This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json) Hash identifier: /yV1fa45LJ+vJV/cUIDhuRj7nXaDI9XSL8WT8G6VKR8= Subject key identifier: 6B:27:78:4C:35:6B:59:D7:E0:D5:1D:A7:71:E7:60:94:33:41:1A:87 Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b Certificate serial: 019B3FB678908ADD032B42E4ABCBFF1163FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 07:01:21 +0000 Manifest this update: Sun 21 Dec 2025 07:01:21 +0000 Manifest next update: Mon 22 Dec 2025 07:01:21 +0000 Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=) 2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: 8IJDQ/FWcbAWAUXHzHwmdyIym9sOIroxPSiCOIJ6csg=) 3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:78:90:8a:dd:03:2b:42:e4:ab:cb:ff:11:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b Validity Not Before: Dec 21 07:01:21 2025 GMT Not After : Dec 22 07:01:21 2025 GMT Subject: CN=6b27784c356b59d7e0d51da771e7609433411a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2a:de:82:80:d1:65:7e:37:76:78:3c:5e:0a: c7:ca:5c:1e:ad:e3:7c:12:6d:89:a0:9c:fa:01:d2: 11:02:26:21:ff:9a:1a:91:78:98:1c:ba:df:f8:6a: 6c:c8:7f:1e:e6:6d:22:37:ee:ad:b4:d8:5d:42:56: 6c:59:c7:46:2a:b3:ae:ac:83:e0:d0:21:2a:3b:36: 41:07:e0:77:fb:4b:86:bb:c0:44:24:04:86:5b:6d: f9:e0:b1:13:3a:23:78:0e:5c:61:69:da:34:7a:de: 6a:f0:2e:b5:7e:db:39:50:6f:47:ba:08:c9:5f:21: 07:79:b0:0e:31:56:38:ee:bd:c9:a2:f8:6f:cf:2b: c7:c6:e0:43:a1:81:23:eb:71:fa:28:c7:b2:7a:b8: 5b:90:91:88:87:63:59:87:5d:3b:20:40:d0:66:e2: fd:e0:d0:2d:56:7d:99:f7:37:c1:9a:0c:5c:09:cd: 27:94:78:a7:9d:32:9f:b2:06:85:66:a9:de:80:82: 1f:a5:91:43:f9:39:41:77:90:c3:d4:8a:36:1d:30: 12:d5:51:c1:65:94:db:d5:30:08:72:40:01:de:71: 9a:07:e9:35:64:a3:38:1f:9c:9e:aa:5b:dd:f0:0d: 78:e0:59:83:94:cb:11:a9:32:4e:34:a6:35:7a:9f: 05:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:27:78:4C:35:6B:59:D7:E0:D5:1D:A7:71:E7:60:94:33:41:1A:87 X509v3 Authority Key Identifier: keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3e:d3:d5:db:f1:2f:b8:7a:b0:19:1c:1d:fc:09:79:47:02: 79:64:14:8d:b2:20:bc:4b:95:d6:2f:6c:fe:dd:52:88:e2:a1: 88:4d:23:2c:2f:de:8f:94:fa:f6:fc:0c:f2:d3:90:c5:f3:48: 0a:d5:a0:eb:6a:65:73:ed:46:87:26:fe:c8:bf:f1:ef:14:56: c2:c6:2b:18:12:93:dd:34:fb:fb:25:56:a0:93:7b:9e:81:98: b9:a2:2f:6e:b9:21:09:d8:ef:f3:3b:28:ef:c5:50:08:c9:40: de:80:88:cf:44:4b:c5:50:15:3e:a5:0b:41:ef:5c:71:be:c5: cb:0c:b7:18:74:de:ba:54:55:3f:fa:20:e3:50:8d:34:d2:30: a0:ba:69:f6:62:e0:78:81:30:3d:6f:e1:9b:0e:01:49:1a:e5: 72:5e:ce:47:58:a1:4a:21:cc:18:ff:ba:7d:07:94:cb:b4:24: b4:ff:ec:fb:2d:8e:ea:10:f7:2f:43:7d:a8:0a:70:52:42:81: d8:e0:a4:52:16:ef:db:d4:e8:ce:56:84:ba:59:f6:d3:30:de: 97:60:4c:e9:ed:08:fc:e6:71:b9:78:fd:f7:0e:0c:2a:fb:23: 9e:c3:86:75:bc:78:a9:1a:93:a7:9b:a9:fb:59:a6:54:1a:9c: 89:47:6a:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tniQit0DK0Lkq8v/EWP+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2 YjNkMGIwHhcNMjUxMjIxMDcwMTIxWhcNMjUxMjIyMDcwMTIxWjAzMTEwLwYDVQQD Eyg2YjI3Nzg0YzM1NmI1OWQ3ZTBkNTFkYTc3MWU3NjA5NDMzNDExYTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyregoDRZX43dng8XgrHylwereN8 Em2JoJz6AdIRAiYh/5oakXiYHLrf+GpsyH8e5m0iN+6ttNhdQlZsWcdGKrOurIPg 0CEqOzZBB+B3+0uGu8BEJASGW2354LETOiN4Dlxhado0et5q8C61fts5UG9HugjJ XyEHebAOMVY47r3JovhvzyvHxuBDoYEj63H6KMeyerhbkJGIh2NZh107IEDQZuL9 4NAtVn2Z9zfBmgxcCc0nlHinnTKfsgaFZqnegIIfpZFD+TlBd5DD1Io2HTAS1VHB ZZTb1TAIckAB3nGaB+k1ZKM4H5yeqlvd8A144FmDlMsRqTJONKY1ep8F9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsneEw1a1nX4NUdp3HnYJQzQRqHMB8GA1UdIwQY MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD7T1dvx L7h6sBkcHfwJeUcCeWQUjbIgvEuV1i9s/t1SiOKhiE0jLC/ej5T69vwM8tOQxfNI CtWg62plc+1Ghyb+yL/x7xRWwsYrGBKT3TT7+yVWoJN7noGYuaIvbrkhCdjv8zso 78VQCMlA3oCIz0RLxVAVPqULQe9ccb7Fywy3GHTeulRVP/og41CNNNIwoLpp9mLg eIEwPW/hmw4BSRrlcl7OR1ihSiHMGP+6fQeUy7QktP/s+y2O6hD3L0N9qApwUkKB 2OCkUhbv29TozlaEuln20zDel2BM6e0I/OZxuXj99w4MKvsjnsOGdbx4qRqTp5up +1mmVBqciUdqnA== -----END CERTIFICATE-----Generated at Sun Dec 21 11:30:11 2025 by rpki-client