This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json) Hash identifier: uEeRj0xiKoGdmkwnTTat5kd/SVOyW+sQY0VE0B2TdGU= Subject key identifier: 44:FE:19:80:0B:F1:E1:0A:E7:81:E9:AC:79:E5:63:5B:0A:81:92:24 Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019B1E738BC371824AE0ADB47FBB92F4A96B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft Manifest number: 158C Signing time: Sun 14 Dec 2025 20:00:47 +0000 Manifest this update: Sun 14 Dec 2025 20:00:47 +0000 Manifest next update: Mon 15 Dec 2025 20:00:47 +0000 Files and hashes: 1: 4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa (hash: eY3z/9PA/1Maeyu8ReLI6rg+bAfCtkuJMwcQbYm1xG0=) 2: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: 5i1FJvQGzH0m792NQSgwFTf5lPPDPi3Kvvx9Ym7INaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1e:73:8b:c3:71:82:4a:e0:ad:b4:7f:bb:92:f4:a9:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Dec 14 20:00:47 2025 GMT Not After : Dec 15 20:00:47 2025 GMT Subject: CN=44fe19800bf1e10ae781e9ac79e5635b0a819224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:a1:ab:df:4a:9f:97:5c:e6:93:18:6c:12:83: 77:2c:e3:80:a9:89:77:1f:78:ea:8b:fd:a3:2e:14: 08:ff:d0:0c:83:f7:f3:12:0b:eb:96:b0:a3:6c:9c: 50:9d:ac:11:93:8c:eb:15:02:5f:59:53:e2:f8:7d: d8:50:5a:04:31:4c:d6:83:da:19:8d:7a:37:2a:3a: e8:48:15:d0:b3:ed:07:2c:bb:a9:3d:69:83:90:24: 6a:1c:1c:e4:e7:2f:bb:77:78:be:90:78:2a:24:02: bd:5e:35:cb:d6:5e:23:d2:63:d5:4d:f1:56:35:25: 22:ae:49:75:1d:a7:bf:00:59:13:0f:3e:37:fa:8f: 4a:ef:47:78:e1:b4:b0:0c:14:04:e9:80:f1:f0:c0: 22:ac:66:fa:72:89:3d:2a:73:f3:cd:29:c9:33:b0: 64:84:8a:a5:03:6f:2e:ac:d4:d6:06:30:88:54:77: 45:7e:53:7f:2c:d4:58:24:a3:26:32:94:0f:c4:ac: 8c:d4:e6:d0:93:7f:50:fe:f5:e1:3f:e1:95:12:93: 4a:26:22:10:4f:aa:1c:cd:dc:8c:64:00:62:c4:de: ce:9f:e4:d9:35:fb:c2:c1:cc:22:78:ae:a9:05:05: ae:76:9b:6c:2b:7c:a0:bd:c5:c7:f3:a9:9b:70:e9: 17:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FE:19:80:0B:F1:E1:0A:E7:81:E9:AC:79:E5:63:5B:0A:81:92:24 X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:42:93:a9:a5:01:dd:72:0b:8b:17:6f:94:29:50:dc:10:f4: 12:01:e1:78:27:88:fc:f2:13:81:aa:93:2d:5f:8a:b4:a7:52: 26:e1:43:de:0e:8b:84:a1:c2:aa:5e:88:a7:21:f4:49:95:f4: 59:f4:f9:c8:e9:74:1f:09:40:f2:a8:5e:53:68:1b:f1:11:ff: b5:77:a0:d1:6f:71:04:9b:d2:dd:e8:40:13:65:26:64:a6:33: 27:15:24:d1:03:37:fb:28:e2:6c:77:fb:d0:89:3b:fe:d0:d6: a8:54:36:54:06:93:f6:84:08:2b:d7:fc:71:99:94:74:56:d1: a3:ab:bb:cd:ff:07:95:c0:f0:11:35:e3:c7:72:89:f7:ec:e8: 0b:07:55:96:4c:e6:38:46:90:55:61:63:35:71:9a:87:a2:a2: 4b:3b:74:88:f7:51:ae:dd:17:d0:c4:e8:44:c5:a0:7a:78:5e: 5b:21:8f:88:99:49:f3:78:58:5e:06:3f:16:c6:ea:a2:6d:f1: cd:c4:30:84:06:62:4b:1e:cd:9e:3e:19:18:53:63:af:bc:bf: 89:15:21:e9:7a:ff:5d:73:06:02:13:4a:46:32:ea:69:45:9f: c5:05:2e:3c:57:5f:cc:71:26:3a:ec:7b:9e:15:48:81:80:36: 59:7e:dd:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsec4vDcYJK4K20f7uS9KlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjUxMjE0MjAwMDQ3WhcNMjUxMjE1MjAwMDQ3WjAzMTEwLwYDVQQD Eyg0NGZlMTk4MDBiZjFlMTBhZTc4MWU5YWM3OWU1NjM1YjBhODE5MjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4aGr30qfl1zmkxhsEoN3LOOAqYl3 H3jqi/2jLhQI/9AMg/fzEgvrlrCjbJxQnawRk4zrFQJfWVPi+H3YUFoEMUzWg9oZ jXo3KjroSBXQs+0HLLupPWmDkCRqHBzk5y+7d3i+kHgqJAK9XjXL1l4j0mPVTfFW NSUirkl1Hae/AFkTDz43+o9K70d44bSwDBQE6YDx8MAirGb6cok9KnPzzSnJM7Bk hIqlA28urNTWBjCIVHdFflN/LNRYJKMmMpQPxKyM1ObQk39Q/vXhP+GVEpNKJiIQ T6oczdyMZABixN7On+TZNfvCwcwieK6pBQWudptsK3ygvcXH86mbcOkXBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFET+GYAL8eEK54HprHnlY1sKgZIkMB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqUKTqaUB 3XILixdvlClQ3BD0EgHheCeI/PITgaqTLV+KtKdSJuFD3g6LhKHCql6IpyH0SZX0 WfT5yOl0HwlA8qheU2gb8RH/tXeg0W9xBJvS3ehAE2UmZKYzJxUk0QM3+yjibHf7 0Ik7/tDWqFQ2VAaT9oQIK9f8cZmUdFbRo6u7zf8HlcDwETXjx3KJ9+zoCwdVlkzm OEaQVWFjNXGah6KiSzt0iPdRrt0X0MToRMWgenheWyGPiJlJ83hYXgY/Fsbqom3x zcQwhAZiSx7Nnj4ZGFNjr7y/iRUh6Xr/XXMGAhNKRjLqaUWfxQUuPFdfzHEmOux7 nhVIgYA2WX7dkA== -----END CERTIFICATE-----Generated at Mon Dec 15 04:56:59 2025 by rpki-client