This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft File: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft (raw, json) Hash identifier: ZfkpDbYcr3JYDk3cEAgPSlJnMboFlXHLEMOs9vRSNKw= Subject key identifier: AA:00:C8:8A:95:CB:00:60:FA:EC:C1:41:FE:BB:EA:C7:1F:21:D6:AA Authority key identifier: 78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED Certificate issuer: /CN=78fd422a1ddee016ee5f5a23101b93043af764ed Certificate serial: 019B597718550160870BBCBEC84421B6B11F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft Manifest number: 05F9 Signing time: Fri 26 Dec 2025 07:02:15 +0000 Manifest this update: Fri 26 Dec 2025 07:02:15 +0000 Manifest next update: Sat 27 Dec 2025 07:02:15 +0000 Files and hashes: 1: eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl (hash: e9a+++ilZezJMVb8J1Jn13zI1WzW4R/jpQz2AbPhxHg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:77:18:55:01:60:87:0b:bc:be:c8:44:21:b6:b1:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78fd422a1ddee016ee5f5a23101b93043af764ed Validity Not Before: Dec 26 07:02:15 2025 GMT Not After : Dec 27 07:02:15 2025 GMT Subject: CN=aa00c88a95cb0060faecc141febbeac71f21d6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:b4:fb:e2:17:b0:17:7a:74:b0:27:f2:4d: 27:ef:2c:e8:33:7f:b5:ea:41:88:91:99:bf:f9:6b: 7d:77:ad:43:33:1f:60:c0:db:08:91:77:a5:e9:f8: 0c:41:3e:a0:9e:40:80:99:20:ea:5f:2f:01:4b:bb: e9:19:e3:d7:19:0a:df:03:13:a9:68:c9:92:af:96: 7e:84:7c:ea:a7:49:a4:67:09:60:fc:5d:dc:0d:b8: 88:0e:ec:ce:2d:9f:d6:1f:37:6a:51:15:4a:5f:b8: c9:90:81:b8:ef:f0:e7:bd:2f:53:0f:13:87:cd:42: d4:e2:4c:cd:6e:b5:fc:a2:60:5c:37:3a:72:70:dd: b0:b5:91:94:58:22:a6:a4:d1:e4:84:5d:fe:44:ae: a3:49:74:7b:16:70:a7:9d:b3:f8:b2:90:b6:10:4b: f3:99:50:e1:c1:a4:24:95:9a:da:a6:88:d1:db:31: 67:43:4c:73:c5:93:01:9c:d1:e3:e2:44:92:82:7d: 04:d1:ba:11:0e:70:32:32:09:58:8f:98:1b:20:e8: d4:ee:de:3e:00:ad:3d:f8:d6:c5:6d:7b:cc:06:d8: 96:7e:4f:64:94:d6:fd:d2:86:46:72:2e:ad:27:04: 8d:e7:0a:db:d2:e4:0c:53:34:f8:b8:eb:87:80:4a: 1c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:00:C8:8A:95:CB:00:60:FA:EC:C1:41:FE:BB:EA:C7:1F:21:D6:AA X509v3 Authority Key Identifier: keyid:78:FD:42:2A:1D:DE:E0:16:EE:5F:5A:23:10:1B:93:04:3A:F7:64:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/902ae7-0858-4448-8079-2eb18b8841e7/1/eP1CKh3e4BbuX1ojEBuTBDr3ZO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:71:ee:a2:e4:40:13:4b:59:f0:05:78:f1:d8:20:4e:cb:21: e8:e2:20:af:2d:a4:d4:44:aa:3c:56:20:44:a2:a4:d7:cc:1b: d0:7d:a7:7d:b4:e3:25:02:cd:60:cd:1c:9e:3d:b7:e9:bc:3b: 2a:6b:a8:c6:16:f4:59:cc:d9:7f:1a:38:6f:a2:10:d6:b3:ec: 21:ae:9c:ff:ec:5a:26:c5:9a:eb:79:66:cf:a3:29:42:38:a1: fc:47:2c:4c:b7:8f:0e:14:af:e8:48:ab:ce:5e:f6:bc:70:fc: c4:ae:58:2b:66:5f:89:fb:ec:f4:73:6d:fa:5e:46:ab:d0:df: 6f:1c:e5:04:17:93:e6:d9:73:a0:d6:33:f7:5c:4f:c9:2e:f7: cb:fe:35:91:f0:50:a7:81:05:b0:95:0a:85:e3:77:65:c0:1d: f8:21:7b:b8:6b:ae:51:37:fe:f7:d8:c8:2b:01:02:b9:89:62: 8b:08:56:59:fa:30:f9:67:8d:e8:cb:05:cf:dc:8b:e0:3d:9c: ef:d0:7b:3e:e1:f6:dd:2d:6d:fc:5b:8d:4f:de:91:1e:35:09: 8a:96:d6:8f:e4:6f:1f:4c:63:34:f9:df:8d:6d:57:ba:e5:46: e9:38:b2:2c:b7:63:84:53:e3:a9:60:4a:55:9a:08:62:a9:bb: 25:54:e4:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZdxhVAWCHC7y+yEQhtrEfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZmQ0MjJhMWRkZWUwMTZlZTVmNWEyMzEwMWI5MzA0M2Fm NzY0ZWQwHhcNMjUxMjI2MDcwMjE1WhcNMjUxMjI3MDcwMjE1WjAzMTEwLwYDVQQD EyhhYTAwYzg4YTk1Y2IwMDYwZmFlY2MxNDFmZWJiZWFjNzFmMjFkNmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9m0++IXsBd6dLAn8k0n7yzoM3+1 6kGIkZm/+Wt9d61DMx9gwNsIkXel6fgMQT6gnkCAmSDqXy8BS7vpGePXGQrfAxOp aMmSr5Z+hHzqp0mkZwlg/F3cDbiIDuzOLZ/WHzdqURVKX7jJkIG47/DnvS9TDxOH zULU4kzNbrX8omBcNzpycN2wtZGUWCKmpNHkhF3+RK6jSXR7FnCnnbP4spC2EEvz mVDhwaQklZrapojR2zFnQ0xzxZMBnNHj4kSSgn0E0boRDnAyMglYj5gbIOjU7t4+ AK09+NbFbXvMBtiWfk9klNb90oZGci6tJwSN5wrb0uQMUzT4uOuHgEoc6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoAyIqVywBg+uzBQf676scfIdaqMB8GA1UdIwQY MBaAFHj9Qiod3uAW7l9aIxAbkwQ692TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzkt MmViMThiODg0MWU3LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC85MDJhZTctMDg1OC00NDQ4LTgwNzktMmViMThiODg0MWU3 LzEvZVAxQ0toM2U0QmJ1WDFvakVCdVRCRHIzWk8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaHHuouRA E0tZ8AV48dggTssh6OIgry2k1ESqPFYgRKKk18wb0H2nfbTjJQLNYM0cnj236bw7 Kmuoxhb0WczZfxo4b6IQ1rPsIa6c/+xaJsWa63lmz6MpQjih/EcsTLePDhSv6Eir zl72vHD8xK5YK2Zfifvs9HNt+l5Gq9DfbxzlBBeT5tlzoNYz91xPyS73y/41kfBQ p4EFsJUKheN3ZcAd+CF7uGuuUTf+99jIKwECuYliiwhWWfow+WeN6MsFz9yL4D2c 79B7PuH23S1t/FuNT96RHjUJipbWj+RvH0xjNPnfjW1XuuVG6TiyLLdjhFPjqWBK VZoIYqm7JVTkpw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:06:30 2025 by rpki-client