This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft File: Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json) Hash identifier: WpnvZ0pRDpaKwcQDo4o0fC6rkfyKY+JHllI7TWEOlz4= Subject key identifier: F5:2B:DE:87:14:ED:4D:15:10:07:AD:32:FF:3F:4A:47:E9:65:D0:2E Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 Certificate issuer: /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Certificate serial: 019B0EC9E4D3ED7EBEBF3DA12801FF2DA960 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft Manifest number: 176F Signing time: Thu 11 Dec 2025 19:01:10 +0000 Manifest this update: Thu 11 Dec 2025 19:01:10 +0000 Manifest next update: Fri 12 Dec 2025 19:01:10 +0000 Files and hashes: 1: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: +b3EXTnaKBnvZ/Z9sULL/6QpAAc9+a3gDCyeCw20CCo=) 2: w4RpAhXHQv7paVDaR7QTwx3l9rU.roa (hash: cSr60LWlE9V7I+1ZUVP1rmOC1RqMw9hreE8YRG544p8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:c9:e4:d3:ed:7e:be:bf:3d:a1:28:01:ff:2d:a9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1 Validity Not Before: Dec 11 19:01:10 2025 GMT Not After : Dec 12 19:01:10 2025 GMT Subject: CN=f52bde8714ed4d151007ad32ff3f4a47e965d02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:fc:7d:c4:65:2f:39:e6:54:7f:2d:cf:e5: a9:80:b8:35:2c:6f:2d:05:d3:d2:e8:ea:1a:71:89: 46:50:ab:7e:76:70:9e:b1:ca:a2:63:ba:77:3b:5b: bf:81:d2:c2:ac:69:93:30:c9:23:b9:03:3c:d5:52: c4:d3:8d:ab:45:85:3e:0a:c1:64:6f:22:48:8c:11: 9f:a9:24:70:33:44:6d:59:14:41:1a:24:2c:08:bf: fa:5c:28:b7:02:ed:60:74:22:3e:59:6d:7d:c8:60: 2f:50:70:41:b8:78:3d:c2:8d:2d:13:b6:65:16:e1: c4:8e:c4:1d:69:59:eb:27:a6:94:04:27:98:3d:49: f0:b6:17:27:1b:77:47:4a:8e:61:80:3e:1f:b7:c7: 62:8c:75:4d:07:95:b5:58:50:96:7a:2f:24:87:21: 73:87:45:5a:25:93:2c:53:7d:b2:08:83:26:52:da: 76:14:c6:ad:00:f2:dc:2e:cc:d9:a8:21:48:a2:fb: 82:7c:21:9b:fa:1b:4c:16:3a:14:48:d8:ed:85:43: 52:ac:39:30:31:f9:35:a3:aa:4d:44:77:d1:6e:74: 81:5d:0e:83:cb:2a:1b:8e:c1:9f:b7:e0:bb:35:b2: b1:cf:da:a0:fd:2c:00:a7:3c:bf:de:df:cf:1f:a7: 6f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2B:DE:87:14:ED:4D:15:10:07:AD:32:FF:3F:4A:47:E9:65:D0:2E X509v3 Authority Key Identifier: keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a7:5c:12:c8:ab:5c:9f:4b:65:80:0e:1a:4b:81:d0:77:ae: dd:e5:2b:fa:0d:b3:21:e6:0e:05:e9:e5:83:c1:50:17:7d:bc: 66:a8:a8:f7:85:a8:e1:af:64:a9:82:ea:5b:98:13:fb:e7:26: 4d:89:85:ff:7b:f4:c0:98:35:1b:a7:64:f0:f2:90:81:3d:1a: cb:0d:9a:fb:23:08:c4:d4:be:58:e5:5a:cd:dd:b2:a8:4a:b6: 34:38:ff:d2:5c:51:42:01:07:f0:15:df:7a:d3:c1:e6:7f:d8: 71:15:b9:df:83:ce:98:7e:ea:7a:68:f0:3b:cd:c2:7b:07:32: b9:0a:57:71:e7:2a:88:28:30:59:66:b2:2a:35:03:14:35:df: 82:7f:64:17:32:8b:5c:7c:f0:32:6b:18:e4:96:b6:95:d6:bc: 5c:c1:2e:39:ba:49:28:79:e1:ce:27:b5:26:0b:09:ee:34:f5: 9e:7d:89:69:75:db:23:ed:4b:82:8d:fe:d4:73:b2:3e:f5:54: ce:2d:01:e3:7d:52:61:ac:2f:5a:05:f6:c4:e0:db:49:57:cf: 92:ed:c8:28:d3:90:1e:a6:f1:84:77:5b:6a:78:56:d3:05:22: 6c:13:51:0c:2f:96:6f:c6:9e:06:8a:80:03:b5:b7:82:81:7a: c0:73:b9:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOyeTT7X6+vz2hKAH/LalgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0 MGI5ZjEwHhcNMjUxMjExMTkwMTEwWhcNMjUxMjEyMTkwMTEwWjAzMTEwLwYDVQQD EyhmNTJiZGU4NzE0ZWQ0ZDE1MTAwN2FkMzJmZjNmNGE0N2U5NjVkMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvH8fcRlLznmVH8tz+WpgLg1LG8t BdPS6OoacYlGUKt+dnCescqiY7p3O1u/gdLCrGmTMMkjuQM81VLE042rRYU+CsFk byJIjBGfqSRwM0RtWRRBGiQsCL/6XCi3Au1gdCI+WW19yGAvUHBBuHg9wo0tE7Zl FuHEjsQdaVnrJ6aUBCeYPUnwthcnG3dHSo5hgD4ft8dijHVNB5W1WFCWei8khyFz h0VaJZMsU32yCIMmUtp2FMatAPLcLszZqCFIovuCfCGb+htMFjoUSNjthUNSrDkw Mfk1o6pNRHfRbnSBXQ6DyyobjsGft+C7NbKxz9qg/SwApzy/3t/PH6dvWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPUr3ocU7U0VEAetMv8/SkfpZdAuMB8GA1UdIwQY MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKdcEsir XJ9LZYAOGkuB0Heu3eUr+g2zIeYOBenlg8FQF328Zqio94Wo4a9kqYLqW5gT++cm TYmF/3v0wJg1G6dk8PKQgT0ayw2a+yMIxNS+WOVazd2yqEq2NDj/0lxRQgEH8BXf etPB5n/YcRW534POmH7qemjwO83CewcyuQpXcecqiCgwWWayKjUDFDXfgn9kFzKL XHzwMmsY5Ja2lda8XMEuObpJKHnhzie1JgsJ7jT1nn2JaXXbI+1Lgo3+1HOyPvVU zi0B431SYawvWgX2xODbSVfPku3IKNOQHqbxhHdbanhW0wUibBNRDC+Wb8aeBoqA A7W3goF6wHO5vQ== -----END CERTIFICATE-----Generated at Fri Dec 12 02:59:35 2025 by rpki-client