This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft File: eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft (raw, json) Hash identifier: DLxCJDe5kzTwz9xG73fncxk2UDzFBjmfjhft7KFkWuw= Subject key identifier: 7B:78:E6:3B:27:61:96:33:BF:40:71:1B:4A:58:3C:3C:1A:66:15:74 Authority key identifier: 7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1 Certificate issuer: /CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1 Certificate serial: 019B4091AF32DE34573D74EBBF56C464987D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 11:00:47 +0000 Manifest this update: Sun 21 Dec 2025 11:00:47 +0000 Manifest next update: Mon 22 Dec 2025 11:00:47 +0000 Files and hashes: 1: 0D2wLjVbDWwACcQ-Kz3sd6AfexU.roa (hash: 7Sb+sy2XY1zDYvtO32J9cA443b1TwPmknXgPIPE3iJ4=) 2: eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl (hash: lRJzPoDxZRBGv88Lf11E2iVjHjXhwMKk4iNk8iSys6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:91:af:32:de:34:57:3d:74:eb:bf:56:c4:64:98:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b24358c4f16c19ffad37f3cafe0c8f6acbf65b1 Validity Not Before: Dec 21 11:00:47 2025 GMT Not After : Dec 22 11:00:47 2025 GMT Subject: CN=7b78e63b27619633bf40711b4a583c3c1a661574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f7:b9:f3:c2:bd:dc:ba:cb:38:e6:9b:fb:eb: 3a:7b:45:5e:6d:a5:b6:b6:4c:18:6e:3f:13:ab:9a: 4b:23:54:c7:66:f4:08:8c:ad:f2:01:8c:54:fa:ee: 45:75:46:96:a0:00:c1:39:fc:50:0c:82:51:a1:af: 19:80:77:e1:e1:f9:41:73:01:38:d7:84:7a:ad:e2: 33:74:69:76:87:70:b0:2b:93:ac:e4:cc:22:a1:27: 53:b6:42:d8:78:eb:91:a8:6d:73:c5:d0:b7:61:0d: 65:ae:0e:d9:d9:36:21:ac:df:ca:91:85:32:1e:68: 7e:fb:9e:ce:d4:b8:08:cc:32:06:6e:92:89:40:5b: c9:59:a2:27:b0:23:67:27:3e:f1:06:65:de:c8:9e: 43:33:2b:ef:2d:26:95:53:75:ef:b6:e6:f4:c3:04: 37:32:18:c9:55:13:ea:e7:e3:6b:1e:de:03:48:42: 3d:a2:94:95:5e:01:a8:15:a4:68:c3:98:f9:c3:55: 40:95:8e:4a:16:cf:4b:d9:4c:33:97:09:14:70:99: ee:df:40:8b:42:cc:a6:22:4b:c9:94:16:66:ab:b5: 91:b8:9b:fc:3a:d8:ec:a8:85:d1:6a:00:1d:47:c3: e2:92:87:9f:20:15:18:fe:3c:22:8a:39:94:53:20: 2a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:78:E6:3B:27:61:96:33:BF:40:71:1B:4A:58:3C:3C:1A:66:15:74 X509v3 Authority Key Identifier: keyid:7B:24:35:8C:4F:16:C1:9F:FA:D3:7F:3C:AF:E0:C8:F6:AC:BF:65:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyQ1jE8WwZ_60388r-DI9qy_ZbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/9aa63b-7647-4073-9e66-0d7c52154183/1/eyQ1jE8WwZ_60388r-DI9qy_ZbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b5:cd:46:eb:6a:0c:7d:26:18:07:c0:8a:5e:95:73:44:20: 24:00:3a:f7:28:15:cf:bb:3b:1f:c7:b7:3c:0c:2a:0f:b1:bb: 5d:55:7d:fd:98:93:86:21:69:05:f1:1e:db:77:f6:69:bb:29: 12:4b:ba:9b:fa:76:91:83:57:14:3a:91:8d:10:ae:47:7e:34: 57:63:15:d2:e1:81:09:5b:8d:87:e3:1f:78:a2:59:07:c0:1c: 4c:3e:8f:3b:77:6b:12:44:f0:c9:2d:14:e9:57:38:dc:5e:81: cf:03:ad:ce:a7:f8:2e:7c:ef:80:a9:15:83:65:6b:19:4c:df: 16:a4:49:7e:20:82:be:7c:fa:03:b3:50:7b:bf:ff:83:d0:18: b6:c4:86:f3:c7:96:4a:b7:f3:b2:74:be:fd:79:87:41:df:88: 05:74:7f:62:a3:4a:97:35:75:c4:a8:93:97:92:2d:34:0a:28: bb:7e:38:ef:f0:0f:02:21:03:6b:67:ba:c2:f9:5b:49:a4:32: a3:8b:2e:6f:7e:0f:36:d8:1b:fa:a3:2e:78:50:e5:a2:e3:9f: f8:02:28:73:4a:35:25:a1:15:e5:d2:98:fc:dc:e9:99:b5:ed: bc:9b:69:9b:2e:f7:09:be:48:e6:e6:12:00:af:07:ea:9d:e0: 64:61:5f:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAka8y3jRXPXTrv1bEZJh9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMjQzNThjNGYxNmMxOWZmYWQzN2YzY2FmZTBjOGY2YWNi ZjY1YjEwHhcNMjUxMjIxMTEwMDQ3WhcNMjUxMjIyMTEwMDQ3WjAzMTEwLwYDVQQD Eyg3Yjc4ZTYzYjI3NjE5NjMzYmY0MDcxMWI0YTU4M2MzYzFhNjYxNTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyve588K93LrLOOab++s6e0VebaW2 tkwYbj8Tq5pLI1THZvQIjK3yAYxU+u5FdUaWoADBOfxQDIJRoa8ZgHfh4flBcwE4 14R6reIzdGl2h3CwK5Os5MwioSdTtkLYeOuRqG1zxdC3YQ1lrg7Z2TYhrN/KkYUy Hmh++57O1LgIzDIGbpKJQFvJWaInsCNnJz7xBmXeyJ5DMyvvLSaVU3Xvtub0wwQ3 MhjJVRPq5+NrHt4DSEI9opSVXgGoFaRow5j5w1VAlY5KFs9L2UwzlwkUcJnu30CL QsymIkvJlBZmq7WRuJv8OtjsqIXRagAdR8PikoefIBUY/jwiijmUUyAqrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHt45jsnYZYzv0BxG0pYPDwaZhV0MB8GA1UdIwQY MBaAFHskNYxPFsGf+tN/PK/gyPasv2WxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYt MGQ3YzUyMTU0MTgzLzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS85YWE2M2ItNzY0Ny00MDczLTllNjYtMGQ3YzUyMTU0MTgz LzEvZXlRMWpFOFd3Wl82MDM4OHItREk5cXlfWmJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7XNRutq DH0mGAfAil6Vc0QgJAA69ygVz7s7H8e3PAwqD7G7XVV9/ZiThiFpBfEe23f2absp Eku6m/p2kYNXFDqRjRCuR340V2MV0uGBCVuNh+MfeKJZB8AcTD6PO3drEkTwyS0U 6Vc43F6BzwOtzqf4LnzvgKkVg2VrGUzfFqRJfiCCvnz6A7NQe7//g9AYtsSG88eW SrfzsnS+/XmHQd+IBXR/YqNKlzV1xKiTl5ItNAoou3447/APAiEDa2e6wvlbSaQy o4sub34PNtgb+qMueFDlouOf+AIoc0o1JaEV5dKY/NzpmbXtvJtpmy73Cb5I5uYS AK8H6p3gZGFfrw== -----END CERTIFICATE-----Generated at Sun Dec 21 19:28:06 2025 by rpki-client