This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft File: eJiLIIHZlCID0iJIrNgF2zoT3MU.mft (raw, json) Hash identifier: 6DawIGur0Nrzfvfs+hZpA05azc5WVLOoCdn5MA23xZ4= Subject key identifier: 66:B0:C1:07:C6:97:EE:C8:99:D4:16:7B:29:12:FB:51:CB:7E:30:A8 Authority key identifier: 78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 Certificate issuer: /CN=78988b2081d9942203d22248acd805db3a13dcc5 Certificate serial: 019AF389EA702E486C26E7FFD19C670071DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft Manifest number: 1224 Signing time: Sat 06 Dec 2025 12:01:32 +0000 Manifest this update: Sat 06 Dec 2025 12:01:32 +0000 Manifest next update: Sun 07 Dec 2025 12:01:32 +0000 Files and hashes: 1: _aQ7HAc4oxc5vbNE-bDdRfJ_I5M.roa (hash: vqzaWyeuzw7jDRILE1vVohCUPlKRF+7OXLUlnA1mX4M=) 2: eJiLIIHZlCID0iJIrNgF2zoT3MU.crl (hash: kqVkCDvJsRoWdYo1DkUnLjaTTOh3JP7FW50RiLtTob8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:ea:70:2e:48:6c:26:e7:ff:d1:9c:67:00:71:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78988b2081d9942203d22248acd805db3a13dcc5 Validity Not Before: Dec 6 12:01:32 2025 GMT Not After : Dec 7 12:01:32 2025 GMT Subject: CN=66b0c107c697eec899d4167b2912fb51cb7e30a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:cf:e3:83:68:cd:8f:41:58:5a:be:3c:f8:06: 02:84:19:aa:99:62:ad:61:a4:e2:80:87:8d:6f:ec: ef:79:cd:81:bc:b0:ac:4a:f2:95:22:8a:9a:f6:4f: 6d:14:4b:a2:af:bb:dd:12:74:25:12:3e:29:c5:99: a9:19:7e:5c:00:1e:b7:ac:cb:41:a4:ad:e6:14:dc: d7:5c:1f:32:ba:55:23:d5:db:11:40:0e:73:88:57: ba:26:44:10:66:42:d8:41:52:d3:c5:70:ec:25:51: 48:5c:c5:68:5d:9f:d6:b7:9d:04:7e:ff:51:2c:a2: ba:22:bc:7a:88:25:7d:36:09:b9:8d:ea:c2:26:c7: 12:6c:c8:1b:cc:8c:07:75:ac:51:d2:fa:1b:d1:fd: d1:27:3e:69:a8:58:3f:48:08:9d:91:ad:b3:60:3c: 1b:dd:1c:96:4e:d4:06:ac:c9:29:be:5f:4e:18:14: c2:fe:73:dc:4e:8c:b5:03:bf:02:3f:fb:70:33:70: ce:a9:47:ff:cc:82:49:12:85:92:ab:84:67:67:7d: 23:92:55:3d:d3:e4:31:1c:a8:04:31:e6:4c:06:42: 7f:b0:14:6f:af:5d:f8:78:4a:f4:69:e4:94:41:9c: d2:9e:d9:b1:c7:90:1a:82:25:d0:5e:6a:29:f1:cd: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B0:C1:07:C6:97:EE:C8:99:D4:16:7B:29:12:FB:51:CB:7E:30:A8 X509v3 Authority Key Identifier: keyid:78:98:8B:20:81:D9:94:22:03:D2:22:48:AC:D8:05:DB:3A:13:DC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJiLIIHZlCID0iJIrNgF2zoT3MU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5c29c1-194a-410d-8c76-bbd01d425084/1/eJiLIIHZlCID0iJIrNgF2zoT3MU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:56:d6:37:9e:78:d7:13:1c:06:d4:01:66:4a:90:82:07:92: f4:12:d1:47:ce:5a:a0:8b:09:b5:bd:98:1b:57:1d:4c:65:37: af:d8:5b:5e:f7:19:9e:36:6a:ad:b5:86:78:76:91:92:95:90: b5:38:34:02:f6:72:9d:79:af:a3:46:34:cb:24:5e:83:a8:e6: d6:76:1a:14:46:c3:0e:a5:da:c0:b2:2e:f2:65:1b:d0:02:96: 89:ae:e0:65:c3:96:89:3d:99:74:46:79:ee:26:91:83:91:84: a5:6f:3e:a0:50:2e:f2:1e:76:83:94:e6:11:35:62:71:e3:93: 32:56:e8:dc:0c:b7:e6:f2:b5:ed:71:a7:45:63:0f:9f:6a:d2: cd:ab:3b:1a:c0:50:e6:30:2c:9c:68:cb:7d:a3:c0:79:54:b9: 4d:62:ef:9c:70:02:cb:98:85:fd:88:70:88:fc:a9:63:63:77: 75:8b:6d:2c:c5:b6:13:76:56:08:da:97:12:1d:bf:24:b1:73: 52:5c:32:cf:c9:d7:db:7f:b7:6c:34:de:c7:12:1d:d6:44:df: ed:95:5b:3c:4c:a1:44:96:5b:63:04:ee:00:5d:ec:5e:2d:ec: 9f:13:b0:ef:64:eb:43:79:5a:6e:c0:64:68:b9:0f:7b:6a:39: 3e:29:67:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziepwLkhsJuf/0ZxnAHHcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4OTg4YjIwODFkOTk0MjIwM2QyMjI0OGFjZDgwNWRiM2Ex M2RjYzUwHhcNMjUxMjA2MTIwMTMyWhcNMjUxMjA3MTIwMTMyWjAzMTEwLwYDVQQD Eyg2NmIwYzEwN2M2OTdlZWM4OTlkNDE2N2IyOTEyZmI1MWNiN2UzMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc/jg2jNj0FYWr48+AYChBmqmWKt YaTigIeNb+zvec2BvLCsSvKVIoqa9k9tFEuir7vdEnQlEj4pxZmpGX5cAB63rMtB pK3mFNzXXB8yulUj1dsRQA5ziFe6JkQQZkLYQVLTxXDsJVFIXMVoXZ/Wt50Efv9R LKK6Irx6iCV9Ngm5jerCJscSbMgbzIwHdaxR0vob0f3RJz5pqFg/SAidka2zYDwb 3RyWTtQGrMkpvl9OGBTC/nPcToy1A78CP/twM3DOqUf/zIJJEoWSq4RnZ30jklU9 0+QxHKgEMeZMBkJ/sBRvr134eEr0aeSUQZzSntmxx5AagiXQXmop8c1sFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGawwQfGl+7ImdQWeykS+1HLfjCoMB8GA1UdIwQY MBaAFHiYiyCB2ZQiA9IiSKzYBds6E9zFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYt YmJkMDFkNDI1MDg0LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81YzI5YzEtMTk0YS00MTBkLThjNzYtYmJkMDFkNDI1MDg0 LzEvZUppTElJSFpsQ0lEMGlKSXJOZ0Yyem9UM01VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFbWN554 1xMcBtQBZkqQggeS9BLRR85aoIsJtb2YG1cdTGU3r9hbXvcZnjZqrbWGeHaRkpWQ tTg0AvZynXmvo0Y0yyReg6jm1nYaFEbDDqXawLIu8mUb0AKWia7gZcOWiT2ZdEZ5 7iaRg5GEpW8+oFAu8h52g5TmETViceOTMlbo3Ay35vK17XGnRWMPn2rSzas7GsBQ 5jAsnGjLfaPAeVS5TWLvnHACy5iF/YhwiPypY2N3dYttLMW2E3ZWCNqXEh2/JLFz Ulwyz8nX23+3bDTexxId1kTf7ZVbPEyhRJZbYwTuAF3sXi3snxOw72TrQ3labsBk aLkPe2o5Piln1Q== -----END CERTIFICATE-----Generated at Sat Dec 6 14:47:57 2025 by rpki-client