This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft File: eteMr7NfX5az9s7OlwYVrVz_9xE.mft (raw, json) Hash identifier: QOvSl8Gr7TGLlPwowb8s1azSmfTFXriko3bTCMb/uC0= Subject key identifier: C5:5F:36:31:F9:DF:EF:A4:F4:B4:E4:DE:76:86:53:34:EF:ED:DD:CD Authority key identifier: 7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11 Certificate issuer: /CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711 Certificate serial: 019B43249E4EA7A556D58A0B2AB3686156A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft Manifest number: 029E Signing time: Sun 21 Dec 2025 23:00:31 +0000 Manifest this update: Sun 21 Dec 2025 23:00:31 +0000 Manifest next update: Mon 22 Dec 2025 23:00:31 +0000 Files and hashes: 1: eteMr7NfX5az9s7OlwYVrVz_9xE.crl (hash: qZbGBJfdaEABTTW5/PZAo5FCZKKBlCKd+bnu4StcSNs=) 2: mjCXGX40P2ffcrN44boEpnJTaTc.roa (hash: LgLHJFwEHcRfiWC8m23QPb6Ya1PBtB3V5dXpILctiVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:24:9e:4e:a7:a5:56:d5:8a:0b:2a:b3:68:61:56:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ad78cafb35f5f96b3f6cece970615ad5cfff711 Validity Not Before: Dec 21 23:00:31 2025 GMT Not After : Dec 22 23:00:31 2025 GMT Subject: CN=c55f3631f9dfefa4f4b4e4de76865334efedddcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:fb:3f:bf:4d:bc:9a:a9:73:9b:03:6e:fc:27: c5:52:4c:f9:4e:2c:f1:1c:86:9c:64:03:de:83:6f: 79:9e:95:ff:31:36:4e:24:d8:56:e4:ac:35:85:08: be:77:bf:f7:65:87:26:1f:06:d1:c9:35:0a:52:18: 20:de:38:b4:79:69:fd:06:7c:33:b1:13:45:9d:86: 0f:20:33:7c:b6:ea:89:be:64:8b:2e:a4:b1:90:08: 6e:d5:b1:13:34:6b:22:77:49:7a:e0:67:1f:b1:41: 30:e3:3a:0b:b9:87:1b:6d:18:cb:ce:04:38:67:a2: e7:47:eb:0c:b4:53:11:a0:60:d7:03:c8:ca:a5:e4: b9:68:28:45:39:d1:0d:de:36:fc:bd:1e:77:a4:ce: 57:fb:25:13:c4:b4:46:47:db:84:e7:9e:3d:0a:a7: 95:f4:94:c1:04:71:4b:c6:8d:6d:54:ee:95:e2:92: 02:4f:a8:cd:73:8c:02:7a:27:9b:e2:e8:2b:c7:9d: 00:8e:d9:26:7e:10:da:d7:b7:60:29:9f:71:7a:2b: 59:50:6c:9a:e2:56:70:3d:54:4e:48:f8:30:c8:41: 58:6e:7f:d6:04:e0:5c:75:cb:f4:73:dc:87:19:cb: b8:5b:2f:b5:23:43:63:c9:a0:6a:78:41:3b:44:8a: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:5F:36:31:F9:DF:EF:A4:F4:B4:E4:DE:76:86:53:34:EF:ED:DD:CD X509v3 Authority Key Identifier: keyid:7A:D7:8C:AF:B3:5F:5F:96:B3:F6:CE:CE:97:06:15:AD:5C:FF:F7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eteMr7NfX5az9s7OlwYVrVz_9xE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/da0e47-b619-410a-b451-3fdfeae9b3d3/1/eteMr7NfX5az9s7OlwYVrVz_9xE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5e:6e:60:cb:c4:28:2d:72:c1:86:6a:06:70:39:d7:38:76: ec:95:f9:1f:f7:14:8a:42:11:eb:da:39:b2:cb:e2:7f:d3:3e: f6:71:2d:c2:8d:37:27:de:c4:52:23:a1:41:8d:cc:40:81:3e: a1:36:16:8e:87:64:c6:6e:0c:ab:b0:bb:b0:cf:8a:f5:e6:65: 5f:5a:1e:7a:0a:89:b3:4d:db:90:4c:d6:36:e6:bd:a3:90:3d: b6:03:22:51:c5:3a:1b:1b:f7:7a:f8:f3:e1:a4:ef:f9:d5:b8: 64:10:19:48:a5:b8:79:51:cd:5e:fd:24:a4:b4:58:57:bf:a9: bd:8e:78:3a:dc:f2:cc:fb:d8:1a:a2:c3:b3:fd:ed:05:35:4d: 3b:9b:ff:0a:85:05:14:5f:cb:38:2c:70:d4:5d:3b:91:79:dd: a1:cc:79:1f:c5:bf:1f:07:59:57:ea:94:01:bf:05:3f:ca:65: b3:8e:d0:26:c4:3f:b2:95:52:d6:56:24:b4:5c:a0:73:72:12: 02:46:45:3b:7f:61:ed:7e:35:f7:96:92:2f:29:4f:ce:51:74: d7:a7:db:1b:2c:89:c5:3f:88:74:28:c0:ca:8e:7f:9d:1c:a3: 4c:6a:05:e5:24:36:e8:9e:95:e5:6d:01:45:7c:a1:79:13:9c: de:49:f1:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDJJ5Op6VW1YoLKrNoYVaoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhZDc4Y2FmYjM1ZjVmOTZiM2Y2Y2VjZTk3MDYxNWFkNWNm ZmY3MTEwHhcNMjUxMjIxMjMwMDMxWhcNMjUxMjIyMjMwMDMxWjAzMTEwLwYDVQQD EyhjNTVmMzYzMWY5ZGZlZmE0ZjRiNGU0ZGU3Njg2NTMzNGVmZWRkZGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvs/v028mqlzmwNu/CfFUkz5Tizx HIacZAPeg295npX/MTZOJNhW5Kw1hQi+d7/3ZYcmHwbRyTUKUhgg3ji0eWn9Bnwz sRNFnYYPIDN8tuqJvmSLLqSxkAhu1bETNGsid0l64GcfsUEw4zoLuYcbbRjLzgQ4 Z6LnR+sMtFMRoGDXA8jKpeS5aChFOdEN3jb8vR53pM5X+yUTxLRGR9uE5549CqeV 9JTBBHFLxo1tVO6V4pICT6jNc4wCeieb4ugrx50AjtkmfhDa17dgKZ9xeitZUGya 4lZwPVROSPgwyEFYbn/WBOBcdcv0c9yHGcu4Wy+1I0NjyaBqeEE7RIqbSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMVfNjH53++k9LTk3naGUzTv7d3NMB8GA1UdIwQY MBaAFHrXjK+zX1+Ws/bOzpcGFa1c//cRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9kYTBlNDctYjYxOS00MTBhLWI0NTEt M2ZkZmVhZTliM2QzLzEvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9kYTBlNDctYjYxOS00MTBhLWI0NTEtM2ZkZmVhZTliM2Qz LzEvZXRlTXI3TmZYNWF6OXM3T2x3WVZyVnpfOXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl5uYMvE KC1ywYZqBnA51zh27JX5H/cUikIR69o5ssvif9M+9nEtwo03J97EUiOhQY3MQIE+ oTYWjodkxm4Mq7C7sM+K9eZlX1oeegqJs03bkEzWNua9o5A9tgMiUcU6Gxv3evjz 4aTv+dW4ZBAZSKW4eVHNXv0kpLRYV7+pvY54OtzyzPvYGqLDs/3tBTVNO5v/CoUF FF/LOCxw1F07kXndocx5H8W/HwdZV+qUAb8FP8pls47QJsQ/spVS1lYktFygc3IS AkZFO39h7X4195aSLylPzlF016fbGyyJxT+IdCjAyo5/nRyjTGoF5SQ26J6V5W0B RXyheROc3knxqg== -----END CERTIFICATE-----Generated at Mon Dec 22 04:23:30 2025 by rpki-client