This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft File: EPt5C_XsxPQgY7C5YKmU95kClQs.mft (raw, json) Hash identifier: LLokypd+VhAiZIdeR+r+uIXSyr9vivU8+BByiOkYPgw= Subject key identifier: 66:96:D4:28:5F:F9:95:93:47:23:04:0B:91:57:7F:9E:93:A0:77:78 Authority key identifier: 10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B Certificate issuer: /CN=10fb790bf5ecc4f42063b0b960a994f79902950b Certificate serial: 019B0DB72EF26789B7326702119359C8A891 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft Manifest number: 0C Signing time: Thu 11 Dec 2025 14:01:07 +0000 Manifest this update: Thu 11 Dec 2025 14:01:07 +0000 Manifest next update: Fri 12 Dec 2025 14:01:07 +0000 Files and hashes: 1: EPt5C_XsxPQgY7C5YKmU95kClQs.crl (hash: mv81eJDg6RGpEpLBFtiB+fhcfR0LodgKxH3etB+U34g=) 2: WRzFAQD96PiFm7zmXWmL1m9WLI4.asa (hash: dndJ9DGWxNZLozvP8wqqSXTlQ6oOsIMlnknEpXmZxaA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:2e:f2:67:89:b7:32:67:02:11:93:59:c8:a8:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fb790bf5ecc4f42063b0b960a994f79902950b Validity Not Before: Dec 11 14:01:07 2025 GMT Not After : Dec 12 14:01:07 2025 GMT Subject: CN=6696d4285ff995934723040b91577f9e93a07778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9c:30:4e:27:43:2b:67:71:af:a5:3b:e0:1d: 09:6f:ce:54:a4:b9:50:9c:98:db:b5:53:0e:7d:90: 53:b2:21:31:5a:37:1c:25:0c:e8:9b:39:04:7d:75: d5:7e:e8:a7:1d:61:2b:ba:31:fe:72:83:4e:5c:3a: 61:64:7e:b0:d5:07:41:5a:fc:44:2e:0f:10:8e:d2: d3:e9:2a:53:3d:92:8e:f6:34:49:55:be:c4:61:79: d3:cc:d2:1f:e4:82:89:a4:77:45:94:e3:a7:d2:74: c8:85:a7:38:7d:b6:57:c9:69:41:33:ce:d1:41:27: 7c:50:ed:77:8e:fa:d8:5f:8c:78:43:45:a9:c7:41: b4:19:27:a7:05:fd:db:da:c8:9d:be:bf:6d:70:5c: b7:83:6b:41:39:47:c6:5d:18:8e:41:d9:7e:53:50: a3:68:2c:26:43:71:0a:ec:7d:f6:a8:de:1d:4c:20: 73:11:63:54:66:36:48:43:d0:84:5b:85:05:92:c9: 33:dc:31:0e:f8:09:3e:12:30:7a:ed:cb:b9:d8:b4: e9:c1:59:c8:f7:5a:80:3d:f4:b1:d1:7a:a0:fc:ac: 75:42:57:65:a9:cf:f8:ff:7d:45:19:1e:43:46:9a: 98:eb:f2:07:2e:d8:b1:e7:38:85:24:0e:37:c9:4b: ee:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:D4:28:5F:F9:95:93:47:23:04:0B:91:57:7F:9E:93:A0:77:78 X509v3 Authority Key Identifier: keyid:10:FB:79:0B:F5:EC:C4:F4:20:63:B0:B9:60:A9:94:F7:99:02:95:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPt5C_XsxPQgY7C5YKmU95kClQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/127240-7fa4-4d8a-b8a8-22894de14cbb/1/EPt5C_XsxPQgY7C5YKmU95kClQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e7:67:78:42:aa:5f:9b:1b:e5:a3:47:ec:5a:76:95:cc:bd: 24:f6:6c:0e:72:8c:41:cb:7e:86:a3:11:44:38:bf:8b:c7:a5: 1c:6c:29:63:b3:c5:44:1a:98:a9:18:61:bf:8f:a9:23:3f:18: 65:5a:a6:ac:4b:6f:89:a4:dd:2d:f8:be:b0:bb:47:f7:58:19: 72:c7:90:fc:40:f3:a4:28:38:7e:e9:14:f0:9c:e9:6e:7f:be: e7:51:96:bc:41:e8:37:a1:24:9b:87:a8:d1:07:17:16:df:48: 64:40:32:3d:4e:d6:0e:71:b6:49:ab:92:7d:1e:60:b3:fc:47: c0:3c:38:8f:fd:55:34:d6:12:40:c2:44:09:23:a5:1e:ea:0e: 50:d5:e0:41:46:ab:f7:f2:8a:19:00:69:49:40:48:37:66:92: fa:82:9b:4c:00:2a:44:6e:c6:f5:f3:c1:75:43:c9:8a:65:1e: 33:84:15:f6:68:ac:81:24:3a:dc:d8:1a:73:ec:84:60:03:36: 9a:99:57:51:b9:22:75:65:2d:ed:5c:99:ea:f3:34:18:5a:9a: b2:d3:33:ea:a7:b6:cb:c4:a5:5b:5a:e0:89:79:a4:c8:3d:b1: aa:37:96:4e:ad:7e:66:0e:af:1e:31:ff:78:06:3d:15:a0:c2: b8:be:61:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNty7yZ4m3MmcCEZNZyKiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZmI3OTBiZjVlY2M0ZjQyMDYzYjBiOTYwYTk5NGY3OTkw Mjk1MGIwHhcNMjUxMjExMTQwMTA3WhcNMjUxMjEyMTQwMTA3WjAzMTEwLwYDVQQD Eyg2Njk2ZDQyODVmZjk5NTkzNDcyMzA0MGI5MTU3N2Y5ZTkzYTA3Nzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJwwTidDK2dxr6U74B0Jb85UpLlQ nJjbtVMOfZBTsiExWjccJQzomzkEfXXVfuinHWErujH+coNOXDphZH6w1QdBWvxE Lg8QjtLT6SpTPZKO9jRJVb7EYXnTzNIf5IKJpHdFlOOn0nTIhac4fbZXyWlBM87R QSd8UO13jvrYX4x4Q0Wpx0G0GSenBf3b2sidvr9tcFy3g2tBOUfGXRiOQdl+U1Cj aCwmQ3EK7H32qN4dTCBzEWNUZjZIQ9CEW4UFkskz3DEO+Ak+EjB67cu52LTpwVnI 91qAPfSx0Xqg/Kx1Qldlqc/4/31FGR5DRpqY6/IHLtix5ziFJA43yUvumwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGaW1Chf+ZWTRyMEC5FXf56ToHd4MB8GA1UdIwQY MBaAFBD7eQv17MT0IGOwuWCplPeZApULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgt MjI4OTRkZTE0Y2JiLzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8xMjcyNDAtN2ZhNC00ZDhhLWI4YTgtMjI4OTRkZTE0Y2Ji LzEvRVB0NUNfWHN4UFFnWTdDNVlLbVU5NWtDbFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZudneEKq X5sb5aNH7Fp2lcy9JPZsDnKMQct+hqMRRDi/i8elHGwpY7PFRBqYqRhhv4+pIz8Y ZVqmrEtviaTdLfi+sLtH91gZcseQ/EDzpCg4fukU8Jzpbn++51GWvEHoN6Ekm4eo 0QcXFt9IZEAyPU7WDnG2SauSfR5gs/xHwDw4j/1VNNYSQMJECSOlHuoOUNXgQUar 9/KKGQBpSUBIN2aS+oKbTAAqRG7G9fPBdUPJimUeM4QV9misgSQ63Ngac+yEYAM2 mplXUbkidWUt7VyZ6vM0GFqastMz6qe2y8SlW1rgiXmkyD2xqjeWTq1+Zg6vHjH/ eAY9FaDCuL5htg== -----END CERTIFICATE-----Generated at Thu Dec 11 22:53:01 2025 by rpki-client