This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft File: eJJmn4GevY3S67qT8t0tPhonwjE.mft (raw, json) Hash identifier: AIsEFk+mDmnhEUoBVTlsX7Ekkud5uuI6QVkMydIZRDs= Subject key identifier: 51:DB:C5:E3:5F:8B:7E:06:09:CD:14:E8:55:20:97:32:9A:49:F2:FA Authority key identifier: 78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31 Certificate issuer: /CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231 Certificate serial: 019B3E3577D861615E6CA5EDE40E36AF0E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft Manifest number: 0A3D Signing time: Sun 21 Dec 2025 00:00:49 +0000 Manifest this update: Sun 21 Dec 2025 00:00:49 +0000 Manifest next update: Mon 22 Dec 2025 00:00:49 +0000 Files and hashes: 1: 1RsOc1yR94fLSIN7RSYKbs-UV5E.roa (hash: JvuB+fj7uwNhBJutx6Epbo+jH2P6sNnioKWN+1JAw2E=) 2: YsAD0xYI7fSatmxxWy_MtAq3uA0.roa (hash: +cmsgKhF+fbBw56PZtc3rlBguWm90CrfqJ6VEbk7b+k=) 3: ZUR3BAP_7QG_ADM2oChuL6mE8nQ.roa (hash: QC0NJCXzeiGu8pGCymaMWOTKZLqngTi+89jFQkLRMjU=) 4: eJJmn4GevY3S67qT8t0tPhonwjE.crl (hash: c2Hqgsy56yKNw7P7cUBl0q65eEvHUdK+2OYYIK1TtPc=) 5: vijUo-1OjT7vzMvb4RvZKsG7aPY.roa (hash: cH5H5sB4I0MW9+cJs76Nq2CGqjMRYzxzdgNA4qe2C1M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:77:d8:61:61:5e:6c:a5:ed:e4:0e:36:af:0e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7892669f819ebd8dd2ebba93f2dd2d3e1a27c231 Validity Not Before: Dec 21 00:00:49 2025 GMT Not After : Dec 22 00:00:49 2025 GMT Subject: CN=51dbc5e35f8b7e0609cd14e8552097329a49f2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c6:24:7e:ea:42:24:3f:7b:3f:77:ae:ce:91: 47:de:93:96:3f:cd:81:61:d8:75:f1:63:d3:8d:d3: 97:da:91:fa:8e:59:5b:a7:71:6a:d0:11:7e:05:d3: 4b:fe:b1:4f:af:02:58:e4:e6:17:be:63:48:47:72: c4:71:a8:fa:18:43:1a:7a:97:c3:d6:a4:77:11:d3: a6:5d:05:28:06:4c:88:e9:1a:6c:77:ae:ec:63:91: d7:f4:8e:12:03:b1:17:a9:20:94:31:7e:4e:63:fd: 01:4c:b2:53:cd:e6:6a:bb:d3:05:65:f6:e2:c2:2f: 04:1f:9c:b5:be:8f:20:7f:4d:42:ce:38:89:db:a3: d9:bb:7d:57:09:3f:d6:07:57:56:fb:1d:13:0c:5c: 89:38:ea:41:50:1f:c6:a0:a0:27:53:bf:8b:ee:2a: b3:14:43:1e:d7:d6:72:9e:4e:53:40:ea:02:b6:f3: f1:e7:7c:fd:66:9f:39:79:db:d5:b0:68:23:d5:2b: 1c:3a:95:14:d9:76:f6:ea:b1:0a:e5:d8:78:55:5b: 86:ba:ec:17:16:b4:2a:d4:3c:dd:cc:42:e7:27:d6: 6d:d8:e5:de:e5:75:ce:0a:ce:f0:af:1b:7f:ef:12: 0a:56:de:e5:28:28:86:29:fa:42:8d:d3:c1:dd:d0: e0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:DB:C5:E3:5F:8B:7E:06:09:CD:14:E8:55:20:97:32:9A:49:F2:FA X509v3 Authority Key Identifier: keyid:78:92:66:9F:81:9E:BD:8D:D2:EB:BA:93:F2:DD:2D:3E:1A:27:C2:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJJmn4GevY3S67qT8t0tPhonwjE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/44fe28-54a7-466a-81d3-b8a28cbef4ad/1/eJJmn4GevY3S67qT8t0tPhonwjE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:74:ed:16:43:41:ad:10:b4:59:23:6d:14:60:1c:27:70:be: 04:02:23:c4:8e:41:0b:f1:a0:7d:91:bd:62:80:6f:02:88:58: ec:f8:96:9c:51:7a:f5:74:bd:62:1b:72:76:b9:f5:16:87:04: 46:ce:75:89:2e:e6:4a:fe:af:4a:72:36:43:c5:86:dd:01:05: c3:53:ce:6a:52:df:7d:a0:6b:d2:73:62:cc:96:8d:16:0f:ca: 3a:68:eb:7f:dd:47:5c:5c:ce:f1:ef:7f:a4:cb:88:0d:54:cd: 27:19:d2:93:bd:dc:dd:d3:ab:59:f3:ca:16:26:4d:30:26:e0: c9:ca:22:83:83:6f:a4:8a:88:ce:09:40:55:e6:ef:6b:a2:8d: 91:32:a9:7a:95:a3:eb:13:65:7f:2f:6a:db:6b:75:63:cf:db: df:18:db:0a:63:02:9e:83:f6:08:19:30:e3:53:b7:1b:08:2b: 66:de:62:12:83:95:6f:bd:09:dc:dd:41:45:1b:e8:fe:11:f3: 3a:12:c9:28:70:6b:7a:c6:60:a1:0f:94:c9:3e:8c:e3:5b:16: 47:b2:73:5f:57:26:03:c0:24:b9:a5:94:3d:35:1a:a1:22:45: 92:06:50:32:dc:5b:5c:39:2e:3b:70:e9:58:d8:cd:85:8c:d6: 56:5d:40:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NXfYYWFebKXt5A42rw4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTI2NjlmODE5ZWJkOGRkMmViYmE5M2YyZGQyZDNlMWEy N2MyMzEwHhcNMjUxMjIxMDAwMDQ5WhcNMjUxMjIyMDAwMDQ5WjAzMTEwLwYDVQQD Eyg1MWRiYzVlMzVmOGI3ZTA2MDljZDE0ZTg1NTIwOTczMjlhNDlmMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsYkfupCJD97P3euzpFH3pOWP82B Ydh18WPTjdOX2pH6jllbp3Fq0BF+BdNL/rFPrwJY5OYXvmNIR3LEcaj6GEMaepfD 1qR3EdOmXQUoBkyI6Rpsd67sY5HX9I4SA7EXqSCUMX5OY/0BTLJTzeZqu9MFZfbi wi8EH5y1vo8gf01CzjiJ26PZu31XCT/WB1dW+x0TDFyJOOpBUB/GoKAnU7+L7iqz FEMe19Zynk5TQOoCtvPx53z9Zp85edvVsGgj1SscOpUU2Xb26rEK5dh4VVuGuuwX FrQq1DzdzELnJ9Zt2OXe5XXOCs7wrxt/7xIKVt7lKCiGKfpCjdPB3dDgvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHbxeNfi34GCc0U6FUglzKaSfL6MB8GA1UdIwQY MBaAFHiSZp+Bnr2N0uu6k/LdLT4aJ8IxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMt YjhhMjhjYmVmNGFkLzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80NGZlMjgtNTRhNy00NjZhLTgxZDMtYjhhMjhjYmVmNGFk LzEvZUpKbW40R2V2WTNTNjdxVDh0MHRQaG9ud2pFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANXTtFkNB rRC0WSNtFGAcJ3C+BAIjxI5BC/GgfZG9YoBvAohY7PiWnFF69XS9Yhtydrn1FocE Rs51iS7mSv6vSnI2Q8WG3QEFw1POalLffaBr0nNizJaNFg/KOmjrf91HXFzO8e9/ pMuIDVTNJxnSk73c3dOrWfPKFiZNMCbgycoig4NvpIqIzglAVebva6KNkTKpepWj 6xNlfy9q22t1Y8/b3xjbCmMCnoP2CBkw41O3GwgrZt5iEoOVb70J3N1BRRvo/hHz OhLJKHBresZgoQ+UyT6M41sWR7JzX1cmA8AkuaWUPTUaoSJFkgZQMtxbXDkuO3Dp WNjNhYzWVl1AAg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:16:49 2025 by rpki-client