This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json) Hash identifier: awJdZ/P8nHvi4qOXBUs6Ek3DCj5PoI3SiTY3NUDPgSE= Subject key identifier: 71:C6:39:5D:20:B9:67:78:40:01:28:29:9F:17:9C:5C:B3:5D:76:81 Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019B25881F5B9A99A0C7BE0298101A83944A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft Manifest number: 1373 Signing time: Tue 16 Dec 2025 05:00:36 +0000 Manifest this update: Tue 16 Dec 2025 05:00:36 +0000 Manifest next update: Wed 17 Dec 2025 05:00:36 +0000 Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: NBnOFGv6WeUpK6QDA6OCHtOAU801ufl74gIXXJjKNZI=) 2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 05:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:88:1f:5b:9a:99:a0:c7:be:02:98:10:1a:83:94:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Dec 16 05:00:36 2025 GMT Not After : Dec 17 05:00:36 2025 GMT Subject: CN=71c6395d20b96778400128299f179c5cb35d7681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d1:2a:c2:5a:77:d9:59:4c:96:1d:e4:10:40: 18:9e:75:3c:af:63:cc:6d:0c:ad:c9:ff:f0:bb:40: b4:cf:d7:e3:42:66:e3:6e:01:a2:9b:60:9d:fd:3b: 90:b6:f6:c5:b4:03:f8:6b:6c:b8:02:1d:80:cc:48: ee:a6:c8:19:81:45:d3:8e:cf:ee:24:74:17:f3:72: 78:fb:24:ec:b2:21:55:cd:dd:77:ef:50:ac:0d:49: 02:a3:12:09:19:05:5d:46:9e:3d:d7:60:7d:ff:56: 60:2c:47:c8:1e:f2:40:68:71:52:e1:99:36:88:40: 3b:c5:71:25:74:12:24:5e:00:fe:d9:cf:37:34:9f: a8:4a:bc:ea:1c:ae:71:7f:58:db:7c:21:65:a7:33: 3f:a4:c1:bf:ec:6d:5f:24:45:2d:1b:f8:bf:da:f1: 4c:7e:58:73:df:08:fc:c5:8a:0f:d2:57:10:1a:d4: a8:ef:df:75:7e:82:09:8d:af:55:0a:79:02:4c:6b: 56:43:17:7d:d8:75:4f:39:c7:4c:b0:17:7e:c2:12: e3:20:97:e8:f0:8b:6a:b2:70:6f:cc:74:91:51:fe: 98:6e:66:53:fc:2f:c2:d6:0b:b5:27:21:76:5b:ba: 29:2d:11:89:01:54:9d:28:b0:96:ce:46:09:6c:f7: 1b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C6:39:5D:20:B9:67:78:40:01:28:29:9F:17:9C:5C:B3:5D:76:81 X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:59:70:86:b4:a1:31:66:5b:9d:ce:e1:90:5e:28:27:cf:cd: 8d:97:0d:66:1c:0c:69:5b:f8:d5:df:be:ee:ae:ce:93:4e:f4: f4:87:43:6a:e7:5d:9e:d2:71:75:8b:8c:38:60:23:2e:1f:25: 28:e4:ef:3e:db:67:96:7f:34:a5:a1:88:bb:00:84:bc:12:d6: 55:22:f8:22:bc:76:b0:97:94:d9:99:81:cc:ce:ba:15:65:d2: 6c:62:49:1a:9b:f6:ea:88:ba:c8:6f:c8:9b:6c:30:b3:fa:97: b5:7b:7c:6d:83:cb:10:17:d1:95:ea:82:44:14:8b:ad:0f:e3: 9a:67:a5:b1:99:a8:25:e7:d8:b2:08:88:ca:4d:9f:7f:23:dc: ce:17:9d:95:d7:49:82:2e:14:07:23:e0:6d:2b:c5:81:e3:cc: de:23:0d:0a:40:6d:a4:66:41:c1:39:a7:4f:01:91:9c:cb:26: ac:61:e0:07:49:7b:93:48:b7:17:5d:3d:af:45:96:d4:32:f8: 42:2b:39:26:ad:ff:aa:67:ac:fb:c8:5a:84:24:f5:3a:78:61: 53:e3:5f:51:55:91:8a:5b:1b:8a:11:1f:77:15:58:b4:2f:af: 86:c8:ff:dd:16:ad:31:24:53:de:0c:3d:29:65:9f:31:15:1d: f4:ed:30:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsliB9bmpmgx74CmBAag5RKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjUxMjE2MDUwMDM2WhcNMjUxMjE3MDUwMDM2WjAzMTEwLwYDVQQD Eyg3MWM2Mzk1ZDIwYjk2Nzc4NDAwMTI4Mjk5ZjE3OWM1Y2IzNWQ3NjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NEqwlp32VlMlh3kEEAYnnU8r2PM bQytyf/wu0C0z9fjQmbjbgGim2Cd/TuQtvbFtAP4a2y4Ah2AzEjupsgZgUXTjs/u JHQX83J4+yTssiFVzd1371CsDUkCoxIJGQVdRp4912B9/1ZgLEfIHvJAaHFS4Zk2 iEA7xXEldBIkXgD+2c83NJ+oSrzqHK5xf1jbfCFlpzM/pMG/7G1fJEUtG/i/2vFM flhz3wj8xYoP0lcQGtSo7991foIJja9VCnkCTGtWQxd92HVPOcdMsBd+whLjIJfo 8ItqsnBvzHSRUf6YbmZT/C/C1gu1JyF2W7opLRGJAVSdKLCWzkYJbPcbfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHGOV0guWd4QAEoKZ8XnFyzXXaBMB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIllwhrSh MWZbnc7hkF4oJ8/NjZcNZhwMaVv41d++7q7Ok0709IdDauddntJxdYuMOGAjLh8l KOTvPttnln80paGIuwCEvBLWVSL4Irx2sJeU2ZmBzM66FWXSbGJJGpv26oi6yG/I m2wws/qXtXt8bYPLEBfRleqCRBSLrQ/jmmelsZmoJefYsgiIyk2ffyPczhedlddJ gi4UByPgbSvFgePM3iMNCkBtpGZBwTmnTwGRnMsmrGHgB0l7k0i3F109r0WW1DL4 Qis5Jq3/qmes+8hahCT1OnhhU+NfUVWRilsbihEfdxVYtC+vhsj/3RatMSRT3gw9 KWWfMRUd9O0wrw== -----END CERTIFICATE-----Generated at Tue Dec 16 11:47:07 2025 by rpki-client