This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft File: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft (raw, json) Hash identifier: jk6C7UxC6qDDhvs5e48v7c1y0ahp3dppaNfLkJFgwUs= Subject key identifier: D5:7A:86:C8:9E:42:DA:2D:90:15:BA:2A:91:2E:DC:C7:7E:44:8B:92 Authority key identifier: 10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 Certificate issuer: /CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Certificate serial: 019B5A521CF0C663D6E04E6AB4E3C0276A92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft Manifest number: 0178 Signing time: Fri 26 Dec 2025 11:01:29 +0000 Manifest this update: Fri 26 Dec 2025 11:01:29 +0000 Manifest next update: Sat 27 Dec 2025 11:01:29 +0000 Files and hashes: 1: DyDiidWZS3iA7B2blKmA9bXsSRk.roa (hash: 8Th9ZjmszvDIlprvR+a1tMmoJ0kkYSailEtQfsqFMeY=) 2: EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl (hash: l1GBRYkBKSa23IK8aWHlYjIdvqzjTLUos4DWr8X3fio=) 3: EZZjtsRZB4At2QcIZcqmfQeU5tg.roa (hash: vbbShe8wdndeEL7lS6dm5FZSSpF2qDaTf1tgRMD7QrU=) 4: L6E0N5We5qeZ-y9d2NJMforAByY.roa (hash: ZYC/BS1PJtF8W5Ev9dV+L5Rd8Gl/CdhyxKHOzd5pCTw=) 5: YaE-516tO0-vxtzgzUQCVeYa6sM.roa (hash: yKU5PrBmHLHt75hheXsS4PIrNLFdDNALNLqvpMN9xYM=) 6: sb-GCH9IlUVV1HBTwu_2sGH00L8.roa (hash: NIEwuhjNP7AJ1aGJG2ysJUL1eP2V5WuknrN1zsvlhbE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:52:1c:f0:c6:63:d6:e0:4e:6a:b4:e3:c0:27:6a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fe683b1d7e47b7c7eda15501627b70920853a1 Validity Not Before: Dec 26 11:01:29 2025 GMT Not After : Dec 27 11:01:29 2025 GMT Subject: CN=d57a86c89e42da2d9015ba2a912edcc77e448b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:04:e6:be:75:13:d4:07:a3:94:99:d3:51:fd: ba:bd:88:15:d7:b4:5e:bb:f4:45:96:12:c7:ad:8b: eb:2b:92:5f:74:47:0c:d7:38:62:e3:c5:6d:58:62: b8:4b:0a:71:20:32:af:cd:f2:95:38:03:41:f3:ef: bc:aa:cd:86:c3:da:1a:8a:28:27:e6:f3:54:cf:4d: 8b:39:01:26:ea:bb:79:27:c0:e5:46:fd:a3:9b:82: 35:c9:df:91:26:76:76:ad:62:ef:4e:e9:21:75:4a: 5a:02:b0:2b:da:4e:e4:df:b8:e1:fe:0f:0c:a7:87: 57:b7:24:ad:4a:c7:fd:a6:3d:62:d2:2b:97:a6:eb: ec:ae:68:60:f9:19:6b:ac:3d:84:a6:a5:33:78:e4: 4a:3f:03:b3:72:60:db:e3:bb:4e:fa:71:55:96:ab: b7:7c:8e:03:e8:9c:f1:7f:22:2f:22:3f:6f:d3:d5: 73:cd:59:8e:e2:e7:22:9a:93:76:4c:2d:c8:4f:78: ed:d3:3b:96:e9:28:97:69:80:be:40:50:f7:88:77: 16:f3:02:06:9a:9d:39:d6:08:34:de:3c:45:ac:d4: 43:1e:d4:45:c4:50:77:be:09:8a:b8:f0:77:e9:72: d3:e3:08:4f:c1:a2:c5:04:ce:80:7b:c1:86:29:87: 77:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:7A:86:C8:9E:42:DA:2D:90:15:BA:2A:91:2E:DC:C7:7E:44:8B:92 X509v3 Authority Key Identifier: keyid:10:FE:68:3B:1D:7E:47:B7:C7:ED:A1:55:01:62:7B:70:92:08:53:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de84a0-7b4b-445d-a212-c4befb25622c/1/EP5oOx1-R7fH7aFVAWJ7cJIIU6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:25:ba:d2:c0:57:c1:12:e9:d2:72:f4:12:0e:b1:bd:ab:cc: 59:69:98:90:64:81:c8:03:f8:bb:4f:96:83:96:b5:cf:29:10: 2d:6e:50:85:bc:f3:37:ab:c9:3e:1c:5b:66:d5:0f:fe:95:10: b7:2a:86:93:85:96:35:3b:fb:af:d2:f2:ae:23:dc:1d:6f:75: 68:69:ae:1d:db:20:6e:6b:7d:eb:b2:02:99:45:ac:6e:b9:8a: 82:37:95:74:55:7a:c9:49:a4:f8:9a:03:b3:3d:20:40:c2:11: 5d:61:1b:c7:7b:7f:d5:bd:bb:44:6c:48:e4:66:42:98:73:2d: 25:cc:43:f5:aa:c3:bc:d0:3a:24:d4:75:f8:69:23:9c:35:22: d1:fb:a1:ae:3f:0b:6e:e1:ca:7b:9c:65:33:e4:b8:2e:88:33: 3a:40:6d:eb:a1:1e:6d:48:48:cd:40:aa:7d:47:10:77:a1:ab: 41:3d:05:f2:fc:2c:09:4d:06:02:94:6e:e7:e6:40:f4:da:6f: 0c:5e:dd:48:2f:c4:a1:08:eb:a3:99:ff:1e:8a:fc:50:10:14: 69:d7:98:3d:15:f5:71:2f:47:c1:71:f8:9d:40:f2:a2:f6:14: 89:47:fc:8b:54:f0:f6:d7:0f:3e:36:92:16:98:dd:01:be:26: f8:48:23:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUhzwxmPW4E5qtOPAJ2qSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmU2ODNiMWQ3ZTQ3YjdjN2VkYTE1NTAxNjI3YjcwOTIw ODUzYTEwHhcNMjUxMjI2MTEwMTI5WhcNMjUxMjI3MTEwMTI5WjAzMTEwLwYDVQQD EyhkNTdhODZjODllNDJkYTJkOTAxNWJhMmE5MTJlZGNjNzdlNDQ4YjkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuATmvnUT1AejlJnTUf26vYgV17Re u/RFlhLHrYvrK5JfdEcM1zhi48VtWGK4SwpxIDKvzfKVOANB8++8qs2Gw9oaiign 5vNUz02LOQEm6rt5J8DlRv2jm4I1yd+RJnZ2rWLvTukhdUpaArAr2k7k37jh/g8M p4dXtyStSsf9pj1i0iuXpuvsrmhg+RlrrD2EpqUzeORKPwOzcmDb47tO+nFVlqu3 fI4D6JzxfyIvIj9v09VzzVmO4ucimpN2TC3IT3jt0zuW6SiXaYC+QFD3iHcW8wIG mp051gg03jxFrNRDHtRFxFB3vgmKuPB36XLT4whPwaLFBM6Ae8GGKYd3awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNV6hsieQtotkBW6KpEu3Md+RIuSMB8GA1UdIwQY MBaAFBD+aDsdfke3x+2hVQFie3CSCFOhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTIt YzRiZWZiMjU2MjJjLzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kZTg0YTAtN2I0Yi00NDVkLWEyMTItYzRiZWZiMjU2MjJj LzEvRVA1b094MS1SN2ZIN2FGVkFXSjdjSklJVTZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSW60sBX wRLp0nL0Eg6xvavMWWmYkGSByAP4u0+Wg5a1zykQLW5QhbzzN6vJPhxbZtUP/pUQ tyqGk4WWNTv7r9LyriPcHW91aGmuHdsgbmt967ICmUWsbrmKgjeVdFV6yUmk+JoD sz0gQMIRXWEbx3t/1b27RGxI5GZCmHMtJcxD9arDvNA6JNR1+GkjnDUi0fuhrj8L buHKe5xlM+S4LogzOkBt66EebUhIzUCqfUcQd6GrQT0F8vwsCU0GApRu5+ZA9Npv DF7dSC/EoQjro5n/Hor8UBAUadeYPRX1cS9HwXH4nUDyovYUiUf8i1Tw9tcPPjaS FpjdAb4m+Egj1Q== -----END CERTIFICATE-----Generated at Fri Dec 26 15:44:08 2025 by rpki-client