This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json) Hash identifier: Jc09nwSFUjZGy0ebfgagp2YEaz5CebAFbL/59TEv5fI= Subject key identifier: 96:6B:EE:7D:07:C6:8F:E2:26:A1:13:EE:C6:F9:A5:3F:24:F3:9A:3C Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Certificate serial: 019B4CCCA56883C4534F0E22C71A4B53C2D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 20:00:38 +0000 Manifest this update: Tue 23 Dec 2025 20:00:38 +0000 Manifest next update: Wed 24 Dec 2025 20:00:38 +0000 Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=) 2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: ye/v20TnxqEUTgFRF4jlXP/n6kRCmSi9Bg5MRvdnCCY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:cc:a5:68:83:c4:53:4f:0e:22:c7:1a:4b:53:c2:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Validity Not Before: Dec 23 20:00:38 2025 GMT Not After : Dec 24 20:00:38 2025 GMT Subject: CN=966bee7d07c68fe226a113eec6f9a53f24f39a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9a:40:f6:91:8e:d9:39:e4:17:66:34:e1:5c: 21:b6:4f:48:e5:2b:91:17:7d:27:ee:bd:6e:87:48: 0a:2c:17:19:a9:f1:48:f2:b7:b4:4c:80:bc:b6:cf: e5:c0:47:db:5d:01:bc:ab:7d:40:46:62:33:c7:b6: b3:cb:96:97:60:ac:10:95:b0:93:f8:d1:7e:9b:b5: f4:2a:d0:2d:90:49:69:0b:7b:40:94:4b:ca:e0:a9: bf:78:fa:cf:2e:26:7a:7d:e1:30:b5:5d:27:f8:31: 4c:e2:23:1a:5b:41:81:ab:48:58:ca:86:30:0d:bd: dd:67:3b:27:db:3f:63:f8:06:a6:bd:e2:02:53:e0: 21:0c:14:37:77:4f:93:f3:a1:d5:71:fa:02:08:ff: 34:97:6e:7c:b6:47:80:e8:5f:fe:e7:86:57:4e:43: 32:47:51:7c:2a:99:b1:a7:cb:9e:b1:2c:bf:d2:1e: 79:61:1a:fc:88:38:3c:c5:65:df:53:c8:81:00:57: 5e:ca:74:53:55:57:7c:e8:2b:99:29:ab:a9:77:1c: af:49:e5:c0:58:60:cb:2f:a7:37:a4:bc:a3:e1:a8: 79:9b:fe:09:7f:1b:c4:f1:a8:b5:87:10:16:c4:33: 8a:95:59:0d:77:5b:1a:04:9f:f8:18:90:e9:20:6a: e8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6B:EE:7D:07:C6:8F:E2:26:A1:13:EE:C6:F9:A5:3F:24:F3:9A:3C X509v3 Authority Key Identifier: keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:65:a8:83:c4:87:e1:73:cb:84:bd:df:62:db:5f:d4:27:d0: 78:73:a1:eb:b2:b1:6b:1f:d0:9f:43:61:b7:b2:35:e1:3b:f9: 2e:b2:25:73:80:0b:d5:89:a8:90:a1:d0:71:96:52:6e:2a:5e: ce:e7:be:f4:12:2a:84:16:74:10:b0:b3:21:d1:2d:05:44:a4: 2e:04:5f:45:5b:0d:d4:77:79:44:6c:42:a6:bb:03:4f:c1:6d: 8a:cf:6b:72:40:9d:ac:11:e3:67:a9:4f:46:59:11:e2:6d:c5: 4f:bb:5a:19:ac:66:c8:72:6e:8c:6d:47:6e:fa:f2:55:4f:66: 5d:e4:c9:96:1a:ff:d8:8d:0a:13:8e:fe:8f:cb:f1:45:15:13: ac:21:ce:50:7f:dd:2e:cf:1d:79:04:6a:96:20:0c:d7:d5:06: 72:6f:b6:e8:36:7b:56:fd:6f:b0:b1:49:3e:27:67:a6:cf:a3: 8a:63:ef:3e:01:d1:a2:d7:a0:01:02:24:fd:33:cb:d6:a9:ad: d5:d4:d6:ea:80:5b:87:14:6c:dd:68:8f:28:79:bb:dd:21:5d: fb:3e:e7:3b:de:1b:67:c4:18:07:6f:21:a1:13:1e:d3:77:ac: 53:d1:9a:7a:7a:64:8b:39:88:d2:fb:6f:00:ad:53:a2:aa:83: c3:90:94:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMzKVog8RTTw4ixxpLU8LSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDdjZGMyMWM3Y2IyMjQ2NzRjMGVhZmRlYzYzYTIwM2Vl ZTMxMDgwHhcNMjUxMjIzMjAwMDM4WhcNMjUxMjI0MjAwMDM4WjAzMTEwLwYDVQQD Eyg5NjZiZWU3ZDA3YzY4ZmUyMjZhMTEzZWVjNmY5YTUzZjI0ZjM5YTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvppA9pGO2TnkF2Y04Vwhtk9I5SuR F30n7r1uh0gKLBcZqfFI8re0TIC8ts/lwEfbXQG8q31ARmIzx7azy5aXYKwQlbCT +NF+m7X0KtAtkElpC3tAlEvK4Km/ePrPLiZ6feEwtV0n+DFM4iMaW0GBq0hYyoYw Db3dZzsn2z9j+AamveICU+AhDBQ3d0+T86HVcfoCCP80l258tkeA6F/+54ZXTkMy R1F8Kpmxp8uesSy/0h55YRr8iDg8xWXfU8iBAFdeynRTVVd86CuZKaupdxyvSeXA WGDLL6c3pLyj4ah5m/4JfxvE8ai1hxAWxDOKlVkNd1saBJ/4GJDpIGroBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZr7n0Hxo/iJqET7sb5pT8k85o8MB8GA1UdIwQY MBaAFHtHzcIcfLIkZ0wOr97GOiA+7jEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQt MDc1NTc4YzM3YWNhLzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQtMDc1NTc4YzM3YWNh LzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmWog8SH 4XPLhL3fYttf1CfQeHOh67Kxax/Qn0Nht7I14Tv5LrIlc4AL1YmokKHQcZZSbipe zue+9BIqhBZ0ELCzIdEtBUSkLgRfRVsN1Hd5RGxCprsDT8Ftis9rckCdrBHjZ6lP RlkR4m3FT7taGaxmyHJujG1HbvryVU9mXeTJlhr/2I0KE47+j8vxRRUTrCHOUH/d Ls8deQRqliAM19UGcm+26DZ7Vv1vsLFJPidnps+jimPvPgHRotegAQIk/TPL1qmt 1dTW6oBbhxRs3WiPKHm73SFd+z7nO94bZ8QYB28hoRMe03esU9GaenpkizmI0vtv AK1ToqqDw5CU0Q== -----END CERTIFICATE-----Generated at Tue Dec 23 22:15:27 2025 by rpki-client