This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft File: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json) Hash identifier: KsTlxX21eEAzZ6I22p29sn9qMc5w9eEcCabbV9LXW3Y= Subject key identifier: D3:4E:A6:53:59:EA:B3:25:8E:9D:3B:40:A6:BF:D3:77:34:85:37:B4 Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63 Certificate issuer: /CN=efd30d69329d33f44212bf86b69ff20881051063 Certificate serial: 019B42B724C3004F9A8F04AAE2BDC4220046 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft Manifest number: 1787 Signing time: Sun 21 Dec 2025 21:00:57 +0000 Manifest this update: Sun 21 Dec 2025 21:00:57 +0000 Manifest next update: Mon 22 Dec 2025 21:00:57 +0000 Files and hashes: 1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: QQeuJjs2GS17M9TAJrojPfsapxgc1fNsKV71hIvdyjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:24:c3:00:4f:9a:8f:04:aa:e2:bd:c4:22:00:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063 Validity Not Before: Dec 21 21:00:57 2025 GMT Not After : Dec 22 21:00:57 2025 GMT Subject: CN=d34ea65359eab3258e9d3b40a6bfd377348537b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:08:ae:90:82:79:09:b5:6e:ef:9a:29:f4:78: 3a:b8:0e:70:b3:6a:7a:40:2f:77:a3:c8:42:fd:a6: 57:c8:9d:b4:a1:c1:ba:c6:98:8f:f6:b0:92:e1:1f: 28:31:e4:7d:2a:7b:44:e6:42:1a:dc:41:ff:38:df: 3c:39:4e:85:21:97:f7:a6:6a:24:d8:67:42:5f:93: 2d:18:18:22:66:68:2a:5b:ad:d4:a1:08:36:96:e1: 4f:ec:c2:8e:7d:39:03:61:ce:b7:97:65:b3:4b:d5: 67:0d:bb:ea:4d:f9:00:c0:60:75:14:0f:28:94:09: 87:7b:72:cd:30:37:22:5d:6b:ac:76:6e:63:84:0f: a0:21:c4:3d:25:5d:a3:13:d7:e3:c0:ba:d6:94:c8: f4:6a:34:a6:d4:4f:35:10:e4:58:03:6a:3c:74:02: 6a:59:9d:9f:a2:8d:86:da:2f:58:34:0e:bf:bc:fc: 03:a9:c1:b6:c3:ce:97:d4:74:6b:b8:59:71:ac:be: 22:b0:24:69:4d:4b:7f:8b:f8:7d:42:6f:41:57:25: 62:54:89:9f:2e:70:65:9c:be:c6:b8:1c:c5:ce:a6: 76:86:a8:57:8c:37:ae:17:ce:4f:fb:a9:31:f9:8b: d3:6a:b9:4a:5b:cd:cb:d0:f0:7b:d5:43:21:b5:b7: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4E:A6:53:59:EA:B3:25:8E:9D:3B:40:A6:BF:D3:77:34:85:37:B4 X509v3 Authority Key Identifier: keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:72:4b:ee:6b:bc:20:8d:de:b2:6c:8c:1e:53:2b:e0:ea:0f: 81:85:bf:05:b3:9e:e5:e4:2b:0c:b6:3f:5e:a9:59:89:ff:41: 75:b9:35:78:30:09:b6:c6:57:a3:8d:0a:7c:64:cc:4b:c6:80: 00:89:54:1f:90:b8:09:0a:01:71:b7:fc:cf:4b:48:26:b5:bb: 6a:09:41:76:2b:5d:02:25:a9:b0:c1:9c:ad:af:11:50:8e:08: 69:c6:e8:fd:f6:4f:1f:71:8f:18:4f:38:6a:03:bb:f9:ad:9b: 6d:18:38:10:a1:60:0f:f9:99:68:7f:11:95:9b:98:58:24:88: 25:82:07:54:38:a6:0d:e5:26:89:7b:0f:2f:67:9f:31:95:58: b1:4d:6d:5d:87:39:16:95:51:34:bd:bd:5a:e5:36:31:a1:1e: da:e0:45:86:19:2c:77:7f:4b:cd:02:5f:9e:bb:95:05:41:fa: a7:07:43:b1:7c:12:52:0d:58:4a:65:5f:3a:c1:9c:08:9c:ed: 70:6d:66:bd:7c:9a:7d:11:38:35:0c:d2:6a:63:0f:f3:02:68: 59:50:e2:d2:77:a2:1d:c7:2c:25:72:ec:91:d4:36:c2:ae:e1: e5:d1:e2:34:44:d2:bb:c5:fc:9f:d8:d5:4d:2f:e6:5c:10:2c: e4:12:4d:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCtyTDAE+ajwSq4r3EIgBGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZDMwZDY5MzI5ZDMzZjQ0MjEyYmY4NmI2OWZmMjA4ODEw NTEwNjMwHhcNMjUxMjIxMjEwMDU3WhcNMjUxMjIyMjEwMDU3WjAzMTEwLwYDVQQD EyhkMzRlYTY1MzU5ZWFiMzI1OGU5ZDNiNDBhNmJmZDM3NzM0ODUzN2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAiukIJ5CbVu75op9Hg6uA5ws2p6 QC93o8hC/aZXyJ20ocG6xpiP9rCS4R8oMeR9KntE5kIa3EH/ON88OU6FIZf3pmok 2GdCX5MtGBgiZmgqW63UoQg2luFP7MKOfTkDYc63l2WzS9VnDbvqTfkAwGB1FA8o lAmHe3LNMDciXWusdm5jhA+gIcQ9JV2jE9fjwLrWlMj0ajSm1E81EORYA2o8dAJq WZ2foo2G2i9YNA6/vPwDqcG2w86X1HRruFlxrL4isCRpTUt/i/h9Qm9BVyViVImf LnBlnL7GuBzFzqZ2hqhXjDeuF85P+6kx+YvTarlKW83L0PB71UMhtbeY2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNOplNZ6rMljp07QKa/03c0hTe0MB8GA1UdIwQY MBaAFO/TDWkynTP0QhK/hraf8giBBRBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEt ZjM3MzkyMTc3OGUxLzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEtZjM3MzkyMTc3OGUx LzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXJL7mu8 II3esmyMHlMr4OoPgYW/BbOe5eQrDLY/XqlZif9Bdbk1eDAJtsZXo40KfGTMS8aA AIlUH5C4CQoBcbf8z0tIJrW7aglBditdAiWpsMGcra8RUI4Iacbo/fZPH3GPGE84 agO7+a2bbRg4EKFgD/mZaH8RlZuYWCSIJYIHVDimDeUmiXsPL2efMZVYsU1tXYc5 FpVRNL29WuU2MaEe2uBFhhksd39LzQJfnruVBUH6pwdDsXwSUg1YSmVfOsGcCJzt cG1mvXyafRE4NQzSamMP8wJoWVDi0neiHccsJXLskdQ2wq7h5dHiNETSu8X8n9jV TS/mXBAs5BJNBg== -----END CERTIFICATE-----Generated at Mon Dec 22 06:50:41 2025 by rpki-client