This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json) Hash identifier: qdhM2x9ehHOMzb24/gQY8AGHH9ZV0Xc1y8hnCYZWwAQ= Subject key identifier: 70:41:8F:BD:70:F6:47:3B:CB:9A:3B:2F:C8:F2:B7:C3:E8:A2:9D:63 Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Certificate serial: 019B3B6B488F82CD240DE5754B62B4A1E527 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft Manifest number: 1149 Signing time: Sat 20 Dec 2025 11:00:45 +0000 Manifest this update: Sat 20 Dec 2025 11:00:45 +0000 Manifest next update: Sun 21 Dec 2025 11:00:45 +0000 Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=) 2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=) 3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: CN/Lh+eIcCj2xTH9BMmaYMlxU5UqfF0hZwWy/aE5IWM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:48:8f:82:cd:24:0d:e5:75:4b:62:b4:a1:e5:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Validity Not Before: Dec 20 11:00:45 2025 GMT Not After : Dec 21 11:00:45 2025 GMT Subject: CN=70418fbd70f6473bcb9a3b2fc8f2b7c3e8a29d63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fd:b9:cd:00:82:d0:d3:c1:28:0f:91:55:31: 3e:a5:70:ca:1e:d9:ac:79:39:71:eb:bd:dc:7a:c1: 7e:40:eb:63:34:79:ed:82:0d:2b:e3:a9:b6:80:58: 93:24:05:a7:c7:09:2c:3f:7e:4f:9a:48:35:88:51: 95:8f:9e:09:cb:4e:05:8c:ea:97:39:e4:ee:ac:68: 26:79:74:3c:fc:e1:72:ae:a0:e3:c4:79:0b:e6:c2: a6:ac:3c:78:ab:43:7e:5c:b7:f4:d1:8c:73:b0:ae: eb:db:7c:97:f2:6d:79:fa:12:62:77:d1:0a:cc:2c: 49:42:0e:2d:0c:2c:88:54:b0:83:a8:32:6f:3b:c4: 99:65:dc:38:08:8f:18:e0:c9:26:33:da:b5:16:68: 26:38:18:ac:db:03:5b:64:71:8c:ec:6e:92:25:50: 3f:d5:7c:ca:aa:72:d1:51:ed:43:ad:69:d1:5a:78: dc:45:21:17:bf:db:b9:6b:7b:82:93:06:83:ca:f2: d6:77:a2:5d:6a:eb:c3:c7:e7:cd:44:f1:6d:1e:d3: b7:ec:10:09:1a:6f:57:86:65:0a:43:6c:e6:1f:c0: 04:b0:09:f0:e5:70:3b:7d:80:17:bd:d0:2f:cf:8f: 39:4c:cb:fb:2b:45:a5:4a:68:90:99:e0:9b:ef:f8: 99:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:41:8F:BD:70:F6:47:3B:CB:9A:3B:2F:C8:F2:B7:C3:E8:A2:9D:63 X509v3 Authority Key Identifier: keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6f:a6:54:75:98:ae:32:6b:89:e7:30:00:99:f4:f9:d5:bb: 27:31:6b:49:14:03:c4:e8:67:1c:31:93:58:ce:31:2c:4b:93: ce:cb:e7:71:8c:88:e4:b5:b3:ee:3e:fd:29:d5:fc:82:3a:43: cb:81:ea:dd:73:99:ef:e8:0e:96:df:a6:3f:bd:04:0e:30:02: 77:ec:f5:42:5f:23:60:c5:50:e2:f4:1f:b6:29:ab:03:9e:63: 10:b1:72:85:e4:bc:ec:48:1f:14:59:49:bb:48:bc:20:8d:14: 9c:69:87:04:ba:f2:ee:76:c0:7d:31:85:d8:57:e0:4e:13:bf: 18:06:0e:96:bc:d9:37:04:86:c4:fc:10:2f:a9:5d:a0:d5:a9: 5d:a3:64:af:4f:d6:8e:8f:a0:be:7d:1d:c6:0b:47:09:01:4e: 8b:f8:2a:c6:2d:79:25:41:a0:4e:bd:eb:8b:52:e2:59:b7:9e: 1e:f9:c2:cf:95:1d:8c:ac:71:bd:6b:8b:72:89:90:a8:78:b0: ba:89:5c:ea:03:92:b2:11:5a:90:1e:dd:fc:c6:61:8b:f9:0e: 2d:67:ae:6e:d8:61:32:73:55:2a:b1:c6:ca:02:b1:37:26:a0: e9:8b:3e:5e:60:24:93:23:4c:92:18:fb:3b:f8:fd:0b:0d:d0: 37:63:15:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a0iPgs0kDeV1S2K0oeUnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4 NThkOTMwHhcNMjUxMjIwMTEwMDQ1WhcNMjUxMjIxMTEwMDQ1WjAzMTEwLwYDVQQD Eyg3MDQxOGZiZDcwZjY0NzNiY2I5YTNiMmZjOGYyYjdjM2U4YTI5ZDYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP25zQCC0NPBKA+RVTE+pXDKHtms eTlx673cesF+QOtjNHntgg0r46m2gFiTJAWnxwksP35Pmkg1iFGVj54Jy04FjOqX OeTurGgmeXQ8/OFyrqDjxHkL5sKmrDx4q0N+XLf00YxzsK7r23yX8m15+hJid9EK zCxJQg4tDCyIVLCDqDJvO8SZZdw4CI8Y4MkmM9q1FmgmOBis2wNbZHGM7G6SJVA/ 1XzKqnLRUe1DrWnRWnjcRSEXv9u5a3uCkwaDyvLWd6JdauvDx+fNRPFtHtO37BAJ Gm9XhmUKQ2zmH8AEsAnw5XA7fYAXvdAvz485TMv7K0WlSmiQmeCb7/iZhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBBj71w9kc7y5o7L8jyt8Poop1jMB8GA1UdIwQY MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALW+mVHWY rjJriecwAJn0+dW7JzFrSRQDxOhnHDGTWM4xLEuTzsvncYyI5LWz7j79KdX8gjpD y4Hq3XOZ7+gOlt+mP70EDjACd+z1Ql8jYMVQ4vQftimrA55jELFyheS87EgfFFlJ u0i8II0UnGmHBLry7nbAfTGF2FfgThO/GAYOlrzZNwSGxPwQL6ldoNWpXaNkr0/W jo+gvn0dxgtHCQFOi/gqxi15JUGgTr3ri1LiWbeeHvnCz5UdjKxxvWuLcomQqHiw uolc6gOSshFakB7d/MZhi/kOLWeubthhMnNVKrHGygKxNyag6Ys+XmAkkyNMkhj7 O/j9Cw3QN2MV4A== -----END CERTIFICATE-----Generated at Sat Dec 20 17:57:40 2025 by rpki-client