This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft File: eNo_c5yggv_oh_cDBuf8dIRgbOI.mft (raw, json) Hash identifier: cdmfAVYogFbIwy3jts2vXIxNUnD6iDCHc6TQda4c/Jg= Subject key identifier: B8:14:29:CA:2C:99:26:F1:B6:8F:3E:D0:A5:92:5D:E8:EC:B1:68:21 Authority key identifier: 78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2 Certificate issuer: /CN=78da3f739ca082ffe887f70306e7fc7484606ce2 Certificate serial: 019B311EE4B6B335BC4ED2CC5BB5157AC756 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft Manifest number: 04AF Signing time: Thu 18 Dec 2025 11:01:06 +0000 Manifest this update: Thu 18 Dec 2025 11:01:06 +0000 Manifest next update: Fri 19 Dec 2025 11:01:06 +0000 Files and hashes: 1: JoAWYzosur__gpz4zflBBcSYJgM.roa (hash: 9Cl/dv3HRXlbFlF+IauRrrkitYKJm6Tn2VgfqN9jS4Q=) 2: eNo_c5yggv_oh_cDBuf8dIRgbOI.crl (hash: lPIHZApKez/yuCosRiL5ABX0/TNU9i5Nb5nVq96Ojmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 11:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:1e:e4:b6:b3:35:bc:4e:d2:cc:5b:b5:15:7a:c7:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78da3f739ca082ffe887f70306e7fc7484606ce2 Validity Not Before: Dec 18 11:01:06 2025 GMT Not After : Dec 19 11:01:06 2025 GMT Subject: CN=b81429ca2c9926f1b68f3ed0a5925de8ecb16821 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:b0:f4:5a:3b:4e:99:32:2c:e8:02:67:35: 67:2e:ae:bf:2f:a8:61:fb:40:cb:f1:50:74:48:38: 9a:49:fa:78:0c:cd:d0:00:0e:1d:43:29:40:14:d5: 26:5d:0c:13:3e:47:6a:7f:7a:00:10:f3:6c:ad:d0: 2f:fe:02:c2:a7:22:74:50:4a:7b:fc:22:1b:ee:7a: 35:35:fb:da:0d:06:43:69:a7:fc:8c:6b:87:22:1b: fd:10:15:c0:79:b5:df:c5:1f:c7:6d:2e:42:76:59: 03:5a:11:25:92:10:27:15:e6:6b:b7:73:8c:61:a5: 12:cf:3b:fa:69:4f:ec:d1:b7:56:d1:51:e4:fa:e5: 65:3d:ab:76:d7:10:be:5e:6a:9a:d0:2c:f5:3e:19: f5:87:ff:03:c6:e1:f9:45:47:72:bf:c1:e3:eb:e0: 38:48:db:fe:84:55:ad:35:0d:bf:e5:48:84:36:f4: 9c:aa:ae:7e:cb:60:53:72:54:7e:ab:07:71:ad:6e: 62:19:fd:e4:62:d3:19:0d:6e:fb:15:39:2c:47:b0: 99:8b:38:a7:ce:61:03:85:bc:b4:e7:58:1d:9d:43: 26:61:bd:bd:4c:ac:8c:62:7a:32:c3:5c:16:fe:76: 58:59:d1:64:97:12:4b:a7:ee:eb:50:59:0a:a9:65: c8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:14:29:CA:2C:99:26:F1:B6:8F:3E:D0:A5:92:5D:E8:EC:B1:68:21 X509v3 Authority Key Identifier: keyid:78:DA:3F:73:9C:A0:82:FF:E8:87:F7:03:06:E7:FC:74:84:60:6C:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNo_c5yggv_oh_cDBuf8dIRgbOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f8d8b-4d3e-4e0d-8e2c-1bfbe10d4849/1/eNo_c5yggv_oh_cDBuf8dIRgbOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:25:40:c1:c7:3b:27:63:b1:4e:33:02:3f:1f:4b:2c:40:c4: 42:9e:3c:92:5d:49:e9:de:37:66:32:9a:9f:95:38:71:6b:47: 77:10:aa:00:27:18:38:4c:08:15:ea:60:a0:7f:9f:d9:e8:89: b8:5a:35:36:36:93:bf:f5:a2:b3:e3:79:75:e6:1b:29:75:b4: 6e:d9:48:34:bb:ba:0f:b8:10:64:fe:9e:ee:5b:1f:7d:b0:8a: 17:c4:10:b5:08:eb:72:48:33:6e:b6:8d:f7:2b:a2:be:48:e0: 6e:d0:d2:5f:58:53:e9:24:4a:a0:42:8d:e3:a6:08:d3:35:87: fc:f5:03:e6:4c:92:8a:d3:35:02:bc:39:dc:b2:f4:91:56:d4: 0f:0e:c1:0a:9b:ef:7a:20:aa:08:53:30:1d:1c:cb:8c:46:c2: c9:0b:57:b4:ba:34:29:49:aa:9d:45:ce:88:b4:f3:6a:9d:bb: f9:f8:79:57:f5:e5:1b:0f:e0:55:40:be:0f:6a:e0:85:9f:64: 5d:51:42:88:d0:f2:8d:2d:07:39:30:a7:1b:7b:9e:06:c2:04: 8f:9b:f9:a7:77:07:bb:c8:e6:02:fa:5f:19:ae:10:9f:d9:4b: 2b:cc:74:70:f8:0b:bd:20:7d:89:b9:0d:59:11:bb:72:0d:5b: bb:96:5e:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxHuS2szW8TtLMW7UVesdWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZGEzZjczOWNhMDgyZmZlODg3ZjcwMzA2ZTdmYzc0ODQ2 MDZjZTIwHhcNMjUxMjE4MTEwMTA2WhcNMjUxMjE5MTEwMTA2WjAzMTEwLwYDVQQD EyhiODE0MjljYTJjOTkyNmYxYjY4ZjNlZDBhNTkyNWRlOGVjYjE2ODIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYKw9Fo7TpkyLOgCZzVnLq6/L6hh +0DL8VB0SDiaSfp4DM3QAA4dQylAFNUmXQwTPkdqf3oAEPNsrdAv/gLCpyJ0UEp7 /CIb7no1NfvaDQZDaaf8jGuHIhv9EBXAebXfxR/HbS5CdlkDWhElkhAnFeZrt3OM YaUSzzv6aU/s0bdW0VHk+uVlPat21xC+Xmqa0Cz1Phn1h/8DxuH5RUdyv8Hj6+A4 SNv+hFWtNQ2/5UiENvScqq5+y2BTclR+qwdxrW5iGf3kYtMZDW77FTksR7CZizin zmEDhby051gdnUMmYb29TKyMYnoyw1wW/nZYWdFklxJLp+7rUFkKqWXI3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLgUKcosmSbxto8+0KWSXejssWghMB8GA1UdIwQY MBaAFHjaP3OcoIL/6If3Awbn/HSEYGziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMt MWJmYmUxMGQ0ODQ5LzEvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZjhkOGItNGQzZS00ZTBkLThlMmMtMWJmYmUxMGQ0ODQ5 LzEvZU5vX2M1eWdndl9vaF9jREJ1ZjhkSVJnYk9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSVAwcc7 J2OxTjMCPx9LLEDEQp48kl1J6d43ZjKan5U4cWtHdxCqACcYOEwIFepgoH+f2eiJ uFo1NjaTv/Wis+N5deYbKXW0btlINLu6D7gQZP6e7lsffbCKF8QQtQjrckgzbraN 9yuivkjgbtDSX1hT6SRKoEKN46YI0zWH/PUD5kySitM1Arw53LL0kVbUDw7BCpvv eiCqCFMwHRzLjEbCyQtXtLo0KUmqnUXOiLTzap27+fh5V/XlGw/gVUC+D2rghZ9k XVFCiNDyjS0HOTCnG3ueBsIEj5v5p3cHu8jmAvpfGa4Qn9lLK8x0cPgLvSB9ibkN WRG7cg1bu5Ze0A== -----END CERTIFICATE-----Generated at Thu Dec 18 19:09:09 2025 by rpki-client