This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: KTUMYbaBevaVpQzWsIuViyt+/5Nh+AxCEzI1H+7145o= Subject key identifier: 91:50:0E:3E:3A:56:1E:E0:D0:DA:FC:D5:42:9D:C5:03:48:96:ED:53 Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019B522A283F6C0DDD96930F92DFA544C221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 1255 Signing time: Wed 24 Dec 2025 21:00:53 +0000 Manifest this update: Wed 24 Dec 2025 21:00:53 +0000 Manifest next update: Thu 25 Dec 2025 21:00:53 +0000 Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: nGo9DYIOkYKkW7XHD9Vf1zRM6HRQRHC2UkvDgCzHAqw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:28:3f:6c:0d:dd:96:93:0f:92:df:a5:44:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Dec 24 21:00:53 2025 GMT Not After : Dec 25 21:00:53 2025 GMT Subject: CN=91500e3e3a561ee0d0dafcd5429dc5034896ed53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:44:8d:20:a9:ae:d2:63:b8:b9:b9:59:d8:b5: 30:2d:5f:2c:38:9d:b4:cf:1f:35:4b:ed:df:8b:97: 5c:25:a9:02:ed:a4:88:15:75:56:8b:cd:26:64:fb: ef:80:ed:cd:81:b2:c1:2a:30:c5:1d:25:2b:87:e3: b7:54:3d:10:8f:2d:80:c7:89:2a:a7:3e:2f:00:c4: e6:9f:6e:bd:de:04:52:7c:6b:e5:70:e5:f0:28:ec: 53:38:61:ba:12:5e:c6:20:5e:8e:6c:d1:cb:6a:c0: b6:d4:19:a5:4d:2d:b5:30:37:ca:fe:53:c9:df:a4: b3:38:ee:89:04:2e:fa:53:44:6d:e6:51:f8:c4:2a: 81:bc:76:e8:89:ff:ce:5d:1f:67:06:66:17:f3:02: 02:28:3e:20:d8:72:3a:c5:09:69:ee:8b:55:71:89: 4c:7d:7c:d2:ee:d8:87:bf:5e:4f:30:e4:09:47:19: 15:7d:60:4c:64:be:5a:f1:3c:1e:78:77:c0:b5:c0: 42:6f:21:b3:06:dc:95:65:62:99:63:fe:e3:15:0f: c5:2d:50:65:e6:14:4a:d2:2d:a5:f3:96:bf:e1:ee: 8b:c1:21:6e:5e:2d:c9:bc:17:4a:3e:f1:00:6a:9d: a5:74:ea:37:90:10:85:d5:56:6f:05:1e:db:a6:4c: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:50:0E:3E:3A:56:1E:E0:D0:DA:FC:D5:42:9D:C5:03:48:96:ED:53 X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:ff:cf:87:c2:8d:c8:08:ef:d2:64:be:8c:12:94:4a:13:92: ff:a2:45:af:6f:03:ee:1c:6f:b9:06:de:90:b4:af:ad:ed:2a: db:c3:c3:1b:62:ee:72:1c:48:64:31:a5:a7:a9:b4:ae:59:9e: e0:ec:23:be:49:27:47:a5:18:0e:bf:a5:43:16:32:60:5c:2e: 98:8d:d8:f1:49:bc:ff:bd:10:d2:4a:8c:94:98:61:ef:be:4d: 0f:9a:92:2a:ed:6b:fa:1f:11:60:c3:4b:19:7e:dc:7a:a1:88: 0c:89:2d:fa:55:9e:52:07:6c:39:1a:70:25:2c:10:4f:c8:bf: cd:bd:3f:4b:72:b0:f0:7f:7b:b2:e3:db:73:a1:59:ab:89:c5: c1:55:bd:2d:59:a9:e7:c6:bf:b5:11:69:d5:b6:eb:e2:87:3d: bd:c6:ff:be:34:1b:34:2c:0a:26:c4:12:72:c0:b2:c6:78:1b: e3:5e:d2:98:22:63:8b:84:5f:69:37:1c:ac:d2:2a:11:74:8e: ae:5a:29:33:02:47:b9:d3:30:cc:ae:da:9f:40:a7:6e:09:0d: 7f:34:2c:fb:0c:2f:73:33:68:df:da:ac:90:fe:3f:84:ff:62: a7:d8:63:5b:b5:ca:17:ee:b8:18:d5:f2:47:16:43:10:da:74: 9d:6d:bb:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKig/bA3dlpMPkt+lRMIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjUxMjI0MjEwMDUzWhcNMjUxMjI1MjEwMDUzWjAzMTEwLwYDVQQD Eyg5MTUwMGUzZTNhNTYxZWUwZDBkYWZjZDU0MjlkYzUwMzQ4OTZlZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0SNIKmu0mO4ublZ2LUwLV8sOJ20 zx81S+3fi5dcJakC7aSIFXVWi80mZPvvgO3NgbLBKjDFHSUrh+O3VD0Qjy2Ax4kq pz4vAMTmn2693gRSfGvlcOXwKOxTOGG6El7GIF6ObNHLasC21BmlTS21MDfK/lPJ 36SzOO6JBC76U0Rt5lH4xCqBvHboif/OXR9nBmYX8wICKD4g2HI6xQlp7otVcYlM fXzS7tiHv15PMOQJRxkVfWBMZL5a8TweeHfAtcBCbyGzBtyVZWKZY/7jFQ/FLVBl 5hRK0i2l85a/4e6LwSFuXi3JvBdKPvEAap2ldOo3kBCF1VZvBR7bpkxlvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFQDj46Vh7g0Nr81UKdxQNIlu1TMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw//Ph8KN yAjv0mS+jBKUShOS/6JFr28D7hxvuQbekLSvre0q28PDG2LuchxIZDGlp6m0rlme 4OwjvkknR6UYDr+lQxYyYFwumI3Y8Um8/70Q0kqMlJhh775ND5qSKu1r+h8RYMNL GX7ceqGIDIkt+lWeUgdsORpwJSwQT8i/zb0/S3Kw8H97suPbc6FZq4nFwVW9LVmp 58a/tRFp1bbr4oc9vcb/vjQbNCwKJsQScsCyxngb417SmCJji4RfaTccrNIqEXSO rlopMwJHudMwzK7an0CnbgkNfzQs+wwvczNo39qskP4/hP9ip9hjW7XKF+64GNXy RxZDENp0nW27Iw== -----END CERTIFICATE-----Generated at Thu Dec 25 03:31:42 2025 by rpki-client