This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft File: 7094lHNBzlWIi36_NpAUOwy_89Y.mft (raw, json) Hash identifier: iHYdNxl1kpTM85tYHS6tKFpVEQ9jpXb5o6YiZdFbN6M= Subject key identifier: E6:56:39:A5:21:05:D5:8D:D9:1B:B9:82:FD:A1:07:F5:94:D0:0A:CD Authority key identifier: EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 Certificate issuer: /CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Certificate serial: 019B26D29CF5D41E52EDF653F923B27D7A8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft Manifest number: 178C Signing time: Tue 16 Dec 2025 11:01:35 +0000 Manifest this update: Tue 16 Dec 2025 11:01:35 +0000 Manifest next update: Wed 17 Dec 2025 11:01:35 +0000 Files and hashes: 1: 7094lHNBzlWIi36_NpAUOwy_89Y.crl (hash: ZgfoHgqkUtha9UpR75mFlrPUWNjMBz7qY1m+rVycDN8=) 2: BUhsNJUBNyb2HSIUiIeGUaXbRSs.roa (hash: WZxDNbWAEQbOChQ4uBirZFUp84bvXSVkcscB3oLo9vU=) 3: Lighzl11JbBfTq6Hi5vG8FTdoKM.roa (hash: YkC57EBEFbPtoZkLYXdNklRtxOaICvmsfIL0Y9fWfJ0=) 4: g0sPCB79WMlgxKBl78JsjxBs-fY.roa (hash: X+EXtP8p8Q91QAPiVwkYVGvv2ZKJC7/ZwL2Di69yJ1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:d2:9c:f5:d4:1e:52:ed:f6:53:f9:23:b2:7d:7a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef4f78947341ce55888b7ebf3690143b0cbff3d6 Validity Not Before: Dec 16 11:01:35 2025 GMT Not After : Dec 17 11:01:35 2025 GMT Subject: CN=e65639a52105d58dd91bb982fda107f594d00acd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:16:13:75:d7:64:a7:9b:ad:d6:54:9c:ed:75: 57:ac:12:f9:f0:ab:be:b5:59:da:ad:b4:fa:5a:64: c7:3b:ae:a8:ce:dd:9c:f6:27:83:0e:1b:25:fb:7a: fe:42:b7:12:96:1d:d1:0a:33:38:ce:55:51:bb:47: c4:41:a6:b3:21:a4:42:e7:b6:91:d2:c7:c5:2b:b3: ac:13:d5:d9:6b:fa:86:e6:18:64:4f:f3:76:c5:92: 8b:40:a5:fd:1f:76:12:5b:1a:fe:1a:a2:b2:4a:af: 04:c4:84:67:ab:b6:b8:cb:6b:a0:22:31:a1:4f:45: 1d:53:21:b0:12:9e:8a:20:cf:5d:85:a0:44:5c:3a: 72:c2:bd:bc:b5:ff:7c:ec:fe:36:fd:19:19:9c:30: aa:47:17:da:d5:51:ca:d8:63:cb:dd:e7:3a:16:ac: cf:88:bb:75:30:13:79:1c:64:8a:91:88:82:d3:5d: f5:42:94:8f:ce:b0:bc:8e:ae:6d:22:48:e4:1b:3b: 16:d5:99:63:d3:54:5a:7a:e3:6d:17:b5:90:28:0f: 8d:37:d7:5b:fb:dd:cf:f3:91:ff:84:0d:5d:03:e7: c9:49:b6:12:53:ce:2f:1e:bc:53:d7:92:73:dc:60: 31:d6:ed:ec:f2:da:fb:43:87:d9:6b:e5:c1:0b:82: 5f:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:56:39:A5:21:05:D5:8D:D9:1B:B9:82:FD:A1:07:F5:94:D0:0A:CD X509v3 Authority Key Identifier: keyid:EF:4F:78:94:73:41:CE:55:88:8B:7E:BF:36:90:14:3B:0C:BF:F3:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7094lHNBzlWIi36_NpAUOwy_89Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/005c9e-fe7c-469a-b6f0-9baa66ca1404/1/7094lHNBzlWIi36_NpAUOwy_89Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:4a:fd:66:69:ec:e4:f8:7e:5b:7e:88:f9:56:c2:55:8e:fe: 70:1b:8f:b9:55:62:7a:26:e9:5f:f0:f1:af:fd:d5:84:17:10: e5:7d:2e:13:36:d6:15:62:bd:e1:e9:91:b6:53:c6:3e:a2:79: c8:a7:ab:a0:d9:4b:17:a8:ec:90:40:04:b7:e5:31:ab:58:ef: 69:5d:e0:49:50:b0:fa:1b:0a:29:4c:59:ab:01:47:93:f6:28: 4e:e4:07:60:24:c0:e2:9e:56:b1:98:98:c7:00:bc:ae:6b:a2: 23:7d:02:a0:4a:3e:75:f2:09:2c:25:5a:53:45:e6:37:ae:e7: 4b:f9:1b:10:e3:b6:91:75:c5:1a:9b:5a:da:4f:f3:7c:b5:63: d5:5b:f0:dd:b0:4e:ab:35:99:eb:f3:43:e7:fc:09:93:22:9f: 49:f6:49:52:66:ac:2d:86:71:5b:54:0a:a0:77:fd:19:90:d4: 5b:79:98:8e:23:a4:09:fb:f8:8a:b4:30:66:b9:95:d8:17:37: 87:32:0f:93:3e:83:62:4d:7b:25:af:34:d7:44:72:a6:bd:5c: d7:61:98:39:03:aa:82:d2:3c:22:a7:e7:f3:92:e2:34:85:fd: 44:58:8b:a1:dc:59:88:e1:4a:c1:ba:fb:12:75:3d:ad:18:08: 1d:80:68:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsm0pz11B5S7fZT+SOyfXqNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNGY3ODk0NzM0MWNlNTU4ODhiN2ViZjM2OTAxNDNiMGNi ZmYzZDYwHhcNMjUxMjE2MTEwMTM1WhcNMjUxMjE3MTEwMTM1WjAzMTEwLwYDVQQD EyhlNjU2MzlhNTIxMDVkNThkZDkxYmI5ODJmZGExMDdmNTk0ZDAwYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBYTdddkp5ut1lSc7XVXrBL58Ku+ tVnarbT6WmTHO66ozt2c9ieDDhsl+3r+QrcSlh3RCjM4zlVRu0fEQaazIaRC57aR 0sfFK7OsE9XZa/qG5hhkT/N2xZKLQKX9H3YSWxr+GqKySq8ExIRnq7a4y2ugIjGh T0UdUyGwEp6KIM9dhaBEXDpywr28tf987P42/RkZnDCqRxfa1VHK2GPL3ec6FqzP iLt1MBN5HGSKkYiC0131QpSPzrC8jq5tIkjkGzsW1Zlj01RaeuNtF7WQKA+NN9db +93P85H/hA1dA+fJSbYSU84vHrxT15Jz3GAx1u3s8tr7Q4fZa+XBC4JftwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZWOaUhBdWN2Ru5gv2hB/WU0ArNMB8GA1UdIwQY MBaAFO9PeJRzQc5ViIt+vzaQFDsMv/PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAt OWJhYTY2Y2ExNDA0LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8wMDVjOWUtZmU3Yy00NjlhLWI2ZjAtOWJhYTY2Y2ExNDA0 LzEvNzA5NGxITkJ6bFdJaTM2X05wQVVPd3lfODlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEr9Zmns 5Ph+W36I+VbCVY7+cBuPuVVieibpX/Dxr/3VhBcQ5X0uEzbWFWK94emRtlPGPqJ5 yKeroNlLF6jskEAEt+Uxq1jvaV3gSVCw+hsKKUxZqwFHk/YoTuQHYCTA4p5WsZiY xwC8rmuiI30CoEo+dfIJLCVaU0XmN67nS/kbEOO2kXXFGpta2k/zfLVj1Vvw3bBO qzWZ6/ND5/wJkyKfSfZJUmasLYZxW1QKoHf9GZDUW3mYjiOkCfv4irQwZrmV2Bc3 hzIPkz6DYk17Ja8010Rypr1c12GYOQOqgtI8Iqfn85LiNIX9RFiLodxZiOFKwbr7 EnU9rRgIHYBoeQ== -----END CERTIFICATE-----Generated at Tue Dec 16 13:06:33 2025 by rpki-client