This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft File: eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json) Hash identifier: oQwawIHg7pgvMS4IAOOa+XyrBKL8aqMevn4LKgrrbUA= Subject key identifier: A4:E2:42:BB:84:FA:FD:E9:29:4A:74:03:78:C3:B3:01:6D:F9:D6:8A Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85 Certificate serial: 019B3DFE869A2E1BDFE4559C4F4C8F94BF29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft Manifest number: 0219 Signing time: Sat 20 Dec 2025 23:00:49 +0000 Manifest this update: Sat 20 Dec 2025 23:00:49 +0000 Manifest next update: Sun 21 Dec 2025 23:00:49 +0000 Files and hashes: 1: ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa (hash: nT6gO3pCu1NkBlvtxFQSUnCbFnHbtIhkaEeCEOJ+PkU=) 2: SHNEUOB-tmCuler25OnE-7d4RKI.roa (hash: XKq8o0m566WX2AVhb80rl5yUodqaYeMM1rdYd3E/iD0=) 3: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: HYmCHtnqoQwO7+Jorl7YecKUNaxypQaP48p/uFemT+s=) 4: z3ZLPttN_dLEWt9RRuV7F-68KD8.roa (hash: C7j0Qnqfcw9VtnlF4ckZWrE6xR0zYsksmWqIp1TS2Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 23:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:86:9a:2e:1b:df:e4:55:9c:4f:4c:8f:94:bf:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78decead419807747c92ace69448113ff0928b85 Validity Not Before: Dec 20 23:00:49 2025 GMT Not After : Dec 21 23:00:49 2025 GMT Subject: CN=a4e242bb84fafde9294a740378c3b3016df9d68a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a6:92:46:29:dc:06:13:d8:cb:d0:d8:32:d9: 8c:0e:7d:b3:c3:f2:72:24:81:86:6f:47:e9:64:1b: 9a:a4:9b:7a:c2:3a:e9:df:42:63:6c:d6:2e:82:d7: 5a:8c:a9:24:74:42:99:8e:bb:45:35:6d:b7:92:a7: ee:ed:0b:97:44:b3:97:a9:a1:ff:7b:88:31:16:aa: 56:7f:cd:1d:3e:6c:62:9e:4c:03:69:ed:d1:f5:a7: af:29:c2:c7:d9:e5:23:d1:8b:2d:3d:40:08:d2:59: 79:99:40:6a:a3:2b:25:13:c1:72:6a:3f:76:15:db: f5:be:2c:f1:27:08:68:e2:76:27:c7:ff:f2:68:67: 91:c0:36:52:a4:7a:c4:7c:4b:64:58:ae:5d:6d:fd: df:20:de:41:ca:35:0c:fe:05:28:78:f1:31:79:2e: a3:43:c0:78:52:2c:d1:ae:af:7d:9b:2a:25:b0:87: 3f:96:eb:af:6e:06:37:8d:a5:94:25:56:55:73:f4: 2d:1d:19:37:d9:35:81:3b:42:44:23:45:f0:04:4b: e2:c7:31:2d:22:60:83:7e:36:6a:65:78:53:91:ca: e0:a9:2e:90:66:10:d2:2c:a4:89:81:40:85:9a:ae: 20:b1:78:88:14:8b:11:d4:19:36:61:8f:a3:97:a0: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:E2:42:BB:84:FA:FD:E9:29:4A:74:03:78:C3:B3:01:6D:F9:D6:8A X509v3 Authority Key Identifier: keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:6f:0e:98:d9:70:3d:ad:1a:b4:4d:31:8c:8a:2a:2e:66:35: 76:c8:80:10:4b:60:84:a5:ab:91:f2:fc:f4:77:4a:45:f8:1c: 2b:73:84:50:f7:9a:74:4e:2a:92:8e:c9:13:4d:f7:ac:cb:e9: a0:ec:ed:fa:63:c9:6a:df:9e:c2:5b:76:f2:ce:9e:b9:cd:7b: 93:5b:e2:39:7b:b4:84:a4:d5:db:14:18:79:4c:77:d6:8e:b0: a0:ce:ea:6d:ca:4c:65:08:53:02:51:74:75:ac:b9:ce:1c:46: fe:44:0b:5e:c1:64:b1:ab:a4:d1:aa:10:6f:17:2b:79:7b:6a: 59:59:24:6a:42:d0:59:ea:5b:7b:9a:22:5d:77:cf:12:1a:77: d2:76:62:d3:80:ae:94:f4:18:ac:17:20:98:24:4a:b6:d9:37: ec:35:5a:d7:12:00:1e:e0:43:44:a9:de:e4:07:f1:a6:d3:f5: b0:f2:2f:18:3e:69:f6:5a:4d:ec:65:4f:74:c1:b2:1e:48:8e: 24:57:70:28:11:46:82:0e:ed:5b:2f:9d:26:ed:47:d3:bb:85: d1:36:d1:95:38:76:54:5e:66:3b:8a:95:8e:d6:89:60:4d:61: 50:58:10:38:c1:d5:83:77:a1:34:57:31:b7:10:07:2b:5b:f4: 08:da:56:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/oaaLhvf5FWcT0yPlL8pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGVjZWFkNDE5ODA3NzQ3YzkyYWNlNjk0NDgxMTNmZjA5 MjhiODUwHhcNMjUxMjIwMjMwMDQ5WhcNMjUxMjIxMjMwMDQ5WjAzMTEwLwYDVQQD EyhhNGUyNDJiYjg0ZmFmZGU5Mjk0YTc0MDM3OGMzYjMwMTZkZjlkNjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKaSRincBhPYy9DYMtmMDn2zw/Jy JIGGb0fpZBuapJt6wjrp30JjbNYugtdajKkkdEKZjrtFNW23kqfu7QuXRLOXqaH/ e4gxFqpWf80dPmxinkwDae3R9aevKcLH2eUj0YstPUAI0ll5mUBqoyslE8Fyaj92 Fdv1vizxJwho4nYnx//yaGeRwDZSpHrEfEtkWK5dbf3fIN5ByjUM/gUoePExeS6j Q8B4UizRrq99myolsIc/luuvbgY3jaWUJVZVc/QtHRk32TWBO0JEI0XwBEvixzEt ImCDfjZqZXhTkcrgqS6QZhDSLKSJgUCFmq4gsXiIFIsR1Bk2YY+jl6BMSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKTiQruE+v3pKUp0A3jDswFt+daKMB8GA1UdIwQY MBaAFHjezq1BmAd0fJKs5pRIET/wkouFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYt NzUzNjFhYzIwZDVlLzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYtNzUzNjFhYzIwZDVl LzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGm8OmNlw Pa0atE0xjIoqLmY1dsiAEEtghKWrkfL89HdKRfgcK3OEUPeadE4qko7JE033rMvp oOzt+mPJat+ewlt28s6euc17k1viOXu0hKTV2xQYeUx31o6woM7qbcpMZQhTAlF0 day5zhxG/kQLXsFksauk0aoQbxcreXtqWVkkakLQWepbe5oiXXfPEhp30nZi04Cu lPQYrBcgmCRKttk37DVa1xIAHuBDRKne5AfxptP1sPIvGD5p9lpN7GVPdMGyHkiO JFdwKBFGgg7tWy+dJu1H07uF0TbRlTh2VF5mO4qVjtaJYE1hUFgQOMHVg3ehNFcx txAHK1v0CNpWoQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:54 2025 by rpki-client