This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft File: eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft (raw, json) Hash identifier: t3N0zbFZVICwBHywZpCXh4zxTYx4ozIj5Qo+WUbIGEI= Subject key identifier: 91:B0:47:A7:1B:F7:15:EB:06:CD:14:2C:DC:95:38:1E:01:00:54:33 Authority key identifier: 78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED Certificate issuer: /CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed Certificate serial: 019B3E6CE4CDD1660681118F2A2AF41B1663 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 01:01:22 +0000 Manifest this update: Sun 21 Dec 2025 01:01:22 +0000 Manifest next update: Mon 22 Dec 2025 01:01:22 +0000 Files and hashes: 1: NcVmbBEUQZYA1mNrc4VF2mAiUSk.roa (hash: jeQ6CR9o4kjg+lITTYhPycLMezjSSuHW+WQ2edSSAyQ=) 2: eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl (hash: paM5Yj4tcnzKCN1UPYZve9dqZT9lVohJEAx6l5aPqc8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:e4:cd:d1:66:06:81:11:8f:2a:2a:f4:1b:16:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=786ee09fe5437ccd0bcbecfaa970de31ec9d86ed Validity Not Before: Dec 21 01:01:22 2025 GMT Not After : Dec 22 01:01:22 2025 GMT Subject: CN=91b047a71bf715eb06cd142cdc95381e01005433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:09:c6:23:d0:c8:88:9e:51:34:6f:67:5b:80: 28:79:88:92:7c:fc:4d:b7:f6:08:a8:bc:d7:16:26: f2:d8:32:12:9f:cc:09:e3:3e:0d:dc:e4:00:a2:6b: b6:56:f4:42:f2:77:bd:8f:01:74:4f:87:ff:07:0d: 4d:c1:18:7e:e2:bf:1a:96:e6:96:c4:16:a1:89:5e: 00:e0:67:38:95:fb:fd:33:60:9f:a7:62:e0:65:bb: 29:f8:3b:c9:07:40:49:f9:15:22:db:f1:8d:d6:95: 49:a1:52:35:af:af:80:b0:d4:88:74:04:9f:26:c1: 34:17:ac:d0:73:fa:cc:57:0f:95:69:69:70:55:a8: d9:ae:ac:fc:a4:67:29:74:06:fe:d3:02:21:d7:de: 15:8c:5c:20:7b:e6:58:75:ec:30:33:49:6a:55:d1: 4a:7f:ba:8c:74:79:72:53:f0:c8:65:b7:cd:cb:ae: 55:c2:00:ec:dc:85:5e:57:e9:3b:8d:8f:c7:9e:7c: 89:e0:ca:b5:c5:d8:26:a3:1f:2b:34:f7:cb:e1:00: 8e:2e:e5:84:e8:8b:06:22:19:b0:15:7d:a4:65:d2: 33:cb:b5:8e:26:1d:25:5d:52:a2:47:ca:6a:1e:7f: 1f:a9:44:13:f4:ad:ea:92:97:33:cb:ee:6d:4a:24: 6a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B0:47:A7:1B:F7:15:EB:06:CD:14:2C:DC:95:38:1E:01:00:54:33 X509v3 Authority Key Identifier: keyid:78:6E:E0:9F:E5:43:7C:CD:0B:CB:EC:FA:A9:70:DE:31:EC:9D:86:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eG7gn-VDfM0Ly-z6qXDeMeydhu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/aa443e-2d40-4dfc-ac4d-4509d228fc6f/1/eG7gn-VDfM0Ly-z6qXDeMeydhu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:93:2e:91:db:1b:45:b4:4e:d5:a2:a0:d9:8f:f7:bd:ef:2a: 00:c6:5b:b3:00:79:0c:3e:b9:24:68:30:63:75:2f:c3:c7:e8: 49:cc:cd:65:7c:a9:08:40:5a:4d:0f:78:93:c6:9e:f4:8c:82: 94:94:52:c3:98:e5:22:4a:a7:16:ce:82:11:4d:ad:df:ef:fd: 60:8c:ae:72:14:2e:8f:43:37:f7:bc:0b:2b:8b:10:cb:58:0b: 29:f9:01:8a:68:72:28:f9:1c:a0:6c:34:6c:4a:c0:44:fa:6e: 7e:5b:c4:af:59:09:b0:81:3d:a6:9b:f0:b1:ec:9f:9c:8f:92: 59:af:11:79:40:a6:c9:0d:53:11:47:89:8c:6d:02:44:6b:1e: 73:db:63:27:97:e3:e5:54:9c:7c:a5:39:de:2a:b0:fc:75:ac: f9:57:b5:8b:94:c8:8b:d4:4b:03:c5:25:58:13:c1:dc:cb:14: 84:c3:c1:7d:69:3c:70:b2:15:c6:37:73:a6:66:c0:55:ec:d2: 30:ad:68:2c:f5:24:08:c4:9e:2b:6d:ad:d5:8c:40:ee:96:84: 97:d6:e6:6b:a5:49:08:05:e0:9c:fe:a8:a3:ae:67:f1:e7:0f: 62:fe:45:c9:ee:c0:6e:fb:3c:3e:73:b9:c1:84:aa:dc:fb:aa: e8:bb:5a:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bOTN0WYGgRGPKir0GxZjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NmVlMDlmZTU0MzdjY2QwYmNiZWNmYWE5NzBkZTMxZWM5 ZDg2ZWQwHhcNMjUxMjIxMDEwMTIyWhcNMjUxMjIyMDEwMTIyWjAzMTEwLwYDVQQD Eyg5MWIwNDdhNzFiZjcxNWViMDZjZDE0MmNkYzk1MzgxZTAxMDA1NDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AnGI9DIiJ5RNG9nW4AoeYiSfPxN t/YIqLzXFiby2DISn8wJ4z4N3OQAomu2VvRC8ne9jwF0T4f/Bw1NwRh+4r8aluaW xBahiV4A4Gc4lfv9M2Cfp2LgZbsp+DvJB0BJ+RUi2/GN1pVJoVI1r6+AsNSIdASf JsE0F6zQc/rMVw+VaWlwVajZrqz8pGcpdAb+0wIh194VjFwge+ZYdewwM0lqVdFK f7qMdHlyU/DIZbfNy65VwgDs3IVeV+k7jY/HnnyJ4Mq1xdgmox8rNPfL4QCOLuWE 6IsGIhmwFX2kZdIzy7WOJh0lXVKiR8pqHn8fqUQT9K3qkpczy+5tSiRq6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGwR6cb9xXrBs0ULNyVOB4BAFQzMB8GA1UdIwQY MBaAFHhu4J/lQ3zNC8vs+qlw3jHsnYbtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUc3Z24tVkRmTTBMeS16NnFYRGVNZXlkaHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9hYTQ0M2UtMmQ0MC00ZGZjLWFjNGQt NDUwOWQyMjhmYzZmLzEvZUc3Z24tVkRmTTBMeS16NnFYRGVNZXlkaHUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9hYTQ0M2UtMmQ0MC00ZGZjLWFjNGQtNDUwOWQyMjhmYzZm LzEvZUc3Z24tVkRmTTBMeS16NnFYRGVNZXlkaHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn5Mukdsb RbRO1aKg2Y/3ve8qAMZbswB5DD65JGgwY3Uvw8foSczNZXypCEBaTQ94k8ae9IyC lJRSw5jlIkqnFs6CEU2t3+/9YIyuchQuj0M397wLK4sQy1gLKfkBimhyKPkcoGw0 bErARPpuflvEr1kJsIE9ppvwseyfnI+SWa8ReUCmyQ1TEUeJjG0CRGsec9tjJ5fj 5VScfKU53iqw/HWs+Ve1i5TIi9RLA8UlWBPB3MsUhMPBfWk8cLIVxjdzpmbAVezS MK1oLPUkCMSeK22t1YxA7paEl9bma6VJCAXgnP6oo65n8ecPYv5Fye7Abvs8PnO5 wYSq3Puq6Lta/w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:08:30 2025 by rpki-client