This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft File: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft (raw, json) Hash identifier: Br19fmf7WIIVGpuUcoeZj7CioGTPtI+SrptWGgcJVi4= Subject key identifier: 95:E1:25:A0:76:28:43:B7:D0:9C:F9:57:E2:D5:17:A0:B6:9C:1E:7F Authority key identifier: 78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8 Certificate issuer: /CN=78024d480b37705fa0091b5774174e80fdd8add8 Certificate serial: 019B4F29730463117EF31B4891B4B937815A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft Manifest number: 107E Signing time: Wed 24 Dec 2025 07:01:14 +0000 Manifest this update: Wed 24 Dec 2025 07:01:14 +0000 Manifest next update: Thu 25 Dec 2025 07:01:14 +0000 Files and hashes: 1: 7zyHfGLCt61eCife6uW0qcGV8aQ.roa (hash: Obf5nHalQ5b5PGXQ7xcaKDODktDmBaiUg7460b0pjaA=) 2: eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl (hash: CKVZ+bb8wmGS67EgauiIhvwPpZzSTtRLATlbcx7mnK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 07:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:29:73:04:63:11:7e:f3:1b:48:91:b4:b9:37:81:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78024d480b37705fa0091b5774174e80fdd8add8 Validity Not Before: Dec 24 07:01:14 2025 GMT Not After : Dec 25 07:01:14 2025 GMT Subject: CN=95e125a0762843b7d09cf957e2d517a0b69c1e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:15:b2:d0:3c:79:ee:11:3a:f6:df:86:5a:e9: 2a:e0:5e:bc:54:aa:a6:95:6d:7d:8b:9a:0e:ca:3a: ea:99:2c:6b:b8:2a:e4:72:ef:5e:88:9f:de:d3:ed: ca:07:82:3d:59:6b:e1:c4:4c:65:ba:c7:7f:7c:a2: fb:9c:6c:bd:3e:cc:0b:ff:00:69:66:46:ee:f5:ce: 94:dc:90:99:a4:96:74:c7:4e:ec:8a:fe:e8:85:73: e8:9a:0e:c1:16:4b:fb:b7:50:f6:97:ef:ed:64:e8: 99:03:00:5a:38:6b:37:75:d4:e9:82:e7:fe:e3:86: 5a:0c:d0:fb:8d:5c:cc:ab:dd:e9:5e:b1:76:df:2e: dc:fc:d2:c5:16:97:9f:bf:3c:7a:1f:e5:e5:83:f5: 0f:d6:ec:33:94:e9:7b:a6:db:31:11:75:38:70:3f: 30:19:06:6c:d2:6c:bb:b6:be:00:e2:22:03:a9:f6: 55:25:d4:c7:e3:1e:fb:88:01:c2:98:06:c5:ae:3d: 92:bc:cb:fd:18:e4:11:7b:f3:33:6d:d0:c9:59:a5: d2:b8:59:c2:52:6c:f0:e9:f4:1d:e0:8a:41:92:0e: 4b:db:66:c1:d3:49:84:f5:0f:a9:3e:cb:9e:53:5e: 31:a2:5d:1a:95:2d:94:c9:4b:90:b5:3b:fe:53:53: e7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E1:25:A0:76:28:43:B7:D0:9C:F9:57:E2:D5:17:A0:B6:9C:1E:7F X509v3 Authority Key Identifier: keyid:78:02:4D:48:0B:37:70:5F:A0:09:1B:57:74:17:4E:80:FD:D8:AD:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/7ffcb3-357f-436d-8ae3-009477e84a86/1/eAJNSAs3cF-gCRtXdBdOgP3Yrdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:12:95:2b:f9:09:d8:81:9a:81:5b:e4:5a:c6:35:db:02:55: 84:24:eb:3f:7c:49:f2:ec:9a:8b:6c:5d:e3:82:7c:2e:16:35: 4b:4d:f6:74:1d:87:f9:c8:3a:bc:2d:1c:48:06:30:c3:7b:04: d3:4c:9c:14:90:5f:bd:3b:a3:4e:ef:03:4c:56:23:a1:59:e9: b9:70:55:4c:49:61:fa:5e:55:e8:53:04:b8:1b:58:2c:93:b5: 0b:b7:08:19:14:ce:67:a6:36:9b:cb:07:bc:1e:1e:52:c4:74: a2:ce:a8:e4:af:1e:cd:85:06:ea:e1:86:83:6d:20:b6:e4:3c: 0d:96:84:26:e0:48:d0:1c:e5:db:e1:72:7c:bf:a1:fa:49:7f: 3d:53:54:88:31:78:57:bf:d4:b6:ce:23:7f:47:2d:7c:74:86: 4e:21:f1:aa:e3:7e:ae:a0:8a:b4:04:ef:a7:e0:1e:1e:7c:07: 2f:7e:49:aa:5b:20:a5:99:86:c2:e8:31:40:d1:ad:3f:6a:ec: c1:02:5d:69:00:fe:41:ac:19:cf:03:8e:a6:3b:48:36:ab:b1: 66:53:29:5b:31:5c:70:5e:b4:cb:a5:04:63:c1:02:c5:8c:99: 0b:13:ea:37:62:60:ab:95:b0:5d:5c:84:42:73:7b:43:98:1e: f3:04:a8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPKXMEYxF+8xtIkbS5N4FaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MDI0ZDQ4MGIzNzcwNWZhMDA5MWI1Nzc0MTc0ZTgwZmRk OGFkZDgwHhcNMjUxMjI0MDcwMTE0WhcNMjUxMjI1MDcwMTE0WjAzMTEwLwYDVQQD Eyg5NWUxMjVhMDc2Mjg0M2I3ZDA5Y2Y5NTdlMmQ1MTdhMGI2OWMxZTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RWy0Dx57hE69t+GWukq4F68VKqm lW19i5oOyjrqmSxruCrkcu9eiJ/e0+3KB4I9WWvhxExlusd/fKL7nGy9PswL/wBp Zkbu9c6U3JCZpJZ0x07siv7ohXPomg7BFkv7t1D2l+/tZOiZAwBaOGs3ddTpguf+ 44ZaDND7jVzMq93pXrF23y7c/NLFFpefvzx6H+Xlg/UP1uwzlOl7ptsxEXU4cD8w GQZs0my7tr4A4iIDqfZVJdTH4x77iAHCmAbFrj2SvMv9GOQRe/MzbdDJWaXSuFnC Umzw6fQd4IpBkg5L22bB00mE9Q+pPsueU14xol0alS2UyUuQtTv+U1PnMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXhJaB2KEO30Jz5V+LVF6C2nB5/MB8GA1UdIwQY MBaAFHgCTUgLN3BfoAkbV3QXToD92K3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMt MDA5NDc3ZTg0YTg2LzEvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi83ZmZjYjMtMzU3Zi00MzZkLThhZTMtMDA5NDc3ZTg0YTg2 LzEvZUFKTlNBczNjRi1nQ1J0WGRCZE9nUDNZcmRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhxKVK/kJ 2IGagVvkWsY12wJVhCTrP3xJ8uyai2xd44J8LhY1S032dB2H+cg6vC0cSAYww3sE 00ycFJBfvTujTu8DTFYjoVnpuXBVTElh+l5V6FMEuBtYLJO1C7cIGRTOZ6Y2m8sH vB4eUsR0os6o5K8ezYUG6uGGg20gtuQ8DZaEJuBI0Bzl2+FyfL+h+kl/PVNUiDF4 V7/Uts4jf0ctfHSGTiHxquN+rqCKtATvp+AeHnwHL35JqlsgpZmGwugxQNGtP2rs wQJdaQD+QawZzwOOpjtINquxZlMpWzFccF60y6UEY8ECxYyZCxPqN2Jgq5WwXVyE QnN7Q5ge8wSoTQ== -----END CERTIFICATE-----Generated at Wed Dec 24 12:29:02 2025 by rpki-client