This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft File: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft (raw, json) Hash identifier: DZ5NWDs5vBJ5drwMoj1vgFtA2NwtsbV5T78XN/FRZXk= Subject key identifier: 4A:EB:CF:3A:DD:53:51:89:FC:B2:33:73:98:98:77:88:02:EA:41:41 Authority key identifier: 10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 Certificate issuer: /CN=10515090f850e337eb3b118a157e4e39083b77a6 Certificate serial: 019B19BAD5687748E1F3ED66BE7702C6DA9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft Manifest number: 1778 Signing time: Sat 13 Dec 2025 22:00:33 +0000 Manifest this update: Sat 13 Dec 2025 22:00:33 +0000 Manifest next update: Sun 14 Dec 2025 22:00:33 +0000 Files and hashes: 1: EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl (hash: ++iOqVtOuF7nsfSvguMzD1T2YfKO/4cjHo6odQREtow=) 2: oNabnVBprWmOKAwf55I_S596kpA.roa (hash: oPO4zSXw/czstjjrx9MIpyMDwMbOHA6CB7TjTGFGR/0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:ba:d5:68:77:48:e1:f3:ed:66:be:77:02:c6:da:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10515090f850e337eb3b118a157e4e39083b77a6 Validity Not Before: Dec 13 22:00:33 2025 GMT Not After : Dec 14 22:00:33 2025 GMT Subject: CN=4aebcf3add535189fcb233739898778802ea4141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:b8:34:9c:c8:91:48:99:bf:2a:a7:5f:0b: 43:da:1d:ed:b2:24:71:b2:93:5e:63:ed:67:71:64: 50:14:20:86:99:cc:2a:ca:8c:65:e5:92:66:1a:91: 77:3c:6b:6f:1d:1d:17:a9:6f:f0:b2:be:b0:0a:cb: 67:b7:8a:68:a8:d6:f3:d0:db:8c:0f:e3:c5:6d:7f: 12:4b:f7:11:da:ee:06:52:82:8a:80:c0:3a:56:3c: 36:cd:68:5c:94:2c:af:be:ec:e6:ef:48:d1:f1:18: 7e:2f:9e:b7:23:8f:f9:1e:a1:8a:b5:bf:ab:d4:be: 13:5c:6a:c6:0a:3b:fd:b2:42:10:20:c7:88:89:2d: cc:23:d0:e5:f0:ef:6c:00:2d:1a:6c:0e:1d:fc:cf: 33:9b:17:2f:63:a2:ad:d6:02:28:6a:24:af:fb:06: 10:9a:fd:d8:db:d9:ac:fa:13:4f:27:72:5e:5e:0a: 6f:b2:2f:4d:b6:32:15:31:b9:14:eb:d0:c2:8a:53: ce:36:a3:4e:7f:fd:83:f1:25:2c:8d:f3:fd:96:ed: d9:86:f1:46:b1:18:33:65:78:1b:2c:20:6d:ef:4f: 0f:8f:54:d7:cc:1d:e9:cc:b3:f9:55:ef:ed:43:0d: 06:bd:8b:7d:dc:9a:79:0d:4d:a8:fe:d7:c3:1b:15: 30:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EB:CF:3A:DD:53:51:89:FC:B2:33:73:98:98:77:88:02:EA:41:41 X509v3 Authority Key Identifier: keyid:10:51:50:90:F8:50:E3:37:EB:3B:11:8A:15:7E:4E:39:08:3B:77:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/24822b-6184-46a0-bcc5-8f29f3d98214/1/EFFQkPhQ4zfrOxGKFX5OOQg7d6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:d7:e5:26:43:f4:a4:bd:c8:b0:53:3d:54:96:dc:15:eb:58: d3:6a:76:96:7b:7b:a4:69:5e:6f:65:1e:18:fe:f8:e1:cd:0b: df:84:4d:19:64:fb:a5:e0:b0:b7:6b:f7:4a:72:0b:95:16:e3: 7b:b3:d1:39:54:43:f3:92:e2:6e:4f:db:02:54:31:6e:51:8f: 03:27:76:04:c0:2e:97:51:e5:5e:d8:7a:c0:e4:fe:45:58:e9: 20:9c:95:cc:b5:bc:f0:e8:68:fa:08:fb:94:65:a8:57:eb:20: cd:ee:7f:cb:64:4a:87:c6:6a:15:b9:68:52:2e:01:b4:f2:b5: 4e:55:25:64:59:2b:31:08:d4:8a:02:0a:8b:81:89:6d:9f:dc: 50:32:df:c6:45:2f:1c:cf:4f:1b:a9:f2:9e:90:0d:02:80:a0: 4f:bf:76:a3:a6:8a:e4:a4:85:ec:64:cf:b4:c3:3f:78:5b:9f: 6f:c4:be:dd:4d:9a:1d:e9:37:99:e1:a6:b5:3f:9f:07:42:9f: 1c:99:c5:e2:14:c5:d0:a3:1d:e1:d3:59:10:71:83:24:da:9c: 4d:49:23:6b:1d:95:0d:49:1b:d0:64:d0:5d:71:5f:f6:ed:5a: 13:18:73:a4:48:fa:b9:5f:12:09:c2:1a:a6:75:19:28:02:80: 18:ae:d5:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZutVod0jh8+1mvncCxtqbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTE1MDkwZjg1MGUzMzdlYjNiMTE4YTE1N2U0ZTM5MDgz Yjc3YTYwHhcNMjUxMjEzMjIwMDMzWhcNMjUxMjE0MjIwMDMzWjAzMTEwLwYDVQQD Eyg0YWViY2YzYWRkNTM1MTg5ZmNiMjMzNzM5ODk4Nzc4ODAyZWE0MTQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH64NJzIkUiZvyqnXwtD2h3tsiRx spNeY+1ncWRQFCCGmcwqyoxl5ZJmGpF3PGtvHR0XqW/wsr6wCstnt4poqNbz0NuM D+PFbX8SS/cR2u4GUoKKgMA6Vjw2zWhclCyvvuzm70jR8Rh+L563I4/5HqGKtb+r 1L4TXGrGCjv9skIQIMeIiS3MI9Dl8O9sAC0abA4d/M8zmxcvY6Kt1gIoaiSv+wYQ mv3Y29ms+hNPJ3JeXgpvsi9NtjIVMbkU69DCilPONqNOf/2D8SUsjfP9lu3ZhvFG sRgzZXgbLCBt708Pj1TXzB3pzLP5Ve/tQw0GvYt93Jp5DU2o/tfDGxUwdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFErrzzrdU1GJ/LIzc5iYd4gC6kFBMB8GA1UdIwQY MBaAFBBRUJD4UOM36zsRihV+TjkIO3emMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUt OGYyOWYzZDk4MjE0LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8yNDgyMmItNjE4NC00NmEwLWJjYzUtOGYyOWYzZDk4MjE0 LzEvRUZGUWtQaFE0emZyT3hHS0ZYNU9PUWc3ZDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE9flJkP0 pL3IsFM9VJbcFetY02p2lnt7pGleb2UeGP744c0L34RNGWT7peCwt2v3SnILlRbj e7PROVRD85Libk/bAlQxblGPAyd2BMAul1HlXth6wOT+RVjpIJyVzLW88Oho+gj7 lGWoV+sgze5/y2RKh8ZqFbloUi4BtPK1TlUlZFkrMQjUigIKi4GJbZ/cUDLfxkUv HM9PG6nynpANAoCgT792o6aK5KSF7GTPtMM/eFufb8S+3U2aHek3meGmtT+fB0Kf HJnF4hTF0KMd4dNZEHGDJNqcTUkjax2VDUkb0GTQXXFf9u1aExhzpEj6uV8SCcIa pnUZKAKAGK7V6g== -----END CERTIFICATE-----Generated at Sun Dec 14 07:45:58 2025 by rpki-client