This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft File: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json) Hash identifier: ZZM7+YAd/SQjrtvylBbnpi5h/YJtoyjNng8/XrIh5X4= Subject key identifier: 14:29:AD:39:BB:D2:2C:B7:EF:C0:54:09:13:85:3A:03:92:03:26:29 Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69 Certificate issuer: /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69 Certificate serial: 019B1F1858748C6B033FC38CC3E966743FC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 23:00:47 +0000 Manifest this update: Sun 14 Dec 2025 23:00:47 +0000 Manifest next update: Mon 15 Dec 2025 23:00:47 +0000 Files and hashes: 1: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: ns2ar5WbcGOS3OWoYGzAcebi8mO8nh/hHQ1wByTtn4U=) 2: zHPhmmLDGByafp8E3VT46VQbn28.roa (hash: +VxtcUh5QNApX1IKUuR65fYbpYpFCHnfMHhjgpFPsbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:18:58:74:8c:6b:03:3f:c3:8c:c3:e9:66:74:3f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69 Validity Not Before: Dec 14 23:00:47 2025 GMT Not After : Dec 15 23:00:47 2025 GMT Subject: CN=1429ad39bbd22cb7efc0540913853a0392032629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0f:9b:47:d5:55:54:3a:ba:50:35:f2:dd:3a: bb:2f:98:81:b9:b4:46:ec:32:cf:2c:49:02:ec:ff: 4b:46:6b:5a:ca:20:96:9e:97:84:cb:19:a4:a1:8c: 2a:8e:5f:d5:5d:3f:fe:13:5e:23:9c:ae:31:ef:d7: ea:94:20:e8:e9:6b:8a:fc:75:80:24:f5:fc:a3:a4: 76:c0:53:79:2b:06:14:d6:f7:18:e3:19:83:94:ca: 24:c3:49:54:ea:a0:e5:b3:7d:02:dd:56:56:90:fa: 85:db:c9:e5:f3:2e:0a:17:40:2a:b0:c3:c8:af:6d: ca:b6:4f:21:c0:0c:8d:82:83:e7:9f:62:85:50:4d: 46:84:eb:47:ad:e5:90:f0:5c:9d:4e:5a:2e:1b:32: 63:df:75:9d:de:e8:44:ec:49:ca:e3:00:77:f1:ed: bd:a4:dc:b4:a1:10:36:26:e4:91:39:a3:ad:fd:9c: 06:44:16:1a:40:6e:e7:43:32:5f:f7:a0:77:59:80: 73:79:2f:60:0f:b9:64:d5:da:66:8c:7e:23:bc:a0: 75:1d:0e:fd:3a:40:e1:cb:bd:3e:5a:c7:49:c7:e6: 93:01:12:dd:64:98:0b:f9:e3:cb:6b:41:45:a8:35: d6:5f:d4:3b:22:04:e6:5a:5e:9b:1e:b1:c9:c7:15: c5:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:29:AD:39:BB:D2:2C:B7:EF:C0:54:09:13:85:3A:03:92:03:26:29 X509v3 Authority Key Identifier: keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:00:c0:f5:ce:da:83:e8:e8:82:f7:0f:78:3a:ec:db:f7:f8: 6d:66:d5:f6:ca:81:37:28:cd:82:3c:e3:3b:12:77:13:23:a0: c7:02:1b:7a:6f:7c:5e:5f:cd:4f:55:75:5e:69:0b:32:90:e2: 1f:9b:1c:05:82:eb:13:34:d4:ba:41:9a:bb:85:ef:9b:91:a7: 81:d6:84:79:da:ab:d0:bb:34:ff:3c:2d:66:a0:00:f1:2a:a0: 24:ab:d5:65:29:e7:76:36:d1:91:26:e6:94:56:6e:96:fa:c0: 83:7b:70:30:d5:a0:4a:6a:41:34:7a:21:00:67:da:49:55:b5: 5e:dd:b0:c4:c2:22:37:c5:48:0b:b4:3a:f6:22:42:e7:89:41: ee:2f:fb:03:19:de:74:57:85:be:cd:42:fa:3b:92:72:13:db: 2c:00:94:3e:86:0d:84:7e:22:3c:b9:22:f1:31:eb:9b:4b:c7: 81:f7:5d:5d:f0:52:a8:e1:67:3f:b1:e0:c8:74:e5:5d:f1:40: 66:55:f1:c1:7f:1f:fb:24:5b:34:bf:18:eb:2e:50:5e:61:03: ef:bf:02:c9:bc:8c:05:59:b9:f1:89:d6:c1:68:a9:75:25:2c: 64:ff:21:91:ff:38:2e:db:25:3a:3d:90:bb:d5:2d:88:3d:41: ff:9d:27:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfGFh0jGsDP8OMw+lmdD/BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZGM0OGQ5YWIxMGYwZTQyYTNkYzY3ZmJkMGY0Y2I4ZTQ0 Y2FiNjkwHhcNMjUxMjE0MjMwMDQ3WhcNMjUxMjE1MjMwMDQ3WjAzMTEwLwYDVQQD EygxNDI5YWQzOWJiZDIyY2I3ZWZjMDU0MDkxMzg1M2EwMzkyMDMyNjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4g+bR9VVVDq6UDXy3Tq7L5iBubRG 7DLPLEkC7P9LRmtayiCWnpeEyxmkoYwqjl/VXT/+E14jnK4x79fqlCDo6WuK/HWA JPX8o6R2wFN5KwYU1vcY4xmDlMokw0lU6qDls30C3VZWkPqF28nl8y4KF0AqsMPI r23Ktk8hwAyNgoPnn2KFUE1GhOtHreWQ8FydTlouGzJj33Wd3uhE7EnK4wB38e29 pNy0oRA2JuSROaOt/ZwGRBYaQG7nQzJf96B3WYBzeS9gD7lk1dpmjH4jvKB1HQ79 OkDhy70+WsdJx+aTARLdZJgL+ePLa0FFqDXWX9Q7IgTmWl6bHrHJxxXFCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBQprTm70iy378BUCROFOgOSAyYpMB8GA1UdIwQY MBaAFO/cSNmrEPDkKj3Gf70PTLjkTKtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMt MDY2MGMxNmVmY2NlLzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMtMDY2MGMxNmVmY2Nl LzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQDA9c7a g+jogvcPeDrs2/f4bWbV9sqBNyjNgjzjOxJ3EyOgxwIbem98Xl/NT1V1XmkLMpDi H5scBYLrEzTUukGau4Xvm5GngdaEedqr0Ls0/zwtZqAA8SqgJKvVZSnndjbRkSbm lFZulvrAg3twMNWgSmpBNHohAGfaSVW1Xt2wxMIiN8VIC7Q69iJC54lB7i/7Axne dFeFvs1C+juSchPbLACUPoYNhH4iPLki8THrm0vHgfddXfBSqOFnP7HgyHTlXfFA ZlXxwX8f+yRbNL8Y6y5QXmED778CybyMBVm58YnWwWipdSUsZP8hkf84LtslOj2Q u9UtiD1B/50nIw== -----END CERTIFICATE-----Generated at Mon Dec 15 05:00:33 2025 by rpki-client