This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft File: eY1wE6f9u1Zj_ThKT-0SMDFF484.mft (raw, json) Hash identifier: cwnn0r3o0EfpOYJtOdjg/KiQpc6ljtLvAr3lVysRiTM= Subject key identifier: 61:B5:66:BF:37:7D:DB:B6:F6:B4:73:8C:EB:69:74:9A:E5:A1:AD:0A Authority key identifier: 79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE Certificate issuer: /CN=798d7013a7fdbb5663fd384a4fed12303145e3ce Certificate serial: 019B55D0112BC8AC4B2D419F88752D31B3A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft Manifest number: 12BF Signing time: Thu 25 Dec 2025 14:00:57 +0000 Manifest this update: Thu 25 Dec 2025 14:00:57 +0000 Manifest next update: Fri 26 Dec 2025 14:00:57 +0000 Files and hashes: 1: eY1wE6f9u1Zj_ThKT-0SMDFF484.crl (hash: hI+Xv9GT62lBc7W2czqtUir6DJotvWAQRZx+fTzn/68=) 2: rCglPn4knwgWeE7oLxm6sX7WFlI.roa (hash: wKFZrWQvHUIDP0fnVkeuzqCpYiJl4+aOfjYBOGOYUoQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:d0:11:2b:c8:ac:4b:2d:41:9f:88:75:2d:31:b3:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=798d7013a7fdbb5663fd384a4fed12303145e3ce Validity Not Before: Dec 25 14:00:57 2025 GMT Not After : Dec 26 14:00:57 2025 GMT Subject: CN=61b566bf377ddbb6f6b4738ceb69749ae5a1ad0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:fb:71:b8:02:75:68:4f:a6:0d:ad:bc:58:4e: b7:a4:d2:f7:f7:97:21:64:12:79:2e:78:6c:db:35: 19:df:a4:29:91:f2:bd:d1:21:cb:3a:3d:13:c3:6f: 90:87:2c:3d:bd:5c:3b:8e:18:1d:32:02:b8:8e:52: 13:2c:08:ce:23:44:93:f4:7d:cb:9d:71:e4:ac:ea: 13:58:89:a1:09:12:f8:b7:ff:aa:d3:8b:84:40:9f: 7e:a1:c9:19:92:61:18:15:9c:b3:84:e6:c8:45:49: 3c:88:45:8f:32:18:24:6d:53:f8:0c:c4:33:aa:76: 69:1c:7e:13:12:13:b6:b6:a0:72:99:61:9e:24:54: 2d:e2:95:9d:53:78:b0:c8:81:91:58:7d:c8:a1:99: 96:21:91:04:dd:ad:ec:27:c0:3d:8e:89:dc:93:ee: 99:19:25:5d:ac:db:d3:ea:e7:84:c4:93:98:f9:71: 14:f3:cb:58:71:27:07:6d:e7:a5:a1:7f:11:49:eb: fc:51:6f:4c:d2:a4:a6:41:89:95:2a:7c:40:c3:49: 5d:14:94:11:bc:4c:0d:88:c8:e4:85:fc:35:34:7d: 5c:8d:59:8c:3c:a1:a2:9b:dd:6d:21:1d:07:5b:f3: 08:0b:01:9a:46:93:dd:3c:99:7e:eb:5e:8e:e9:c6: de:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B5:66:BF:37:7D:DB:B6:F6:B4:73:8C:EB:69:74:9A:E5:A1:AD:0A X509v3 Authority Key Identifier: keyid:79:8D:70:13:A7:FD:BB:56:63:FD:38:4A:4F:ED:12:30:31:45:E3:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY1wE6f9u1Zj_ThKT-0SMDFF484.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/67a4ce-b8ba-4562-9a37-24d818ba7f29/1/eY1wE6f9u1Zj_ThKT-0SMDFF484.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:85:0d:56:82:f0:df:c7:1a:e1:a6:37:ec:e2:ed:1c:81:8f: bc:5b:21:ec:d1:b6:4a:50:b7:23:54:04:dc:8d:1b:f2:19:cf: ce:76:34:15:d9:1b:e3:b9:d9:fa:d0:72:60:9c:07:71:c9:c1: 17:34:3b:9b:c3:d5:1b:48:69:45:cf:bc:a5:ef:e5:c4:a4:45: cc:83:08:54:54:ce:35:de:c0:bd:5e:51:40:38:97:d5:67:38: c1:52:3b:08:25:e7:0d:dd:a5:48:d5:af:bc:03:bf:19:30:78: c2:3d:9f:79:a8:0d:6a:e4:c8:1b:3a:bf:c5:74:27:e8:ca:8b: 5d:7c:cb:b0:06:c2:50:19:b6:ae:19:0f:68:80:93:1b:d6:8a: 65:e4:ae:96:db:35:3a:7b:62:e6:98:d8:53:4a:79:a1:f6:34: 89:52:cd:6e:38:80:21:32:ce:66:28:3d:07:6c:6b:3e:3c:a7: 63:19:3a:6f:76:0e:c8:f2:91:7a:12:5b:3e:07:d1:3b:c5:e6: 3b:6f:b9:9b:58:c8:55:42:fe:2a:f0:67:1d:3a:c9:6c:91:cf: 41:a9:32:35:f8:48:be:d3:5f:08:ef:cf:be:10:65:d4:ad:a4: 8f:33:be:a5:94:98:ed:b7:94:06:20:e7:fb:a9:24:3b:b6:9a: ea:22:bb:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtV0BEryKxLLUGfiHUtMbOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5OGQ3MDEzYTdmZGJiNTY2M2ZkMzg0YTRmZWQxMjMwMzE0 NWUzY2UwHhcNMjUxMjI1MTQwMDU3WhcNMjUxMjI2MTQwMDU3WjAzMTEwLwYDVQQD Eyg2MWI1NjZiZjM3N2RkYmI2ZjZiNDczOGNlYjY5NzQ5YWU1YTFhZDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlftxuAJ1aE+mDa28WE63pNL395ch ZBJ5Lnhs2zUZ36QpkfK90SHLOj0Tw2+Qhyw9vVw7jhgdMgK4jlITLAjOI0ST9H3L nXHkrOoTWImhCRL4t/+q04uEQJ9+ockZkmEYFZyzhObIRUk8iEWPMhgkbVP4DMQz qnZpHH4TEhO2tqBymWGeJFQt4pWdU3iwyIGRWH3IoZmWIZEE3a3sJ8A9jonck+6Z GSVdrNvT6ueExJOY+XEU88tYcScHbeeloX8RSev8UW9M0qSmQYmVKnxAw0ldFJQR vEwNiMjkhfw1NH1cjVmMPKGim91tIR0HW/MICwGaRpPdPJl+616O6cbeNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGG1Zr83fdu29rRzjOtpdJrloa0KMB8GA1UdIwQY MBaAFHmNcBOn/btWY/04Sk/tEjAxRePOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzct MjRkODE4YmE3ZjI5LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82N2E0Y2UtYjhiYS00NTYyLTlhMzctMjRkODE4YmE3ZjI5 LzEvZVkxd0U2Zjl1MVpqX1RoS1QtMFNNREZGNDg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiYUNVoLw 38ca4aY37OLtHIGPvFsh7NG2SlC3I1QE3I0b8hnPznY0Fdkb47nZ+tByYJwHccnB FzQ7m8PVG0hpRc+8pe/lxKRFzIMIVFTONd7AvV5RQDiX1Wc4wVI7CCXnDd2lSNWv vAO/GTB4wj2feagNauTIGzq/xXQn6MqLXXzLsAbCUBm2rhkPaICTG9aKZeSults1 Onti5pjYU0p5ofY0iVLNbjiAITLOZig9B2xrPjynYxk6b3YOyPKRehJbPgfRO8Xm O2+5m1jIVUL+KvBnHTrJbJHPQakyNfhIvtNfCO/PvhBl1K2kjzO+pZSY7beUBiDn +6kkO7aa6iK7fA== -----END CERTIFICATE-----Generated at Thu Dec 25 15:41:59 2025 by rpki-client