This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft File: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json) Hash identifier: xTRNJTQAwvxJcRnihpflAomhEiCw08Kp7DYpSSvxwtM= Subject key identifier: CA:CA:65:B4:24:4F:52:8A:A3:56:68:B8:FA:62:71:F8:F1:82:E0:C4 Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69 Certificate issuer: /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69 Certificate serial: 019B138219A8CDD0DB4DEE11AC3CEFFC21A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft Manifest number: 1774 Signing time: Fri 12 Dec 2025 17:00:51 +0000 Manifest this update: Fri 12 Dec 2025 17:00:51 +0000 Manifest next update: Sat 13 Dec 2025 17:00:51 +0000 Files and hashes: 1: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: exW6whtmJyRO01RufQ5USsKpz5diggvNJ8O1YAuCmIA=) 2: zHPhmmLDGByafp8E3VT46VQbn28.roa (hash: +VxtcUh5QNApX1IKUuR65fYbpYpFCHnfMHhjgpFPsbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 16:30:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:13:82:19:a8:cd:d0:db:4d:ee:11:ac:3c:ef:fc:21:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69 Validity Not Before: Dec 12 17:00:51 2025 GMT Not After : Dec 13 17:00:51 2025 GMT Subject: CN=caca65b4244f528aa35668b8fa6271f8f182e0c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e2:a5:61:9d:8e:42:cc:83:7c:e1:0a:5e:af: 5c:3c:b0:ec:ca:0d:9f:dd:7e:2b:df:05:8c:d6:d8: b2:57:88:b6:b3:5a:c3:4d:3c:29:10:b7:b5:19:0d: a3:61:85:db:df:03:89:3a:8d:48:2c:65:2f:53:3e: 88:e8:36:23:02:21:e4:07:08:93:6d:92:d0:77:9f: 89:41:62:8c:2a:d9:bc:85:de:34:7e:c8:6e:5c:53: 45:62:01:c0:74:95:7d:fe:5e:1e:37:3e:90:52:a5: 20:fb:43:b4:16:84:8d:13:fe:6d:a2:8b:d8:ef:ca: 34:be:17:79:37:02:5c:e2:df:a6:c2:16:e1:5c:93: 52:c0:55:47:2e:99:5d:92:2d:c0:59:73:41:40:ce: a4:b0:74:86:6c:18:61:7d:20:ac:55:c4:6d:2a:47: fd:ca:1a:88:a8:85:44:73:42:da:ab:a8:a7:c3:9f: 92:4a:81:43:73:2f:43:6e:e7:93:32:b7:82:0b:a0: 96:54:ab:b1:0f:80:9d:16:32:f5:6f:76:9d:9e:f9: 1a:d9:0e:18:58:74:06:39:c4:f3:a0:e4:d1:e6:7c: 88:64:8e:38:e2:e6:13:d6:32:65:d3:56:0c:94:8f: b0:3c:f1:7d:3f:8e:20:1a:86:d9:d0:e8:93:f3:a1: 42:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:CA:65:B4:24:4F:52:8A:A3:56:68:B8:FA:62:71:F8:F1:82:E0:C4 X509v3 Authority Key Identifier: keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f0:50:bb:e7:e3:1b:59:cf:56:19:16:8d:31:03:8d:87:b9: 7b:9b:d3:fa:ff:05:d9:c3:7c:e2:4b:64:b4:c3:f2:55:73:5d: de:3b:c1:50:35:9d:05:c4:a6:1c:65:91:54:94:28:75:91:1e: f3:4b:2d:ed:98:fc:b1:4f:c5:d0:1e:96:fa:10:49:33:dc:79: 27:7f:08:1e:fd:7b:78:1a:92:f0:34:17:07:6f:ff:ae:67:51: 96:a3:ac:b5:da:55:2b:97:ee:06:5e:17:1e:f7:fa:ee:1a:e1: 9d:e1:66:d7:f0:60:58:b7:77:bf:f5:04:bf:d0:01:8e:26:da: cd:b2:01:82:ad:68:d8:f3:2a:de:2f:1c:3b:b0:ee:55:f3:76: 6d:a0:eb:c4:ec:b8:ab:b0:4c:92:e6:73:6f:2d:74:16:58:12: 26:40:ec:bc:80:fe:2d:aa:0f:93:5f:39:72:ba:32:f9:f7:81: 8a:41:75:a0:73:39:8b:4b:61:78:61:ad:34:56:a5:a2:78:47: 2f:83:f5:4e:1a:75:23:d0:b4:60:2d:4d:0d:c2:c1:89:61:f4: 4e:12:e1:21:67:30:6e:1f:17:63:7d:a5:4c:86:c0:4b:b0:50: 20:e0:62:ba:ec:0d:ab:97:8a:60:90:97:e8:45:43:9f:ae:fe: 53:df:f7:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsTghmozdDbTe4RrDzv/CGgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZGM0OGQ5YWIxMGYwZTQyYTNkYzY3ZmJkMGY0Y2I4ZTQ0 Y2FiNjkwHhcNMjUxMjEyMTcwMDUxWhcNMjUxMjEzMTcwMDUxWjAzMTEwLwYDVQQD EyhjYWNhNjViNDI0NGY1MjhhYTM1NjY4YjhmYTYyNzFmOGYxODJlMGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOKlYZ2OQsyDfOEKXq9cPLDsyg2f 3X4r3wWM1tiyV4i2s1rDTTwpELe1GQ2jYYXb3wOJOo1ILGUvUz6I6DYjAiHkBwiT bZLQd5+JQWKMKtm8hd40fshuXFNFYgHAdJV9/l4eNz6QUqUg+0O0FoSNE/5toovY 78o0vhd5NwJc4t+mwhbhXJNSwFVHLpldki3AWXNBQM6ksHSGbBhhfSCsVcRtKkf9 yhqIqIVEc0Laq6inw5+SSoFDcy9DbueTMreCC6CWVKuxD4CdFjL1b3adnvka2Q4Y WHQGOcTzoOTR5nyIZI444uYT1jJl01YMlI+wPPF9P44gGobZ0OiT86FCfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrKZbQkT1KKo1ZouPpicfjxguDEMB8GA1UdIwQY MBaAFO/cSNmrEPDkKj3Gf70PTLjkTKtpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMt MDY2MGMxNmVmY2NlLzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80MDRmZWItYThiYy00YzU0LTkwYWMtMDY2MGMxNmVmY2Nl LzEvNzl4STJhc1E4T1FxUGNaX3ZROU11T1JNcTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPBQu+fj G1nPVhkWjTEDjYe5e5vT+v8F2cN84ktktMPyVXNd3jvBUDWdBcSmHGWRVJQodZEe 80st7Zj8sU/F0B6W+hBJM9x5J38IHv17eBqS8DQXB2//rmdRlqOstdpVK5fuBl4X Hvf67hrhneFm1/BgWLd3v/UEv9ABjibazbIBgq1o2PMq3i8cO7DuVfN2baDrxOy4 q7BMkuZzby10FlgSJkDsvID+LaoPk185croy+feBikF1oHM5i0theGGtNFalonhH L4P1Thp1I9C0YC1NDcLBiWH0ThLhIWcwbh8XY32lTIbAS7BQIOBiuuwNq5eKYJCX 6EVDn67+U9/3ew== -----END CERTIFICATE-----Generated at Sat Dec 13 02:02:38 2025 by rpki-client