This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: /Y0AauWXPZTZfM6zbEnPiwDS9QovBioVRnBbTwn10wo= Subject key identifier: 03:FE:9A:3A:A5:EC:DE:D3:AE:4A:8A:E7:6C:3B:99:48:92:35:D5:52 Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019B59E3BE41AD4BD87B46B37E34FF8B20BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 1259 Signing time: Fri 26 Dec 2025 09:00:56 +0000 Manifest this update: Fri 26 Dec 2025 09:00:56 +0000 Manifest next update: Sat 27 Dec 2025 09:00:56 +0000 Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: zVWMVppreCjHDg5dMuz6H7IBaHRULIqmd6Sj8f6ByO0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e3:be:41:ad:4b:d8:7b:46:b3:7e:34:ff:8b:20:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Dec 26 09:00:56 2025 GMT Not After : Dec 27 09:00:56 2025 GMT Subject: CN=03fe9a3aa5ecded3ae4a8ae76c3b99489235d552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d7:1d:e8:57:0a:76:b2:e0:7d:6a:ca:6e:b6: 82:de:d2:0b:f3:2c:26:85:fb:7e:2e:62:0b:30:ac: b5:cb:9a:14:20:67:93:c9:0a:d0:4c:22:86:e7:f8: d6:e9:17:64:fe:c8:eb:1b:cc:f9:fa:2a:9d:a8:da: 0d:fb:23:a7:ed:50:a1:76:4f:0c:be:60:1e:74:c4: ed:5f:b5:ae:d3:86:90:69:c6:0d:ce:e9:b3:6d:76: c8:48:0b:0c:4d:45:80:7b:02:60:70:91:99:f7:65: 54:26:f4:fa:3d:06:0b:d0:e1:f0:2b:b2:32:ad:1c: bc:8d:47:e1:7f:35:05:35:24:fe:bb:18:d8:ac:22: c1:52:b2:50:05:ea:43:f5:c0:03:55:19:5d:a1:08: 4a:ba:09:70:9c:cb:89:05:a6:c5:c9:83:bc:95:4f: e0:74:c0:96:9c:4c:5c:f5:b1:2c:07:05:9b:52:3f: 3c:f7:14:40:92:74:b9:5e:1c:c8:52:3e:46:c4:bb: 98:95:42:a2:97:d4:4f:c6:74:53:83:fa:ff:0f:c1: e5:69:6b:7d:90:e5:94:ca:e8:73:1a:b0:17:9c:c1: d0:fa:fc:eb:d6:71:b9:10:bc:0c:51:d1:9b:e9:3d: 90:a7:56:e7:5b:29:c8:3b:54:cf:e0:ae:a4:cf:9d: 80:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:FE:9A:3A:A5:EC:DE:D3:AE:4A:8A:E7:6C:3B:99:48:92:35:D5:52 X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:ad:47:8a:00:39:32:5a:2e:5e:44:4d:b2:8b:97:3f:46:ba: 81:a3:44:3e:56:db:ba:cb:48:55:66:51:60:18:b1:f8:df:76: 20:72:2c:bf:43:0d:37:c9:58:4d:b6:26:c8:62:c9:6b:82:2f: 56:15:78:eb:8a:a9:fa:51:5e:32:f6:62:49:a5:b5:e5:33:20: d4:3c:2c:60:41:e0:35:33:c0:c1:d8:1c:0f:88:e3:b8:10:9e: cc:fb:e9:2f:8f:02:32:d0:d4:ad:5f:07:30:c5:5b:98:44:db: 34:63:82:5f:73:99:49:ae:77:f0:37:ba:47:df:8b:99:d4:de: ff:73:f2:5f:68:a2:64:1e:7d:90:ae:bc:51:e0:33:24:39:30: 45:0a:3b:bd:8a:d6:84:1e:f8:cf:fe:30:4b:b6:b1:b6:78:99: 24:75:65:78:14:f2:da:e7:79:11:63:c0:84:5d:aa:1d:45:37: 53:8f:2a:2a:7d:70:49:6b:d2:a7:10:c9:ce:2b:08:66:91:80: 0f:fc:8a:bf:68:f0:60:c3:eb:9e:f0:07:67:e7:87:64:f8:59: 83:19:16:b1:ce:1f:78:e8:7e:af:af:e1:5a:2d:a6:de:57:8f: 09:d9:01:5c:f9:0d:33:42:bc:46:59:a7:81:06:a0:ea:52:45: e4:f0:d0:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ475BrUvYe0azfjT/iyC8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjUxMjI2MDkwMDU2WhcNMjUxMjI3MDkwMDU2WjAzMTEwLwYDVQQD EygwM2ZlOWEzYWE1ZWNkZWQzYWU0YThhZTc2YzNiOTk0ODkyMzVkNTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNcd6FcKdrLgfWrKbraC3tIL8ywm hft+LmILMKy1y5oUIGeTyQrQTCKG5/jW6Rdk/sjrG8z5+iqdqNoN+yOn7VChdk8M vmAedMTtX7Wu04aQacYNzumzbXbISAsMTUWAewJgcJGZ92VUJvT6PQYL0OHwK7Iy rRy8jUfhfzUFNST+uxjYrCLBUrJQBepD9cADVRldoQhKuglwnMuJBabFyYO8lU/g dMCWnExc9bEsBwWbUj889xRAknS5XhzIUj5GxLuYlUKil9RPxnRTg/r/D8HlaWt9 kOWUyuhzGrAXnMHQ+vzr1nG5ELwMUdGb6T2Qp1bnWynIO1TP4K6kz52AGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAP+mjql7N7TrkqK52w7mUiSNdVSMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARa1HigA5 MlouXkRNsouXP0a6gaNEPlbbustIVWZRYBix+N92IHIsv0MNN8lYTbYmyGLJa4Iv VhV464qp+lFeMvZiSaW15TMg1DwsYEHgNTPAwdgcD4jjuBCezPvpL48CMtDUrV8H MMVbmETbNGOCX3OZSa538De6R9+LmdTe/3PyX2iiZB59kK68UeAzJDkwRQo7vYrW hB74z/4wS7axtniZJHVleBTy2ud5EWPAhF2qHUU3U48qKn1wSWvSpxDJzisIZpGA D/yKv2jwYMPrnvAHZ+eHZPhZgxkWsc4feOh+r6/hWi2m3lePCdkBXPkNM0K8Rlmn gQag6lJF5PDQrg== -----END CERTIFICATE-----Generated at Fri Dec 26 14:07:49 2025 by rpki-client