This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json) Hash identifier: BNBvs/ICiYIoGLFf2FiTEm5C3TdZiV4dn4S2U74+QCE= Subject key identifier: 04:FB:14:BE:D3:04:AB:2F:33:6B:25:06:CA:06:32:C2:22:D9:8D:95 Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Certificate serial: 019B59ACACB4BBC465FA73562FA5A0A20294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft Manifest number: 0226 Signing time: Fri 26 Dec 2025 08:00:47 +0000 Manifest this update: Fri 26 Dec 2025 08:00:47 +0000 Manifest next update: Sat 27 Dec 2025 08:00:47 +0000 Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=) 2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: S6Q88UIYNgriGe3pVY1rp0uHBr9t4aneFdw4KCrB+Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ac:b4:bb:c4:65:fa:73:56:2f:a5:a0:a2:02:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Validity Not Before: Dec 26 08:00:47 2025 GMT Not After : Dec 27 08:00:47 2025 GMT Subject: CN=04fb14bed304ab2f336b2506ca0632c222d98d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:32:a9:d4:3a:6c:fd:a5:53:72:b6:56:96: 81:8c:ce:58:d4:2a:7e:5a:d9:6a:4b:01:24:50:a7: 5a:4c:0d:62:be:6b:99:fd:36:ec:3f:c2:36:1b:ee: 70:f6:ff:67:c9:a0:7e:df:1b:8e:3b:b2:58:e7:d1: eb:3e:c6:6f:41:41:e7:ff:44:d9:4d:e7:6b:b6:05: 24:7b:6e:fe:d6:99:32:f4:1b:9d:fd:1d:02:d4:16: 3d:45:ec:e0:82:8b:22:0c:53:99:be:67:7c:8a:b3: 94:8f:b3:ef:8d:83:ea:18:99:ca:ee:2d:60:98:8e: 43:03:10:90:4c:21:af:a8:70:2f:55:90:ad:58:83: cb:1b:83:78:ed:26:34:28:2d:b5:79:0a:9e:9e:71: 3f:e3:1a:f3:6d:c9:be:22:4c:e3:05:24:4e:8b:8b: 9e:f6:73:51:16:7c:d0:c8:91:c0:56:4b:24:c6:e9: 15:fa:8b:35:30:b8:db:9b:d5:dd:fd:24:78:57:55: f3:51:5c:e8:3f:e7:8e:6f:6d:81:5e:8e:ea:99:d1: eb:f6:2c:9e:5e:cd:c4:2e:78:67:53:48:53:f8:ab: ce:ee:55:89:cf:e2:fc:27:96:81:0a:90:bb:1c:00: a0:38:72:de:37:8e:57:3a:64:75:c9:68:6f:fd:cf: 2c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FB:14:BE:D3:04:AB:2F:33:6B:25:06:CA:06:32:C2:22:D9:8D:95 X509v3 Authority Key Identifier: keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:bd:62:44:17:4e:99:90:56:8e:ff:99:80:e6:d7:54:a6:36: 87:99:b5:64:3e:26:5b:e8:94:42:9a:2d:a6:50:51:ab:52:e6: a9:c0:bf:56:3a:0f:ee:6e:40:74:9d:e4:19:2e:96:0b:98:d7: de:bc:9e:a4:e9:73:bd:b4:35:38:c8:34:f9:59:32:f2:ca:bf: f3:6d:84:4d:b5:9a:5b:a8:e3:a1:d9:3d:19:fb:d7:bb:15:9f: fe:52:ca:8f:dd:7c:6b:ac:02:aa:f4:e0:a6:19:12:97:59:ae: 53:c2:8d:27:3d:14:1f:3c:ce:2e:1c:d5:4d:c8:43:1d:bf:c4: 38:12:ab:6d:67:9c:32:be:4a:d1:b3:c8:6c:09:50:de:45:02: df:c7:eb:db:5f:6e:c5:96:9c:d8:56:71:5b:78:15:51:41:7d: e1:06:23:5b:6f:29:b0:f8:bf:21:ce:74:c8:10:3a:e1:95:89: 0d:09:3d:70:28:c3:67:c6:33:47:8b:fd:b4:b0:3d:03:0f:6d: b4:b7:60:ae:ab:34:53:1a:e2:91:99:42:d4:f4:0f:6f:61:64: 50:d5:61:5a:7b:7b:72:70:ab:92:e3:de:35:5e:77:91:a2:6e: f8:09:17:15:3e:0d:53:e0:92:24:c2:2d:72:33:c6:f0:99:0c: 5c:07:3e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrKy0u8Rl+nNWL6WgogKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk ODMzNjkwHhcNMjUxMjI2MDgwMDQ3WhcNMjUxMjI3MDgwMDQ3WjAzMTEwLwYDVQQD EygwNGZiMTRiZWQzMDRhYjJmMzM2YjI1MDZjYTA2MzJjMjIyZDk4ZDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt0yqdQ6bP2lU3K2VpaBjM5Y1Cp+ WtlqSwEkUKdaTA1ivmuZ/TbsP8I2G+5w9v9nyaB+3xuOO7JY59HrPsZvQUHn/0TZ TedrtgUke27+1pky9Bud/R0C1BY9RezggosiDFOZvmd8irOUj7PvjYPqGJnK7i1g mI5DAxCQTCGvqHAvVZCtWIPLG4N47SY0KC21eQqennE/4xrzbcm+IkzjBSROi4ue 9nNRFnzQyJHAVkskxukV+os1MLjbm9Xd/SR4V1XzUVzoP+eOb22BXo7qmdHr9iye Xs3ELnhnU0hT+KvO7lWJz+L8J5aBCpC7HACgOHLeN45XOmR1yWhv/c8svQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAT7FL7TBKsvM2slBsoGMsIi2Y2VMB8GA1UdIwQY MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt NWZhOWRhMDNmNTcwLzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH71iRBdO mZBWjv+ZgObXVKY2h5m1ZD4mW+iUQpotplBRq1LmqcC/VjoP7m5AdJ3kGS6WC5jX 3ryepOlzvbQ1OMg0+Vky8sq/822ETbWaW6jjodk9GfvXuxWf/lLKj918a6wCqvTg phkSl1muU8KNJz0UHzzOLhzVTchDHb/EOBKrbWecMr5K0bPIbAlQ3kUC38fr219u xZac2FZxW3gVUUF94QYjW28psPi/Ic50yBA64ZWJDQk9cCjDZ8YzR4v9tLA9Aw9t tLdgrqs0UxrikZlC1PQPb2FkUNVhWnt7cnCrkuPeNV53kaJu+AkXFT4NU+CSJMIt cjPG8JkMXAc+IQ== -----END CERTIFICATE-----Generated at Fri Dec 26 14:18:23 2025 by rpki-client