This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft File: eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json) Hash identifier: UMxt/smxtFy766ibCLYmsKdRY2LhMPNjDLaXRIQXW3M= Subject key identifier: EA:7C:EA:28:8F:60:91:5F:08:E2:4C:4A:03:9E:04:D5:A3:90:72:BA Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Certificate serial: 019B32D6600A66CA5CC98D995613E021341A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft Manifest number: 10EE Signing time: Thu 18 Dec 2025 19:01:08 +0000 Manifest this update: Thu 18 Dec 2025 19:01:08 +0000 Manifest next update: Fri 19 Dec 2025 19:01:08 +0000 Files and hashes: 1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=) 2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: i7X2Jl7/8a1ApgNa9SpU0hJI/+mbUUUcGMQ795/TslE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 19:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:32:d6:60:0a:66:ca:5c:c9:8d:99:56:13:e0:21:34:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Validity Not Before: Dec 18 19:01:08 2025 GMT Not After : Dec 19 19:01:08 2025 GMT Subject: CN=ea7cea288f60915f08e24c4a039e04d5a39072ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:94:52:61:70:79:8f:49:0b:73:a8:eb:6a:10: 4c:88:2c:4e:e0:90:98:2d:22:b5:cd:ed:78:0e:96: 1c:84:27:88:84:ad:28:07:2c:80:8c:e7:a4:83:05: 16:bc:08:e4:64:d0:5c:63:a1:4a:2c:8c:c3:98:19: c7:e8:1d:56:56:01:39:40:83:bc:55:d2:03:59:6a: 82:81:af:1b:f0:7e:56:5d:97:b9:8d:d9:fe:a0:53: 66:a8:c1:d5:ae:ac:76:74:6f:f9:c0:80:28:eb:30: 5b:e3:2e:d7:8e:98:bd:a5:40:d6:04:27:84:03:38: 34:38:e0:83:9d:b3:a2:48:9f:0f:00:e5:d0:4d:a5: ea:45:9d:df:d8:e7:c3:a4:b9:62:69:af:ed:30:8d: 18:16:ba:fe:69:f1:9d:22:67:3f:c6:b2:da:db:7d: 8f:6a:1d:52:63:e3:3e:0b:4c:b9:d2:f3:de:af:95: cb:5f:00:7b:cf:8f:82:15:b4:f9:57:a6:0f:25:61: a0:bb:33:91:6c:c1:20:00:5d:4f:5a:32:99:d7:30: c7:72:cc:ef:4c:67:f7:0b:60:e1:46:8a:1a:19:fe: 26:22:5c:5a:6d:c1:f1:80:5b:6c:1c:b4:01:21:dd: 34:3c:35:47:a5:9a:04:ea:24:b6:9d:59:11:31:4a: 33:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7C:EA:28:8F:60:91:5F:08:E2:4C:4A:03:9E:04:D5:A3:90:72:BA X509v3 Authority Key Identifier: keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:67:ef:61:68:a7:34:b7:15:24:1a:42:46:27:2e:c7:bc:8a: 4c:27:39:d9:07:41:c0:e7:e7:be:54:a4:4f:28:0f:7d:73:5d: fb:0e:1d:a3:73:29:3e:72:2b:d8:30:aa:11:39:32:4b:ad:7a: fd:7f:1a:9c:69:72:fa:98:d1:24:12:19:7d:8e:32:ca:97:8a: 17:08:61:c3:4c:45:9d:c7:fc:b7:7f:01:ef:b6:29:13:9b:d5: be:ca:38:cb:8b:2c:43:3a:56:96:6d:c4:e9:59:2f:23:2d:a3: 7c:70:07:5c:3d:83:9f:08:71:de:66:3d:13:df:0d:c7:4b:bf: 7e:28:cf:08:2a:ae:71:c9:1c:68:ec:c6:a0:f4:8e:63:03:64: 2f:be:ff:53:09:9b:e7:f3:ec:d0:7d:a8:31:7b:3f:d0:ec:8e: 75:89:e2:af:4c:53:8d:14:fd:8b:61:3a:4e:67:fe:7a:5f:a4: 75:aa:ec:7f:57:fc:5b:a1:64:0c:ef:cf:dd:c4:79:d4:89:57: aa:8b:6e:ec:79:07:03:22:27:34:d9:96:ab:c5:73:9a:e4:ba: 2a:bd:34:17:a2:ac:a8:f2:03:7d:62:98:13:5b:fd:6f:46:4a: b1:07:7f:64:76:89:51:83:74:aa:67:cc:32:81:e2:68:9e:08: a7:51:e4:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsy1mAKZspcyY2ZVhPgITQaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj M2RjMGIwHhcNMjUxMjE4MTkwMTA4WhcNMjUxMjE5MTkwMTA4WjAzMTEwLwYDVQQD EyhlYTdjZWEyODhmNjA5MTVmMDhlMjRjNGEwMzllMDRkNWEzOTA3MmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5RSYXB5j0kLc6jrahBMiCxO4JCY LSK1ze14DpYchCeIhK0oByyAjOekgwUWvAjkZNBcY6FKLIzDmBnH6B1WVgE5QIO8 VdIDWWqCga8b8H5WXZe5jdn+oFNmqMHVrqx2dG/5wIAo6zBb4y7Xjpi9pUDWBCeE Azg0OOCDnbOiSJ8PAOXQTaXqRZ3f2OfDpLliaa/tMI0YFrr+afGdImc/xrLa232P ah1SY+M+C0y50vPer5XLXwB7z4+CFbT5V6YPJWGguzORbMEgAF1PWjKZ1zDHcszv TGf3C2DhRooaGf4mIlxabcHxgFtsHLQBId00PDVHpZoE6iS2nVkRMUozgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOp86iiPYJFfCOJMSgOeBNWjkHK6MB8GA1UdIwQY MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1 LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWfvYWin NLcVJBpCRicux7yKTCc52QdBwOfnvlSkTygPfXNd+w4do3MpPnIr2DCqETkyS616 /X8anGly+pjRJBIZfY4yypeKFwhhw0xFncf8t38B77YpE5vVvso4y4ssQzpWlm3E 6VkvIy2jfHAHXD2Dnwhx3mY9E98Nx0u/fijPCCqucckcaOzGoPSOYwNkL77/Uwmb 5/Ps0H2oMXs/0OyOdYnir0xTjRT9i2E6Tmf+el+kdarsf1f8W6FkDO/P3cR51IlX qotu7HkHAyInNNmWq8VzmuS6Kr00F6KsqPIDfWKYE1v9b0ZKsQd/ZHaJUYN0qmfM MoHiaJ4Ip1Hkwg== -----END CERTIFICATE-----Generated at Fri Dec 19 00:56:15 2025 by rpki-client