This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json) Hash identifier: xmdZ5kDGxRqGD33DA0/6r2JQ/NVx9wvOmL67NLwWhgs= Subject key identifier: 62:49:A1:3B:13:55:1C:54:A5:61:DA:68:BB:2A:86:3E:0C:3C:F9:4C Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Certificate serial: 019B65E7C47A7FD5C1EAD486CC430B8057D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft Manifest number: 115F Signing time: Sun 28 Dec 2025 17:00:46 +0000 Manifest this update: Sun 28 Dec 2025 17:00:46 +0000 Manifest next update: Mon 29 Dec 2025 17:00:46 +0000 Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=) 2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=) 3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: RyrkIOAwMJdgdZ2UY4mPdtRCCj02LYYlfHl+nECoVkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:c4:7a:7f:d5:c1:ea:d4:86:cc:43:0b:80:57:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Validity Not Before: Dec 28 17:00:46 2025 GMT Not After : Dec 29 17:00:46 2025 GMT Subject: CN=6249a13b13551c54a561da68bb2a863e0c3cf94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:61:51:3b:a8:f5:1b:60:31:e4:45:62:08: b8:54:9d:f0:52:d9:16:e2:5c:54:df:5f:ab:26:9b: 11:9e:a8:fd:df:03:7c:de:69:75:7a:66:55:9f:76: 5f:0c:70:1f:e8:ca:9d:da:af:15:ad:cf:84:01:8d: d9:24:19:8d:b3:41:fa:8d:3d:c0:01:8c:44:33:24: 7a:8b:0a:f6:13:4e:03:68:c9:be:f1:6c:74:6c:74: cb:92:d2:d3:98:fb:9a:87:52:fa:d9:d1:c6:e6:1f: 36:df:45:49:1a:e8:0f:88:4e:b4:1c:21:07:64:89: a9:a8:e3:f8:17:15:8b:37:5d:f4:a8:2e:e7:d0:8e: 4a:ae:63:62:82:9c:17:07:cd:fc:03:a7:dc:39:67: b0:e0:44:49:5b:c5:bc:cd:3b:62:d9:de:e3:76:db: c7:15:eb:6c:46:dc:d8:52:fa:a6:0e:ef:ed:13:46: 8e:e6:8e:d2:e9:7a:f3:7e:a2:e4:a4:dd:1b:52:e9: ed:f0:87:89:45:38:c5:7d:33:a7:5d:f6:25:1d:99: 36:64:e0:1b:13:d0:a9:ff:b7:a2:5a:3e:69:ad:c5: f1:4f:ab:25:b9:03:f4:f8:b9:7f:9d:bc:93:47:2e: db:d6:be:e8:46:7f:dc:27:54:2c:4f:16:af:77:b5: 6b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:A1:3B:13:55:1C:54:A5:61:DA:68:BB:2A:86:3E:0C:3C:F9:4C X509v3 Authority Key Identifier: keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:ef:60:e1:aa:6e:84:74:63:95:66:e8:93:2e:7b:41:0f:6b: 80:77:83:3a:5e:f6:fd:34:c7:32:6a:63:d7:1f:bc:36:85:cc: 17:3c:86:e7:cb:f8:b6:bf:10:2d:8d:fe:b1:ac:d5:14:d1:db: 45:89:5b:48:df:35:27:a8:f4:2b:81:24:db:49:87:cd:11:5a: 3a:93:eb:a6:50:7d:0b:55:ec:ff:e4:99:98:bb:fe:0f:4e:91: e2:7a:f9:e0:86:5d:3b:bb:a6:96:9a:95:22:d6:34:90:ad:ed: 1a:eb:f0:14:74:e8:24:9f:59:af:3b:9b:35:b7:8f:81:a7:e1: ed:10:79:33:fc:ee:43:c5:9e:07:60:15:5f:b6:c2:79:b7:c4: bf:ea:b6:42:31:f1:f6:b1:da:39:18:45:f8:92:29:27:0c:dc: 13:8e:2f:40:ae:fa:6b:55:28:05:f2:3b:b4:31:87:04:e6:58: 4f:a9:a6:3b:d2:9d:4d:7a:45:08:97:a3:eb:4a:8d:99:94:33: 6e:87:5f:5a:30:2d:10:3b:58:ed:b6:4f:e3:55:cc:8b:86:e2: c0:21:1e:43:6a:45:b3:8d:1d:0b:38:db:7a:c2:c6:79:f9:83: c5:15:4b:6c:9e:87:ec:57:ba:5a:8d:de:89:52:7e:56:7e:78: 66:79:97:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl58R6f9XB6tSGzEMLgFfZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4 NThkOTMwHhcNMjUxMjI4MTcwMDQ2WhcNMjUxMjI5MTcwMDQ2WjAzMTEwLwYDVQQD Eyg2MjQ5YTEzYjEzNTUxYzU0YTU2MWRhNjhiYjJhODYzZTBjM2NmOTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKNhUTuo9RtgMeRFYgi4VJ3wUtkW 4lxU31+rJpsRnqj93wN83ml1emZVn3ZfDHAf6Mqd2q8Vrc+EAY3ZJBmNs0H6jT3A AYxEMyR6iwr2E04DaMm+8Wx0bHTLktLTmPuah1L62dHG5h8230VJGugPiE60HCEH ZImpqOP4FxWLN130qC7n0I5KrmNigpwXB838A6fcOWew4ERJW8W8zTti2d7jdtvH FetsRtzYUvqmDu/tE0aO5o7S6XrzfqLkpN0bUunt8IeJRTjFfTOnXfYlHZk2ZOAb E9Cp/7eiWj5prcXxT6sluQP0+Ll/nbyTRy7b1r7oRn/cJ1QsTxavd7VrAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGJJoTsTVRxUpWHaaLsqhj4MPPlMMB8GA1UdIwQY MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnu9g4apu hHRjlWboky57QQ9rgHeDOl72/TTHMmpj1x+8NoXMFzyG58v4tr8QLY3+sazVFNHb RYlbSN81J6j0K4Ek20mHzRFaOpPrplB9C1Xs/+SZmLv+D06R4nr54IZdO7umlpqV ItY0kK3tGuvwFHToJJ9ZrzubNbePgafh7RB5M/zuQ8WeB2AVX7bCebfEv+q2QjHx 9rHaORhF+JIpJwzcE44vQK76a1UoBfI7tDGHBOZYT6mmO9KdTXpFCJej60qNmZQz bodfWjAtEDtY7bZP41XMi4biwCEeQ2pFs40dCzjbesLGefmDxRVLbJ6H7Fe6Wo3e iVJ+Vn54ZnmXaQ== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:54 2025 by rpki-client