLzU2NTdjOC01MDM3LTQ4Y2QtOGRiNS04MTE1ZGYzMTcy MzUvMS8xLUVwbFdacjduWWNudzl1VWZ2LTY0dVc0VTlFLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtMx5 L+eB6x+MgrNBUrreiLhQg7iE+MDXn5KublpPWPQEIRfYRh5mkLMBv6JIAn3/T62e 8hD8aqZGpmFWhIjPSqDAsVvP2kdyi5tKRgqiD2+72GoDieKfqBBx3CyVpZi2kpoY PPdgIyv+Gw6Ag5+VWLYRt0fssNcw/bWQdfeyEL5CwfPBJqvj3ct79415WJoXt27n u/VlOnkf9LxqgNSYnWsMfBN6i3+lRAXENt4sI2mL146lQz66uMtK+2eg/lGF/Gc6 v/8ktG/IY6KwRdftFYN8iJnFZOmLgT9PQ8X+l7UdghHxFjrvzUep/CRVb9c7x6wc dRLuJLFIrICX6CXFlw== -----END CERTIFICATE-----Generated at Mon Dec 22 07:16:20 2025 by rpki-client