This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: kUEyD92/r5v1k+hJnEdder4tPrDk7Oo+WETXdp/jdrQ= Subject key identifier: A0:F6:84:A2:7E:FB:37:A0:48:94:C3:CF:A3:A5:8A:47:12:00:A2:FC Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019B375830E37BB163B9723202B7A264248F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 1784 Signing time: Fri 19 Dec 2025 16:01:25 +0000 Manifest this update: Fri 19 Dec 2025 16:01:25 +0000 Manifest next update: Sat 20 Dec 2025 16:01:25 +0000 Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: 2R+cEvpYORjeGjQaufYlJhyR9UmH3wbs41bAnC0PDVc=) 2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:30:e3:7b:b1:63:b9:72:32:02:b7:a2:64:24:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Dec 19 16:01:25 2025 GMT Not After : Dec 20 16:01:25 2025 GMT Subject: CN=a0f684a27efb37a04894c3cfa3a58a471200a2fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:d5:2e:21:56:42:2a:8e:ba:1c:9b:74:b8: 95:0e:2e:42:80:c4:74:b6:8b:4d:d9:0e:d2:fc:9a: b1:8c:4c:86:40:cc:e0:59:36:e0:91:62:5b:33:48: 67:99:6a:5a:cb:94:9a:82:25:f8:b2:1a:65:05:6f: c0:5e:24:f6:d1:e7:85:79:2f:90:3d:42:70:70:62: a8:11:81:c9:55:fa:d2:4f:a8:b4:e9:b8:9a:34:47: be:ff:aa:18:72:f0:59:d0:a3:a2:03:e6:46:5e:3b: 50:c9:46:bb:e7:d4:e1:f6:bc:28:5d:11:47:42:9f: 30:18:93:dc:96:54:03:93:72:ad:b0:b4:b1:51:25: f6:63:68:3c:a1:b4:61:84:28:95:24:a3:4b:fd:89: 44:a4:27:64:ca:28:f9:bf:fe:59:2a:c4:a0:21:08: 78:e3:07:37:89:94:e4:8d:5f:23:d7:68:3d:eb:dc: 78:4b:c6:0e:b2:d4:3c:42:07:60:0a:e6:89:65:41: f8:c1:64:6f:f8:6c:1c:1b:83:5d:11:77:e2:2b:0e: f5:f1:bd:d7:40:e3:7c:ad:a1:ed:1c:3d:28:14:9c: a7:bc:cf:a7:65:04:46:0f:f7:e9:62:7d:7d:4e:8c: b2:91:45:e0:7a:bc:4c:c9:a2:1c:bd:f2:ae:d0:51: a0:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F6:84:A2:7E:FB:37:A0:48:94:C3:CF:A3:A5:8A:47:12:00:A2:FC X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:63:22:10:13:90:f2:48:03:5d:02:00:fb:ee:08:21:01:68: 21:b3:48:75:08:fc:aa:d4:cc:cd:53:38:a3:55:3e:bf:bf:db: 61:16:a6:48:f4:db:55:5c:6a:fa:b6:c8:a9:70:b4:dc:73:dc: 85:6b:1c:bb:13:36:59:33:a5:4c:6f:94:83:a4:56:af:d6:89: 19:0b:11:a0:e7:a2:37:e7:f9:ae:0a:4f:92:fc:68:ec:b4:9f: 30:04:7e:02:3f:d9:70:b8:c6:f8:25:fa:2a:31:1d:d8:62:59: 4f:3d:84:8e:30:2b:68:2e:ce:30:79:ba:7e:ce:c6:7f:aa:fb: d5:60:4b:5d:60:0f:77:bb:61:1c:e8:b0:64:17:ff:64:c3:b9: 69:16:68:bf:71:ae:62:98:cf:45:78:b3:22:74:4d:66:9d:9a: 06:16:f6:a7:dc:60:10:af:33:b8:fb:12:77:5b:53:1b:9a:86: 82:74:21:36:e9:e3:1f:e6:90:9a:ff:59:9b:43:b4:34:13:41: 98:56:7b:84:11:b4:89:98:c4:5a:28:1a:89:2c:c8:eb:db:e3: 04:eb:0d:ef:c6:14:9a:a4:e2:90:30:4e:52:86:47:f7:7b:61: c2:ba:4a:04:43:b8:7d:71:cb:95:ac:c3:d8:03:47:3d:29:9e: 67:84:f2:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WDDje7FjuXIyAreiZCSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjUxMjE5MTYwMTI1WhcNMjUxMjIwMTYwMTI1WjAzMTEwLwYDVQQD EyhhMGY2ODRhMjdlZmIzN2EwNDg5NGMzY2ZhM2E1OGE0NzEyMDBhMmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsofVLiFWQiqOuhybdLiVDi5CgMR0 totN2Q7S/JqxjEyGQMzgWTbgkWJbM0hnmWpay5SagiX4shplBW/AXiT20eeFeS+Q PUJwcGKoEYHJVfrST6i06biaNEe+/6oYcvBZ0KOiA+ZGXjtQyUa759Th9rwoXRFH Qp8wGJPcllQDk3KtsLSxUSX2Y2g8obRhhCiVJKNL/YlEpCdkyij5v/5ZKsSgIQh4 4wc3iZTkjV8j12g969x4S8YOstQ8QgdgCuaJZUH4wWRv+GwcG4NdEXfiKw718b3X QON8raHtHD0oFJynvM+nZQRGD/fpYn19ToyykUXgerxMyaIcvfKu0FGg7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKD2hKJ++zegSJTDz6OlikcSAKL8MB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANGMiEBOQ 8kgDXQIA++4IIQFoIbNIdQj8qtTMzVM4o1U+v7/bYRamSPTbVVxq+rbIqXC03HPc hWscuxM2WTOlTG+Ug6RWr9aJGQsRoOeiN+f5rgpPkvxo7LSfMAR+Aj/ZcLjG+CX6 KjEd2GJZTz2EjjAraC7OMHm6fs7Gf6r71WBLXWAPd7thHOiwZBf/ZMO5aRZov3Gu YpjPRXizInRNZp2aBhb2p9xgEK8zuPsSd1tTG5qGgnQhNunjH+aQmv9Zm0O0NBNB mFZ7hBG0iZjEWigaiSzI69vjBOsN78YUmqTikDBOUoZH93thwrpKBEO4fXHLlazD 2ANHPSmeZ4TyUw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:09:47 2025 by rpki-client