This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft File: ECgK10HnIygIXV-leXqEUfX7Ajg.mft (raw, json) Hash identifier: hlvx1Mgz2mjjRtcuXjbX4Wa+mgpv2VVhs7rJBucs0Ng= Subject key identifier: A0:9E:B9:2B:7B:C0:0C:7C:F1:6A:AB:AC:A9:D7:7F:12:4D:07:74:92 Authority key identifier: 10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38 Certificate issuer: /CN=10280ad741e72328085d5fa5797a8451f5fb0238 Certificate serial: 019B22F4EA768736A560CF9B034D6E708172 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft Manifest number: 076F Signing time: Mon 15 Dec 2025 17:00:34 +0000 Manifest this update: Mon 15 Dec 2025 17:00:34 +0000 Manifest next update: Tue 16 Dec 2025 17:00:34 +0000 Files and hashes: 1: 0WB7Bx7_enfl066TmQSfosTy_eE.roa (hash: 3RwaEA2cdgjXvhrk9+eNZlduveecPdwtMIhFIo5EmUE=) 2: ECgK10HnIygIXV-leXqEUfX7Ajg.crl (hash: DaEZyAQ5pozi+jFJ6FjMOnvinYy8NFg6YlmHzUR2z1Y=) 3: fATKMXoOGJ2KbtRcWiMp0a19gZ8.roa (hash: dQx3XShBA2ggohUWFd8E2u2bLxwMwVqrXUUReX+nyv0=) 4: oJELLABa0xvOzeDJ8-0ROcoGDzU.roa (hash: eMpca3L46CdM/yY9Tb5GPWOeeCVHM7SNfiUzaVfbfTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 15:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:f4:ea:76:87:36:a5:60:cf:9b:03:4d:6e:70:81:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10280ad741e72328085d5fa5797a8451f5fb0238 Validity Not Before: Dec 15 17:00:34 2025 GMT Not After : Dec 16 17:00:34 2025 GMT Subject: CN=a09eb92b7bc00c7cf16aabaca9d77f124d077492 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6b:1d:fc:68:78:95:a6:f9:e8:b5:65:a8:95: 9c:c3:bb:b1:a6:c3:f7:5a:bd:27:eb:78:b9:68:17: be:0b:27:ff:ae:d7:3b:6b:d6:3d:96:43:02:21:a7: ce:5d:22:3f:e4:8c:06:f6:18:d9:1c:17:d6:b6:5c: cc:b2:18:6f:8c:14:18:e3:0e:a1:8d:25:14:0f:0b: 19:69:49:cc:d0:d2:ed:15:f1:5f:51:9d:8d:40:8d: 87:0e:aa:b2:83:67:1b:8f:7c:d1:e1:b2:b6:0b:4b: de:2d:8c:93:ca:a7:18:bf:b5:c2:59:6d:9a:ce:2e: 06:33:f6:b4:fd:bc:bc:da:23:2a:71:19:47:7b:5e: 3c:c6:fd:63:1a:8c:ff:86:8e:e3:53:06:10:f9:16: 40:d3:01:3f:f2:55:63:e5:e6:14:c2:b1:de:fd:4a: ce:89:7f:d6:8f:99:68:b7:fc:9a:46:97:d0:b3:8b: 17:97:97:97:4f:49:92:5a:b1:88:5f:f0:67:f9:88: dd:c7:dc:17:57:e7:38:7f:8f:12:7e:f9:61:89:f9: 82:41:eb:ef:b3:4b:8f:06:6b:2c:7c:e6:6e:55:97: 81:2a:c3:d5:e4:17:f3:35:94:3a:8c:4f:45:b9:90: d0:28:e9:3c:10:23:fd:74:d2:11:87:9c:a9:52:08: 70:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:9E:B9:2B:7B:C0:0C:7C:F1:6A:AB:AC:A9:D7:7F:12:4D:07:74:92 X509v3 Authority Key Identifier: keyid:10:28:0A:D7:41:E7:23:28:08:5D:5F:A5:79:7A:84:51:F5:FB:02:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECgK10HnIygIXV-leXqEUfX7Ajg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/abbb9f-4f10-4e44-aca3-04275a2919a7/1/ECgK10HnIygIXV-leXqEUfX7Ajg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:04:74:5c:91:de:b7:f8:f7:d2:06:76:95:76:78:a3:40:1a: ae:01:07:c6:55:22:91:f4:db:61:53:01:77:b5:31:c4:73:75: cd:74:52:b1:fd:11:78:31:0a:0c:4a:7a:e8:f0:7b:16:cc:c1: 37:09:1d:75:7f:b0:11:9a:ba:98:5a:8c:47:f9:ad:1c:98:97: e8:0d:91:a5:7f:c5:d3:41:c7:a3:3d:45:7f:dc:71:5a:dd:8c: fd:f9:26:d6:17:bd:dc:90:4c:41:7b:a1:89:a3:81:75:2e:fa: 5b:e8:ea:4b:fe:b2:10:4f:7a:32:c2:68:d8:c2:20:f6:af:e2: 26:79:05:cc:f3:e7:c8:ea:f9:d6:cf:23:17:84:34:d1:52:9b: 64:3a:06:12:a8:e1:fd:e2:33:9e:b1:6c:0e:b6:ea:c7:af:b2: 73:2d:72:bc:c2:ec:81:79:4e:09:a7:79:e6:74:fc:57:76:d9: 3e:be:f8:c9:fe:7d:f4:9e:78:bf:3e:27:ac:76:70:ba:5c:34: 33:5c:6a:0d:9d:00:f3:17:71:b3:39:ab:18:4e:ac:06:21:ff: 18:03:08:e2:35:fe:ad:c2:d2:50:0f:57:7f:55:f3:cb:40:9a: da:22:f3:b3:8f:81:65:2c:06:f1:5a:8b:a7:1c:f3:a8:a5:67: 5b:b3:09:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsi9Op2hzalYM+bA01ucIFyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwMjgwYWQ3NDFlNzIzMjgwODVkNWZhNTc5N2E4NDUxZjVm YjAyMzgwHhcNMjUxMjE1MTcwMDM0WhcNMjUxMjE2MTcwMDM0WjAzMTEwLwYDVQQD EyhhMDllYjkyYjdiYzAwYzdjZjE2YWFiYWNhOWQ3N2YxMjRkMDc3NDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22sd/Gh4lab56LVlqJWcw7uxpsP3 Wr0n63i5aBe+Cyf/rtc7a9Y9lkMCIafOXSI/5IwG9hjZHBfWtlzMshhvjBQY4w6h jSUUDwsZaUnM0NLtFfFfUZ2NQI2HDqqyg2cbj3zR4bK2C0veLYyTyqcYv7XCWW2a zi4GM/a0/by82iMqcRlHe148xv1jGoz/ho7jUwYQ+RZA0wE/8lVj5eYUwrHe/UrO iX/Wj5lot/yaRpfQs4sXl5eXT0mSWrGIX/Bn+Yjdx9wXV+c4f48SfvlhifmCQevv s0uPBmssfOZuVZeBKsPV5BfzNZQ6jE9FuZDQKOk8ECP9dNIRh5ypUghwjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCeuSt7wAx88WqrrKnXfxJNB3SSMB8GA1UdIwQY MBaAFBAoCtdB5yMoCF1fpXl6hFH1+wI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMt MDQyNzVhMjkxOWE3LzEvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9hYmJiOWYtNGYxMC00ZTQ0LWFjYTMtMDQyNzVhMjkxOWE3 LzEvRUNnSzEwSG5JeWdJWFYtbGVYcUVVZlg3QWpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwR0XJHe t/j30gZ2lXZ4o0AargEHxlUikfTbYVMBd7UxxHN1zXRSsf0ReDEKDEp66PB7FszB NwkddX+wEZq6mFqMR/mtHJiX6A2RpX/F00HHoz1Ff9xxWt2M/fkm1he93JBMQXuh iaOBdS76W+jqS/6yEE96MsJo2MIg9q/iJnkFzPPnyOr51s8jF4Q00VKbZDoGEqjh /eIznrFsDrbqx6+ycy1yvMLsgXlOCad55nT8V3bZPr74yf599J54vz4nrHZwulw0 M1xqDZ0A8xdxszmrGE6sBiH/GAMI4jX+rcLSUA9Xf1Xzy0Ca2iLzs4+BZSwG8VqL pxzzqKVnW7MJjQ== -----END CERTIFICATE-----Generated at Mon Dec 15 19:55:14 2025 by rpki-client