This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft File: R78v_to4HlSBjfBwUs9n4iJRX4k.mft (raw, json) Hash identifier: +nMGszxws83nQqCg9vXcEOkuGVUsiPJQCqFxbd4cxmY= Subject key identifier: F9:FA:FC:55:45:95:1A:82:6F:4F:6D:D5:66:30:33:DB:74:79:0C:2E Authority key identifier: 47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89 Certificate issuer: /CN=47bf2ffeda381e54818df07052cf67e222515f89 Certificate serial: 019B69FBB62A85D2B8193AAF65C6B82F9C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft Manifest number: 0ACD Signing time: Mon 29 Dec 2025 12:01:02 +0000 Manifest this update: Mon 29 Dec 2025 12:01:02 +0000 Manifest next update: Tue 30 Dec 2025 12:01:02 +0000 Files and hashes: 1: LAY9sSNA-YJZQYYdnmpTlhxvD2w.roa (hash: sy6paHPwN5kXrSUvaYyd2hN5gZ9nHNvT8Yp+G0CBKsY=) 2: R78v_to4HlSBjfBwUs9n4iJRX4k.crl (hash: Rxm0aYeGcPp+21yprUdD7Xy606Q/Chb0rB2ocnw8430=) 3: kXlvgNGT0M_fb_-qmGB3FlkN85w.roa (hash: M89NbGfFWJGuspxS6G3ctJFxvooMQ1EluHCsGyLm9ME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 10:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:69:fb:b6:2a:85:d2:b8:19:3a:af:65:c6:b8:2f:9c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47bf2ffeda381e54818df07052cf67e222515f89 Validity Not Before: Dec 29 12:01:02 2025 GMT Not After : Dec 30 12:01:02 2025 GMT Subject: CN=f9fafc5545951a826f4f6dd5663033db74790c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:91:6d:6e:e1:50:fb:1d:ac:63:bd:8f:59:a8: 6a:1a:43:d7:7d:c8:36:ae:94:ec:02:fd:a0:6a:3b: 56:d9:62:dd:f2:d6:1c:46:2c:9e:ea:13:de:2b:3c: 4b:45:b6:74:6f:f1:f8:b8:fc:2a:d4:b4:89:38:91: 30:fc:f1:04:ee:79:0d:8e:58:a6:df:ae:57:09:ef: 45:f9:3b:7a:8b:ec:19:f8:41:ea:32:2b:80:08:d7: fe:f2:5c:23:c1:04:bf:b5:2d:e6:64:47:59:be:8f: 99:69:10:48:55:0c:eb:48:98:3a:ee:15:26:9a:10: 52:0c:0f:d1:a7:3e:4e:6d:08:f2:05:fe:cc:e1:4c: fa:d2:b8:22:d9:49:e9:66:d5:57:7a:94:c3:5f:5d: 32:b7:51:5f:56:6d:9e:5c:f8:6e:51:15:c5:66:ea: 6c:eb:70:81:51:75:cd:e4:65:d7:56:30:fb:53:f0: f4:d3:7f:6d:75:13:a6:07:ab:7c:e0:f0:02:f1:de: 9c:bb:1e:2f:c3:b0:21:c0:cd:21:e1:c1:ac:6f:6e: 23:47:2f:af:f2:f4:5b:f0:93:1e:50:7b:1a:24:01: 25:45:fa:f8:3c:9c:b6:d2:7e:21:42:65:ef:8f:1c: b7:e7:ed:87:d3:80:28:74:c2:fd:aa:c8:b5:40:9b: f8:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FA:FC:55:45:95:1A:82:6F:4F:6D:D5:66:30:33:DB:74:79:0C:2E X509v3 Authority Key Identifier: keyid:47:BF:2F:FE:DA:38:1E:54:81:8D:F0:70:52:CF:67:E2:22:51:5F:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R78v_to4HlSBjfBwUs9n4iJRX4k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/246d03-e090-4325-82f1-0bd095da78ef/1/R78v_to4HlSBjfBwUs9n4iJRX4k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:25:f4:02:6d:69:2d:7a:51:14:05:c0:8d:22:0f:a3:25:a7: 6f:fc:96:e9:d4:04:19:57:7a:55:5f:fa:e6:e8:dd:cd:c9:b8: 86:01:f1:bb:d9:da:68:56:f3:bd:4a:a9:a8:4a:7f:e1:9c:e4: 8f:3f:8e:3e:a7:4e:ba:b7:83:63:ab:81:f7:42:da:10:81:48: fb:c2:0a:3f:68:5f:6e:1c:ef:77:e4:09:e0:a7:f9:3b:79:c4: dc:bc:33:03:81:36:2c:a4:42:92:d2:f6:fa:06:16:1e:16:8b: b1:05:e9:6c:2c:50:ee:53:28:7c:28:98:65:47:ef:a9:4b:12: 12:2c:73:81:0e:b0:b0:48:6f:24:e9:cf:4a:61:92:a1:16:73: 5c:0d:1b:5e:34:97:81:e0:f5:da:12:0a:28:bd:82:b7:e4:db: 0a:6f:ed:39:b0:bd:e7:38:1d:6a:2d:27:a8:8e:44:5a:05:38: 65:37:07:0d:f3:7e:66:3e:a2:d5:6f:4d:50:e9:93:41:8e:ce: 0d:04:b8:01:1f:6e:cb:72:39:c4:d4:73:78:88:10:80:e5:84: 34:81:5c:2c:98:36:c4:59:e4:d0:17:02:2d:92:35:e0:34:64: 4c:4d:e3:1d:fa:35:64:bc:c0:3f:21:e9:ac:f8:dd:d9:2b:19: 6f:9e:80:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtp+7YqhdK4GTqvZca4L5xMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3YmYyZmZlZGEzODFlNTQ4MThkZjA3MDUyY2Y2N2UyMjI1 MTVmODkwHhcNMjUxMjI5MTIwMTAyWhcNMjUxMjMwMTIwMTAyWjAzMTEwLwYDVQQD EyhmOWZhZmM1NTQ1OTUxYTgyNmY0ZjZkZDU2NjMwMzNkYjc0NzkwYzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpFtbuFQ+x2sY72PWahqGkPXfcg2 rpTsAv2gajtW2WLd8tYcRiye6hPeKzxLRbZ0b/H4uPwq1LSJOJEw/PEE7nkNjlim 365XCe9F+Tt6i+wZ+EHqMiuACNf+8lwjwQS/tS3mZEdZvo+ZaRBIVQzrSJg67hUm mhBSDA/Rpz5ObQjyBf7M4Uz60rgi2UnpZtVXepTDX10yt1FfVm2eXPhuURXFZups 63CBUXXN5GXXVjD7U/D0039tdROmB6t84PAC8d6cux4vw7AhwM0h4cGsb24jRy+v 8vRb8JMeUHsaJAElRfr4PJy20n4hQmXvjxy35+2H04AodML9qsi1QJv42wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPn6/FVFlRqCb09t1WYwM9t0eQwuMB8GA1UdIwQY MBaAFEe/L/7aOB5UgY3wcFLPZ+IiUV+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEt MGJkMDk1ZGE3OGVmLzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yNDZkMDMtZTA5MC00MzI1LTgyZjEtMGJkMDk1ZGE3OGVm LzEvUjc4dl90bzRIbFNCamZCd1VzOW40aUpSWDRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARCX0Am1p LXpRFAXAjSIPoyWnb/yW6dQEGVd6VV/65ujdzcm4hgHxu9naaFbzvUqpqEp/4Zzk jz+OPqdOureDY6uB90LaEIFI+8IKP2hfbhzvd+QJ4Kf5O3nE3LwzA4E2LKRCktL2 +gYWHhaLsQXpbCxQ7lMofCiYZUfvqUsSEixzgQ6wsEhvJOnPSmGSoRZzXA0bXjSX geD12hIKKL2Ct+TbCm/tObC95zgdai0nqI5EWgU4ZTcHDfN+Zj6i1W9NUOmTQY7O DQS4AR9uy3I5xNRzeIgQgOWENIFcLJg2xFnk0BcCLZI14DRkTE3jHfo1ZLzAPyHp rPjd2SsZb56Aiw== -----END CERTIFICATE-----Generated at Mon Dec 29 13:23:16 2025 by rpki-client