This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft File: eYkeljG7xuiuXaSyGb5Nj2H--1o.mft (raw, json) Hash identifier: A3J2DP8Ty3er1IFza+jcPD1swrspme7lZbq9QqO2Otg= Subject key identifier: 10:78:C4:7D:D8:64:0D:48:F7:A0:1D:E2:38:75:73:D9:B8:E8:84:9F Authority key identifier: 79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A Certificate issuer: /CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a Certificate serial: 019B3DFEBC53392DB4429B085E0A9865E206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft Manifest number: 0529 Signing time: Sat 20 Dec 2025 23:01:03 +0000 Manifest this update: Sat 20 Dec 2025 23:01:03 +0000 Manifest next update: Sun 21 Dec 2025 23:01:03 +0000 Files and hashes: 1: F7OA04yE7M4qNkerNNmgXrIbsfw.roa (hash: v4Vdufe1qMpmLce6/l8zLEXuhsNN6MeM3OiQ8L0sZ8s=) 2: eYkeljG7xuiuXaSyGb5Nj2H--1o.crl (hash: EQ53NSNaM1HJH2pxrkg+GH4wBQ1T1y0nOKZBjjLuygU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:bc:53:39:2d:b4:42:9b:08:5e:0a:98:65:e2:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79891e9631bbc6e8ae5da4b219be4d8f61fefb5a Validity Not Before: Dec 20 23:01:03 2025 GMT Not After : Dec 21 23:01:03 2025 GMT Subject: CN=1078c47dd8640d48f7a01de2387573d9b8e8849f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:48:f9:52:51:45:37:6f:1f:b8:d8:7b:04:fd: 32:9e:c7:ed:02:73:ca:70:68:74:fb:0c:09:8f:38: 43:84:71:c6:b1:76:83:fa:4c:fb:42:41:48:9b:4a: a6:04:91:a5:37:d1:8a:20:c0:e7:ba:93:0d:2e:db: e5:51:e9:ec:46:af:d1:e4:de:64:ce:ca:85:07:88: 5d:f7:1d:ec:6b:bd:7e:93:74:ee:44:78:be:1b:0e: 56:99:7f:ee:9c:42:b9:d7:f8:45:af:90:1c:89:eb: bf:4b:68:bf:d8:1a:df:d1:7f:f8:37:30:f3:d6:b9: 93:9b:fd:61:41:68:a2:3f:61:1a:5c:c9:f5:6b:97: 20:6c:02:76:85:45:4c:7a:24:ab:f6:c8:da:5f:70: e2:6d:52:02:62:1b:c7:13:69:2f:c8:cb:be:9e:04: dc:a4:f1:06:f4:89:0b:da:5e:02:85:e3:f5:48:e9: 9c:bf:c4:20:1a:00:46:32:17:33:99:a1:c2:ef:2e: 64:8a:80:44:f9:0d:e9:0b:be:44:d3:f3:df:9f:8f: 86:a9:cb:ff:17:e1:ee:cc:2f:53:df:08:b8:3a:b6: 1e:c9:d4:67:b6:f3:92:00:2c:c3:f7:06:b4:db:18: a4:3b:3b:11:94:39:0e:d3:c2:00:54:98:6d:58:76: b3:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:78:C4:7D:D8:64:0D:48:F7:A0:1D:E2:38:75:73:D9:B8:E8:84:9F X509v3 Authority Key Identifier: keyid:79:89:1E:96:31:BB:C6:E8:AE:5D:A4:B2:19:BE:4D:8F:61:FE:FB:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYkeljG7xuiuXaSyGb5Nj2H--1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/79bc9f-0596-4d53-b101-a06e681b4ec8/1/eYkeljG7xuiuXaSyGb5Nj2H--1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:6b:35:0e:40:28:04:c9:a3:31:57:d1:e5:65:e1:c2:33:44: a3:81:c4:43:51:e2:41:82:a7:bc:d4:61:ec:c4:75:1a:94:e9: 59:b9:63:37:fb:00:2e:d6:f2:a5:a7:2f:fa:6d:83:86:54:33: 23:04:5e:e2:f5:60:cc:ab:84:41:39:7b:d9:21:a4:74:3f:cc: bd:a3:70:7b:ef:63:57:99:e0:93:45:42:95:34:66:3a:d9:37: b3:c5:8f:16:70:aa:19:d7:97:27:32:c7:a8:ae:b4:02:13:38: f3:e2:e7:7d:21:96:5d:06:53:76:b0:be:1b:42:49:9a:29:28: 19:2d:c0:b7:f3:0e:28:75:1a:ed:c4:42:b8:db:27:64:c0:c1: 1c:68:25:a8:9c:a5:3a:d8:af:de:33:e0:e2:1d:f5:ad:29:87: 77:bd:f0:d9:91:22:83:31:4c:07:06:54:b5:98:5d:4e:ff:a3: a4:c1:28:69:5b:ae:93:55:17:b6:c8:95:f1:53:f7:51:4b:56: b6:38:40:98:96:a2:1b:1f:3d:54:9e:74:bd:94:0e:52:5c:4c: 85:82:ec:67:8a:64:fc:4a:2e:95:6e:12:77:f1:ce:ad:51:e8: 25:ea:9f:85:c0:02:37:e2:c0:29:eb:2c:3d:a7:cf:a9:da:5d: d3:5a:37:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/rxTOS20QpsIXgqYZeIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5ODkxZTk2MzFiYmM2ZThhZTVkYTRiMjE5YmU0ZDhmNjFm ZWZiNWEwHhcNMjUxMjIwMjMwMTAzWhcNMjUxMjIxMjMwMTAzWjAzMTEwLwYDVQQD EygxMDc4YzQ3ZGQ4NjQwZDQ4ZjdhMDFkZTIzODc1NzNkOWI4ZTg4NDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0j5UlFFN28fuNh7BP0ynsftAnPK cGh0+wwJjzhDhHHGsXaD+kz7QkFIm0qmBJGlN9GKIMDnupMNLtvlUensRq/R5N5k zsqFB4hd9x3sa71+k3TuRHi+Gw5WmX/unEK51/hFr5Acieu/S2i/2Brf0X/4NzDz 1rmTm/1hQWiiP2EaXMn1a5cgbAJ2hUVMeiSr9sjaX3DibVICYhvHE2kvyMu+ngTc pPEG9IkL2l4CheP1SOmcv8QgGgBGMhczmaHC7y5kioBE+Q3pC75E0/Pfn4+Gqcv/ F+HuzC9T3wi4OrYeydRntvOSACzD9wa02xikOzsRlDkO08IAVJhtWHaz8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBB4xH3YZA1I96Ad4jh1c9m46ISfMB8GA1UdIwQY MBaAFHmJHpYxu8borl2kshm+TY9h/vtaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEt YTA2ZTY4MWI0ZWM4LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83OWJjOWYtMDU5Ni00ZDUzLWIxMDEtYTA2ZTY4MWI0ZWM4 LzEvZVlrZWxqRzd4dWl1WGFTeUdiNU5qMkgtLTFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASWs1DkAo BMmjMVfR5WXhwjNEo4HEQ1HiQYKnvNRh7MR1GpTpWbljN/sALtbypacv+m2DhlQz IwRe4vVgzKuEQTl72SGkdD/MvaNwe+9jV5ngk0VClTRmOtk3s8WPFnCqGdeXJzLH qK60AhM48+LnfSGWXQZTdrC+G0JJmikoGS3At/MOKHUa7cRCuNsnZMDBHGglqJyl Otiv3jPg4h31rSmHd73w2ZEigzFMBwZUtZhdTv+jpMEoaVuuk1UXtsiV8VP3UUtW tjhAmJaiGx89VJ50vZQOUlxMhYLsZ4pk/EoulW4Sd/HOrVHoJeqfhcACN+LAKess PafPqdpd01o3FA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:36:39 2025 by rpki-client