This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft File: EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft (raw, json) Hash identifier: OwXrQbNnhfn3xkvS6M06muaskujn4a2YWkxQZId1hVM= Subject key identifier: 89:EF:08:AF:47:7F:D0:3B:59:3C:57:23:D2:D9:77:9F:8D:1B:4B:F2 Authority key identifier: 10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D Certificate issuer: /CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Certificate serial: 019B0E5B90396D7C1D5F8864BE77A7FAED6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 17:00:40 +0000 Manifest this update: Thu 11 Dec 2025 17:00:40 +0000 Manifest next update: Fri 12 Dec 2025 17:00:40 +0000 Files and hashes: 1: EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl (hash: mwcH7TEg0hq4y1QlFziME59JKBXmM9vwaVqzbLapiuM=) 2: NgTSw9rOBAfPS4MtjXGQZaPIG-w.roa (hash: QoJnVLn+HaHuElV9Eo+G6A/RqM+7xMdjsOKyAlPzJus=) 3: tBLsfuGKLbqMOFuJsY9EOjlWkrI.roa (hash: Zj16hnw1QfxRWHHsGxCChD1mROWTXjIksDQBv3qD/5I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:5b:90:39:6d:7c:1d:5f:88:64:be:77:a7:fa:ed:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10f7741cd1af2bb34c86c73ea3bd6c76d9968d0d Validity Not Before: Dec 11 17:00:40 2025 GMT Not After : Dec 12 17:00:40 2025 GMT Subject: CN=89ef08af477fd03b593c5723d2d9779f8d1b4bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:98:65:40:0f:eb:1b:a5:20:eb:ad:1b:89: b8:3b:6e:0f:c4:56:bf:24:35:e1:14:90:10:a2:e9: cd:5f:a8:01:c1:db:25:07:b6:25:a5:e3:73:ac:48: 60:92:2b:df:8f:0c:65:e4:cb:27:0b:ff:ff:42:f1: 47:d7:2e:aa:52:d6:c2:0e:c8:d0:4f:fc:58:df:30: bf:fc:db:80:f3:fd:97:01:39:0d:da:ed:92:c8:36: 01:b1:c0:32:a6:d1:be:78:4e:aa:dd:67:75:1b:82: 35:64:1f:3d:8f:d0:50:5d:c6:f7:79:34:9d:9f:24: 76:ec:8d:ab:15:bb:53:67:3f:6d:83:3e:6a:b9:29: 48:62:43:f4:79:a0:bc:80:f1:49:df:2c:c2:0d:3a: c1:01:c1:00:e9:4d:92:1e:f9:a9:17:b3:5d:e1:3b: 65:89:30:5c:cb:ae:79:1d:d1:74:92:a1:4f:fc:33: 47:7b:24:db:09:6b:ce:c5:15:d6:39:63:ec:4d:13: 3a:4f:26:1c:04:59:44:68:d4:7c:ef:92:ae:f4:af: 6d:70:d8:01:64:c8:46:5b:2c:c2:5a:59:e8:fe:4a: 66:3b:4b:54:6c:be:9d:27:b4:3a:17:12:54:6a:ef: 34:e3:e0:3d:67:6b:66:0f:03:bb:75:6f:92:bf:24: ef:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:EF:08:AF:47:7F:D0:3B:59:3C:57:23:D2:D9:77:9F:8D:1B:4B:F2 X509v3 Authority Key Identifier: keyid:10:F7:74:1C:D1:AF:2B:B3:4C:86:C7:3E:A3:BD:6C:76:D9:96:8D:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EPd0HNGvK7NMhsc-o71sdtmWjQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/def7ce-25d4-43c1-8eae-1a64cf21a604/1/EPd0HNGvK7NMhsc-o71sdtmWjQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f8:79:6b:c5:60:cb:a6:46:c5:eb:09:b1:ec:70:c3:4c:80: 76:4b:f1:b4:7f:53:7a:9e:48:40:8e:42:73:d8:cf:51:ae:7a: 9b:61:1e:b0:0d:2f:16:de:a4:ef:f6:cc:5a:38:eb:2d:a4:30: 77:5a:5d:bd:a1:66:38:73:b9:6b:67:d3:c2:1d:bb:ae:a7:37: 10:f9:69:c1:39:c7:f9:73:fd:cc:4d:44:be:8b:0d:4e:cf:6c: bc:a1:a5:7c:48:da:2f:83:47:17:bf:78:0b:11:f1:3f:c1:b6: 73:f4:d7:4a:50:59:e7:43:f6:cc:f8:57:59:13:03:2d:1d:41: d4:ae:c0:a8:b0:20:97:08:25:4f:1b:b5:85:da:62:6f:3c:c4: e2:47:3f:67:5a:fb:88:a3:46:36:46:68:2f:92:ac:e1:90:b5: 49:72:6f:52:df:a2:78:cd:bb:5e:1f:b9:2c:ff:41:b1:24:25: a0:94:ae:00:4a:9a:52:e1:e9:22:e1:6a:3f:c3:2e:65:a6:f8: a3:d4:a2:27:81:9d:e6:71:af:28:4a:9c:25:b3:3f:3d:c4:2f: 22:5f:f5:30:e0:91:5a:0e:93:e4:6a:85:eb:22:8b:20:bc:8b: 31:9d:a9:09:69:14:48:55:7a:ae:85:1e:61:0a:cb:5b:15:eb: 95:6f:af:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOW5A5bXwdX4hkvnen+u1rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwZjc3NDFjZDFhZjJiYjM0Yzg2YzczZWEzYmQ2Yzc2ZDk5 NjhkMGQwHhcNMjUxMjExMTcwMDQwWhcNMjUxMjEyMTcwMDQwWjAzMTEwLwYDVQQD Eyg4OWVmMDhhZjQ3N2ZkMDNiNTkzYzU3MjNkMmQ5Nzc5ZjhkMWI0YmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kuYZUAP6xulIOutG4m4O24PxFa/ JDXhFJAQounNX6gBwdslB7YlpeNzrEhgkivfjwxl5MsnC///QvFH1y6qUtbCDsjQ T/xY3zC//NuA8/2XATkN2u2SyDYBscAyptG+eE6q3Wd1G4I1ZB89j9BQXcb3eTSd nyR27I2rFbtTZz9tgz5quSlIYkP0eaC8gPFJ3yzCDTrBAcEA6U2SHvmpF7Nd4Ttl iTBcy655HdF0kqFP/DNHeyTbCWvOxRXWOWPsTRM6TyYcBFlEaNR875Ku9K9tcNgB ZMhGWyzCWlno/kpmO0tUbL6dJ7Q6FxJUau804+A9Z2tmDwO7dW+SvyTvrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInvCK9Hf9A7WTxXI9LZd5+NG0vyMB8GA1UdIwQY MBaAFBD3dBzRryuzTIbHPqO9bHbZlo0NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUt MWE2NGNmMjFhNjA0LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9kZWY3Y2UtMjVkNC00M2MxLThlYWUtMWE2NGNmMjFhNjA0 LzEvRVBkMEhOR3ZLN05NaHNjLW83MXNkdG1XalEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/h5a8Vg y6ZGxesJsexww0yAdkvxtH9Tep5IQI5Cc9jPUa56m2EesA0vFt6k7/bMWjjrLaQw d1pdvaFmOHO5a2fTwh27rqc3EPlpwTnH+XP9zE1EvosNTs9svKGlfEjaL4NHF794 CxHxP8G2c/TXSlBZ50P2zPhXWRMDLR1B1K7AqLAglwglTxu1hdpibzzE4kc/Z1r7 iKNGNkZoL5Ks4ZC1SXJvUt+ieM27Xh+5LP9BsSQloJSuAEqaUuHpIuFqP8MuZab4 o9SiJ4Gd5nGvKEqcJbM/PcQvIl/1MOCRWg6T5GqF6yKLILyLMZ2pCWkUSFV6roUe YQrLWxXrlW+vng== -----END CERTIFICATE-----Generated at Fri Dec 12 00:25:14 2025 by rpki-client