This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: +kKvBX1GLpy3r0G1vIzIK7Ep/Bbnj4NwMSFb3FlgRB0= Subject key identifier: 09:96:54:2F:93:78:23:DA:82:97:74:17:CF:FA:F0:B4:DD:DB:31:52 Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019B33441C44BC1CFF3F0E42AA47019CCB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 1245 Signing time: Thu 18 Dec 2025 21:01:00 +0000 Manifest this update: Thu 18 Dec 2025 21:01:00 +0000 Manifest next update: Fri 19 Dec 2025 21:01:00 +0000 Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: 5U5+z9gtc1D0OKsLYd1BSjsCYQl8q5yFynbjIaIfGTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 20:16:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:1c:44:bc:1c:ff:3f:0e:42:aa:47:01:9c:cb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Dec 18 21:01:00 2025 GMT Not After : Dec 19 21:01:00 2025 GMT Subject: CN=0996542f937823da82977417cffaf0b4dddb3152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9c:fc:5f:fe:75:af:af:5e:00:6a:92:9b:74: 55:44:5a:ce:75:45:3c:f4:37:cc:a6:d5:a6:18:eb: 29:3f:97:2f:68:3c:60:6e:0b:82:a6:65:7e:db:54: 35:bd:7a:3d:c3:90:9a:06:f4:4e:b2:cb:d1:a1:da: 54:0b:49:eb:ce:fa:74:f5:38:56:da:90:5c:76:70: e2:c5:88:db:aa:ec:55:72:38:e5:1c:5e:38:f2:71: bc:1e:37:b0:ff:9f:e8:ff:21:c0:1c:8b:33:63:6f: 0d:27:91:81:25:5c:78:49:0a:25:10:bc:db:98:5b: a7:03:4c:8f:67:6a:af:bf:9e:4e:53:a4:b6:6d:91: d3:9f:ff:e9:51:b6:6d:32:6b:52:8c:e2:1f:13:b0: 07:4a:1b:45:85:2c:17:d2:ec:c0:e7:b2:08:70:d8: 2a:0f:77:bb:5e:51:76:a6:a1:be:09:dd:3a:40:c0: 1f:2b:e7:ad:33:b4:55:22:76:e9:95:86:a8:6c:d3: 23:da:94:87:4f:13:c0:88:d2:f6:85:52:0d:0d:ea: 79:b9:0d:52:57:ce:82:1c:cc:70:fd:bc:f6:34:da: 5b:d5:b1:38:ba:05:cc:14:de:a5:24:ac:48:b3:1b: 65:a2:04:8b:4a:2a:be:65:b4:bd:2a:4d:5e:c3:6e: e3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:96:54:2F:93:78:23:DA:82:97:74:17:CF:FA:F0:B4:DD:DB:31:52 X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:73:b4:8e:19:54:3c:da:82:29:5e:76:c1:b2:6a:3b:c0:7b: 97:b7:f8:f1:bf:11:cc:c2:a5:e3:31:32:43:b3:d7:01:12:6b: 4a:cd:29:4e:0c:bb:e4:76:cd:4e:a8:57:f0:92:5a:75:9b:d8: 4d:78:dd:fe:e9:e3:2e:5f:30:a7:bb:a2:37:d1:a7:71:87:3e: b2:39:9b:b4:9d:68:1b:60:b3:84:2c:61:e0:86:af:6c:f4:c5: ae:e1:d8:88:70:39:3b:cb:34:a5:86:13:c9:25:df:b2:6f:c5: 90:9f:c6:fa:9f:66:27:7c:29:14:2d:f8:10:36:89:a5:29:d7: 93:80:0f:47:63:a2:9f:0d:5f:5c:66:72:84:6d:e3:50:95:c8: 09:3f:dd:9a:a1:7c:90:4a:f6:7d:14:a2:ff:5f:4f:c0:ae:b8: 35:ae:e4:aa:91:6e:4c:ca:81:5f:5d:89:03:36:37:e0:f4:ae: ec:b7:77:97:8b:b1:f5:ab:ab:8d:de:3a:c1:7d:e0:db:57:b4: 2f:38:72:fe:34:89:ca:93:e2:97:75:1b:1f:bc:c3:70:5f:57: 60:3e:2e:82:38:34:8c:34:b6:ce:e5:46:a6:aa:b3:52:ae:70: 16:d5:ee:d9:ae:c5:c8:b4:48:47:15:c6:20:92:88:c5:d3:be: b3:3d:2e:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRBxEvBz/Pw5CqkcBnMtRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjUxMjE4MjEwMTAwWhcNMjUxMjE5MjEwMTAwWjAzMTEwLwYDVQQD EygwOTk2NTQyZjkzNzgyM2RhODI5Nzc0MTdjZmZhZjBiNGRkZGIzMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Zz8X/51r69eAGqSm3RVRFrOdUU8 9DfMptWmGOspP5cvaDxgbguCpmV+21Q1vXo9w5CaBvROssvRodpUC0nrzvp09ThW 2pBcdnDixYjbquxVcjjlHF448nG8Hjew/5/o/yHAHIszY28NJ5GBJVx4SQolELzb mFunA0yPZ2qvv55OU6S2bZHTn//pUbZtMmtSjOIfE7AHShtFhSwX0uzA57IIcNgq D3e7XlF2pqG+Cd06QMAfK+etM7RVInbplYaobNMj2pSHTxPAiNL2hVINDep5uQ1S V86CHMxw/bz2NNpb1bE4ugXMFN6lJKxIsxtlogSLSiq+ZbS9Kk1ew27jHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmWVC+TeCPagpd0F8/68LTd2zFSMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2XO0jhlU PNqCKV52wbJqO8B7l7f48b8RzMKl4zEyQ7PXARJrSs0pTgy75HbNTqhX8JJadZvY TXjd/unjLl8wp7uiN9GncYc+sjmbtJ1oG2CzhCxh4IavbPTFruHYiHA5O8s0pYYT ySXfsm/FkJ/G+p9mJ3wpFC34EDaJpSnXk4APR2Oinw1fXGZyhG3jUJXICT/dmqF8 kEr2fRSi/19PwK64Na7kqpFuTMqBX12JAzY34PSu7Ld3l4ux9aurjd46wX3g21e0 Lzhy/jSJypPil3UbH7zDcF9XYD4ugjg0jDS2zuVGpqqzUq5wFtXu2a7FyLRIRxXG IJKIxdO+sz0uYA== -----END CERTIFICATE-----Generated at Fri Dec 19 00:15:59 2025 by rpki-client