This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft File: eNiveOb7rS7n4tDOuGuji_pUjhs.mft (raw, json) Hash identifier: /J193PzhBImomkrJPAdRktUhUYT4XlDcttPE0y8q6DA= Subject key identifier: 08:5A:45:B1:01:37:88:B9:4E:C5:87:A2:E0:D0:14:E5:CB:B8:AE:64 Authority key identifier: 78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B Certificate issuer: /CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b Certificate serial: 019AF23F762BB29988283ECDC6660F1326FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft Manifest number: 034B Signing time: Sat 06 Dec 2025 06:00:36 +0000 Manifest this update: Sat 06 Dec 2025 06:00:36 +0000 Manifest next update: Sun 07 Dec 2025 06:00:36 +0000 Files and hashes: 1: eNiveOb7rS7n4tDOuGuji_pUjhs.crl (hash: Qto3Ui/SGh9wfapP3sIwn1YAC9IjfJ/ClnqydP2JqL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:76:2b:b2:99:88:28:3e:cd:c6:66:0f:13:26:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d8af78e6fbad2ee7e2d0ceb86ba38bfa548e1b Validity Not Before: Dec 6 06:00:36 2025 GMT Not After : Dec 7 06:00:36 2025 GMT Subject: CN=085a45b1013788b94ec587a2e0d014e5cbb8ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:36:7d:e8:6d:c3:1c:1d:6c:8d:e1:85:4c:de: 4d:d2:45:62:89:b2:9b:07:9f:bb:4a:e1:90:a8:a3: d2:b6:b9:3a:58:6c:5c:b5:a5:fa:52:c6:ae:78:b3: 7d:e8:2c:26:f4:1d:c8:64:02:4d:5b:9a:37:d4:f5: 15:12:08:67:ec:ad:6c:88:38:96:5b:0d:2c:ec:48: b6:99:67:e5:cb:a1:44:13:23:6e:6c:dd:1b:f1:83: ab:3b:33:2b:2c:96:5c:7c:2c:f3:05:f8:13:cc:ec: 15:f0:4b:6f:37:22:9f:0d:43:19:04:c3:53:d6:97: b5:31:9d:20:75:73:d9:6a:78:7f:05:d5:30:b8:f5: 62:c4:ab:c1:7f:93:29:6a:53:71:b6:e4:53:63:e6: 2e:ba:66:7d:73:31:25:42:f5:56:95:4b:df:8d:15: 24:64:00:c1:5a:9a:59:2f:a7:d5:b2:2d:9d:cf:9d: 0c:5b:23:f0:86:e6:59:e2:77:07:76:d7:22:a3:8a: eb:de:c4:a4:d1:7a:7c:e0:94:c5:06:68:2a:92:8a: 46:c5:b6:95:27:2f:89:47:3b:27:99:7a:4d:e8:7d: 13:77:16:0d:0b:64:38:bd:e1:8b:f5:03:d4:76:86: 4d:56:16:f4:bc:0e:da:b6:23:0f:0d:64:7c:c9:49: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:5A:45:B1:01:37:88:B9:4E:C5:87:A2:E0:D0:14:E5:CB:B8:AE:64 X509v3 Authority Key Identifier: keyid:78:D8:AF:78:E6:FB:AD:2E:E7:E2:D0:CE:B8:6B:A3:8B:FA:54:8E:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNiveOb7rS7n4tDOuGuji_pUjhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4196d8-ea2f-4bf7-b802-734141de3576/1/eNiveOb7rS7n4tDOuGuji_pUjhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:73:de:e2:c5:c0:bb:7d:03:83:bf:ae:c8:f5:0e:94:20:c5: 5e:88:0e:f7:a1:10:d0:2d:73:df:4d:62:41:d0:85:50:ba:43: b8:78:24:fd:f9:73:11:98:d7:d8:10:9b:0d:05:b1:4e:e8:a0: 3e:e5:35:1f:48:36:8a:e7:89:6a:0b:25:29:8c:89:14:a6:9b: e7:f8:ed:9f:f9:5c:15:51:0a:36:71:ff:09:d8:70:09:28:9a: ab:b1:f2:a0:ee:11:f8:60:aa:3a:88:45:91:8a:3b:8a:0f:d6: 03:e3:da:51:00:3e:88:21:e1:12:ff:43:4a:81:f3:e0:f0:9a: fe:3e:5a:76:a4:97:54:45:f4:55:f5:05:7a:a9:a0:f3:32:82: 9f:7c:09:bf:c7:62:ad:e3:e5:0d:68:7e:4f:cd:3a:64:2d:a5: 28:df:c1:ae:1b:c2:aa:ec:7d:e7:2a:73:4a:9f:c0:11:ca:87: 51:19:7d:e7:51:b7:d1:04:b3:76:65:58:74:bf:06:75:ca:24: 07:a7:57:38:8e:62:6e:03:9e:95:5d:09:38:db:60:39:28:d7: 85:3a:fa:06:aa:12:dd:f0:0b:17:44:06:f4:c1:f1:71:f3:99: 03:64:5b:d9:1b:86:7c:af:4e:cc:1a:59:bb:4c:bc:14:a9:e4: 08:f9:3d:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP3YrspmIKD7NxmYPEyb8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDhhZjc4ZTZmYmFkMmVlN2UyZDBjZWI4NmJhMzhiZmE1 NDhlMWIwHhcNMjUxMjA2MDYwMDM2WhcNMjUxMjA3MDYwMDM2WjAzMTEwLwYDVQQD EygwODVhNDViMTAxMzc4OGI5NGVjNTg3YTJlMGQwMTRlNWNiYjhhZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljZ96G3DHB1sjeGFTN5N0kViibKb B5+7SuGQqKPStrk6WGxctaX6UsaueLN96Cwm9B3IZAJNW5o31PUVEghn7K1siDiW Ww0s7Ei2mWfly6FEEyNubN0b8YOrOzMrLJZcfCzzBfgTzOwV8EtvNyKfDUMZBMNT 1pe1MZ0gdXPZanh/BdUwuPVixKvBf5MpalNxtuRTY+YuumZ9czElQvVWlUvfjRUk ZADBWppZL6fVsi2dz50MWyPwhuZZ4ncHdtcio4rr3sSk0Xp84JTFBmgqkopGxbaV Jy+JRzsnmXpN6H0TdxYNC2Q4veGL9QPUdoZNVhb0vA7atiMPDWR8yUnBqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhaRbEBN4i5TsWHouDQFOXLuK5kMB8GA1UdIwQY MBaAFHjYr3jm+60u5+LQzrhro4v6VI4bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDIt NzM0MTQxZGUzNTc2LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS80MTk2ZDgtZWEyZi00YmY3LWI4MDItNzM0MTQxZGUzNTc2 LzEvZU5pdmVPYjdyUzduNHRET3VHdWppX3BVamhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMXPe4sXA u30Dg7+uyPUOlCDFXogO96EQ0C1z301iQdCFULpDuHgk/flzEZjX2BCbDQWxTuig PuU1H0g2iueJagslKYyJFKab5/jtn/lcFVEKNnH/CdhwCSiaq7HyoO4R+GCqOohF kYo7ig/WA+PaUQA+iCHhEv9DSoHz4PCa/j5adqSXVEX0VfUFeqmg8zKCn3wJv8di rePlDWh+T806ZC2lKN/BrhvCqux95ypzSp/AEcqHURl951G30QSzdmVYdL8Gdcok B6dXOI5ibgOelV0JONtgOSjXhTr6BqoS3fALF0QG9MHxcfOZA2Rb2RuGfK9OzBpZ u0y8FKnkCPk9Rw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:08:22 2025 by rpki-client