This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft File: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft (raw, json) Hash identifier: D4BxJobNQrM0/LhyZB+4JWc+K8u3s3MH7wjQK52k0Ak= Subject key identifier: EE:89:A2:7C:09:4A:7A:B5:F5:90:2E:A3:CE:42:75:84:C8:70:F4:1E Authority key identifier: EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63 Certificate issuer: /CN=efd30d69329d33f44212bf86b69ff20881051063 Certificate serial: 019AF3894B3F7ABBFEE314AA05CFA7C356A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 12:00:52 +0000 Manifest this update: Sat 06 Dec 2025 12:00:52 +0000 Manifest next update: Sun 07 Dec 2025 12:00:52 +0000 Files and hashes: 1: 79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl (hash: f/wj8M1BhJGlf9OuHGC5+pSDFLPnpvU1CHtSfb3MDJo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:4b:3f:7a:bb:fe:e3:14:aa:05:cf:a7:c3:56:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efd30d69329d33f44212bf86b69ff20881051063 Validity Not Before: Dec 6 12:00:52 2025 GMT Not After : Dec 7 12:00:52 2025 GMT Subject: CN=ee89a27c094a7ab5f5902ea3ce427584c870f41e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f9:03:2f:e4:3a:05:ec:05:96:b0:0a:dc:f1: 8c:16:9f:32:c8:ed:56:18:ad:e4:3f:a5:13:7c:7b: 2e:11:ca:b4:f2:b4:7b:3b:11:28:d1:05:f1:d0:2e: 30:bb:b9:21:51:23:48:a1:ae:d3:18:00:f2:fd:3c: 8e:5a:67:f6:e5:cf:12:03:69:9c:ec:5f:ae:74:32: d7:8b:a0:14:b7:23:36:5f:4a:a4:5e:91:c5:f6:46: 6e:4f:9d:10:2c:09:d6:40:ee:ae:49:cf:75:86:b1: 82:61:3c:df:ef:73:6d:85:0b:6c:71:1d:a3:3f:85: d4:10:e4:94:d1:8b:69:eb:d8:b6:a9:85:5f:20:1d: c1:e4:4d:03:c9:fc:23:c1:f5:64:68:c0:ba:8f:87: 3d:da:42:d0:0e:f7:d4:73:38:4a:c7:c2:d2:81:89: a0:c0:e2:68:5c:b7:41:7c:29:31:b3:d6:12:0c:ac: 7f:5f:f9:c6:f4:06:b2:0d:ec:b8:53:68:11:2b:1a: 77:19:d3:a9:1c:f8:55:16:44:29:a5:9d:10:96:df: 6b:f2:53:1f:21:c9:11:b4:ef:f3:ca:63:36:78:28: d5:30:46:ca:b6:42:39:fe:cb:82:fd:9e:82:80:41: 14:62:00:7e:b4:91:9c:5b:5e:b2:9b:d7:ac:ea:2b: c0:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:89:A2:7C:09:4A:7A:B5:F5:90:2E:A3:CE:42:75:84:C8:70:F4:1E X509v3 Authority Key Identifier: keyid:EF:D3:0D:69:32:9D:33:F4:42:12:BF:86:B6:9F:F2:08:81:05:10:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79MNaTKdM_RCEr-Gtp_yCIEFEGM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/e254ad-6889-4195-820a-f373921778e1/1/79MNaTKdM_RCEr-Gtp_yCIEFEGM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:74:56:9e:a0:21:46:ef:20:b3:b8:21:19:a8:fd:cc:c2:ec: 32:14:ac:9d:9f:a8:fb:96:29:14:9e:fc:7d:c9:31:e2:c4:45: d5:6a:40:35:80:c3:e9:cb:55:a0:a4:2b:7b:70:bb:10:05:55: e0:d1:90:d2:b0:a0:b4:b4:91:19:f2:3a:36:b8:10:15:14:cc: 30:c5:63:84:18:bd:d4:5f:2a:c2:f7:75:73:c1:ed:d6:17:ad: d3:16:91:34:b7:8c:f9:71:e5:06:5a:8a:c7:79:0d:df:27:31: 68:5c:29:46:1f:62:40:6e:70:e4:48:33:3b:4d:6a:74:09:3b: 27:73:db:c4:5a:a3:30:b0:75:8a:9e:b2:4d:dd:5a:a7:9d:1c: c5:d7:4f:ac:8c:66:02:35:45:8e:7a:42:93:91:68:14:2f:47: 98:83:bc:ae:8b:03:f7:21:61:09:cd:8b:49:00:0d:d2:d1:6e: 96:f9:fa:f7:07:92:75:cc:94:f6:c2:df:54:80:d2:71:31:e2: 00:1b:3c:50:49:a1:4a:1f:04:6c:dc:d7:cc:45:02:7a:93:05: 77:7e:51:66:0c:58:05:e0:b0:9b:25:b6:1b:f5:25:de:aa:60: 94:bc:b8:be:db:35:b3:02:5a:f0:92:f6:4f:1b:f1:03:68:2a: 28:67:b7:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziUs/erv+4xSqBc+nw1ajMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZDMwZDY5MzI5ZDMzZjQ0MjEyYmY4NmI2OWZmMjA4ODEw NTEwNjMwHhcNMjUxMjA2MTIwMDUyWhcNMjUxMjA3MTIwMDUyWjAzMTEwLwYDVQQD EyhlZTg5YTI3YzA5NGE3YWI1ZjU5MDJlYTNjZTQyNzU4NGM4NzBmNDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvkDL+Q6BewFlrAK3PGMFp8yyO1W GK3kP6UTfHsuEcq08rR7OxEo0QXx0C4wu7khUSNIoa7TGADy/TyOWmf25c8SA2mc 7F+udDLXi6AUtyM2X0qkXpHF9kZuT50QLAnWQO6uSc91hrGCYTzf73NthQtscR2j P4XUEOSU0Ytp69i2qYVfIB3B5E0DyfwjwfVkaMC6j4c92kLQDvfUczhKx8LSgYmg wOJoXLdBfCkxs9YSDKx/X/nG9AayDey4U2gRKxp3GdOpHPhVFkQppZ0Qlt9r8lMf IckRtO/zymM2eCjVMEbKtkI5/suC/Z6CgEEUYgB+tJGcW16ym9es6ivAqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6JonwJSnq19ZAuo85CdYTIcPQeMB8GA1UdIwQY MBaAFO/TDWkynTP0QhK/hraf8giBBRBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEt ZjM3MzkyMTc3OGUxLzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lMjU0YWQtNjg4OS00MTk1LTgyMGEtZjM3MzkyMTc3OGUx LzEvNzlNTmFUS2RNX1JDRXItR3RwX3lDSUVGRUdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASnRWnqAh Ru8gs7ghGaj9zMLsMhSsnZ+o+5YpFJ78fckx4sRF1WpANYDD6ctVoKQre3C7EAVV 4NGQ0rCgtLSRGfI6NrgQFRTMMMVjhBi91F8qwvd1c8Ht1het0xaRNLeM+XHlBlqK x3kN3ycxaFwpRh9iQG5w5EgzO01qdAk7J3PbxFqjMLB1ip6yTd1ap50cxddPrIxm AjVFjnpCk5FoFC9HmIO8rosD9yFhCc2LSQAN0tFulvn69weSdcyU9sLfVIDScTHi ABs8UEmhSh8EbNzXzEUCepMFd35RZgxYBeCwmyW2G/Ul3qpglLy4vts1swJa8JL2 TxvxA2gqKGe3HQ== -----END CERTIFICATE-----Generated at Sat Dec 6 15:07:41 2025 by rpki-client