This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json) Hash identifier: CUocl/gpbZH+gG7x9bdwqEJPPlKU5p8UxHRC8OIUmgk= Subject key identifier: 7A:E6:3D:19:47:81:41:54:CB:0A:85:BA:0A:ED:BF:66:25:B7:C5:90 Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019B34FB3A0539FC3294A03BC2759D8A9AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft Manifest number: 137B Signing time: Fri 19 Dec 2025 05:00:38 +0000 Manifest this update: Fri 19 Dec 2025 05:00:38 +0000 Manifest next update: Sat 20 Dec 2025 05:00:38 +0000 Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: iankbp/s48O/WmSQFLEiXjF8AwzIsCIdL5qwuPhH7VQ=) 2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:3a:05:39:fc:32:94:a0:3b:c2:75:9d:8a:9a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Dec 19 05:00:38 2025 GMT Not After : Dec 20 05:00:38 2025 GMT Subject: CN=7ae63d1947814154cb0a85ba0aedbf6625b7c590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:90:c7:31:1b:5f:a6:93:93:f2:01:5e:32:ca: ad:0e:5f:74:6a:68:6a:2c:16:13:ad:66:f7:b3:77: 12:c6:5c:f6:fa:0b:ec:91:c6:fa:5a:d4:aa:0e:79: c8:54:b6:fc:6f:e0:7b:aa:f1:b9:51:34:a8:bd:45: e2:af:29:46:38:34:25:40:f4:16:31:c3:64:fe:f6: 2c:a8:e7:7f:a7:4e:f7:9a:18:bd:c0:ed:cd:9a:ee: 13:56:53:3e:a5:8f:18:4a:4f:60:ca:68:5f:b9:88: 08:c2:b9:a7:6d:c9:77:97:03:c3:27:fd:7f:03:a7: 1e:7d:c0:8f:af:b9:4e:d1:93:ad:15:49:fe:a5:dc: cf:8a:bd:5a:4a:6a:97:82:d6:92:49:e8:1c:63:0f: b2:64:ae:27:ab:27:5c:5b:b2:2f:00:19:ca:9e:a5: 34:9c:45:2a:b7:f7:56:13:42:7f:c0:43:a9:c7:48: b3:42:8e:e0:2d:d4:b8:ca:be:2b:e5:c0:7c:09:bf: b5:02:61:ec:c6:3b:c0:1d:59:68:7c:15:fc:49:ca: 13:dd:61:dc:a2:c9:03:fe:8a:9e:6a:a8:f2:10:37: 6c:d9:72:e6:d9:25:f1:3d:ad:56:9e:46:2c:63:be: da:8e:a1:fa:26:0a:35:45:ee:57:36:93:19:0f:9a: 6f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E6:3D:19:47:81:41:54:CB:0A:85:BA:0A:ED:BF:66:25:B7:C5:90 X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:54:0b:61:cc:71:cc:49:22:ba:7d:95:16:eb:72:aa:5b:cc: 73:0e:da:1a:fc:97:af:48:77:54:f5:59:dd:bb:17:3f:34:6d: 98:62:ae:d5:da:7c:49:38:bf:7b:f7:6d:b2:ea:e0:e6:ee:11: 6b:7b:0d:80:56:f6:92:86:d1:59:8c:d9:b2:f1:36:36:a8:2c: e1:25:1e:75:52:bb:93:d2:2c:4b:5f:bb:66:29:39:53:4a:b2: 21:c5:c2:81:85:d0:81:49:3f:71:01:41:64:4b:8b:82:94:37: ea:22:7c:1a:0d:24:fc:32:3a:9b:bb:0f:93:3e:ed:14:1e:c0: 0e:4c:e7:c9:b3:9d:7a:cc:47:58:ad:6d:b5:d8:a7:ff:17:0a: 9c:f6:f2:4b:b8:f3:9f:48:40:01:f0:a7:41:83:f3:08:5f:f4: cb:af:83:bb:a5:e1:b9:a4:b7:7e:bb:77:43:65:90:08:98:a5: c4:36:44:9e:0a:da:5a:20:ef:8c:82:ba:41:14:0a:dc:2e:69: 1f:6f:73:56:a3:7e:53:a8:39:a4:eb:0f:07:9d:8c:32:fb:4a: 24:65:0d:b2:7e:ad:f9:92:78:14:3c:79:9e:c2:a5:92:8b:04: 26:54:4d:9e:6c:2c:31:a0:92:72:ad:be:d0:98:32:1b:19:22: 5a:16:32:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+zoFOfwylKA7wnWdipqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjUxMjE5MDUwMDM4WhcNMjUxMjIwMDUwMDM4WjAzMTEwLwYDVQQD Eyg3YWU2M2QxOTQ3ODE0MTU0Y2IwYTg1YmEwYWVkYmY2NjI1YjdjNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JDHMRtfppOT8gFeMsqtDl90amhq LBYTrWb3s3cSxlz2+gvskcb6WtSqDnnIVLb8b+B7qvG5UTSovUXirylGODQlQPQW McNk/vYsqOd/p073mhi9wO3Nmu4TVlM+pY8YSk9gymhfuYgIwrmnbcl3lwPDJ/1/ A6cefcCPr7lO0ZOtFUn+pdzPir1aSmqXgtaSSegcYw+yZK4nqydcW7IvABnKnqU0 nEUqt/dWE0J/wEOpx0izQo7gLdS4yr4r5cB8Cb+1AmHsxjvAHVlofBX8ScoT3WHc oskD/oqeaqjyEDds2XLm2SXxPa1WnkYsY77ajqH6Jgo1Re5XNpMZD5pvaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrmPRlHgUFUywqFugrtv2Ylt8WQMB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlQLYcxx zEkiun2VFutyqlvMcw7aGvyXr0h3VPVZ3bsXPzRtmGKu1dp8STi/e/dtsurg5u4R a3sNgFb2kobRWYzZsvE2Nqgs4SUedVK7k9IsS1+7Zik5U0qyIcXCgYXQgUk/cQFB ZEuLgpQ36iJ8Gg0k/DI6m7sPkz7tFB7ADkznybOdesxHWK1ttdin/xcKnPbyS7jz n0hAAfCnQYPzCF/0y6+Du6XhuaS3frt3Q2WQCJilxDZEngraWiDvjIK6QRQK3C5p H29zVqN+U6g5pOsPB52MMvtKJGUNsn6t+ZJ4FDx5nsKlkosEJlRNnmwsMaCScq2+ 0JgyGxkiWhYyMg== -----END CERTIFICATE-----Generated at Fri Dec 19 07:47:14 2025 by rpki-client