This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft File: 79rqxvigN0g5cw_IVnlXCeGO2RY.mft (raw, json) Hash identifier: f8+yGGgrC6M8wOHrTo1YZTQa6P3RmcFtSicyX5EjBic= Subject key identifier: 49:E4:89:FB:A6:F0:BE:6E:1A:35:BE:3B:B6:A5:B7:81:48:D6:65:0C Authority key identifier: EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16 Certificate issuer: /CN=efdaeac6f8a0374839730fc856795709e18ed916 Certificate serial: 019B101485CEA748EF9057D67887D82FAFA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft Manifest number: 1701 Signing time: Fri 12 Dec 2025 01:02:18 +0000 Manifest this update: Fri 12 Dec 2025 01:02:18 +0000 Manifest next update: Sat 13 Dec 2025 01:02:18 +0000 Files and hashes: 1: 79rqxvigN0g5cw_IVnlXCeGO2RY.crl (hash: gfanKCBzIjQR+OTMNI4H/v5pXMnkT8TcpFDGryhcAcE=) 2: jBd9B-QxZd6kSJHakHtwWCRpb8g.roa (hash: D/BN6zrh/Ppu12+wqVsmd0mbM1Dy48uvpuG5EGpyN0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:85:ce:a7:48:ef:90:57:d6:78:87:d8:2f:af:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efdaeac6f8a0374839730fc856795709e18ed916 Validity Not Before: Dec 12 01:02:18 2025 GMT Not After : Dec 13 01:02:18 2025 GMT Subject: CN=49e489fba6f0be6e1a35be3bb6a5b78148d6650c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:bb:4d:e1:31:cf:e3:88:f5:85:8a:d0:3b:be: be:07:00:0f:4a:1c:06:1f:b8:3c:13:06:89:62:f2: db:b7:9d:a7:f8:10:eb:b0:2c:b4:98:08:a5:15:6d: e9:8f:a8:01:77:1d:29:97:97:c2:71:fb:f2:75:eb: e8:ce:41:95:c5:9d:72:72:c5:cd:0e:5f:bd:bd:17: 31:44:75:1e:db:e1:a4:cc:a0:78:eb:be:2d:75:b1: 87:b8:5e:32:ba:93:9b:a3:84:fb:a0:ef:d5:56:96: ca:0d:96:dd:c0:53:5c:d0:a0:84:0c:41:39:cd:2e: b6:e8:06:1b:c0:22:cd:6a:d7:bf:53:65:2e:de:d7: c0:4d:f6:e8:01:ae:42:a9:89:93:aa:93:46:93:5e: b9:cb:24:16:5e:33:31:c5:c1:92:3d:bd:7d:f2:94: c9:d1:4d:27:20:7b:4f:68:37:e4:53:8e:a8:be:4d: 86:e5:98:33:68:f3:b0:e0:40:bf:b3:ba:2c:a0:c3: da:8d:f4:7d:7a:36:87:1a:62:8e:8f:90:11:d2:40: 8a:70:a9:41:e9:7d:96:2f:05:78:36:14:dd:e3:67: 69:66:e1:d8:5b:2a:b0:3a:28:81:91:f0:9f:f7:ad: 2b:dc:91:ed:d6:32:54:98:5d:95:29:a3:29:c4:41: 6b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E4:89:FB:A6:F0:BE:6E:1A:35:BE:3B:B6:A5:B7:81:48:D6:65:0C X509v3 Authority Key Identifier: keyid:EF:DA:EA:C6:F8:A0:37:48:39:73:0F:C8:56:79:57:09:E1:8E:D9:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79rqxvigN0g5cw_IVnlXCeGO2RY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/6d3a3e-0053-4357-b1b4-f992ba058e31/1/79rqxvigN0g5cw_IVnlXCeGO2RY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:24:04:77:ce:73:ec:01:e3:82:f1:3e:5a:75:da:11:8b:03: 40:3e:09:54:2c:0c:8d:f7:47:32:dc:b1:bf:b9:09:7b:d7:93: f7:55:8f:a4:e1:2c:9e:98:78:b8:cb:be:a5:87:c8:44:48:c6: 7c:2b:e8:2a:49:ab:69:77:d1:9f:27:c5:ff:b9:8c:12:e0:a5: b4:9a:75:b6:2b:fc:9c:ae:4d:52:ba:50:58:75:8a:27:e0:fa: ee:cf:37:89:c4:47:7d:3f:56:32:d8:a8:af:d4:d3:04:ff:ce: 2e:6f:ed:67:99:53:7b:bd:20:f7:78:03:f1:04:10:a1:e7:6b: 2d:d9:12:11:6a:7a:52:5e:8d:22:8e:dd:00:af:02:af:8d:fc: 36:7e:bd:d8:8b:ee:02:c4:3c:f2:90:53:3d:b8:36:fe:1d:88: 8e:97:15:2b:24:2e:eb:16:05:3b:6e:7c:f5:b9:a1:0c:da:88: 7b:54:01:50:41:6e:57:5b:fd:51:00:38:ed:25:de:93:9d:e8: 42:a0:95:2b:ac:cd:57:84:23:80:2c:a9:4f:37:f4:5b:f5:35: d0:9c:0c:e3:f4:59:77:0b:6f:84:be:32:af:e7:00:bc:67:e4: 47:f6:0c:36:b2:98:85:e8:06:06:37:7b:4a:3f:6d:e5:c4:a0: 0c:17:3b:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFIXOp0jvkFfWeIfYL6+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZGFlYWM2ZjhhMDM3NDgzOTczMGZjODU2Nzk1NzA5ZTE4 ZWQ5MTYwHhcNMjUxMjEyMDEwMjE4WhcNMjUxMjEzMDEwMjE4WjAzMTEwLwYDVQQD Eyg0OWU0ODlmYmE2ZjBiZTZlMWEzNWJlM2JiNmE1Yjc4MTQ4ZDY2NTBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rtN4THP44j1hYrQO76+BwAPShwG H7g8EwaJYvLbt52n+BDrsCy0mAilFW3pj6gBdx0pl5fCcfvydevozkGVxZ1ycsXN Dl+9vRcxRHUe2+GkzKB4674tdbGHuF4yupObo4T7oO/VVpbKDZbdwFNc0KCEDEE5 zS626AYbwCLNate/U2Uu3tfATfboAa5CqYmTqpNGk165yyQWXjMxxcGSPb198pTJ 0U0nIHtPaDfkU46ovk2G5ZgzaPOw4EC/s7osoMPajfR9ejaHGmKOj5AR0kCKcKlB 6X2WLwV4NhTd42dpZuHYWyqwOiiBkfCf960r3JHt1jJUmF2VKaMpxEFruwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnkifum8L5uGjW+O7alt4FI1mUMMB8GA1UdIwQY MBaAFO/a6sb4oDdIOXMPyFZ5VwnhjtkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQt Zjk5MmJhMDU4ZTMxLzEvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC82ZDNhM2UtMDA1My00MzU3LWIxYjQtZjk5MmJhMDU4ZTMx LzEvNzlycXh2aWdOMGc1Y3dfSVZubFhDZUdPMlJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiiQEd85z 7AHjgvE+WnXaEYsDQD4JVCwMjfdHMtyxv7kJe9eT91WPpOEsnph4uMu+pYfIREjG fCvoKkmraXfRnyfF/7mMEuCltJp1tiv8nK5NUrpQWHWKJ+D67s83icRHfT9WMtio r9TTBP/OLm/tZ5lTe70g93gD8QQQoedrLdkSEWp6Ul6NIo7dAK8Cr438Nn692Ivu AsQ88pBTPbg2/h2IjpcVKyQu6xYFO2589bmhDNqIe1QBUEFuV1v9UQA47SXek53o QqCVK6zNV4QjgCypTzf0W/U10JwM4/RZdwtvhL4yr+cAvGfkR/YMNrKYhegGBjd7 Sj9t5cSgDBc7yA== -----END CERTIFICATE-----Generated at Fri Dec 12 03:42:48 2025 by rpki-client