This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json) Hash identifier: 2StlAx+PudtdbKQ0uTG4QPHFEYzXdpuxjlBDjyJD7+A= Subject key identifier: 1F:E5:83:11:8C:49:9E:90:7E:F2:8C:96:9B:39:D1:E4:FB:AA:4A:B8 Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019B397D3F7F191FE995B8BA420E85F682AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft Manifest number: 159A Signing time: Sat 20 Dec 2025 02:01:08 +0000 Manifest this update: Sat 20 Dec 2025 02:01:08 +0000 Manifest next update: Sun 21 Dec 2025 02:01:08 +0000 Files and hashes: 1: 4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa (hash: eY3z/9PA/1Maeyu8ReLI6rg+bAfCtkuJMwcQbYm1xG0=) 2: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: RS7agPmhts0RQfEcvAgFErFSlUYjsZE5iAYyw0xvoQ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:3f:7f:19:1f:e9:95:b8:ba:42:0e:85:f6:82:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Dec 20 02:01:08 2025 GMT Not After : Dec 21 02:01:08 2025 GMT Subject: CN=1fe583118c499e907ef28c969b39d1e4fbaa4ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:08:ac:7a:eb:a8:16:80:b8:1a:0a:6b:8f:e8: 89:bd:c8:f4:46:d8:61:fa:54:31:52:8b:de:87:92: 74:a0:98:0c:39:dc:b9:81:ec:bd:3a:56:c3:33:25: a2:ab:db:77:e0:e0:ab:cb:9b:2f:ef:4f:da:7d:86: 2c:00:f4:b2:a5:1b:36:e1:26:f8:27:26:4c:9e:46: 72:d0:af:db:57:bf:5c:d3:f6:11:d9:d2:b0:fb:84: d9:82:85:60:b8:8d:a2:6c:11:1a:9f:d2:9e:23:15: 01:ed:a8:b7:1f:27:fe:f0:64:0a:5f:10:07:d0:84: 53:56:59:86:85:a7:e2:f6:62:a0:87:fc:7b:d8:58: 1d:ca:5e:a2:5a:31:20:d6:e5:52:62:e5:06:d1:2e: 60:19:6f:8d:79:b2:26:89:f7:7a:34:e0:1d:98:6c: 81:eb:37:f0:c8:84:fb:ad:76:2a:a0:52:d4:45:18: 9b:03:9e:2a:aa:1d:34:59:e5:d3:bc:8b:56:2a:00: 7d:27:2d:72:77:ea:14:68:33:15:39:1e:79:5e:2f: cf:12:3d:a5:49:6f:9d:d7:59:c2:d3:a0:f0:e5:e5: 71:fa:ad:af:22:78:39:89:73:85:94:3a:ff:6e:a8: 2a:ae:8f:c9:af:7e:da:81:c0:ea:21:c7:12:31:ff: 44:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E5:83:11:8C:49:9E:90:7E:F2:8C:96:9B:39:D1:E4:FB:AA:4A:B8 X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:fa:6e:9d:0d:ba:7b:ee:2d:45:55:2f:b0:44:e8:c2:e2:b6: 97:2e:23:be:2c:f3:ef:44:c0:1d:b0:09:ee:cb:17:2f:c5:da: a9:b8:7f:5f:61:d1:c4:87:fc:69:b2:88:71:07:ec:18:fa:ce: 31:3f:09:c7:53:3d:0c:22:c4:46:0e:0d:cf:5d:28:a6:b0:4b: 32:a8:9d:cb:e6:cf:d5:1c:d2:49:43:b3:9f:e9:5f:54:56:66: 03:d3:b8:84:33:c9:54:ce:88:41:59:84:b9:b0:e7:8b:9b:a6: 4e:18:be:97:88:ae:02:e7:ce:d9:83:f5:92:de:12:75:4a:86: 46:16:e5:db:cd:94:42:ab:b6:4a:f3:cc:27:f1:8c:79:31:05: a9:51:85:0a:cc:fc:41:51:c1:39:cf:f0:84:a6:ab:ee:03:84: fe:b3:ac:5a:cd:eb:29:95:4e:01:7f:d0:d1:b5:39:78:6c:87: 5d:90:d4:6c:d5:4b:8a:36:57:39:ed:1b:e2:41:0d:05:d2:97: de:a9:ab:9e:be:34:c9:79:3e:b4:de:a0:a7:f0:af:4d:5c:20: 49:e6:df:e7:98:d7:b2:f3:91:76:3f:fc:8e:76:c5:53:4f:fc: 57:39:ba:ce:78:e2:74:7b:3e:2d:0d:3f:a9:0b:cf:69:7f:fc: 81:b6:d4:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fT9/GR/plbi6Qg6F9oKtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjUxMjIwMDIwMTA4WhcNMjUxMjIxMDIwMTA4WjAzMTEwLwYDVQQD EygxZmU1ODMxMThjNDk5ZTkwN2VmMjhjOTY5YjM5ZDFlNGZiYWE0YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAiseuuoFoC4Ggprj+iJvcj0Rthh +lQxUoveh5J0oJgMOdy5gey9OlbDMyWiq9t34OCry5sv70/afYYsAPSypRs24Sb4 JyZMnkZy0K/bV79c0/YR2dKw+4TZgoVguI2ibBEan9KeIxUB7ai3Hyf+8GQKXxAH 0IRTVlmGhafi9mKgh/x72Fgdyl6iWjEg1uVSYuUG0S5gGW+NebImifd6NOAdmGyB 6zfwyIT7rXYqoFLURRibA54qqh00WeXTvItWKgB9Jy1yd+oUaDMVOR55Xi/PEj2l SW+d11nC06Dw5eVx+q2vIng5iXOFlDr/bqgqro/Jr37agcDqIccSMf9EOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/lgxGMSZ6QfvKMlps50eT7qkq4MB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvpunQ26 e+4tRVUvsETowuK2ly4jvizz70TAHbAJ7ssXL8Xaqbh/X2HRxIf8abKIcQfsGPrO MT8Jx1M9DCLERg4Nz10oprBLMqidy+bP1RzSSUOzn+lfVFZmA9O4hDPJVM6IQVmE ubDni5umThi+l4iuAufO2YP1kt4SdUqGRhbl282UQqu2SvPMJ/GMeTEFqVGFCsz8 QVHBOc/whKar7gOE/rOsWs3rKZVOAX/Q0bU5eGyHXZDUbNVLijZXOe0b4kENBdKX 3qmrnr40yXk+tN6gp/CvTVwgSebf55jXsvORdj/8jnbFU0/8Vzm6znjidHs+LQ0/ qQvPaX/8gbbUKw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:21:30 2025 by rpki-client