This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft File: egbjCszbF6JVRzu2wiTx_BVFjos.mft (raw, json) Hash identifier: 7NNET/1+Z9/xFZcTo5cfR39VZ1dNOv+nzVXKT7hmhGY= Subject key identifier: 42:7C:2F:DA:A3:9E:B5:A2:DE:5D:B2:87:4A:C0:37:0D:CF:A1:66:A9 Authority key identifier: 7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B Certificate issuer: /CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Certificate serial: 019B5976BF7AF4A189E985D68AB8E0C66E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft Manifest number: 12AF Signing time: Fri 26 Dec 2025 07:01:52 +0000 Manifest this update: Fri 26 Dec 2025 07:01:52 +0000 Manifest next update: Sat 27 Dec 2025 07:01:52 +0000 Files and hashes: 1: egbjCszbF6JVRzu2wiTx_BVFjos.crl (hash: tkLxUTne+T8MsQEtZQPZ5NgLpdZhR4pFFVfqaxoWO1k=) 2: h-SUUcRPBMlEXg9vjpCYuQ3UDoI.roa (hash: SWkmFiL0pM+fIwknjB1oWTVUsg4SQOvXw9O+NxZEonA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:bf:7a:f4:a1:89:e9:85:d6:8a:b8:e0:c6:6e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a06e30accdb17a255473bb6c224f1fc15458e8b Validity Not Before: Dec 26 07:01:52 2025 GMT Not After : Dec 27 07:01:52 2025 GMT Subject: CN=427c2fdaa39eb5a2de5db2874ac0370dcfa166a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b9:51:d8:d2:98:5a:22:5b:b0:5b:14:5c:df: fa:0b:0d:8a:ed:8a:02:d6:18:a5:9e:07:e8:a0:a7: c2:8d:56:2a:4c:7c:ff:ed:c6:4c:28:c9:1e:86:e5: c4:50:75:da:d5:7a:f4:e2:94:44:d2:05:5e:2b:57: da:e7:47:8d:36:b3:fb:8d:29:62:6d:ae:de:88:4b: 13:dd:fb:ac:1e:e2:95:de:27:44:36:95:a2:9a:0b: 84:68:3b:65:97:63:6f:77:b5:83:19:45:d5:5d:a2: 73:36:c0:10:7d:8b:06:3e:b7:31:77:30:67:e1:67: 3b:68:de:50:bf:2c:89:cc:a5:a3:a7:79:47:99:60: 7e:53:ad:63:a2:cb:4c:96:ed:cf:b5:19:c6:b3:28: b1:3c:f5:55:83:08:c8:f7:7c:e6:58:d9:4a:bb:b2: c2:2a:be:4f:ea:55:23:51:f1:bd:a2:b8:c0:54:39: f7:03:74:70:ea:f4:0b:2f:89:0e:56:cd:86:e2:b2: 5a:fb:17:09:72:71:f3:2d:36:2f:d8:02:ee:1b:c4: e4:88:80:3a:84:38:cb:11:f9:7c:5c:51:06:3e:1b: ca:31:d2:a6:94:3a:43:18:d4:15:05:01:2b:a7:16: 36:03:91:f9:05:c7:52:b5:13:37:22:fb:38:44:09: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7C:2F:DA:A3:9E:B5:A2:DE:5D:B2:87:4A:C0:37:0D:CF:A1:66:A9 X509v3 Authority Key Identifier: keyid:7A:06:E3:0A:CC:DB:17:A2:55:47:3B:B6:C2:24:F1:FC:15:45:8E:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egbjCszbF6JVRzu2wiTx_BVFjos.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/042a5d-ae0d-41c0-a2e8-f7c0c2f8a3c1/1/egbjCszbF6JVRzu2wiTx_BVFjos.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:de:48:90:c4:5e:41:1c:f1:7f:d1:8b:44:04:ec:7b:78:14: d1:f7:f4:8d:6a:b7:5f:80:b6:dc:11:6d:b7:3f:d3:e2:ea:77: f2:70:62:ad:a7:ca:78:bd:88:7a:e2:9a:60:81:d5:17:ef:f8: 8c:d4:6a:e8:1f:7d:2c:61:85:b3:1c:f5:c4:d2:8c:3d:2e:1a: ee:a3:59:10:70:d7:38:ba:08:a3:02:9c:e5:ed:8f:b6:83:8c: ef:3b:6e:40:aa:1e:0c:71:31:17:ae:7c:4f:62:73:fd:a3:14: 83:39:63:95:66:f6:92:15:cd:4b:a9:53:92:65:39:0f:d4:45: 98:f5:96:2d:14:35:e8:d7:38:59:13:f8:ca:e3:dc:e0:ea:e8: d5:78:70:a1:a6:52:59:90:56:1d:87:12:31:d0:cb:c4:65:eb: ba:b9:ef:33:f4:b6:a4:14:50:ea:36:77:0f:f6:27:ac:46:70: 91:c7:60:20:6a:82:79:dd:87:f1:02:98:22:80:88:d5:17:bc: 0b:0e:8c:65:64:4e:ae:b6:59:3c:91:83:d2:7c:f9:0c:1e:12: 98:f7:68:68:1f:cb:57:ae:77:e5:2f:db:2d:93:8c:dc:44:e8: f6:d0:d5:8f:c1:e3:32:25:81:e0:75:7f:95:0a:4a:db:84:30: a8:33:39:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdr969KGJ6YXWirjgxm4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMDZlMzBhY2NkYjE3YTI1NTQ3M2JiNmMyMjRmMWZjMTU0 NThlOGIwHhcNMjUxMjI2MDcwMTUyWhcNMjUxMjI3MDcwMTUyWjAzMTEwLwYDVQQD Eyg0MjdjMmZkYWEzOWViNWEyZGU1ZGIyODc0YWMwMzcwZGNmYTE2NmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7lR2NKYWiJbsFsUXN/6Cw2K7YoC 1hilngfooKfCjVYqTHz/7cZMKMkehuXEUHXa1Xr04pRE0gVeK1fa50eNNrP7jSli ba7eiEsT3fusHuKV3idENpWimguEaDtll2Nvd7WDGUXVXaJzNsAQfYsGPrcxdzBn 4Wc7aN5QvyyJzKWjp3lHmWB+U61jostMlu3PtRnGsyixPPVVgwjI93zmWNlKu7LC Kr5P6lUjUfG9orjAVDn3A3Rw6vQLL4kOVs2G4rJa+xcJcnHzLTYv2ALuG8TkiIA6 hDjLEfl8XFEGPhvKMdKmlDpDGNQVBQErpxY2A5H5BcdStRM3Ivs4RAldxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ8L9qjnrWi3l2yh0rANw3PoWapMB8GA1UdIwQY MBaAFHoG4wrM2xeiVUc7tsIk8fwVRY6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgt ZjdjMGMyZjhhM2MxLzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8wNDJhNWQtYWUwZC00MWMwLWEyZTgtZjdjMGMyZjhhM2Mx LzEvZWdiakNzemJGNkpWUnp1MndpVHhfQlZGam9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC95IkMRe QRzxf9GLRATse3gU0ff0jWq3X4C23BFttz/T4up38nBirafKeL2IeuKaYIHVF+/4 jNRq6B99LGGFsxz1xNKMPS4a7qNZEHDXOLoIowKc5e2PtoOM7ztuQKoeDHExF658 T2Jz/aMUgzljlWb2khXNS6lTkmU5D9RFmPWWLRQ16Nc4WRP4yuPc4Oro1XhwoaZS WZBWHYcSMdDLxGXrurnvM/S2pBRQ6jZ3D/YnrEZwkcdgIGqCed2H8QKYIoCI1Re8 Cw6MZWROrrZZPJGD0nz5DB4SmPdoaB/LV6535S/bLZOM3ETo9tDVj8HjMiWB4HV/ lQpK24QwqDM5FA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:01:04 2025 by rpki-client