This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft File: epHmw2HvM-JQ3YijH32Sfq03Xtk.mft (raw, json) Hash identifier: jW1yyBziP2Tn1zLyH5/C2Y4N8FlVOVe9A0tZQNKQV5E= Subject key identifier: B8:6D:97:F9:00:49:DB:E0:55:06:4C:9B:73:71:37:95:2B:39:AE:50 Authority key identifier: 7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9 Certificate issuer: /CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9 Certificate serial: 019B2175BF9449DFD14C470365E05A60EC04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft Manifest number: 06F6 Signing time: Mon 15 Dec 2025 10:02:03 +0000 Manifest this update: Mon 15 Dec 2025 10:02:03 +0000 Manifest next update: Tue 16 Dec 2025 10:02:03 +0000 Files and hashes: 1: epHmw2HvM-JQ3YijH32Sfq03Xtk.crl (hash: kBY9Jc32lwXNQflfRBlndoVGxHKaDYSBOiANRJhwFtY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:75:bf:94:49:df:d1:4c:47:03:65:e0:5a:60:ec:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a91e6c361ef33e250dd88a31f7d927ead375ed9 Validity Not Before: Dec 15 10:02:03 2025 GMT Not After : Dec 16 10:02:03 2025 GMT Subject: CN=b86d97f90049dbe055064c9b737137952b39ae50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:36:f2:23:61:b3:11:3e:96:39:28:f8:4f:40: db:29:87:94:6a:89:bb:49:e0:6b:29:b7:81:02:87: eb:23:c1:83:fc:11:0e:c7:df:7d:44:5c:ea:d4:97: 07:1e:fe:38:9f:9e:dc:11:3b:ad:ec:0c:89:a5:8e: 1a:a0:90:75:56:0b:ec:6b:e1:8d:ed:1a:3e:78:f7: e0:8b:67:91:7d:d0:fd:44:5b:bb:01:3f:be:38:59: dd:23:ba:07:98:cf:b9:17:85:ec:ce:97:a2:1f:75: 44:f8:84:bb:b8:68:fc:e9:67:43:20:b3:f2:8c:f2: ab:44:88:c2:7c:42:74:d0:e5:12:f7:68:04:fc:ab: 7c:1a:1f:2e:6b:69:1e:7d:1d:bc:ef:dc:2b:e6:61: 8c:34:88:5a:43:06:2a:4c:40:23:c4:03:50:35:e8: 79:00:96:09:f0:1d:32:7a:1d:8c:bf:12:f4:74:3e: cf:36:46:d9:c6:86:ed:1e:ad:b4:2a:a0:f7:e6:f7: c1:2c:ea:57:f4:be:0f:97:dc:1d:61:6c:6a:8b:d9: 57:0c:f1:11:3b:6b:4a:5f:75:ce:38:89:25:7a:e7: 7a:de:68:f7:31:10:4e:06:f5:58:c2:8d:58:91:73: b7:00:84:16:04:a2:da:92:69:93:5a:d4:a8:ff:fb: 4a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6D:97:F9:00:49:DB:E0:55:06:4C:9B:73:71:37:95:2B:39:AE:50 X509v3 Authority Key Identifier: keyid:7A:91:E6:C3:61:EF:33:E2:50:DD:88:A3:1F:7D:92:7E:AD:37:5E:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epHmw2HvM-JQ3YijH32Sfq03Xtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4e3fc3-048d-4b66-a951-3e2534583611/1/epHmw2HvM-JQ3YijH32Sfq03Xtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:80:66:cf:7c:d5:69:3c:ff:3a:90:56:ac:0a:d2:59:20:e3: a3:44:20:81:ef:70:1a:62:af:28:a4:b0:63:97:5c:b8:c7:cc: 5e:2d:20:57:cc:4f:5a:00:f3:d6:b1:42:bd:66:2f:b6:98:48: 87:45:12:92:4a:ea:c9:e7:90:06:51:67:f4:67:8c:0b:a7:fd: 93:5b:4e:25:f9:a5:1c:82:c5:70:a2:4b:ac:38:3d:cd:33:31: 25:55:d2:6a:00:b3:51:84:e5:d4:70:dd:ee:47:2f:bd:0d:dc: a1:b5:ab:63:36:2a:ca:b6:07:3d:0c:15:32:11:8b:2a:d4:64: f3:ea:f5:ad:94:b4:0b:38:48:ee:ae:a8:04:49:36:4d:35:f5: a8:74:d5:69:ac:ec:3d:00:77:2c:5e:c4:0d:7b:60:56:4c:9f: e4:4f:67:a1:3c:ad:1c:31:ec:4c:1d:c5:5e:c4:47:9a:79:2b: 55:8d:52:8c:05:be:5b:2e:a0:d7:93:f8:f8:c6:8c:e7:75:f9: fe:68:eb:48:08:d9:aa:d2:5c:b8:9a:0d:4e:de:95:b8:09:fa: 6b:1a:92:e8:e3:9c:e3:4e:5b:f9:c4:e9:f8:a7:71:84:92:1d: b2:0f:8b:e2:0c:14:d7:90:11:05:65:ce:f7:8d:ee:03:76:cd: ec:f8:b5:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdb+USd/RTEcDZeBaYOwEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhOTFlNmMzNjFlZjMzZTI1MGRkODhhMzFmN2Q5MjdlYWQz NzVlZDkwHhcNMjUxMjE1MTAwMjAzWhcNMjUxMjE2MTAwMjAzWjAzMTEwLwYDVQQD EyhiODZkOTdmOTAwNDlkYmUwNTUwNjRjOWI3MzcxMzc5NTJiMzlhZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6TbyI2GzET6WOSj4T0DbKYeUaom7 SeBrKbeBAofrI8GD/BEOx999RFzq1JcHHv44n57cETut7AyJpY4aoJB1Vgvsa+GN 7Ro+ePfgi2eRfdD9RFu7AT++OFndI7oHmM+5F4XszpeiH3VE+IS7uGj86WdDILPy jPKrRIjCfEJ00OUS92gE/Kt8Gh8ua2kefR2879wr5mGMNIhaQwYqTEAjxANQNeh5 AJYJ8B0yeh2MvxL0dD7PNkbZxobtHq20KqD35vfBLOpX9L4Pl9wdYWxqi9lXDPER O2tKX3XOOIkleud63mj3MRBOBvVYwo1YkXO3AIQWBKLakmmTWtSo//tKpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhtl/kASdvgVQZMm3NxN5UrOa5QMB8GA1UdIwQY MBaAFHqR5sNh7zPiUN2Iox99kn6tN17ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEt M2UyNTM0NTgzNjExLzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS80ZTNmYzMtMDQ4ZC00YjY2LWE5NTEtM2UyNTM0NTgzNjEx LzEvZXBIbXcySHZNLUpRM1lpakgzMlNmcTAzWHRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi4Bmz3zV aTz/OpBWrArSWSDjo0Qgge9wGmKvKKSwY5dcuMfMXi0gV8xPWgDz1rFCvWYvtphI h0USkkrqyeeQBlFn9GeMC6f9k1tOJfmlHILFcKJLrDg9zTMxJVXSagCzUYTl1HDd 7kcvvQ3cobWrYzYqyrYHPQwVMhGLKtRk8+r1rZS0CzhI7q6oBEk2TTX1qHTVaazs PQB3LF7EDXtgVkyf5E9noTytHDHsTB3FXsRHmnkrVY1SjAW+Wy6g15P4+MaM53X5 /mjrSAjZqtJcuJoNTt6VuAn6axqS6OOc405b+cTp+KdxhJIdsg+L4gwU15ARBWXO 943uA3bN7Pi1zw== -----END CERTIFICATE-----Generated at Mon Dec 15 13:16:37 2025 by rpki-client