This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json) Hash identifier: z5YUr6ieIu6j9TCNZYsRc401lQQplK0TANuWc7fJjLg= Subject key identifier: EE:95:CF:89:E8:57:28:6F:E3:38:C2:26:B8:56:61:CC:3F:D1:46:7D Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019B2BF89C10B7DE877F54CEFC4A170AF670 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft Manifest number: 1593 Signing time: Wed 17 Dec 2025 11:01:11 +0000 Manifest this update: Wed 17 Dec 2025 11:01:11 +0000 Manifest next update: Thu 18 Dec 2025 11:01:11 +0000 Files and hashes: 1: 4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa (hash: eY3z/9PA/1Maeyu8ReLI6rg+bAfCtkuJMwcQbYm1xG0=) 2: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: U4kk/en+dTncR126UoEOs0FPMTAx2iAwb2JAtV/TYms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:f8:9c:10:b7:de:87:7f:54:ce:fc:4a:17:0a:f6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Dec 17 11:01:11 2025 GMT Not After : Dec 18 11:01:11 2025 GMT Subject: CN=ee95cf89e857286fe338c226b85661cc3fd1467d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:f5:5f:36:e5:e7:db:b4:da:3d:5c:ef:84:e9: ce:d5:2e:9b:47:dd:cf:38:7f:1d:3b:24:ac:1d:ba: b1:13:0e:1a:03:36:02:83:3b:8f:b9:bc:5e:b6:34: 77:ae:54:57:94:ef:53:2e:62:fb:b5:ad:b5:87:f7: f3:25:f3:ba:2f:ea:52:8b:16:12:8d:bc:6f:3b:00: c1:a4:30:be:2c:01:e6:26:1e:09:b4:a8:30:51:56: 66:7b:0a:38:6e:ab:95:7a:18:42:a7:68:a9:a0:db: 11:a6:15:82:db:99:b1:e1:23:21:11:8a:ac:b6:06: 8b:c0:56:77:05:cd:1c:9d:11:3c:be:88:fc:7a:4a: e0:9a:2a:00:74:35:fd:c6:06:8a:5f:7d:68:c6:e5: 6e:60:7d:8f:c7:8d:81:a7:53:cd:66:bb:fe:19:b3: 25:49:2e:68:c5:34:40:8a:12:d7:a1:1b:19:fa:06: 1d:3c:ff:3a:d4:5e:32:02:00:80:86:cc:89:3f:54: 32:1a:35:39:66:58:dc:f5:03:8e:61:d0:7a:c8:83: c6:b0:52:2f:ee:77:a0:44:ba:f5:b2:cb:89:a8:e8: 88:ec:e3:d0:15:3d:f2:72:8c:70:31:a2:a1:90:ee: 18:a3:b6:11:bd:ff:46:3a:26:21:08:ea:66:a7:4e: a8:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:95:CF:89:E8:57:28:6F:E3:38:C2:26:B8:56:61:CC:3F:D1:46:7D X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f5:a7:87:0e:b9:79:67:e4:55:15:85:ff:10:23:57:78:84: ad:36:5c:f8:51:45:6e:fc:cd:a3:6c:a9:52:66:36:50:c0:ae: 1c:2a:f1:8e:ca:2a:d3:a7:d5:13:13:bb:55:1f:34:06:55:01: 81:84:78:a5:5f:26:e9:13:50:83:2d:a6:78:89:4e:6d:67:ec: a6:5b:90:09:4f:b4:d5:7d:54:98:27:af:d2:02:72:a0:6d:17: 96:e9:6d:11:98:1c:23:e0:42:d6:78:4c:8a:75:3a:ec:16:fa: a5:fa:7e:ae:40:15:47:40:c9:28:51:55:60:8e:ec:ac:f2:01: 1a:a3:30:3f:63:83:4d:b7:56:9b:75:b6:39:6f:c9:6e:f2:c0: 73:9b:f4:fd:c3:96:60:fd:ab:7e:3d:a2:e2:37:6c:05:ff:4c: d2:28:88:0a:20:93:4f:a0:4b:71:24:e5:9a:5f:d4:3d:04:67: 14:ae:75:cc:5a:4b:23:3d:2c:95:fe:cb:04:c8:72:8e:69:1b: 84:22:03:c1:32:bb:b9:45:d8:ca:b4:60:ac:94:67:f1:b8:ed: 00:46:09:b8:5f:dd:43:19:60:17:34:8a:b9:ef:22:0c:5e:74: 5c:e1:87:2a:91:56:a7:19:92:eb:39:c0:a1:a1:5b:67:fd:38: 91:c4:c8:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsr+JwQt96Hf1TO/EoXCvZwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjUxMjE3MTEwMTExWhcNMjUxMjE4MTEwMTExWjAzMTEwLwYDVQQD EyhlZTk1Y2Y4OWU4NTcyODZmZTMzOGMyMjZiODU2NjFjYzNmZDE0NjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8fVfNuXn27TaPVzvhOnO1S6bR93P OH8dOySsHbqxEw4aAzYCgzuPubxetjR3rlRXlO9TLmL7ta21h/fzJfO6L+pSixYS jbxvOwDBpDC+LAHmJh4JtKgwUVZmewo4bquVehhCp2ipoNsRphWC25mx4SMhEYqs tgaLwFZ3Bc0cnRE8voj8ekrgmioAdDX9xgaKX31oxuVuYH2Px42Bp1PNZrv+GbMl SS5oxTRAihLXoRsZ+gYdPP861F4yAgCAhsyJP1QyGjU5Zljc9QOOYdB6yIPGsFIv 7negRLr1ssuJqOiI7OPQFT3ycoxwMaKhkO4Yo7YRvf9GOiYhCOpmp06olwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6Vz4noVyhv4zjCJrhWYcw/0UZ9MB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAevWnhw65 eWfkVRWF/xAjV3iErTZc+FFFbvzNo2ypUmY2UMCuHCrxjsoq06fVExO7VR80BlUB gYR4pV8m6RNQgy2meIlObWfspluQCU+01X1UmCev0gJyoG0XlultEZgcI+BC1nhM inU67Bb6pfp+rkAVR0DJKFFVYI7srPIBGqMwP2ODTbdWm3W2OW/JbvLAc5v0/cOW YP2rfj2i4jdsBf9M0iiICiCTT6BLcSTlml/UPQRnFK51zFpLIz0slf7LBMhyjmkb hCIDwTK7uUXYyrRgrJRn8bjtAEYJuF/dQxlgFzSKue8iDF50XOGHKpFWpxmS6znA oaFbZ/04kcTINw== -----END CERTIFICATE-----Generated at Wed Dec 17 16:12:06 2025 by rpki-client