This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft File: epJLjlyQurMK5Ys1ZN2qF837EIU.mft (raw, json) Hash identifier: zeiwGj+goiqDO4MvjP2a+NAI87ScnuRRd6eyiUhFocQ= Subject key identifier: 0E:AD:D7:2A:E1:68:17:93:2B:78:F8:CF:A4:37:56:3C:EA:A3:17:0D Authority key identifier: 7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85 Certificate issuer: /CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085 Certificate serial: 019B59E3D02886DDADE9709AA40D0B117C6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft Manifest number: 1794 Signing time: Fri 26 Dec 2025 09:01:00 +0000 Manifest this update: Fri 26 Dec 2025 09:01:00 +0000 Manifest next update: Sat 27 Dec 2025 09:01:00 +0000 Files and hashes: 1: epJLjlyQurMK5Ys1ZN2qF837EIU.crl (hash: jXueH1IXq1wAeVKGrA/MOxYKP7X8RL7k8SBYmd1bLoA=) 2: id8eO-SAr4HmH_kU9gWG3wDOyMg.roa (hash: QVeP890/1IAEaEOIUM6FuUPhuYx18zEBeNk09Lb1+ls=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:d0:28:86:dd:ad:e9:70:9a:a4:0d:0b:11:7c:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a924b8e5c90bab30ae58b3564ddaa17cdfb1085 Validity Not Before: Dec 26 09:01:00 2025 GMT Not After : Dec 27 09:01:00 2025 GMT Subject: CN=0eadd72ae16817932b78f8cfa437563ceaa3170d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a0:2f:0d:2c:91:70:c1:7d:a2:9c:3c:33:27: 35:a5:86:77:c5:5e:42:ac:d8:11:42:36:0b:7f:c4: 57:2c:65:ff:59:4f:74:bf:71:a2:af:e3:c5:d1:54: ed:8a:24:51:b2:5f:3f:a3:13:e3:d1:5a:ea:89:8c: de:7a:52:e1:51:ad:52:02:c9:00:db:56:7f:c6:a9: 59:79:9d:2d:02:4e:74:81:8e:c6:0b:bf:36:91:7f: e0:19:f1:f9:7c:37:85:b3:0f:c2:29:ac:42:ff:77: 95:0b:d7:3a:e3:62:b8:8a:63:88:bb:e4:c9:17:fc: d6:b3:db:0b:9c:de:59:f3:90:cb:0c:5c:a9:10:1f: eb:f7:7d:c0:6e:99:6c:21:70:bd:f2:7d:d0:e4:e3: f2:73:bd:24:2c:03:49:b7:29:25:1e:65:3c:ed:26: 54:97:58:6e:27:dd:45:79:7b:d7:5c:d7:2a:63:64: 95:a2:9a:43:07:1f:3b:14:34:18:ab:e2:d9:81:f0: bb:2b:f8:60:ad:2e:93:fb:58:27:10:7d:a4:b7:e7: 1e:f6:31:de:9e:dc:53:88:dc:d1:c9:33:67:56:ea: 72:5a:4b:4f:f0:c0:f8:e3:8d:f8:1d:3d:be:39:e9: 2a:5e:a0:5d:10:c8:e7:50:23:da:a9:24:ce:49:25: 03:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:AD:D7:2A:E1:68:17:93:2B:78:F8:CF:A4:37:56:3C:EA:A3:17:0D X509v3 Authority Key Identifier: keyid:7A:92:4B:8E:5C:90:BA:B3:0A:E5:8B:35:64:DD:AA:17:CD:FB:10:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epJLjlyQurMK5Ys1ZN2qF837EIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a9279-69f5-4a09-8cae-edb30b02b5ba/1/epJLjlyQurMK5Ys1ZN2qF837EIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:5f:24:86:56:2d:6f:ac:61:a1:ec:d0:f7:52:7e:8c:61:c4: 62:ea:d5:5c:d4:21:03:78:9e:05:15:92:a7:41:f3:e6:f0:bc: 55:e9:76:45:90:9f:f1:a0:7a:4d:8c:95:51:64:1a:37:66:e7: b7:2c:9e:50:00:a6:48:8c:ab:1b:be:f0:c7:8c:e9:58:c9:86: ac:e8:2e:31:f3:54:26:e5:4a:7f:17:3e:71:bc:20:ed:cf:bf: fa:c5:49:d7:9f:f6:de:f5:02:e3:b9:6f:69:81:75:88:81:40: 87:d5:1e:9a:38:86:c6:5f:43:b5:c1:71:7c:44:50:28:2b:b3: 47:93:96:c8:10:00:d1:68:3f:a9:14:51:ef:63:2e:40:e9:7e: d4:6c:3c:fc:75:9b:4f:05:d8:c1:2c:79:56:54:3a:9f:c1:2e: e9:49:b9:98:b9:8a:27:ca:aa:3d:e7:39:62:38:3e:35:f2:55: 8b:7b:f0:d6:4f:67:00:ca:ef:0b:4f:14:6b:92:5a:d9:3e:3b: 9b:71:13:0e:d6:cb:95:0f:36:7e:b5:ea:be:8e:09:85:46:b4: fe:db:5b:21:c1:c3:82:b0:03:95:45:1d:84:02:16:0d:6d:89: 4d:a8:9a:e4:6d:fd:ac:b5:84:d3:eb:7b:48:45:8f:8a:7c:66: fd:93:74:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ49Aoht2t6XCapA0LEXxqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTI0YjhlNWM5MGJhYjMwYWU1OGIzNTY0ZGRhYTE3Y2Rm YjEwODUwHhcNMjUxMjI2MDkwMTAwWhcNMjUxMjI3MDkwMTAwWjAzMTEwLwYDVQQD EygwZWFkZDcyYWUxNjgxNzkzMmI3OGY4Y2ZhNDM3NTYzY2VhYTMxNzBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KAvDSyRcMF9opw8Myc1pYZ3xV5C rNgRQjYLf8RXLGX/WU90v3Gir+PF0VTtiiRRsl8/oxPj0VrqiYzeelLhUa1SAskA 21Z/xqlZeZ0tAk50gY7GC782kX/gGfH5fDeFsw/CKaxC/3eVC9c642K4imOIu+TJ F/zWs9sLnN5Z85DLDFypEB/r933AbplsIXC98n3Q5OPyc70kLANJtyklHmU87SZU l1huJ91FeXvXXNcqY2SVoppDBx87FDQYq+LZgfC7K/hgrS6T+1gnEH2kt+ce9jHe ntxTiNzRyTNnVupyWktP8MD44434HT2+OekqXqBdEMjnUCPaqSTOSSUDAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6t1yrhaBeTK3j4z6Q3VjzqoxcNMB8GA1UdIwQY MBaAFHqSS45ckLqzCuWLNWTdqhfN+xCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUt ZWRiMzBiMDJiNWJhLzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS83YTkyNzktNjlmNS00YTA5LThjYWUtZWRiMzBiMDJiNWJh LzEvZXBKTGpseVF1ck1LNVlzMVpOMnFGODM3RUlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkV8khlYt b6xhoezQ91J+jGHEYurVXNQhA3ieBRWSp0Hz5vC8Vel2RZCf8aB6TYyVUWQaN2bn tyyeUACmSIyrG77wx4zpWMmGrOguMfNUJuVKfxc+cbwg7c+/+sVJ15/23vUC47lv aYF1iIFAh9UemjiGxl9DtcFxfERQKCuzR5OWyBAA0Wg/qRRR72MuQOl+1Gw8/HWb TwXYwSx5VlQ6n8Eu6Um5mLmKJ8qqPec5Yjg+NfJVi3vw1k9nAMrvC08Ua5Ja2T47 m3ETDtbLlQ82frXqvo4JhUa0/ttbIcHDgrADlUUdhAIWDW2JTaia5G39rLWE0+t7 SEWPinxm/ZN0WA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:18 2025 by rpki-client