This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft File: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft (raw, json) Hash identifier: cXl5ajrPlZrsf3Wi0U5zGQ5ciWsK2/c+1oZo+a/hOjQ= Subject key identifier: BC:EF:16:9A:87:31:C5:6D:16:13:58:CC:53:5B:47:BF:E4:42:F9:AB Authority key identifier: 79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36 Certificate issuer: /CN=7946647d9d5759a01f8d18668a377c063ff59136 Certificate serial: 019B3E355EC96C40B2C0FC5C63DD02FE0DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft Manifest number: 0C Signing time: Sun 21 Dec 2025 00:00:43 +0000 Manifest this update: Sun 21 Dec 2025 00:00:43 +0000 Manifest next update: Mon 22 Dec 2025 00:00:43 +0000 Files and hashes: 1: R7yjlqKVC_g5K4daVbkjXz4EoC0.roa (hash: SjJL3uwbof0k8GhL3qw3R1A3vM1QlaILS8y/Gn2OYl0=) 2: av6yF_PTyQyFJ1abEqqbhAfyr1o.roa (hash: G3SuewAkiAuJaq7LFozcX+SNdDm3e9U6uDEHGOkqACM=) 3: eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl (hash: apsoCWQJJj7jJx80psQXWoRiB223J9fcQAgfVboVGvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:35:5e:c9:6c:40:b2:c0:fc:5c:63:dd:02:fe:0d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7946647d9d5759a01f8d18668a377c063ff59136 Validity Not Before: Dec 21 00:00:43 2025 GMT Not After : Dec 22 00:00:43 2025 GMT Subject: CN=bcef169a8731c56d161358cc535b47bfe442f9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c6:79:fa:da:ae:97:bf:7c:52:4d:7a:87:82: 92:9d:14:90:06:e4:4e:d4:43:22:d3:cc:69:91:4d: a7:bc:e9:11:8f:83:c0:1d:41:19:17:d0:27:fe:62: 62:d0:51:42:a0:41:6a:1f:3a:dd:18:7b:96:6d:7c: c2:07:9c:de:93:e8:4d:13:9d:8b:d7:2c:0c:0f:af: 02:56:d5:d4:60:62:d3:e9:72:07:81:e9:40:8c:02: 6b:9d:2e:d5:d8:74:09:56:bb:c5:08:72:c0:a1:fd: 45:8d:dc:d1:67:c4:95:59:b7:b2:cd:5f:14:b1:f6: 28:50:fd:07:a6:6f:94:54:ff:45:5e:db:9d:84:04: c8:bf:45:a1:df:11:89:e2:77:82:2b:96:b2:c7:cc: ff:e9:60:81:08:f4:ad:82:29:e7:5f:6b:53:9a:45: f5:54:51:8e:b3:98:c6:d1:ae:99:78:e5:61:e9:d8: 1d:51:c7:ee:d1:a9:27:ea:70:a0:8d:13:2f:7e:3a: 27:92:06:53:5c:f5:47:24:36:df:3b:ab:70:a5:53: 09:fd:95:fd:a4:b8:0e:4e:20:0e:68:98:e7:4e:4a: 9f:65:c1:54:b9:bb:23:c0:d9:19:bc:21:01:c9:79: 2f:80:69:d9:dc:90:d4:8e:a3:5c:7d:c0:d1:07:07: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EF:16:9A:87:31:C5:6D:16:13:58:CC:53:5B:47:BF:E4:42:F9:AB X509v3 Authority Key Identifier: keyid:79:46:64:7D:9D:57:59:A0:1F:8D:18:66:8A:37:7C:06:3F:F5:91:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/f2152d-6cf7-4cea-8d66-e4bad34bbeff/1/eUZkfZ1XWaAfjRhmijd8Bj_1kTY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:20:e8:cf:6e:a3:e7:b6:82:da:d8:8e:d5:93:57:6e:77:d9: c3:c2:69:01:4f:48:9e:af:4c:fa:98:c1:a6:07:1c:e0:63:e6: 4e:da:27:b6:42:c2:73:71:24:fe:58:e5:9f:07:99:17:4a:3b: 8d:9c:3f:37:05:5d:20:52:36:60:6f:21:36:84:ca:55:54:d6: a4:1f:de:83:b7:27:48:c9:69:68:59:b9:75:7a:a9:b6:d0:14: ac:70:4a:16:99:95:0f:d7:e7:38:9b:0d:93:54:df:6a:b5:a8: 58:59:b9:53:69:37:46:be:f8:4e:17:c8:8b:ea:02:46:1f:5c: ab:2f:0f:0a:88:22:8c:6b:2c:15:68:86:cb:f2:a4:bf:c3:66: 19:a3:5c:17:17:8e:cb:b1:35:2a:25:07:41:7a:85:72:b9:6b: 2b:1b:55:a5:58:11:84:88:f5:2d:c9:5b:f0:11:71:77:89:42: 98:1a:ea:73:f5:48:8b:0e:75:47:b1:81:7b:ef:3d:a2:a3:1c: 2f:18:1a:72:1a:cb:72:28:bf:e0:92:7c:3b:76:f9:70:fd:75: 17:55:2b:1b:c9:65:cc:a6:34:bb:3d:cd:e3:d2:7a:7b:8e:ae: 77:3b:1d:42:d5:e8:c5:64:f5:ea:c8:1b:72:94:6e:14:28:f8: 99:fd:57:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+NV7JbECywPxcY90C/g2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NDY2NDdkOWQ1NzU5YTAxZjhkMTg2NjhhMzc3YzA2M2Zm NTkxMzYwHhcNMjUxMjIxMDAwMDQzWhcNMjUxMjIyMDAwMDQzWjAzMTEwLwYDVQQD EyhiY2VmMTY5YTg3MzFjNTZkMTYxMzU4Y2M1MzViNDdiZmU0NDJmOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cZ5+tqul798Uk16h4KSnRSQBuRO 1EMi08xpkU2nvOkRj4PAHUEZF9An/mJi0FFCoEFqHzrdGHuWbXzCB5zek+hNE52L 1ywMD68CVtXUYGLT6XIHgelAjAJrnS7V2HQJVrvFCHLAof1FjdzRZ8SVWbeyzV8U sfYoUP0Hpm+UVP9FXtudhATIv0Wh3xGJ4neCK5ayx8z/6WCBCPStginnX2tTmkX1 VFGOs5jG0a6ZeOVh6dgdUcfu0akn6nCgjRMvfjonkgZTXPVHJDbfO6twpVMJ/ZX9 pLgOTiAOaJjnTkqfZcFUubsjwNkZvCEByXkvgGnZ3JDUjqNcfcDRBwe7EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzvFpqHMcVtFhNYzFNbR7/kQvmrMB8GA1UdIwQY MBaAFHlGZH2dV1mgH40YZoo3fAY/9ZE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYt ZTRiYWQzNGJiZWZmLzEvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9mMjE1MmQtNmNmNy00Y2VhLThkNjYtZTRiYWQzNGJiZWZm LzEvZVVaa2ZaMVhXYUFmalJobWlqZDhCal8xa1RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWyDoz26j 57aC2tiO1ZNXbnfZw8JpAU9Inq9M+pjBpgcc4GPmTtontkLCc3Ek/ljlnweZF0o7 jZw/NwVdIFI2YG8hNoTKVVTWpB/eg7cnSMlpaFm5dXqpttAUrHBKFpmVD9fnOJsN k1TfarWoWFm5U2k3Rr74ThfIi+oCRh9cqy8PCogijGssFWiGy/Kkv8NmGaNcFxeO y7E1KiUHQXqFcrlrKxtVpVgRhIj1Lclb8BFxd4lCmBrqc/VIiw51R7GBe+89oqMc LxgachrLcii/4JJ8O3b5cP11F1UrG8llzKY0uz3N49J6e46udzsdQtXoxWT16sgb cpRuFCj4mf1X/w== -----END CERTIFICATE-----Generated at Sun Dec 21 07:17:30 2025 by rpki-client