This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft File: eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft (raw, json) Hash identifier: d2DtdiG8XTmqlCYsOc+eW3kBco3cOXAm5gHLqEspbr0= Subject key identifier: 3E:6F:FB:64:80:30:7C:DA:67:D0:D9:F1:1D:46:C7:CD:B8:F2:C7:7B Authority key identifier: 78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9 Certificate issuer: /CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9 Certificate serial: 019B40FF849002EE36604571C93AF95B965E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft Manifest number: 0D66 Signing time: Sun 21 Dec 2025 13:00:45 +0000 Manifest this update: Sun 21 Dec 2025 13:00:45 +0000 Manifest next update: Mon 22 Dec 2025 13:00:45 +0000 Files and hashes: 1: DBzbCVVWKBBC28Y3-45UdBhQsro.roa (hash: vieVkdTJtG2uejbz3Rj9wI1wTAldkSJkHwon8UEhcVM=) 2: eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl (hash: kT//6gwY8x7C2y2m+KF+EU/9dt3yVEMpUBidfAW8LRg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:ff:84:90:02:ee:36:60:45:71:c9:3a:f9:5b:96:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ff9a330d53d621234a6d1498ce5a43303e9ef9 Validity Not Before: Dec 21 13:00:45 2025 GMT Not After : Dec 22 13:00:45 2025 GMT Subject: CN=3e6ffb6480307cda67d0d9f11d46c7cdb8f2c77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f0:e2:3b:e6:3a:fe:8c:24:f4:32:39:1d:49: 8f:f6:5f:27:f2:d4:eb:93:ee:dd:64:8d:cf:21:85: db:7e:c6:ae:21:48:01:6f:20:5e:eb:5c:a2:a7:ad: cf:49:7d:31:01:ac:c3:ca:ef:a7:1b:5c:b2:15:26: e5:b6:37:83:33:4f:5b:44:16:a3:d4:61:83:87:f1: 81:04:ca:00:c3:0b:2e:9b:3c:b9:b4:65:37:24:7c: 49:46:72:88:29:88:3d:ff:6a:e0:22:49:80:2a:17: 56:0a:79:e7:dd:43:55:63:23:97:2d:cd:c2:92:dd: c9:b6:f6:58:40:f0:90:f3:be:95:5f:ed:8a:d3:29: 95:42:91:c9:de:18:55:90:14:e8:e4:b9:ae:8e:85: 0f:5a:40:52:bd:f1:32:78:86:61:10:3a:e5:25:ab: 3b:47:1b:82:ca:2f:b5:2c:4d:f2:23:65:7b:17:97: 15:23:8c:35:69:60:b7:15:1a:d9:43:bc:05:1f:d4: ef:9d:f1:40:12:c7:3b:94:77:3b:a7:68:2a:90:2e: 96:36:b9:7e:40:eb:fe:ba:cc:ec:da:e7:bf:a6:29: dc:c8:c7:7e:af:91:31:d4:e4:f9:e0:8e:95:64:56: cc:4c:11:72:05:81:71:6a:88:8e:49:97:df:5f:6a: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:6F:FB:64:80:30:7C:DA:67:D0:D9:F1:1D:46:C7:CD:B8:F2:C7:7B X509v3 Authority Key Identifier: keyid:78:FF:9A:33:0D:53:D6:21:23:4A:6D:14:98:CE:5A:43:30:3E:9E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP-aMw1T1iEjSm0UmM5aQzA-nvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/67dd9a-37e1-4285-95da-f288d2097a30/1/eP-aMw1T1iEjSm0UmM5aQzA-nvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:25:59:f2:ec:9f:1c:7e:2d:bc:19:0c:25:fd:8e:ac:db:41: 71:cb:28:40:25:bc:f4:36:76:be:e4:47:f2:a8:bd:92:c5:20: c4:ee:27:d7:4b:5a:f2:4b:8d:df:05:fd:f8:b9:9e:65:e1:69: 83:ca:da:bf:89:f9:c3:c1:c5:a3:b6:0b:e5:a2:bf:b2:1b:dc: d9:4c:92:6c:f6:97:bf:e3:07:83:2c:95:de:cb:06:6b:0f:b2: 68:e4:ce:8f:de:76:7d:78:6a:45:2b:10:28:06:da:3d:e0:07: f0:7e:9d:76:3a:ab:c6:2d:2f:90:cb:e5:c1:66:24:6b:03:31: 5b:e3:28:bc:58:41:f7:0f:05:e5:c2:aa:eb:bc:4f:f3:33:31: 21:88:c9:f0:18:49:61:2a:8e:8c:43:c9:e0:89:b2:61:1f:d5: 57:8f:1a:1c:3b:f9:87:f3:82:9f:09:cb:a7:9e:99:63:1a:6a: 70:46:fc:01:61:04:0e:6b:c5:02:28:3f:8e:47:e1:2e:70:7f: 51:92:96:c1:b4:81:e2:d8:62:90:a0:f3:d1:5a:0f:fd:3c:54: 1d:ec:f8:5d:dd:a8:9f:68:bd:0e:cf:72:04:10:1d:60:19:2b: ab:05:4a:24:fc:f8:7e:9a:52:d4:8e:ee:8d:d1:92:63:87:68: 67:ef:16:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtA/4SQAu42YEVxyTr5W5ZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmY5YTMzMGQ1M2Q2MjEyMzRhNmQxNDk4Y2U1YTQzMzAz ZTllZjkwHhcNMjUxMjIxMTMwMDQ1WhcNMjUxMjIyMTMwMDQ1WjAzMTEwLwYDVQQD EygzZTZmZmI2NDgwMzA3Y2RhNjdkMGQ5ZjExZDQ2YzdjZGI4ZjJjNzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfDiO+Y6/owk9DI5HUmP9l8n8tTr k+7dZI3PIYXbfsauIUgBbyBe61yip63PSX0xAazDyu+nG1yyFSbltjeDM09bRBaj 1GGDh/GBBMoAwwsumzy5tGU3JHxJRnKIKYg9/2rgIkmAKhdWCnnn3UNVYyOXLc3C kt3JtvZYQPCQ876VX+2K0ymVQpHJ3hhVkBTo5LmujoUPWkBSvfEyeIZhEDrlJas7 RxuCyi+1LE3yI2V7F5cVI4w1aWC3FRrZQ7wFH9TvnfFAEsc7lHc7p2gqkC6WNrl+ QOv+uszs2ue/pincyMd+r5Ex1OT54I6VZFbMTBFyBYFxaoiOSZffX2py9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5v+2SAMHzaZ9DZ8R1Gx8248sd7MB8GA1UdIwQY MBaAFHj/mjMNU9YhI0ptFJjOWkMwPp75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEt ZjI4OGQyMDk3YTMwLzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS82N2RkOWEtMzdlMS00Mjg1LTk1ZGEtZjI4OGQyMDk3YTMw LzEvZVAtYU13MVQxaUVqU20wVW1NNWFRekEtbnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyVZ8uyf HH4tvBkMJf2OrNtBccsoQCW89DZ2vuRH8qi9ksUgxO4n10ta8kuN3wX9+LmeZeFp g8rav4n5w8HFo7YL5aK/shvc2UySbPaXv+MHgyyV3ssGaw+yaOTOj952fXhqRSsQ KAbaPeAH8H6ddjqrxi0vkMvlwWYkawMxW+MovFhB9w8F5cKq67xP8zMxIYjJ8BhJ YSqOjEPJ4ImyYR/VV48aHDv5h/OCnwnLp56ZYxpqcEb8AWEEDmvFAig/jkfhLnB/ UZKWwbSB4thikKDz0VoP/TxUHez4Xd2on2i9Ds9yBBAdYBkrqwVKJPz4fppS1I7u jdGSY4doZ+8W0g== -----END CERTIFICATE-----Generated at Sun Dec 21 17:27:56 2025 by rpki-client