This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft File: e0fNwhx8siRnTA6v3sY6ID7uMQg.mft (raw, json) Hash identifier: OYDNmRhzXCUf/g7H0BnY25TIKygo60dChBCFGOH2kk4= Subject key identifier: C6:FB:C7:64:4C:7E:2A:7F:5D:CC:24:DD:D4:9D:1E:F8:7F:1E:66:B6 Authority key identifier: 7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 Certificate issuer: /CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Certificate serial: 019B4701B326C097FB28D229D10EA62D9A09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 17:00:52 +0000 Manifest this update: Mon 22 Dec 2025 17:00:52 +0000 Manifest next update: Tue 23 Dec 2025 17:00:52 +0000 Files and hashes: 1: _d9TqHUt6Akn4mIp9hun4eZSvDY.roa (hash: E+7eG5ZCI82NV5+vYe7SeDuuzqJipfHrlwV+FyH2KQM=) 2: e0fNwhx8siRnTA6v3sY6ID7uMQg.crl (hash: 4oIaTOqK5SPMY0vfcuZ2h2PqRrZ/f7PhlwcjgMY3rkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 17:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:01:b3:26:c0:97:fb:28:d2:29:d1:0e:a6:2d:9a:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b47cdc21c7cb224674c0eafdec63a203eee3108 Validity Not Before: Dec 22 17:00:52 2025 GMT Not After : Dec 23 17:00:52 2025 GMT Subject: CN=c6fbc7644c7e2a7f5dcc24ddd49d1ef87f1e66b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:51:4e:46:f4:a0:96:78:38:13:a4:e5:81: db:aa:68:2a:c7:dc:14:fb:5a:19:3d:9a:26:09:6e: ad:a1:5c:63:df:20:98:d0:18:45:cf:99:5d:39:1f: b1:5b:a0:a1:5c:6b:d9:ae:9a:d8:a0:b3:55:cb:93: cd:fa:28:e7:f0:d4:20:72:25:43:61:01:a6:35:1d: 81:74:5d:da:28:0b:2e:c9:1a:95:cb:d2:2c:f6:95: 04:78:fe:23:a8:c7:f6:a2:3c:4c:75:c1:69:de:03: ad:69:30:1b:1b:21:ae:a9:9d:42:5c:11:fb:3e:4b: 46:17:24:f8:b8:60:df:72:7a:39:cf:46:56:96:85: 86:c0:eb:5f:e5:5e:eb:80:2b:39:4e:e4:9b:b6:b7: 47:87:b8:7a:c0:60:9d:38:ae:e0:b9:fb:d5:b6:90: 58:b4:6b:3c:41:85:3f:3b:0d:10:76:6a:98:87:10: 55:08:22:47:fd:11:bc:13:1b:fa:b7:ea:cc:03:0d: de:05:58:1a:24:dc:e7:c0:07:b5:4c:80:54:7f:17: d1:b2:30:17:b8:ac:42:dd:44:8d:4c:d0:b6:88:f6: 91:34:51:75:9c:cd:b7:34:34:7b:fe:83:df:62:91: 82:7d:af:14:59:c6:89:05:8b:1f:ee:9b:5e:f5:bf: b7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FB:C7:64:4C:7E:2A:7F:5D:CC:24:DD:D4:9D:1E:F8:7F:1E:66:B6 X509v3 Authority Key Identifier: keyid:7B:47:CD:C2:1C:7C:B2:24:67:4C:0E:AF:DE:C6:3A:20:3E:EE:31:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0fNwhx8siRnTA6v3sY6ID7uMQg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b2953-13b8-4706-81c4-075578c37aca/1/e0fNwhx8siRnTA6v3sY6ID7uMQg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:80:28:3c:23:ae:e1:a7:03:a5:e3:fc:79:83:b4:55:05:23: 81:a2:20:60:f9:8f:b6:6d:7d:a2:0d:eb:9f:74:77:70:32:e2: 2c:80:09:94:4b:a3:41:ac:eb:36:a9:51:cb:b6:c5:4c:9c:8b: b3:69:f2:a0:c6:cd:e3:66:d1:06:bd:2e:be:47:72:54:a2:f6: 82:8e:2c:ed:fe:bd:2e:53:32:45:b1:ce:5a:05:b6:2f:00:f0: 95:fe:84:24:2b:42:4f:20:eb:a5:5e:b3:c6:63:cd:63:48:e8: 6c:0a:ab:08:04:aa:f4:fd:30:b9:1c:22:26:0d:b3:35:db:f9: 54:81:5b:bf:fc:dc:36:62:a7:7d:cf:c6:05:32:e5:49:c4:2f: bd:37:80:09:42:6c:92:1a:3f:f0:f8:02:f1:e7:6b:9a:75:36: 2b:80:d2:c3:f5:91:d5:04:e7:c5:d4:91:42:f7:97:2d:35:bc: 4f:73:2c:df:52:54:4b:a5:da:1a:d0:1b:2b:d7:6e:25:25:e3: ed:d8:c0:36:e8:9a:b7:b8:8a:89:b8:be:9d:5c:64:a9:86:cd: 8d:1f:5c:ac:ae:25:ef:28:37:1e:f8:7d:23:fe:bf:2e:9e:ae: 91:8b:ea:7c:82:7d:9c:08:98:1b:46:64:67:ba:11:80:f3:7c: 68:e7:f3:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtHAbMmwJf7KNIp0Q6mLZoJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiNDdjZGMyMWM3Y2IyMjQ2NzRjMGVhZmRlYzYzYTIwM2Vl ZTMxMDgwHhcNMjUxMjIyMTcwMDUyWhcNMjUxMjIzMTcwMDUyWjAzMTEwLwYDVQQD EyhjNmZiYzc2NDRjN2UyYTdmNWRjYzI0ZGRkNDlkMWVmODdmMWU2NmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOhRTkb0oJZ4OBOk5YHbqmgqx9wU +1oZPZomCW6toVxj3yCY0BhFz5ldOR+xW6ChXGvZrprYoLNVy5PN+ijn8NQgciVD YQGmNR2BdF3aKAsuyRqVy9Is9pUEeP4jqMf2ojxMdcFp3gOtaTAbGyGuqZ1CXBH7 PktGFyT4uGDfcno5z0ZWloWGwOtf5V7rgCs5TuSbtrdHh7h6wGCdOK7gufvVtpBY tGs8QYU/Ow0QdmqYhxBVCCJH/RG8Exv6t+rMAw3eBVgaJNznwAe1TIBUfxfRsjAX uKxC3USNTNC2iPaRNFF1nM23NDR7/oPfYpGCfa8UWcaJBYsf7pte9b+3tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMb7x2RMfip/Xcwk3dSdHvh/Hma2MB8GA1UdIwQY MBaAFHtHzcIcfLIkZ0wOr97GOiA+7jEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQt MDc1NTc4YzM3YWNhLzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi85YjI5NTMtMTNiOC00NzA2LTgxYzQtMDc1NTc4YzM3YWNh LzEvZTBmTndoeDhzaVJuVEE2djNzWTZJRDd1TVFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIAoPCOu 4acDpeP8eYO0VQUjgaIgYPmPtm19og3rn3R3cDLiLIAJlEujQazrNqlRy7bFTJyL s2nyoMbN42bRBr0uvkdyVKL2go4s7f69LlMyRbHOWgW2LwDwlf6EJCtCTyDrpV6z xmPNY0jobAqrCASq9P0wuRwiJg2zNdv5VIFbv/zcNmKnfc/GBTLlScQvvTeACUJs kho/8PgC8edrmnU2K4DSw/WR1QTnxdSRQveXLTW8T3Ms31JUS6XaGtAbK9duJSXj 7djANuiat7iKibi+nVxkqYbNjR9crK4l7yg3Hvh9I/6/Lp6ukYvqfIJ9nAiYG0Zk Z7oRgPN8aOfzUQ== -----END CERTIFICATE-----Generated at Tue Dec 23 01:55:39 2025 by rpki-client