This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft File: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft (raw, json) Hash identifier: 6NJO9d7iBCn7ksGZ9UuHx1ZDYgdHP4iAtmNswqV5ZI0= Subject key identifier: A6:C2:BE:82:54:0F:4E:30:B6:E1:19:47:A3:6D:44:FA:47:D2:33:19 Authority key identifier: 10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 Certificate issuer: /CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Certificate serial: 019B24ACA275FC7FD41326F98DBFD8C39035 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 01:00:52 +0000 Manifest this update: Tue 16 Dec 2025 01:00:52 +0000 Manifest next update: Wed 17 Dec 2025 01:00:52 +0000 Files and hashes: 1: 3B54N1RzqRAgAHkYRgNdqkdOh5M.roa (hash: sve8I1LgrBKICchu1Eds5qUShF2pQrbxFBAqnwDuFVs=) 2: EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl (hash: 5unm1hrHPfcXv8j5Izpt/UHxBUitcvxHKQkyEqGYU+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:ac:a2:75:fc:7f:d4:13:26:f9:8d:bf:d8:c3:90:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1055eae30d10faf1d99ebf2cfdfd662ce740f839 Validity Not Before: Dec 16 01:00:52 2025 GMT Not After : Dec 17 01:00:52 2025 GMT Subject: CN=a6c2be82540f4e30b6e11947a36d44fa47d23319 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:81:ae:03:92:d2:c1:be:5e:2c:f8:41:a0:df: 2b:be:17:44:95:6d:48:5e:56:10:cd:9b:e0:da:f0: 56:ff:ca:eb:4f:ab:4b:06:a9:ea:fa:73:c6:4d:a0: de:81:d2:d0:5c:cc:5d:0f:e7:5f:53:43:29:0a:08: ce:a3:0c:c3:bb:d4:00:0f:3c:0a:f4:97:4f:8f:dd: da:ea:2e:f5:4b:7d:81:fd:c1:8d:8e:89:f3:30:66: 4c:a4:80:4d:91:56:0a:1f:0b:61:08:c6:fe:f7:b9: 94:05:0a:a7:24:33:40:a1:59:8f:54:e0:26:c7:20: fb:e0:cc:9a:1a:2a:e7:42:cb:d2:06:79:89:27:ae: df:40:6c:3f:13:f6:dd:d2:f4:d5:ac:fb:b4:b5:9d: 27:d1:85:a3:cf:13:42:52:a2:9f:67:10:2e:a8:31: 8a:63:73:3d:01:d4:00:21:d7:d2:7d:b7:d4:fb:93: 99:47:74:b9:23:0f:0e:07:91:fe:e7:5c:ba:9d:2f: 93:03:cb:8c:0d:bd:79:86:0e:d5:b7:cd:cf:88:0c: b8:dd:f2:6d:63:d3:20:e8:f9:6d:b9:bc:0d:41:e4: 8c:3f:0b:fd:72:fe:00:b8:7b:34:20:ed:77:da:60: 7e:08:59:ff:96:0d:ca:66:6d:67:47:89:4d:30:9c: 2a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C2:BE:82:54:0F:4E:30:B6:E1:19:47:A3:6D:44:FA:47:D2:33:19 X509v3 Authority Key Identifier: keyid:10:55:EA:E3:0D:10:FA:F1:D9:9E:BF:2C:FD:FD:66:2C:E7:40:F8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/846526-74f5-4b97-a574-273e868cedf0/1/EFXq4w0Q-vHZnr8s_f1mLOdA-Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:62:98:0a:81:7e:77:6c:fc:12:61:02:65:90:b0:c7:c1:9b: c8:27:73:81:5b:03:d7:8d:59:79:a2:66:39:90:fd:05:db:40: f8:ba:47:b2:15:7a:20:75:89:ce:e6:11:dc:c9:8f:41:a1:c9: 42:a3:37:9c:f6:a5:c1:2d:cd:bc:c8:5f:f5:51:22:f5:97:1a: 83:ef:8e:ef:17:7b:4d:cd:90:fe:25:c3:56:23:67:0d:91:39: a8:27:ca:b5:32:96:af:67:9d:27:22:4c:13:83:54:33:eb:a4: aa:99:bb:85:1e:51:62:8d:d5:23:96:e7:ad:72:29:9f:fc:b2: e8:c9:55:1c:83:3c:b9:55:45:b5:ab:a5:43:f0:81:20:10:65: 14:17:92:d8:c1:02:27:6a:5f:af:11:cd:8c:c0:9f:27:0c:49: 19:2d:89:e0:4b:87:f4:47:ba:75:61:c8:23:12:02:a1:c5:b7: 4f:94:1f:48:a7:fe:30:1a:f4:7f:9a:97:26:c2:3f:1d:01:5b: 3a:d2:34:47:02:56:d1:35:a7:3b:1a:ac:1a:31:d3:68:de:b8: 45:6a:dd:15:a5:95:eb:96:af:c9:31:cd:6d:5f:77:74:0f:0d: 5b:3f:03:af:99:9d:78:8d:42:21:88:9f:7a:10:bf:c2:98:68: 07:8b:cc:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZskrKJ1/H/UEyb5jb/Yw5A1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNTVlYWUzMGQxMGZhZjFkOTllYmYyY2ZkZmQ2NjJjZTc0 MGY4MzkwHhcNMjUxMjE2MDEwMDUyWhcNMjUxMjE3MDEwMDUyWjAzMTEwLwYDVQQD EyhhNmMyYmU4MjU0MGY0ZTMwYjZlMTE5NDdhMzZkNDRmYTQ3ZDIzMzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoGuA5LSwb5eLPhBoN8rvhdElW1I XlYQzZvg2vBW/8rrT6tLBqnq+nPGTaDegdLQXMxdD+dfU0MpCgjOowzDu9QADzwK 9JdPj93a6i71S32B/cGNjonzMGZMpIBNkVYKHwthCMb+97mUBQqnJDNAoVmPVOAm xyD74MyaGirnQsvSBnmJJ67fQGw/E/bd0vTVrPu0tZ0n0YWjzxNCUqKfZxAuqDGK Y3M9AdQAIdfSfbfU+5OZR3S5Iw8OB5H+51y6nS+TA8uMDb15hg7Vt83PiAy43fJt Y9Mg6PltubwNQeSMPwv9cv4AuHs0IO132mB+CFn/lg3KZm1nR4lNMJwqKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbCvoJUD04wtuEZR6NtRPpH0jMZMB8GA1UdIwQY MBaAFBBV6uMNEPrx2Z6/LP39ZiznQPg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQt MjczZTg2OGNlZGYwLzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS84NDY1MjYtNzRmNS00Yjk3LWE1NzQtMjczZTg2OGNlZGYw LzEvRUZYcTR3MFEtdkhabnI4c19mMW1MT2RBLURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHmKYCoF+ d2z8EmECZZCwx8GbyCdzgVsD141ZeaJmOZD9BdtA+LpHshV6IHWJzuYR3MmPQaHJ QqM3nPalwS3NvMhf9VEi9Zcag++O7xd7Tc2Q/iXDViNnDZE5qCfKtTKWr2edJyJM E4NUM+ukqpm7hR5RYo3VI5bnrXIpn/yy6MlVHIM8uVVFtaulQ/CBIBBlFBeS2MEC J2pfrxHNjMCfJwxJGS2J4EuH9Ee6dWHIIxICocW3T5QfSKf+MBr0f5qXJsI/HQFb OtI0RwJW0TWnOxqsGjHTaN64RWrdFaWV65avyTHNbV93dA8NWz8Dr5mdeI1CIYif ehC/wphoB4vMFQ== -----END CERTIFICATE-----Generated at Tue Dec 16 06:27:50 2025 by rpki-client