This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft File: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft (raw, json) Hash identifier: CcStH6cse+GZ8j8MA3wj8m+8CfdvPOFKPZ+++k9/79M= Subject key identifier: 65:CE:38:D6:5D:ED:57:8F:BD:7F:13:90:B0:C1:9E:CE:3F:0B:5D:E6 Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9 Certificate issuer: /CN=7946c5601064101b1b54cf5c6efcd407f17911b9 Certificate serial: 019B2A77DAD0831C6C1A7DDB998E7B914CEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft Manifest number: 0E60 Signing time: Wed 17 Dec 2025 04:00:56 +0000 Manifest this update: Wed 17 Dec 2025 04:00:56 +0000 Manifest next update: Thu 18 Dec 2025 04:00:56 +0000 Files and hashes: 1: c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa (hash: L3mZu6WxGNpKrVa630mczwqlZOlcgqKqthoD3BhJb+k=) 2: eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl (hash: w+7v35ZDecQroJF8HvA2T3mIqHXfpRvdCsRVfP0+gSI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:77:da:d0:83:1c:6c:1a:7d:db:99:8e:7b:91:4c:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9 Validity Not Before: Dec 17 04:00:56 2025 GMT Not After : Dec 18 04:00:56 2025 GMT Subject: CN=65ce38d65ded578fbd7f1390b0c19ece3f0b5de6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:67:d5:67:34:a8:f3:3c:a3:fa:72:66:0e: 3c:5e:c2:3f:b8:5a:35:0b:35:bc:50:d6:15:42:ac: cf:33:2c:e2:23:61:f3:3e:1e:eb:85:a2:5c:93:90: 0b:c9:f9:a2:07:49:0a:31:16:4d:cb:1c:af:e1:d5: 7d:39:b6:2e:10:da:85:94:75:82:2a:49:b8:61:cb: 74:0f:7c:c5:56:b3:d8:76:50:73:5e:5b:a7:8f:b1: 73:50:f8:d6:c0:5b:af:fc:34:f7:f5:cd:19:4e:cf: 35:f2:ca:5e:f9:a2:f5:e7:c6:33:74:2d:0a:30:f5: db:e5:d3:f4:4a:98:12:68:05:e2:a7:da:e4:37:bf: f2:32:54:9b:c6:ef:59:48:37:b8:f8:bd:2a:c7:23: 3d:0a:b6:c1:8b:70:1b:13:35:a7:17:61:9d:d4:b5: 8e:72:60:a4:48:f4:5c:3a:aa:9d:65:15:b1:c9:de: 26:67:4e:bd:2c:e0:1c:69:22:86:a0:d2:48:f8:92: cf:79:00:0d:c4:ca:29:79:ea:2b:3d:07:79:f5:12: 2b:83:d6:2a:01:f1:9f:1a:56:a7:2a:0d:96:16:20: 46:44:86:8b:98:02:b7:16:d0:9b:e9:f3:ae:92:cc: 3b:d8:f7:7e:50:f3:bd:cb:c3:fc:d9:2b:e4:d5:98: e0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CE:38:D6:5D:ED:57:8F:BD:7F:13:90:B0:C1:9E:CE:3F:0B:5D:E6 X509v3 Authority Key Identifier: keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:1b:48:7a:9d:67:df:55:41:55:71:26:f9:9a:96:b1:5c:94: c8:cb:2c:93:12:a2:73:c0:12:8e:36:61:b4:6f:44:c4:60:d8: 9d:06:f5:7a:30:02:c9:61:75:a4:f6:a5:a6:a9:14:85:c2:b1: 7d:3b:43:f6:46:f1:81:0d:23:86:45:d6:e5:c1:d7:0f:4c:61: 96:00:20:65:ca:ad:97:83:75:3b:be:7d:06:c9:c6:e9:a6:f1: cf:83:6a:36:a8:f7:c7:18:37:6b:b8:5c:7d:ba:89:a3:da:18: 7e:8e:e5:a6:4a:0f:4a:5a:b8:45:74:07:4c:44:88:cf:31:d5: b3:47:76:3a:db:82:da:6f:d5:d0:32:32:31:7a:4e:ce:86:6b: 3a:cc:83:df:83:4e:2f:90:4a:97:1c:37:29:e8:65:b3:ff:fb: 74:9d:18:e2:eb:88:14:eb:62:77:72:c0:3a:af:8c:db:2f:42: 1f:f6:85:f4:d7:d6:e1:b9:f4:f4:7d:ea:d2:f9:16:67:2e:97: 2e:2d:c8:0b:b0:45:a2:d1:d7:90:bb:17:66:46:30:17:26:8f: b1:3d:27:cc:98:90:67:da:ca:8e:d0:bc:0b:17:3c:6a:eb:ed: 72:6e:05:26:58:64:65:a9:91:c1:f0:23:80:7e:8d:bf:62:72: 26:19:e2:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqd9rQgxxsGn3bmY57kUzuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5NDZjNTYwMTA2NDEwMWIxYjU0Y2Y1YzZlZmNkNDA3ZjE3 OTExYjkwHhcNMjUxMjE3MDQwMDU2WhcNMjUxMjE4MDQwMDU2WjAzMTEwLwYDVQQD Eyg2NWNlMzhkNjVkZWQ1NzhmYmQ3ZjEzOTBiMGMxOWVjZTNmMGI1ZGU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyZn1Wc0qPM8o/pyZg48XsI/uFo1 CzW8UNYVQqzPMyziI2HzPh7rhaJck5ALyfmiB0kKMRZNyxyv4dV9ObYuENqFlHWC Kkm4Yct0D3zFVrPYdlBzXlunj7FzUPjWwFuv/DT39c0ZTs818spe+aL158YzdC0K MPXb5dP0SpgSaAXip9rkN7/yMlSbxu9ZSDe4+L0qxyM9CrbBi3AbEzWnF2Gd1LWO cmCkSPRcOqqdZRWxyd4mZ069LOAcaSKGoNJI+JLPeQANxMopeeorPQd59RIrg9Yq AfGfGlanKg2WFiBGRIaLmAK3FtCb6fOuksw72Pd+UPO9y8P82Svk1ZjggQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXOONZd7VePvX8TkLDBns4/C13mMB8GA1UdIwQY MBaAFHlGxWAQZBAbG1TPXG781AfxeRG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVViRllCQmtFQnNiVk05Y2J2elVCX0Y1RWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83M2ZlNzgtZjAwZC00NWY4LWJmZDMt ZjJhMGU5YzhjN2YwLzEvZVViRllCQmtFQnNiVk05Y2J2elVCX0Y1RWJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC83M2ZlNzgtZjAwZC00NWY4LWJmZDMtZjJhMGU5YzhjN2Yw LzEvZVViRllCQmtFQnNiVk05Y2J2elVCX0Y1RWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAABtIep1n 31VBVXEm+ZqWsVyUyMsskxKic8ASjjZhtG9ExGDYnQb1ejACyWF1pPalpqkUhcKx fTtD9kbxgQ0jhkXW5cHXD0xhlgAgZcqtl4N1O759BsnG6abxz4NqNqj3xxg3a7hc fbqJo9oYfo7lpkoPSlq4RXQHTESIzzHVs0d2OtuC2m/V0DIyMXpOzoZrOsyD34NO L5BKlxw3Kehls//7dJ0Y4uuIFOtid3LAOq+M2y9CH/aF9NfW4bn09H3q0vkWZy6X Li3IC7BFotHXkLsXZkYwFyaPsT0nzJiQZ9rKjtC8Cxc8auvtcm4FJlhkZamRwfAj gH6Nv2JyJhniwA== -----END CERTIFICATE-----Generated at Wed Dec 17 11:20:40 2025 by rpki-client