This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft File: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft (raw, json) Hash identifier: CHRpgYL1eVb5MkXEs6UFUiWKB1/jYktcTXMxRGxJHbs= Subject key identifier: DA:8E:9D:03:13:20:45:B4:26:2B:38:69:CD:1F:44:65:FC:C6:F1:F3 Authority key identifier: 78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F Certificate issuer: /CN=78d32c121735449f1538ff0036f4abd0600a825f Certificate serial: 019B70A28BB89E0BD8A06CDB2608D9971073 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft Manifest number: 0348 Signing time: Tue 30 Dec 2025 19:00:59 +0000 Manifest this update: Tue 30 Dec 2025 19:00:59 +0000 Manifest next update: Wed 31 Dec 2025 19:00:59 +0000 Files and hashes: 1: eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl (hash: T8KvzRCdd9034IX2v5sD/iyT+qM6jF1683df6MlCrrQ=) 2: erOw8yxwzHZjyqOqz7yXVVIUAFU.roa (hash: rvkd4LoifdpTzpO7iE/LNVpMhF4v0Ao+04p8plQuFX4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:70:a2:8b:b8:9e:0b:d8:a0:6c:db:26:08:d9:97:10:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d32c121735449f1538ff0036f4abd0600a825f Validity Not Before: Dec 30 19:00:59 2025 GMT Not After : Dec 31 19:00:59 2025 GMT Subject: CN=da8e9d03132045b4262b3869cd1f4465fcc6f1f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:37:ae:46:66:3b:06:23:20:7c:35:d7:14:83: ed:51:58:5b:8d:c1:5f:2e:a3:ab:28:f8:74:a1:22: 7d:b7:25:1c:13:3e:92:dd:82:d9:01:70:2d:fc:1a: 73:c7:80:99:ea:b6:7c:55:cf:3e:6b:2b:53:60:82: bb:58:2d:4d:f2:59:38:a9:b1:ab:dd:4b:8a:e2:c4: e1:35:f0:0f:76:81:f3:30:2b:69:c1:51:61:67:32: 3f:48:a4:74:af:49:81:9d:0b:cd:73:12:b1:5c:0a: a7:ec:5d:2f:a8:8c:e7:4c:0e:58:6c:7c:0e:54:7c: e2:b6:78:eb:bd:3f:57:45:10:eb:e3:3c:d6:4b:6a: 15:22:99:58:c9:00:98:03:44:00:35:54:31:8b:f6: b2:c7:04:a5:64:30:61:33:ea:ab:46:e4:3b:47:92: 25:7f:d4:e7:f9:be:52:8f:2a:98:9a:6c:90:39:2d: a4:99:0a:85:cd:ac:43:1d:e8:74:30:7d:ef:d2:e8: 84:4b:1d:26:06:c9:b1:27:30:f1:57:97:04:09:35: 95:fb:ce:21:fd:f2:1c:60:1c:26:0c:c1:f5:16:2c: 5f:47:02:17:d5:4d:b2:0c:a5:01:e9:13:de:58:77: be:f5:d1:d8:6a:89:a5:33:b0:69:9c:ce:28:7c:05: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8E:9D:03:13:20:45:B4:26:2B:38:69:CD:1F:44:65:FC:C6:F1:F3 X509v3 Authority Key Identifier: keyid:78:D3:2C:12:17:35:44:9F:15:38:FF:00:36:F4:AB:D0:60:0A:82:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/5c4b13-86cd-4c53-8a95-34a3aa0b6aa0/1/eNMsEhc1RJ8VOP8ANvSr0GAKgl8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:c7:af:30:c2:83:2f:c6:1a:f9:62:89:4d:95:93:69:2c:da: b3:bf:e1:2a:ae:2e:b2:44:b3:ac:48:24:ce:24:f7:b0:31:52: 93:f8:45:11:77:c6:eb:bb:73:ef:ef:2a:7d:eb:0e:ad:73:26: 99:1e:a6:8a:ef:7b:76:6f:46:0b:2c:ce:2b:80:9e:36:a4:f7: 47:6a:e4:cf:d1:02:30:26:7e:f6:b8:52:51:69:ad:bd:9b:a1: 89:12:fd:cf:c9:2a:e9:5a:78:7b:51:6f:f1:6d:5f:67:d3:c8: 30:41:e1:90:c8:9e:ac:6d:35:a4:93:65:48:f9:0c:5c:75:71: cb:bd:ac:73:43:8d:7d:43:da:70:93:8f:f4:21:4b:c3:ce:c0: 2a:1b:d0:3f:56:6d:c6:1c:b6:d0:70:c5:51:1d:c5:a3:e6:0d: 39:76:b3:cb:dc:2b:0c:52:5a:86:5b:64:4c:9f:29:98:c6:af: d3:09:a5:77:37:10:0d:85:c2:90:0b:9f:38:ff:e8:76:6b:ac: 72:36:8c:03:86:dd:27:2e:43:98:d8:8e:61:5e:7c:9b:fb:c7: b4:52:ab:1f:65:70:e4:a0:6f:4f:ce:00:ec:29:33:10:1a:86: 22:be:f7:4d:11:1c:0a:9c:b1:6f:6a:03:ac:77:42:4b:21:dc: 43:79:13:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtwoou4ngvYoGzbJgjZlxBzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDMyYzEyMTczNTQ0OWYxNTM4ZmYwMDM2ZjRhYmQwNjAw YTgyNWYwHhcNMjUxMjMwMTkwMDU5WhcNMjUxMjMxMTkwMDU5WjAzMTEwLwYDVQQD EyhkYThlOWQwMzEzMjA0NWI0MjYyYjM4NjljZDFmNDQ2NWZjYzZmMWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDeuRmY7BiMgfDXXFIPtUVhbjcFf LqOrKPh0oSJ9tyUcEz6S3YLZAXAt/Bpzx4CZ6rZ8Vc8+aytTYIK7WC1N8lk4qbGr 3UuK4sThNfAPdoHzMCtpwVFhZzI/SKR0r0mBnQvNcxKxXAqn7F0vqIznTA5YbHwO VHzitnjrvT9XRRDr4zzWS2oVIplYyQCYA0QANVQxi/ayxwSlZDBhM+qrRuQ7R5Il f9Tn+b5SjyqYmmyQOS2kmQqFzaxDHeh0MH3v0uiESx0mBsmxJzDxV5cECTWV+84h /fIcYBwmDMH1FixfRwIX1U2yDKUB6RPeWHe+9dHYaomlM7BpnM4ofAWBGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNqOnQMTIEW0Jis4ac0fRGX8xvHzMB8GA1UdIwQY MBaAFHjTLBIXNUSfFTj/ADb0q9BgCoJfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUt MzRhM2FhMGI2YWEwLzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi81YzRiMTMtODZjZC00YzUzLThhOTUtMzRhM2FhMGI2YWEw LzEvZU5Nc0VoYzFSSjhWT1A4QU52U3IwR0FLZ2w4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjMevMMKD L8Ya+WKJTZWTaSzas7/hKq4uskSzrEgkziT3sDFSk/hFEXfG67tz7+8qfesOrXMm mR6miu97dm9GCyzOK4CeNqT3R2rkz9ECMCZ+9rhSUWmtvZuhiRL9z8kq6Vp4e1Fv 8W1fZ9PIMEHhkMierG01pJNlSPkMXHVxy72sc0ONfUPacJOP9CFLw87AKhvQP1Zt xhy20HDFUR3Fo+YNOXazy9wrDFJahltkTJ8pmMav0wmldzcQDYXCkAufOP/odmus cjaMA4bdJy5DmNiOYV58m/vHtFKrH2Vw5KBvT84A7CkzEBqGIr73TREcCpyxb2oD rHdCSyHcQ3kTRA== -----END CERTIFICATE-----Generated at Wed Dec 31 03:27:21 2025 by rpki-client