This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft File: cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft (raw, json) Hash identifier: GPhZuP/VI/3qekBrqfjaesphhvaT5ABaVDTJ+1Yr6QI= Subject key identifier: 82:5D:23:4C:5C:99:76:41:52:BC:FA:2B:8B:9F:DD:4D:D6:7C:6B:98 Authority key identifier: 70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D Certificate issuer: /CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Certificate serial: 019B3A2175967B32E1D362B87AA0E2CE4BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft Manifest number: 055B Signing time: Sat 20 Dec 2025 05:00:29 +0000 Manifest this update: Sat 20 Dec 2025 05:00:29 +0000 Manifest next update: Sun 21 Dec 2025 05:00:29 +0000 Files and hashes: 1: cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl (hash: s5ZWAJr6JFdVpK6xsXcIDleW6cFkXWUUNwxRUrVPfMw=) 2: zNpNQl9NSaLChe4B635hRjw02-o.roa (hash: ukOTTrydtQmkqVzRSGtZSX72LHto0GmqblImsbLdsZo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:75:96:7b:32:e1:d3:62:b8:7a:a0:e2:ce:4b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70480858fdeea1924ab8c62ec3fc732d34020a9d Validity Not Before: Dec 20 05:00:29 2025 GMT Not After : Dec 21 05:00:29 2025 GMT Subject: CN=825d234c5c99764152bcfa2b8b9fdd4dd67c6b98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:eb:33:54:b0:db:7d:00:4f:4f:97:fe:65:36: e1:e0:20:bc:e7:06:a5:ce:1f:7b:8c:2c:62:b5:6f: 47:80:ac:a9:57:97:af:e7:58:30:d7:6e:83:26:c9: 06:22:18:fc:8d:56:dc:51:f4:6c:b7:c8:f9:e1:d5: 83:a9:45:0e:14:60:f6:36:23:06:8a:24:e6:e6:a0: e9:3f:b0:27:4c:38:85:ee:e3:06:d2:b0:3f:c9:b3: ab:67:1e:a5:79:a9:5d:47:60:44:66:a4:42:78:87: d6:99:24:4c:5e:ff:f5:69:51:9d:e8:49:2e:84:78: 0d:e7:49:e4:5a:51:3d:3c:89:b5:1b:fc:11:a1:25: 6e:d2:47:f6:a5:4f:22:22:85:67:25:da:df:c1:d3: a7:34:83:6c:06:35:84:ba:11:10:81:9e:4b:2a:b2: e8:4a:d6:8a:c7:b1:3b:c1:e6:b0:00:11:6b:11:59: 03:45:db:1f:bc:07:8f:2b:ca:16:7e:5b:bf:ab:c8: 1e:72:ce:a2:83:cc:59:0d:3e:4a:0c:b2:35:24:21: 1c:0f:a1:5f:97:c1:6e:97:22:cb:33:a6:df:8e:d1: 0f:d2:47:a8:ce:2d:5f:1e:bd:ca:16:93:c7:dc:78: 94:a1:60:af:e3:ea:e1:09:91:86:3a:a9:7d:3f:c4: bb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:5D:23:4C:5C:99:76:41:52:BC:FA:2B:8B:9F:DD:4D:D6:7C:6B:98 X509v3 Authority Key Identifier: keyid:70:48:08:58:FD:EE:A1:92:4A:B8:C6:2E:C3:FC:73:2D:34:02:0A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEgIWP3uoZJKuMYuw_xzLTQCCp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d4968c-3961-4382-afe7-ca28d9962446/1/cEgIWP3uoZJKuMYuw_xzLTQCCp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6e:02:58:5a:42:8d:8c:c0:f3:67:2a:d2:24:3c:5c:68:02: 72:6d:bf:3d:2d:9f:3f:01:94:6c:da:aa:cf:91:8b:1c:13:a6: 63:81:68:6e:3b:73:9b:1f:95:c8:ef:d5:8d:95:b0:05:83:f3: b3:1f:ce:2e:44:92:7c:00:29:15:c0:05:ce:e6:ab:28:82:7a: 46:97:d8:76:07:48:0a:7c:41:ae:86:07:90:23:b0:3d:df:37: 6c:16:3c:7b:ca:81:cb:a9:d6:16:0d:5b:1d:80:dc:e1:e2:dd: cd:56:41:b8:be:73:ad:5d:a8:c1:e6:13:59:08:52:ec:7e:6d: 6b:71:ee:0d:07:91:f5:c5:1a:97:bf:80:55:38:3f:65:5a:76: 92:8b:59:46:ea:0b:a2:bb:f1:ca:d5:83:21:d7:52:72:e5:a2: 5a:a1:fd:79:68:f2:2f:e5:01:fb:2e:7c:51:2d:e7:25:fb:23: e9:5b:3e:df:d1:6c:a6:22:00:37:61:eb:d7:69:14:9d:0f:f5: 72:e8:8a:0e:f4:72:38:34:4a:30:f3:53:01:62:19:bc:b4:12: b2:be:cd:fc:79:9b:64:e1:4e:12:51:43:23:86:86:e0:97:b7: 1b:76:1a:61:6c:ab:1d:16:d5:a0:c0:36:6a:2d:1c:72:be:1c: 21:6f:1f:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6IXWWezLh02K4eqDizkuxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNDgwODU4ZmRlZWExOTI0YWI4YzYyZWMzZmM3MzJkMzQw MjBhOWQwHhcNMjUxMjIwMDUwMDI5WhcNMjUxMjIxMDUwMDI5WjAzMTEwLwYDVQQD Eyg4MjVkMjM0YzVjOTk3NjQxNTJiY2ZhMmI4YjlmZGQ0ZGQ2N2M2Yjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+szVLDbfQBPT5f+ZTbh4CC85wal zh97jCxitW9HgKypV5ev51gw126DJskGIhj8jVbcUfRst8j54dWDqUUOFGD2NiMG iiTm5qDpP7AnTDiF7uMG0rA/ybOrZx6lealdR2BEZqRCeIfWmSRMXv/1aVGd6Eku hHgN50nkWlE9PIm1G/wRoSVu0kf2pU8iIoVnJdrfwdOnNINsBjWEuhEQgZ5LKrLo StaKx7E7weawABFrEVkDRdsfvAePK8oWflu/q8gecs6ig8xZDT5KDLI1JCEcD6Ff l8FulyLLM6bfjtEP0keozi1fHr3KFpPH3HiUoWCv4+rhCZGGOql9P8S7cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIJdI0xcmXZBUrz6K4uf3U3WfGuYMB8GA1UdIwQY MBaAFHBICFj97qGSSrjGLsP8cy00AgqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTct Y2EyOGQ5OTYyNDQ2LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNDk2OGMtMzk2MS00MzgyLWFmZTctY2EyOGQ5OTYyNDQ2 LzEvY0VnSVdQM3VvWkpLdU1ZdXdfeHpMVFFDQ3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAm4CWFpC jYzA82cq0iQ8XGgCcm2/PS2fPwGUbNqqz5GLHBOmY4Fobjtzmx+VyO/VjZWwBYPz sx/OLkSSfAApFcAFzuarKIJ6RpfYdgdICnxBroYHkCOwPd83bBY8e8qBy6nWFg1b HYDc4eLdzVZBuL5zrV2oweYTWQhS7H5ta3HuDQeR9cUal7+AVTg/ZVp2kotZRuoL orvxytWDIddScuWiWqH9eWjyL+UB+y58US3nJfsj6Vs+39FspiIAN2Hr12kUnQ/1 cuiKDvRyODRKMPNTAWIZvLQSsr7N/HmbZOFOElFDI4aG4Je3G3YaYWyrHRbVoMA2 ai0ccr4cIW8fxg== -----END CERTIFICATE-----Generated at Sat Dec 20 12:38:57 2025 by rpki-client