This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft File: eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft (raw, json) Hash identifier: prQZ65yjIjGTQKvlVE65Dtj2jXksSebG8wLszgdz824= Subject key identifier: 6F:76:01:BF:5A:40:67:69:D9:1B:CA:76:55:50:0B:52:B9:DF:64:3F Authority key identifier: 78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 Certificate issuer: /CN=78decead419807747c92ace69448113ff0928b85 Certificate serial: 019B1193DE326610DCAE9F12DE94E7DFAB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft Manifest number: 0202 Signing time: Fri 12 Dec 2025 08:01:01 +0000 Manifest this update: Fri 12 Dec 2025 08:01:01 +0000 Manifest next update: Sat 13 Dec 2025 08:01:01 +0000 Files and hashes: 1: ClkZ4Qkjsm6jhcM9mc5q3RhM28g.roa (hash: nT6gO3pCu1NkBlvtxFQSUnCbFnHbtIhkaEeCEOJ+PkU=) 2: SHNEUOB-tmCuler25OnE-7d4RKI.roa (hash: XKq8o0m566WX2AVhb80rl5yUodqaYeMM1rdYd3E/iD0=) 3: eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl (hash: UHb93W4oowV09QaGE9sgPYGDDR6SnPZrIvrklzkr+AY=) 4: z3ZLPttN_dLEWt9RRuV7F-68KD8.roa (hash: C7j0Qnqfcw9VtnlF4ckZWrE6xR0zYsksmWqIp1TS2Ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:93:de:32:66:10:dc:ae:9f:12:de:94:e7:df:ab:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78decead419807747c92ace69448113ff0928b85 Validity Not Before: Dec 12 08:01:01 2025 GMT Not After : Dec 13 08:01:01 2025 GMT Subject: CN=6f7601bf5a406769d91bca7655500b52b9df643f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:20:9d:78:70:1c:7d:9c:38:ef:56:33:73:10: 91:f4:dd:03:6d:fb:c5:87:0f:0a:22:ec:05:6e:92: 5e:5e:4f:ab:b1:41:bd:22:9a:44:48:6a:18:9a:5a: dd:55:47:96:ee:1a:00:ff:89:d3:81:6b:89:12:59: 63:32:e4:32:13:99:c1:e7:45:eb:a5:f9:9a:cd:60: 91:22:f1:ac:8b:1a:43:47:9c:0e:e4:87:45:a7:7a: 27:5d:d7:63:c9:28:3a:b5:ef:71:4f:b3:8f:86:a7: 5d:5b:f9:b0:bd:d1:dd:3b:85:ba:3d:2c:f4:fb:a0: 74:8c:f1:b1:68:cc:6c:15:8f:72:c8:11:bb:74:73: f5:e7:c8:a7:40:21:af:ba:20:2f:74:04:44:9b:d4: 89:f6:d5:d2:ee:1f:57:73:8e:f8:60:a2:dc:8b:f5: 9e:c1:f7:77:04:42:13:70:3f:ee:1f:d3:0e:64:c4: 9d:93:b1:f1:2c:f9:9b:be:02:f2:ef:c1:fd:44:da: ab:56:bc:07:15:35:49:f8:a1:82:37:0a:f0:58:6d: c1:7a:78:b2:67:96:c7:77:1a:49:a3:20:11:78:58: e0:5c:0b:cb:70:7c:db:a5:cd:08:93:d7:3a:3e:13: 3f:e3:3e:53:1f:20:95:79:04:1e:f6:77:29:61:40: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:76:01:BF:5A:40:67:69:D9:1B:CA:76:55:50:0B:52:B9:DF:64:3F X509v3 Authority Key Identifier: keyid:78:DE:CE:AD:41:98:07:74:7C:92:AC:E6:94:48:11:3F:F0:92:8B:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7OrUGYB3R8kqzmlEgRP_CSi4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/c1f7da-cf2e-410a-8a96-75361ac20d5e/1/eN7OrUGYB3R8kqzmlEgRP_CSi4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:1a:6a:50:dc:ab:e4:f6:0d:e9:4a:77:88:7b:2d:91:1a:8e: a3:3d:41:1b:f9:32:68:d0:d5:09:12:ce:db:c5:92:c9:ae:47: d6:64:57:3d:79:c6:44:2e:ed:d6:00:f7:6a:3a:77:da:a1:53: 41:ee:05:b6:4a:3c:b3:0e:70:23:de:1a:e0:c7:90:b9:e6:6e: 40:74:f5:a7:e0:a8:2e:83:9d:47:66:5d:f5:8a:9d:78:f4:bd: 19:b5:0b:70:dc:27:06:ce:7d:73:99:66:f5:30:d5:88:37:5f: 4e:9b:81:82:51:70:ef:33:30:69:ce:ac:7a:bf:82:ba:01:4d: 52:ad:35:b7:7e:5d:03:52:50:4f:0a:ad:29:72:3d:a9:f7:7c: 90:ef:ee:12:11:7c:6f:3e:72:64:bf:cf:97:01:f8:27:da:04: bd:d4:ee:5e:69:a3:60:7c:c0:6a:c6:2c:e5:02:18:a1:1a:fb: 78:61:d4:6e:62:4d:98:ea:6a:43:67:71:76:12:7e:50:a2:48: 6e:e6:70:6b:93:58:77:6d:a7:58:46:a1:ff:31:4d:3f:3a:01: 39:2d:c9:c4:72:44:cb:02:61:45:b0:1f:39:3b:0d:c5:b6:0b: fc:67:0f:d0:3b:b7:2f:f9:8d:e9:44:08:3a:dd:ad:a1:10:ae: ec:2f:25:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRk94yZhDcrp8S3pTn36s5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGVjZWFkNDE5ODA3NzQ3YzkyYWNlNjk0NDgxMTNmZjA5 MjhiODUwHhcNMjUxMjEyMDgwMTAxWhcNMjUxMjEzMDgwMTAxWjAzMTEwLwYDVQQD Eyg2Zjc2MDFiZjVhNDA2NzY5ZDkxYmNhNzY1NTUwMGI1MmI5ZGY2NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSCdeHAcfZw471YzcxCR9N0DbfvF hw8KIuwFbpJeXk+rsUG9IppESGoYmlrdVUeW7hoA/4nTgWuJElljMuQyE5nB50Xr pfmazWCRIvGsixpDR5wO5IdFp3onXddjySg6te9xT7OPhqddW/mwvdHdO4W6PSz0 +6B0jPGxaMxsFY9yyBG7dHP158inQCGvuiAvdAREm9SJ9tXS7h9Xc474YKLci/We wfd3BEITcD/uH9MOZMSdk7HxLPmbvgLy78H9RNqrVrwHFTVJ+KGCNwrwWG3Beniy Z5bHdxpJoyAReFjgXAvLcHzbpc0Ik9c6PhM/4z5THyCVeQQe9ncpYUC3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG92Ab9aQGdp2RvKdlVQC1K532Q/MB8GA1UdIwQY MBaAFHjezq1BmAd0fJKs5pRIET/wkouFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYt NzUzNjFhYzIwZDVlLzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9jMWY3ZGEtY2YyZS00MTBhLThhOTYtNzUzNjFhYzIwZDVl LzEvZU43T3JVR1lCM1I4a3F6bWxFZ1JQX0NTaTRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexpqUNyr 5PYN6Up3iHstkRqOoz1BG/kyaNDVCRLO28WSya5H1mRXPXnGRC7t1gD3ajp32qFT Qe4Ftko8sw5wI94a4MeQueZuQHT1p+CoLoOdR2Zd9YqdePS9GbULcNwnBs59c5lm 9TDViDdfTpuBglFw7zMwac6ser+CugFNUq01t35dA1JQTwqtKXI9qfd8kO/uEhF8 bz5yZL/PlwH4J9oEvdTuXmmjYHzAasYs5QIYoRr7eGHUbmJNmOpqQ2dxdhJ+UKJI buZwa5NYd22nWEah/zFNPzoBOS3JxHJEywJhRbAfOTsNxbYL/GcP0Du3L/mN6UQI Ot2toRCu7C8lGw== -----END CERTIFICATE-----Generated at Fri Dec 12 17:10:28 2025 by rpki-client