This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json) Hash identifier: Iv70sBvKac5puSFdxaHzAf+OtgXLy618JYCZU1xgSqA= Subject key identifier: 77:FC:0F:88:5C:73:42:24:A4:56:B4:25:55:EB:0D:CB:3F:E7:76:ED Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Certificate serial: 019B34FB4F4E06E4C2CC0609E0D60114DA86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 05:00:43 +0000 Manifest this update: Fri 19 Dec 2025 05:00:43 +0000 Manifest next update: Sat 20 Dec 2025 05:00:43 +0000 Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: aHbZ2jt/dYING9Bd7UTJvkaNKGPoPkMXVo0SBIkWiwc=) 2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:fb:4f:4e:06:e4:c2:cc:06:09:e0:d6:01:14:da:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Validity Not Before: Dec 19 05:00:43 2025 GMT Not After : Dec 20 05:00:43 2025 GMT Subject: CN=77fc0f885c734224a456b42555eb0dcb3fe776ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:bf:b9:3f:76:1b:7a:39:23:fa:94:d3:c2:ac: 79:28:e2:6f:eb:0f:ac:c9:72:56:30:50:38:ad:89: b7:a8:9d:97:33:76:02:62:61:92:8d:96:2f:49:b3: db:80:59:35:c4:5e:0c:a7:da:ab:b0:f4:96:d1:eb: 49:9b:e4:80:d4:09:20:7a:80:e9:fc:ac:6f:2b:af: b1:e8:28:f9:19:7b:27:11:36:1f:2b:99:e9:40:9f: bd:aa:91:7c:aa:21:93:fc:c5:78:52:2f:cf:fe:b5: 65:23:26:e0:22:86:56:fa:f0:8b:f2:65:ce:fb:23: 81:6f:e1:ce:a4:39:da:53:ad:de:00:56:a7:69:e5: cb:d8:a1:be:95:7b:36:07:d0:f2:ec:4e:ff:f9:a7: 1c:ed:9f:71:5e:b7:f8:58:19:80:9a:7b:33:fd:82: b4:a7:e0:e8:af:e4:ae:ac:b3:b6:98:80:b9:64:fd: 61:ec:32:9c:48:a2:cb:cc:87:f0:31:40:fe:a4:21: a5:2b:d3:40:8f:79:4d:5c:71:4f:01:10:ed:02:ac: 25:c6:12:0f:ed:82:a9:b2:e6:19:83:53:9e:d0:d5: 17:db:0b:49:dd:46:4e:b6:21:93:c4:e7:be:37:1f: 45:c9:54:a5:23:aa:b0:bb:cb:51:07:34:51:2c:da: 70:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FC:0F:88:5C:73:42:24:A4:56:B4:25:55:EB:0D:CB:3F:E7:76:ED X509v3 Authority Key Identifier: keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:87:7b:a8:10:bd:96:03:a9:c3:c6:95:7c:70:07:a4:85:7f: ec:4d:cf:dd:24:7c:8e:a9:9c:99:b9:6b:0c:37:bd:7e:a6:58: d6:c9:f6:ab:ef:b8:b4:d2:88:7a:d5:45:ed:68:5f:23:51:85: dd:fa:7e:74:67:19:fd:7c:79:7d:ae:dd:84:bd:2c:38:8d:61: ad:1e:3f:29:f4:30:c7:a6:76:65:03:f5:4a:1e:02:22:eb:31: 15:0f:b1:c4:83:51:ef:e8:a3:b6:a1:c3:95:0d:64:4f:99:c7: bc:d1:02:7e:68:16:09:b8:2b:b8:b9:fe:f6:72:0c:96:44:9f: 48:57:4d:96:21:bc:34:4c:6a:40:84:4a:eb:a8:71:69:45:d3: 21:85:bb:13:a7:63:db:fe:22:c6:dc:af:b5:35:2c:e9:d8:cb: 7f:ad:9e:6b:85:2a:d8:1b:ef:0c:85:13:87:28:53:c3:99:c1: a1:77:a7:ff:1d:9c:40:33:b3:9a:ef:75:b6:d2:aa:0a:83:99: 23:61:ac:94:b6:8a:32:b8:62:fc:81:f8:f7:06:0f:f7:ac:c2: c6:c1:de:d3:cc:e4:7c:35:02:b6:15:de:cf:4a:8a:f2:f1:55: d6:bf:05:fb:1d:d2:9e:d5:d6:fd:c6:6b:eb:7e:8c:e0:42:8c: 3a:98:55:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0+09OBuTCzAYJ4NYBFNqGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YTRjNGVhZWY2ZmUxNzA1Njk4YjAwZTYxOTE1Njc3YTJm YjhkNWIwHhcNMjUxMjE5MDUwMDQzWhcNMjUxMjIwMDUwMDQzWjAzMTEwLwYDVQQD Eyg3N2ZjMGY4ODVjNzM0MjI0YTQ1NmI0MjU1NWViMGRjYjNmZTc3NmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2b+5P3Ybejkj+pTTwqx5KOJv6w+s yXJWMFA4rYm3qJ2XM3YCYmGSjZYvSbPbgFk1xF4Mp9qrsPSW0etJm+SA1AkgeoDp /KxvK6+x6Cj5GXsnETYfK5npQJ+9qpF8qiGT/MV4Ui/P/rVlIybgIoZW+vCL8mXO +yOBb+HOpDnaU63eAFanaeXL2KG+lXs2B9Dy7E7/+acc7Z9xXrf4WBmAmnsz/YK0 p+Dor+SurLO2mIC5ZP1h7DKcSKLLzIfwMUD+pCGlK9NAj3lNXHFPARDtAqwlxhIP 7YKpsuYZg1Oe0NUX2wtJ3UZOtiGTxOe+Nx9FyVSlI6qwu8tRBzRRLNpwmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf8D4hcc0IkpFa0JVXrDcs/53btMB8GA1UdIwQY MBaAFHikxOrvb+FwVpiwDmGRVnei+41bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzct NDI5MzA3ZjI0MzIwLzEvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzctNDI5MzA3ZjI0MzIw LzEvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW4d7qBC9 lgOpw8aVfHAHpIV/7E3P3SR8jqmcmblrDDe9fqZY1sn2q++4tNKIetVF7WhfI1GF 3fp+dGcZ/Xx5fa7dhL0sOI1hrR4/KfQwx6Z2ZQP1Sh4CIusxFQ+xxINR7+ijtqHD lQ1kT5nHvNECfmgWCbgruLn+9nIMlkSfSFdNliG8NExqQIRK66hxaUXTIYW7E6dj 2/4ixtyvtTUs6djLf62ea4Uq2BvvDIUThyhTw5nBoXen/x2cQDOzmu91ttKqCoOZ I2GslLaKMrhi/IH49wYP96zCxsHe08zkfDUCthXez0qK8vFV1r8F+x3SntXW/cZr 636M4EKMOphVYQ== -----END CERTIFICATE-----Generated at Fri Dec 19 07:52:08 2025 by rpki-client