This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft File: EgHMNDB0EC76fwww8pSZ4a1W4p8.mft (raw, json) Hash identifier: IpNiuwuEkHKFOPBr+O+xq4fXzeuKIyjvXzvmHZIJ8bk= Subject key identifier: 60:F0:CC:D2:CA:2B:E0:E6:F6:75:3E:07:27:C1:6D:DE:15:BC:E3:92 Authority key identifier: 12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F Certificate issuer: /CN=1201cc343074102efa7f0c30f29499e1ad56e29f Certificate serial: 019B0F37AE4F02AF51D0B93BD77ADA2F0899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft Manifest number: 1773 Signing time: Thu 11 Dec 2025 21:01:05 +0000 Manifest this update: Thu 11 Dec 2025 21:01:05 +0000 Manifest next update: Fri 12 Dec 2025 21:01:05 +0000 Files and hashes: 1: EgHMNDB0EC76fwww8pSZ4a1W4p8.crl (hash: xpoVpIfHS2dqX57IRnUWkCIfqe9O3T2FZYrady2jCxA=) 2: avJEaghetulkdy61P3vVvRtnwao.roa (hash: isq8BGshz+w5RQmqprep+yBn/iuxAmpetPcOYQFYWJs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:37:ae:4f:02:af:51:d0:b9:3b:d7:7a:da:2f:08:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1201cc343074102efa7f0c30f29499e1ad56e29f Validity Not Before: Dec 11 21:01:05 2025 GMT Not After : Dec 12 21:01:05 2025 GMT Subject: CN=60f0ccd2ca2be0e6f6753e0727c16dde15bce392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c4:7b:1f:68:25:68:d5:ef:6a:c5:f8:ab:71: a6:16:07:2f:e2:7d:32:79:c1:cf:c3:60:e0:47:46: ae:42:77:a6:ef:ff:e7:eb:12:1e:1b:af:05:43:e1: 70:99:c5:aa:48:f4:de:4d:c9:2a:57:43:d5:4c:ad: 3c:be:6c:9f:e4:d9:1f:78:4c:b9:7f:e6:1a:00:79: 24:ea:c7:9f:6c:ae:25:19:26:dc:88:07:fe:b4:f0: 7d:61:6d:ad:5f:4a:42:fd:22:66:d6:ea:de:34:69: 2a:07:97:c8:81:9d:e9:b0:cd:1f:8a:d7:9e:b3:50: 90:6d:73:5d:e5:fe:bc:a9:5e:04:19:c7:81:51:40: 93:17:d0:2f:87:d4:df:35:0a:53:e4:8a:b6:c3:10: b9:bb:c9:17:c0:13:84:2d:c0:6e:0c:8b:3b:03:63: bc:80:6e:99:07:ac:ce:8d:6d:78:08:1e:80:80:57: 1e:ab:df:78:1b:2c:66:95:5a:59:18:38:c9:3e:87: 5a:5b:2a:e6:bc:7f:ca:1e:6f:6d:11:ba:0e:bb:de: 64:03:c3:eb:7a:e6:ec:b0:8f:71:ae:bc:2d:a5:82: 6e:18:6c:ca:98:d5:74:fb:92:fd:52:d0:2d:83:72: 56:7b:34:5c:4f:ab:f6:30:16:14:3a:b9:a9:33:3e: c1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F0:CC:D2:CA:2B:E0:E6:F6:75:3E:07:27:C1:6D:DE:15:BC:E3:92 X509v3 Authority Key Identifier: keyid:12:01:CC:34:30:74:10:2E:FA:7F:0C:30:F2:94:99:E1:AD:56:E2:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EgHMNDB0EC76fwww8pSZ4a1W4p8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/91/d1628a-33c8-4e47-bfed-99ed6730f84a/1/EgHMNDB0EC76fwww8pSZ4a1W4p8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b8:16:a4:b8:f4:6e:9d:40:8d:60:2a:cd:34:9f:c0:ab:da: 6d:ec:e8:75:91:cb:b5:08:3e:17:90:c0:21:63:bf:43:5b:d8: a3:80:e0:df:43:a0:25:4d:b3:d7:7d:cc:41:4c:86:25:c6:ad: 9f:bf:31:a2:9d:73:af:40:c3:08:72:25:c1:48:35:90:40:7b: 61:67:89:e8:db:eb:78:f8:3f:3f:2e:0a:12:e6:4f:8f:3c:0a: 46:1b:48:0c:0e:04:5d:54:ae:a4:2d:36:b0:36:76:51:4d:06: d8:e7:76:1a:98:1f:6e:1e:79:0d:cf:64:03:72:35:77:17:db: f6:3a:87:27:c7:24:dc:64:a7:54:69:f3:78:51:4c:14:7c:78: 01:c7:f7:af:9f:bc:dc:f2:95:f3:21:dd:83:4f:91:7c:c2:ea: 5d:7d:ee:75:d1:c1:8e:f0:b1:cf:09:0d:6f:9f:01:64:32:ab: 40:22:5d:fe:4a:19:4d:a5:96:ff:fd:6e:d4:97:aa:24:c8:a9: f4:a7:c0:f8:15:2d:41:83:32:5e:12:2a:5e:ec:d2:7b:2c:b0: 6e:d5:1f:02:3d:71:a9:1a:d1:e1:43:6d:4c:50:8f:bd:bd:6b: 9b:4a:c1:c1:08:0c:80:50:c1:80:a6:2e:51:07:31:f4:22:8e: 0c:e6:5c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPN65PAq9R0Lk713raLwiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMDFjYzM0MzA3NDEwMmVmYTdmMGMzMGYyOTQ5OWUxYWQ1 NmUyOWYwHhcNMjUxMjExMjEwMTA1WhcNMjUxMjEyMjEwMTA1WjAzMTEwLwYDVQQD Eyg2MGYwY2NkMmNhMmJlMGU2ZjY3NTNlMDcyN2MxNmRkZTE1YmNlMzkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncR7H2glaNXvasX4q3GmFgcv4n0y ecHPw2DgR0auQnem7//n6xIeG68FQ+FwmcWqSPTeTckqV0PVTK08vmyf5NkfeEy5 f+YaAHkk6sefbK4lGSbciAf+tPB9YW2tX0pC/SJm1ureNGkqB5fIgZ3psM0fitee s1CQbXNd5f68qV4EGceBUUCTF9Avh9TfNQpT5Iq2wxC5u8kXwBOELcBuDIs7A2O8 gG6ZB6zOjW14CB6AgFceq994GyxmlVpZGDjJPodaWyrmvH/KHm9tEboOu95kA8Pr eubssI9xrrwtpYJuGGzKmNV0+5L9UtAtg3JWezRcT6v2MBYUOrmpMz7BdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDwzNLKK+Dm9nU+ByfBbd4VvOOSMB8GA1UdIwQY MBaAFBIBzDQwdBAu+n8MMPKUmeGtVuKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQt OTllZDY3MzBmODRhLzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MS9kMTYyOGEtMzNjOC00ZTQ3LWJmZWQtOTllZDY3MzBmODRh LzEvRWdITU5EQjBFQzc2Znd3dzhwU1o0YTFXNHA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrgWpLj0 bp1AjWAqzTSfwKvabezodZHLtQg+F5DAIWO/Q1vYo4Dg30OgJU2z133MQUyGJcat n78xop1zr0DDCHIlwUg1kEB7YWeJ6NvrePg/Py4KEuZPjzwKRhtIDA4EXVSupC02 sDZ2UU0G2Od2Gpgfbh55Dc9kA3I1dxfb9jqHJ8ck3GSnVGnzeFFMFHx4Acf3r5+8 3PKV8yHdg0+RfMLqXX3uddHBjvCxzwkNb58BZDKrQCJd/koZTaWW//1u1JeqJMip 9KfA+BUtQYMyXhIqXuzSeyywbtUfAj1xqRrR4UNtTFCPvb1rm0rBwQgMgFDBgKYu UQcx9CKODOZctw== -----END CERTIFICATE-----Generated at Fri Dec 12 04:00:44 2025 by rpki-client