This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json) Hash identifier: yV9FBgSSSm/X9yLLxmGQQ8T+gZshmN8+ENIYdNmjrlk= Subject key identifier: 18:09:C9:1D:A4:58:59:EF:D3:F6:F3:65:8D:30:4B:FD:6B:D5:26:BB Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Certificate serial: 019B65E7AA34E4CCEFBBA3C0E3BEA31DDBBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft Manifest number: 179C Signing time: Sun 28 Dec 2025 17:00:39 +0000 Manifest this update: Sun 28 Dec 2025 17:00:39 +0000 Manifest next update: Mon 29 Dec 2025 17:00:39 +0000 Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=) 2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: kF+WZOtVMoZKAVsf8bxQgbM8DGmTN5cUq6etwtQBaYg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e7:aa:34:e4:cc:ef:bb:a3:c0:e3:be:a3:1d:db:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Validity Not Before: Dec 28 17:00:39 2025 GMT Not After : Dec 29 17:00:39 2025 GMT Subject: CN=1809c91da45859efd3f6f3658d304bfd6bd526bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f6:fa:35:65:36:88:7e:bf:56:66:fb:36:9c: 4d:8d:51:16:a3:e2:70:61:c3:91:7c:a2:68:9b:ef: 87:1b:2e:73:cd:29:2c:ce:34:a9:a6:1b:11:83:8a: 11:da:02:e0:9f:ed:dd:bc:e6:c1:fd:19:82:90:9e: fa:4b:3d:23:ce:da:ca:c1:b5:c0:19:dc:51:0d:fe: 23:dc:9b:71:11:dc:7e:4c:00:a6:af:53:27:76:b2: 0a:3d:cb:30:e0:90:e2:27:59:a4:e5:d9:61:1e:c2: 37:e3:0f:38:38:e8:9d:14:9b:f3:a7:52:92:36:8b: 4c:ea:d2:f3:39:85:9e:85:db:4a:b4:0a:f6:2a:7e: ce:19:96:df:c5:74:a8:ab:b9:dc:34:80:57:b9:f2: 64:bb:2a:80:c1:e9:90:12:56:69:bb:fb:d7:f7:55: 12:bc:fa:ce:36:0d:3e:4b:d3:0e:93:16:43:d8:05: 83:09:b2:6d:0f:43:08:a6:5f:d2:53:3f:51:ca:d3: 9b:f9:4d:cf:5f:df:f5:97:90:5f:2b:f8:63:95:15: a2:16:25:cb:73:f0:9e:d6:9e:37:b5:67:83:d1:86: 3b:33:52:bb:86:b3:54:c3:81:ba:91:ea:20:c7:8a: 43:62:c7:b6:b3:7f:f0:ea:0d:2e:7c:5c:7b:30:44: fd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:09:C9:1D:A4:58:59:EF:D3:F6:F3:65:8D:30:4B:FD:6B:D5:26:BB X509v3 Authority Key Identifier: keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:6d:56:67:1d:5a:41:48:b5:8b:4f:5b:e6:d3:61:bf:1e:3a: 03:5e:a8:48:2d:c5:09:60:a7:db:7b:2e:a0:22:19:48:78:73: 01:02:68:47:3d:eb:88:0c:80:05:5e:45:d7:1c:eb:bc:fe:b2: 78:c7:05:b1:37:4e:73:02:78:69:f4:90:cd:ff:93:b4:fe:31: 88:36:b5:26:51:23:06:66:07:93:e9:21:98:a1:0e:1b:ea:b0: d3:81:bc:85:4a:a4:81:99:59:cb:d8:78:81:93:78:b3:36:29: 48:7c:66:17:75:df:c4:a3:b9:d9:98:fb:2c:4f:05:ea:51:b6: cc:fb:a4:70:d6:b2:81:af:62:65:8a:77:f3:14:a2:dd:5e:aa: 94:11:9c:59:ef:eb:b1:5b:79:f2:9b:3f:77:90:64:a3:41:20: d1:bb:67:b4:99:13:a0:46:c2:79:ad:8b:76:8e:38:98:e2:7d: 8e:83:5b:22:34:74:f1:cb:72:08:93:ea:74:da:f4:9d:a0:73: 25:52:29:41:f1:ad:3d:e7:55:61:f2:57:90:f4:47:38:9e:46: d4:e6:56:24:57:02:67:52:ed:40:3b:82:b2:74:05:45:60:d8: e3:4c:d1:ed:f7:99:82:6d:85:2b:d8:2f:18:06:52:3e:9b:aa: c0:7d:33:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl56o05Mzvu6PA476jHdu7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDdjZGMyMWM3Y2IyMjQ2NzRjMGVhZmRlYzYzYTIwM2Vl ZTMxMDgwHhcNMjUxMjI4MTcwMDM5WhcNMjUxMjI5MTcwMDM5WjAzMTEwLwYDVQQD EygxODA5YzkxZGE0NTg1OWVmZDNmNmYzNjU4ZDMwNGJmZDZiZDUyNmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Pb6NWU2iH6/Vmb7NpxNjVEWo+Jw YcORfKJom++HGy5zzSkszjSpphsRg4oR2gLgn+3dvObB/RmCkJ76Sz0jztrKwbXA GdxRDf4j3JtxEdx+TACmr1MndrIKPcsw4JDiJ1mk5dlhHsI34w84OOidFJvzp1KS NotM6tLzOYWehdtKtAr2Kn7OGZbfxXSoq7ncNIBXufJkuyqAwemQElZpu/vX91US vPrONg0+S9MOkxZD2AWDCbJtD0MIpl/SUz9RytOb+U3PX9/1l5BfK/hjlRWiFiXL c/Ce1p43tWeD0YY7M1K7hrNUw4G6keogx4pDYse2s3/w6g0ufFx7MET91QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBgJyR2kWFnv0/bzZY0wS/1r1Sa7MB8GA1UdIwQY MBaAFHtHzcIcfLIkZ0wOr97GOiA+7jEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQt MDc1NTc4YzM3YWNhLzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQtMDc1NTc4YzM3YWNh LzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE21WZx1a QUi1i09b5tNhvx46A16oSC3FCWCn23suoCIZSHhzAQJoRz3riAyABV5F1xzrvP6y eMcFsTdOcwJ4afSQzf+TtP4xiDa1JlEjBmYHk+khmKEOG+qw04G8hUqkgZlZy9h4 gZN4szYpSHxmF3XfxKO52Zj7LE8F6lG2zPukcNayga9iZYp38xSi3V6qlBGcWe/r sVt58ps/d5Bko0Eg0btntJkToEbCea2Ldo44mOJ9joNbIjR08ctyCJPqdNr0naBz JVIpQfGtPedVYfJXkPRHOJ5G1OZWJFcCZ1LtQDuCsnQFRWDY40zR7feZgm2FK9gv GAZSPpuqwH0zBw== -----END CERTIFICATE-----Generated at Mon Dec 29 01:53:16 2025 by rpki-client