This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: e3Vjm0RHWAyvxzmQPzB23UG+8QFMlxVUem/so4PNvU0= Subject key identifier: 3A:B6:B6:BF:D6:14:F4:95:C3:17:4C:8D:BD:58:BC:64:96:0F:E3:6E Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019B657A12E1FAFCBDA7782164E5D9EF3A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 125F Signing time: Sun 28 Dec 2025 15:00:57 +0000 Manifest this update: Sun 28 Dec 2025 15:00:57 +0000 Manifest next update: Mon 29 Dec 2025 15:00:57 +0000 Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: mnCBPAa2YC4ab5E9LHn8kCJSFybavAJr5EvhmBH4C1k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:7a:12:e1:fa:fc:bd:a7:78:21:64:e5:d9:ef:3a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Dec 28 15:00:57 2025 GMT Not After : Dec 29 15:00:57 2025 GMT Subject: CN=3ab6b6bfd614f495c3174c8dbd58bc64960fe36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:50:54:ed:fc:49:03:36:80:5c:47:4d:ed: 92:47:ed:c0:14:ad:16:8f:10:02:3d:b3:2a:a4:7a: 43:ec:30:31:b5:b0:59:5c:c2:93:3e:62:6d:b3:fc: 66:c5:d2:bd:20:84:10:39:ed:71:e3:a7:32:b2:82: c2:03:41:29:5b:ff:82:d5:17:70:89:d3:bd:01:ef: 46:09:37:80:c2:9b:3f:93:1b:50:87:cd:49:f6:51: e0:c8:d2:3d:14:cd:ce:a5:77:06:9c:77:8e:90:f6: a3:3c:d8:05:13:6f:1f:ae:2a:66:6d:31:b1:2d:1b: a0:12:0f:fe:6a:8a:5d:5c:52:92:29:f2:72:8d:11: ea:5e:51:1d:20:10:45:78:06:1b:eb:bb:49:68:98: 03:e4:5e:d3:8c:29:f3:f0:53:82:6e:a4:ed:ca:a2: 9c:12:bb:3b:0a:c8:db:44:c7:e3:bb:b0:27:26:7f: 5f:2a:07:66:ea:1f:d5:9b:28:67:2f:71:89:ea:46: 7c:2c:e4:45:c1:c5:66:26:c7:bf:96:7f:df:b5:30: 69:1d:3a:45:c3:3b:4d:49:cc:a1:89:ba:21:b2:2d: b1:e1:a4:65:63:66:25:72:52:25:53:35:4e:dc:09: b2:df:88:05:ed:b5:1d:e0:c6:a0:ea:2f:eb:15:06: 19:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B6:B6:BF:D6:14:F4:95:C3:17:4C:8D:BD:58:BC:64:96:0F:E3:6E X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f1:6a:6f:92:d2:fa:ee:41:c6:05:74:de:2c:50:7e:75:39: 65:a4:76:86:a7:ec:3a:a2:e1:3b:42:55:d8:c1:cd:29:9f:b6: 92:b9:1d:19:b7:3f:61:a9:2e:94:60:da:c5:5d:f5:a5:c0:66: 6c:dd:00:f3:77:00:90:14:a2:1d:5f:64:b8:5d:11:b1:d6:d4: a2:26:fb:9f:98:97:37:d3:0e:b7:b0:b5:b2:0b:7e:49:8e:6e: b2:48:e2:35:30:46:45:9b:b8:61:36:e5:58:12:e6:fd:c0:c1: b8:d2:dd:49:1e:ad:33:58:c0:70:69:01:c3:91:57:e1:c5:cc: 49:c0:09:51:42:42:2e:2e:5a:cb:28:e7:c4:1c:43:d7:1e:cc: 79:1f:49:9c:c5:64:11:62:92:99:ac:35:f3:9b:e5:9c:8b:45: 0e:04:31:02:29:a3:40:46:a0:9c:02:a2:74:ec:f6:1b:76:5f: 52:12:94:df:21:4b:a5:5b:62:99:8f:24:5c:48:10:90:50:44: 6f:91:59:6c:cf:81:3f:b8:3d:84:3e:65:d1:62:e5:dd:57:0a: 89:e4:d6:32:94:a8:5a:20:f9:92:27:b4:d7:0f:0d:ee:99:3b: 65:d2:0a:ed:6f:b5:2e:37:54:9a:6d:97:22:e7:59:fd:9c:d0: 80:59:4d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlehLh+vy9p3ghZOXZ7zqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjUxMjI4MTUwMDU3WhcNMjUxMjI5MTUwMDU3WjAzMTEwLwYDVQQD EygzYWI2YjZiZmQ2MTRmNDk1YzMxNzRjOGRiZDU4YmM2NDk2MGZlMzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlQVO38SQM2gFxHTe2SR+3AFK0W jxACPbMqpHpD7DAxtbBZXMKTPmJts/xmxdK9IIQQOe1x46cysoLCA0EpW/+C1Rdw idO9Ae9GCTeAwps/kxtQh81J9lHgyNI9FM3OpXcGnHeOkPajPNgFE28fripmbTGx LRugEg/+aopdXFKSKfJyjRHqXlEdIBBFeAYb67tJaJgD5F7TjCnz8FOCbqTtyqKc Ers7CsjbRMfju7AnJn9fKgdm6h/VmyhnL3GJ6kZ8LORFwcVmJse/ln/ftTBpHTpF wztNScyhibohsi2x4aRlY2YlclIlUzVO3Amy34gF7bUd4Mag6i/rFQYZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq2tr/WFPSVwxdMjb1YvGSWD+NuMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevFqb5LS +u5BxgV03ixQfnU5ZaR2hqfsOqLhO0JV2MHNKZ+2krkdGbc/YakulGDaxV31pcBm bN0A83cAkBSiHV9kuF0RsdbUoib7n5iXN9MOt7C1sgt+SY5uskjiNTBGRZu4YTbl WBLm/cDBuNLdSR6tM1jAcGkBw5FX4cXMScAJUUJCLi5ayyjnxBxD1x7MeR9JnMVk EWKSmaw185vlnItFDgQxAimjQEagnAKidOz2G3ZfUhKU3yFLpVtimY8kXEgQkFBE b5FZbM+BP7g9hD5l0WLl3VcKieTWMpSoWiD5kie01w8N7pk7ZdIK7W+1LjdUmm2X IudZ/ZzQgFlNHQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:52:36 2025 by rpki-client