This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft File: eF70vSl2vykqtzMEkH9RDNAMyKI.mft (raw, json) Hash identifier: 2u81RCtJ42AhbLHKu9Bw3amaKfqfqSC2Ix+KDTNt7Bs= Subject key identifier: 6C:8B:E3:83:60:94:3A:F4:23:9A:DC:4A:CF:B6:ED:87:56:3F:BD:7C Authority key identifier: 78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2 Certificate issuer: /CN=785ef4bd2976bf292ab73304907f510cd00cc8a2 Certificate serial: 019B35D77765F4AAB8CDACE850FD74991E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft Manifest number: 0E6D Signing time: Fri 19 Dec 2025 09:01:11 +0000 Manifest this update: Fri 19 Dec 2025 09:01:11 +0000 Manifest next update: Sat 20 Dec 2025 09:01:11 +0000 Files and hashes: 1: ENQ20xMkXGryE3-R9yWMozdkmQw.roa (hash: KvgZxgzrzbwhIVZaQOAAyDaKtwhWmv2kX8Vy8zgIZhY=) 2: UZ6oBAYvDqEIadhrw2DO49OXd4M.roa (hash: hNLRe7VoLal2kN+aDGwW7RFMXgmWRT2E6T33XzWJ1Fg=) 3: eF70vSl2vykqtzMEkH9RDNAMyKI.crl (hash: zbbn6grDFgiAh6H6Cnbu6D0LvuVloDSXyOPSlNorVw0=) 4: ij_jY1B8G7JPOxZEgHI2au9jigs.roa (hash: 9ggbS2YlHgtm+sTyMI/V9GVMhp50lC25Zf0jsvILQrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:d7:77:65:f4:aa:b8:cd:ac:e8:50:fd:74:99:1e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785ef4bd2976bf292ab73304907f510cd00cc8a2 Validity Not Before: Dec 19 09:01:11 2025 GMT Not After : Dec 20 09:01:11 2025 GMT Subject: CN=6c8be38360943af4239adc4acfb6ed87563fbd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:7d:9c:e0:8f:ee:8a:3a:5f:91:7f:37:c2: a4:2e:13:8d:99:71:c0:36:f6:b6:fe:05:93:ac:c2: 8f:0b:1b:5a:78:0a:b2:5b:a6:9d:b4:30:84:5c:0a: 79:20:68:ec:44:9f:00:4a:66:52:5f:36:74:40:3a: 33:2f:f0:83:75:83:81:81:c2:c3:b8:c8:5b:19:55: 17:4f:cb:fd:b0:e2:b7:cc:d9:fc:a7:b3:52:1a:cd: c2:5f:8b:60:bb:d3:6d:df:c9:87:a7:38:52:8c:bc: 62:dc:3e:cc:6f:02:09:4e:ac:b7:bd:7a:66:2d:13: ae:5c:31:6d:cd:47:7e:0b:a4:27:91:5c:99:ae:30: 6b:9d:81:35:ef:ff:f3:b3:38:c7:e6:b1:12:5e:e2: 91:0b:d1:15:01:72:d2:03:f1:63:5d:9d:9e:12:c8: c0:a0:86:98:a9:cd:c6:c9:a1:13:da:52:cc:34:de: 37:49:b2:4d:11:f6:63:4b:71:d9:fd:2a:3e:9f:17: 81:1c:90:38:09:90:c7:f2:ef:60:0c:43:a7:e9:db: d4:6b:49:29:ec:57:8e:66:08:2c:a7:53:25:65:e9: d0:fc:20:55:5f:8a:af:10:a6:7e:2f:f2:d9:e9:5a: bf:ea:08:84:3b:3b:73:a7:fd:f4:ea:20:57:f3:6f: 1b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:8B:E3:83:60:94:3A:F4:23:9A:DC:4A:CF:B6:ED:87:56:3F:BD:7C X509v3 Authority Key Identifier: keyid:78:5E:F4:BD:29:76:BF:29:2A:B7:33:04:90:7F:51:0C:D0:0C:C8:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eF70vSl2vykqtzMEkH9RDNAMyKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18e882-97d7-41dd-9efb-7d4fa4cdc7a2/1/eF70vSl2vykqtzMEkH9RDNAMyKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:26:52:ca:2d:c3:21:fe:06:89:6c:d0:53:19:45:16:f4:0d: b7:90:73:58:6d:85:fa:cb:f0:c0:e0:e5:60:54:7e:b1:3f:19: 79:62:9c:30:eb:8b:c8:b9:7f:d7:6c:d7:c6:d4:82:cb:03:7e: 12:3a:38:a1:55:3f:ae:39:94:02:76:97:db:54:6f:13:f0:e2: 6b:a7:20:c4:da:1e:4b:95:02:d4:71:3b:80:d6:94:50:d4:e4: 08:99:5c:9e:5a:ed:e0:70:c0:81:cc:84:ef:6b:28:7f:15:2b: ad:97:1e:04:9a:0a:93:10:b7:15:31:af:f3:fc:6d:5b:31:4e: 4e:35:ec:47:80:3a:8a:b7:57:b9:77:84:8c:9d:0f:eb:cb:31: 0d:fe:c5:59:dc:29:b6:5d:86:1c:47:c0:8a:5e:b7:96:95:a6: f8:7a:9f:1c:77:67:70:93:cd:71:8b:5a:65:e5:5f:a1:39:14: dd:6d:e5:39:e7:0e:9e:6e:d7:40:75:5c:f2:3a:18:f6:bf:68: 70:1e:db:0e:24:65:20:93:f8:c0:ba:94:01:0f:f0:60:47:a0: af:10:ed:ae:80:0e:83:9f:f2:6b:ba:bb:ad:51:61:7a:2c:b9: fa:83:ab:44:63:81:46:28:41:cb:73:ad:4c:d1:fc:28:05:47: 75:4d:e4:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs113dl9Kq4zazoUP10mR42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NWVmNGJkMjk3NmJmMjkyYWI3MzMwNDkwN2Y1MTBjZDAw Y2M4YTIwHhcNMjUxMjE5MDkwMTExWhcNMjUxMjIwMDkwMTExWjAzMTEwLwYDVQQD Eyg2YzhiZTM4MzYwOTQzYWY0MjM5YWRjNGFjZmI2ZWQ4NzU2M2ZiZDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQF9nOCP7oo6X5F/N8KkLhONmXHA Nva2/gWTrMKPCxtaeAqyW6adtDCEXAp5IGjsRJ8ASmZSXzZ0QDozL/CDdYOBgcLD uMhbGVUXT8v9sOK3zNn8p7NSGs3CX4tgu9Nt38mHpzhSjLxi3D7MbwIJTqy3vXpm LROuXDFtzUd+C6QnkVyZrjBrnYE17//zszjH5rESXuKRC9EVAXLSA/FjXZ2eEsjA oIaYqc3GyaET2lLMNN43SbJNEfZjS3HZ/So+nxeBHJA4CZDH8u9gDEOn6dvUa0kp 7FeOZggsp1MlZenQ/CBVX4qvEKZ+L/LZ6Vq/6giEOztzp/306iBX828baQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGyL44NglDr0I5rcSs+27YdWP718MB8GA1UdIwQY MBaAFHhe9L0pdr8pKrczBJB/UQzQDMiiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmIt N2Q0ZmE0Y2RjN2EyLzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8xOGU4ODItOTdkNy00MWRkLTllZmItN2Q0ZmE0Y2RjN2Ey LzEvZUY3MHZTbDJ2eWtxdHpNRWtIOVJETkFNeUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkiZSyi3D If4GiWzQUxlFFvQNt5BzWG2F+svwwODlYFR+sT8ZeWKcMOuLyLl/12zXxtSCywN+ Ejo4oVU/rjmUAnaX21RvE/Dia6cgxNoeS5UC1HE7gNaUUNTkCJlcnlrt4HDAgcyE 72sofxUrrZceBJoKkxC3FTGv8/xtWzFOTjXsR4A6irdXuXeEjJ0P68sxDf7FWdwp tl2GHEfAil63lpWm+HqfHHdncJPNcYtaZeVfoTkU3W3lOecOnm7XQHVc8joY9r9o cB7bDiRlIJP4wLqUAQ/wYEegrxDtroAOg5/ya7q7rVFheiy5+oOrRGOBRihBy3Ot TNH8KAVHdU3k5w== -----END CERTIFICATE-----Generated at Fri Dec 19 14:29:45 2025 by rpki-client