This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft File: eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft (raw, json) Hash identifier: i5CkcfU3nVbqJ1Kz5002abquXalTt4ABp0+C1Gu4CtI= Subject key identifier: E0:1A:F7:09:51:10:16:A6:84:CA:8F:93:EC:1E:61:E9:28:31:75:F8 Authority key identifier: 78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B Certificate issuer: /CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Certificate serial: 019B0E25B1C4E151D82570BF4163A0AE90AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft Manifest number: 10DB Signing time: Thu 11 Dec 2025 16:01:49 +0000 Manifest this update: Thu 11 Dec 2025 16:01:49 +0000 Manifest next update: Fri 12 Dec 2025 16:01:49 +0000 Files and hashes: 1: HFuTsAaQKossZYATTz-p-c6jBeU.roa (hash: vDxg03jTfF522AjdUgHK+erl11Ssj1V7Jm+QQMyJPLE=) 2: eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl (hash: TMaBcfKd5YW1XPPQtd+YR79BoFAUYU23M6C6Lo7ub5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:b1:c4:e1:51:d8:25:70:bf:41:63:a0:ae:90:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff87e2633bb23286754eca11d83a63b8c3dc0b Validity Not Before: Dec 11 16:01:49 2025 GMT Not After : Dec 12 16:01:49 2025 GMT Subject: CN=e01af709511016a684ca8f93ec1e61e9283175f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:bb:e2:65:d3:cd:58:1e:4c:c3:72:ea:be:04: 02:80:0e:64:67:4c:91:21:dc:d5:84:e5:e8:8d:2a: 57:1a:68:90:54:c3:ae:ee:c8:a0:46:94:6d:cf:ad: 2a:bf:85:2b:34:d0:f6:29:8d:bd:b9:14:7f:8f:40: 64:ca:73:f5:a4:92:f0:55:1c:4a:d4:4e:55:bc:e3: 72:5f:92:5a:d6:2f:d4:5a:23:5f:4b:66:70:80:43: 6a:69:6b:30:77:1a:46:94:99:f5:7a:b0:c3:2a:b5: 95:36:80:6e:75:88:98:0c:45:55:35:d1:93:28:5f: a8:7e:fd:4f:25:48:66:72:f1:a5:03:68:9b:60:a0: f6:7a:c3:e0:43:54:0b:96:84:6a:3e:f3:05:2a:6d: 0f:44:ec:64:f8:1c:b8:d8:dc:5b:8a:a7:3b:41:a5: bc:6c:32:f1:e3:ec:d8:22:4e:da:22:3a:ed:48:d9: ae:e8:7c:f8:3a:8b:37:ec:1f:9f:84:f1:d9:c9:d4: 7b:c1:8b:51:63:18:d2:51:8e:5b:d7:6a:9b:64:1e: 31:61:da:a3:94:ff:5b:4c:79:3f:9d:81:09:4f:57: 70:18:69:54:bc:c1:bb:5c:dd:ec:64:4c:16:bc:bd: ae:d7:d3:32:3d:e7:60:f9:26:2f:24:64:33:3f:1a: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:1A:F7:09:51:10:16:A6:84:CA:8F:93:EC:1E:61:E9:28:31:75:F8 X509v3 Authority Key Identifier: keyid:78:FF:87:E2:63:3B:B2:32:86:75:4E:CA:11:D8:3A:63:B8:C3:DC:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-H4mM7sjKGdU7KEdg6Y7jD3As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/1293d1-fc7b-4b08-8c9b-3bbac4f5d935/1/eP-H4mM7sjKGdU7KEdg6Y7jD3As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:e8:f0:f3:54:5f:55:10:3a:5e:84:1f:73:7b:94:85:a4:3f: da:4f:ce:ae:ec:6a:7c:69:0b:29:ea:17:15:73:79:2c:a6:8c: d7:3f:e8:dd:24:50:e3:2f:69:8d:a5:b9:1b:3f:e4:05:b3:63: 6d:d8:2e:6b:02:47:c1:3d:57:b1:d5:06:14:e5:6d:ed:f1:12: ac:a6:f8:b2:da:4f:cf:42:56:7a:fa:72:e6:9c:7a:59:02:47: f6:e9:39:12:b9:3b:07:08:b4:9d:e6:33:ec:d9:08:bb:9e:13: 5d:dc:90:94:aa:d7:f9:8a:eb:9d:8e:bf:b7:aa:78:7b:81:92: c6:85:33:cb:c8:dc:68:54:4b:31:89:15:db:8e:2c:d4:67:56: 90:06:8d:b3:d7:7e:ab:b4:49:73:66:64:fc:e1:13:00:9c:93: 0b:2f:a0:a4:3c:d8:e0:2b:5a:c3:dc:9c:d3:2e:69:6d:1a:21: b6:fc:b5:70:fb:ad:01:dd:99:5e:2c:1c:fe:62:80:d5:9c:66: 84:68:25:b5:b8:53:c5:fc:e5:90:ae:00:94:06:ec:a0:8b:7e: dd:70:ea:fd:53:23:bc:59:70:01:92:e7:2a:be:28:6c:e4:71: ca:16:25:7f:5a:38:ad:68:80:59:6b:b1:13:1b:9e:70:e7:e1: 64:48:84:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJbHE4VHYJXC/QWOgrpCsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY4N2UyNjMzYmIyMzI4Njc1NGVjYTExZDgzYTYzYjhj M2RjMGIwHhcNMjUxMjExMTYwMTQ5WhcNMjUxMjEyMTYwMTQ5WjAzMTEwLwYDVQQD EyhlMDFhZjcwOTUxMTAxNmE2ODRjYThmOTNlYzFlNjFlOTI4MzE3NWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLviZdPNWB5Mw3LqvgQCgA5kZ0yR IdzVhOXojSpXGmiQVMOu7sigRpRtz60qv4UrNND2KY29uRR/j0BkynP1pJLwVRxK 1E5VvONyX5Ja1i/UWiNfS2ZwgENqaWswdxpGlJn1erDDKrWVNoBudYiYDEVVNdGT KF+ofv1PJUhmcvGlA2ibYKD2esPgQ1QLloRqPvMFKm0PROxk+By42Nxbiqc7QaW8 bDLx4+zYIk7aIjrtSNmu6Hz4Oos37B+fhPHZydR7wYtRYxjSUY5b12qbZB4xYdqj lP9bTHk/nYEJT1dwGGlUvMG7XN3sZEwWvL2u19MyPedg+SYvJGQzPxo30QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAa9wlREBamhMqPk+weYekoMXX4MB8GA1UdIwQY MBaAFHj/h+JjO7IyhnVOyhHYOmO4w9wLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWIt M2JiYWM0ZjVkOTM1LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC8xMjkzZDEtZmM3Yi00YjA4LThjOWItM2JiYWM0ZjVkOTM1 LzEvZVAtSDRtTTdzaktHZFU3S0VkZzZZN2pEM0FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOjw81Rf VRA6XoQfc3uUhaQ/2k/OruxqfGkLKeoXFXN5LKaM1z/o3SRQ4y9pjaW5Gz/kBbNj bdguawJHwT1XsdUGFOVt7fESrKb4stpPz0JWevpy5px6WQJH9uk5Erk7Bwi0neYz 7NkIu54TXdyQlKrX+YrrnY6/t6p4e4GSxoUzy8jcaFRLMYkV244s1GdWkAaNs9d+ q7RJc2Zk/OETAJyTCy+gpDzY4Ctaw9yc0y5pbRohtvy1cPutAd2ZXiwc/mKA1Zxm hGgltbhTxfzlkK4AlAbsoIt+3XDq/VMjvFlwAZLnKr4obORxyhYlf1o4rWiAWWux ExuecOfhZEiEhQ== -----END CERTIFICATE-----Generated at Thu Dec 11 23:18:54 2025 by rpki-client