This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json) Hash identifier: 1At+uaMpE6jZURh1a4KzUfHjAw+tYP2T3Cmeqp6+84U= Subject key identifier: D3:95:AB:11:AA:64:97:2A:39:B5:17:C7:EC:90:42:70:C5:EE:EC:5E Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019B3EA326EEC3C33E6FAFF426EBA848B628 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft Manifest number: 1380 Signing time: Sun 21 Dec 2025 02:00:38 +0000 Manifest this update: Sun 21 Dec 2025 02:00:38 +0000 Manifest next update: Mon 22 Dec 2025 02:00:38 +0000 Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: ySferv6uphyRkl1pL7QTQJCX7CZvzwPSgC+Ep+TerkA=) 2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 02:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:26:ee:c3:c3:3e:6f:af:f4:26:eb:a8:48:b6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Dec 21 02:00:38 2025 GMT Not After : Dec 22 02:00:38 2025 GMT Subject: CN=d395ab11aa64972a39b517c7ec904270c5eeec5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2f:88:00:29:35:a1:9a:88:4e:cc:ce:2c:8d: a7:e9:72:00:26:2d:0d:e0:f2:ff:ca:89:26:e8:46: 6e:bc:10:9d:64:f4:13:62:ff:07:73:fd:9f:89:46: 8f:5c:88:c0:27:13:63:0c:cc:bb:1f:ff:30:65:21: 12:83:39:81:62:4d:fd:19:f0:2e:4c:e7:30:59:2e: 45:1f:7c:90:d6:d9:ff:11:a1:0f:c4:13:7e:32:3a: 76:9f:1e:9c:81:bb:93:61:6c:87:8e:c1:71:e6:d2: 9c:89:d3:38:76:22:7b:6b:c0:05:f4:70:5f:87:a4: 28:c7:1d:f5:28:08:0f:f5:ac:5a:26:0b:bc:d4:d6: 60:ea:ef:0e:03:0e:de:23:22:4e:ba:b0:56:2e:bf: 7a:04:47:3e:e7:d1:83:1b:32:1b:77:58:87:c3:3e: 21:21:e2:9e:1f:c6:c6:5c:89:85:e1:dc:56:e0:51: d8:77:98:8c:9a:93:1d:67:b6:40:18:34:9c:ba:cc: b0:4f:8e:5d:62:3d:7f:9d:09:46:a9:d6:7d:32:c1: 59:65:95:94:d4:25:36:e4:9f:07:1d:96:16:38:85: 09:a5:d7:e9:13:37:87:b9:30:2c:08:f9:8f:78:38: 34:35:1e:9e:ee:03:86:fc:cb:96:89:1b:c9:93:a6: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:95:AB:11:AA:64:97:2A:39:B5:17:C7:EC:90:42:70:C5:EE:EC:5E X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:6d:ef:93:74:b5:28:15:ce:bf:42:5c:54:97:fe:22:d9:90: f6:2d:47:5d:97:48:57:f0:c9:4a:c9:eb:87:19:89:b1:ba:6c: ed:49:58:4e:00:7d:78:01:87:52:c0:5e:fd:eb:7f:06:2e:e1: 17:fd:bf:b9:63:e6:33:dd:f2:59:b2:e7:71:51:4d:a7:6e:36: 6e:2b:71:e4:da:9d:3b:fe:ff:6e:aa:e1:d6:0b:96:bb:b1:f0: c5:bf:3c:91:50:4e:de:ed:f6:66:25:42:88:25:25:26:a9:39: 63:13:3d:45:4a:3c:6c:3a:8f:a8:80:70:7c:18:9b:9a:8e:85: 47:ec:bb:0d:1e:c9:5e:3c:2f:2e:17:1f:c8:6d:ae:f3:47:69: 1b:a2:b7:10:d5:93:6c:19:18:03:31:35:de:d3:44:d2:76:13: 41:00:2f:7f:e5:f4:9a:2c:69:db:c6:dc:48:cb:ec:60:21:f7: a2:a4:8b:bc:f5:ee:14:7a:46:90:17:c2:11:66:32:ca:45:72: cd:ee:b5:d2:b3:49:a8:ea:96:a4:29:78:c1:66:ab:2d:38:67: 42:fd:19:d6:7e:29:00:b9:3d:45:79:e2:19:29:1e:83:16:1e: 93:ca:2f:74:6a:d5:85:ac:55:cd:b8:40:ea:e7:42:60:6e:63: 6b:60:0d:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oybuw8M+b6/0JuuoSLYoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjUxMjIxMDIwMDM4WhcNMjUxMjIyMDIwMDM4WjAzMTEwLwYDVQQD EyhkMzk1YWIxMWFhNjQ5NzJhMzliNTE3YzdlYzkwNDI3MGM1ZWVlYzVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtS+IACk1oZqITszOLI2n6XIAJi0N 4PL/yokm6EZuvBCdZPQTYv8Hc/2fiUaPXIjAJxNjDMy7H/8wZSESgzmBYk39GfAu TOcwWS5FH3yQ1tn/EaEPxBN+Mjp2nx6cgbuTYWyHjsFx5tKcidM4diJ7a8AF9HBf h6Qoxx31KAgP9axaJgu81NZg6u8OAw7eIyJOurBWLr96BEc+59GDGzIbd1iHwz4h IeKeH8bGXImF4dxW4FHYd5iMmpMdZ7ZAGDScusywT45dYj1/nQlGqdZ9MsFZZZWU 1CU25J8HHZYWOIUJpdfpEzeHuTAsCPmPeDg0NR6e7gOG/MuWiRvJk6awwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNOVqxGqZJcqObUXx+yQQnDF7uxeMB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqW3vk3S1 KBXOv0JcVJf+ItmQ9i1HXZdIV/DJSsnrhxmJsbps7UlYTgB9eAGHUsBe/et/Bi7h F/2/uWPmM93yWbLncVFNp242bitx5NqdO/7/bqrh1guWu7Hwxb88kVBO3u32ZiVC iCUlJqk5YxM9RUo8bDqPqIBwfBibmo6FR+y7DR7JXjwvLhcfyG2u80dpG6K3ENWT bBkYAzE13tNE0nYTQQAvf+X0mixp28bcSMvsYCH3oqSLvPXuFHpGkBfCEWYyykVy ze610rNJqOqWpCl4wWarLThnQv0Z1n4pALk9RXniGSkegxYek8ovdGrVhaxVzbhA 6udCYG5ja2ANzg== -----END CERTIFICATE-----Generated at Sun Dec 21 11:05:34 2025 by rpki-client