This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft File: eNY2xQXVavQqQUwWfVJAfTVrPQs.mft (raw, json) Hash identifier: pjLi+OgsBfZnQ25KRKYTqGzkLMkjoEMwzqfFpMbxEHY= Subject key identifier: 1C:E7:9D:27:72:64:5D:9B:0C:53:99:41:E6:83:6A:A9:EA:ED:62:9B Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b Certificate serial: 019AF46591EACFCF52174A3D98BD6A73DBD8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 16:01:28 +0000 Manifest this update: Sat 06 Dec 2025 16:01:28 +0000 Manifest next update: Sun 07 Dec 2025 16:01:28 +0000 Files and hashes: 1: 6MYz-ZGdNS-u8_z3MpC45Xu_sMw.roa (hash: A1Kj+TMjQETP1ey0GJIYlCuG+gJEQ2kRAL9GRcwfmRY=) 2: eNY2xQXVavQqQUwWfVJAfTVrPQs.crl (hash: vR7xB26Byn+3y5rE/W3TT56mMG2mNdo+LwiVRdQ/Pdg=) 3: fWLV1tqcU4m7vWsAHunAQvcMHQ8.roa (hash: gqfm8MCWa2Pg4ZrCCuhR4K4qe9DOCoAfzWejjyOWCNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:91:ea:cf:cf:52:17:4a:3d:98:bd:6a:73:db:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b Validity Not Before: Dec 6 16:01:28 2025 GMT Not After : Dec 7 16:01:28 2025 GMT Subject: CN=1ce79d2772645d9b0c539941e6836aa9eaed629b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:25:48:bd:67:35:63:b0:a7:6b:c0:03:a5: 4c:c2:45:ed:0e:56:48:fd:6b:f9:c9:92:db:bd:10: f7:f5:47:6b:6d:24:a4:5f:ab:43:3d:b7:29:3e:39: b2:64:b9:53:af:df:2f:ba:e4:5a:a0:75:9d:1a:67: c9:ae:35:aa:5c:98:0a:ea:b9:1c:16:d9:34:5c:dd: ac:c0:10:8a:60:02:76:0b:bf:6c:73:85:72:96:3e: 90:af:f1:a2:3e:f6:19:0a:56:8b:53:d6:98:c8:4f: 08:f4:bb:c8:7f:fe:d2:88:1b:4f:03:d5:a2:6c:df: 41:f7:a0:68:8a:07:4e:67:51:28:fd:90:1c:1e:2d: ae:50:8a:cd:eb:b1:92:2b:b1:d5:89:83:61:db:f2: 8e:b1:bb:cd:87:9d:41:15:45:c3:1e:46:a5:1a:0a: 1f:18:58:28:6a:30:38:06:a9:7d:29:2a:c8:f7:11: 3b:94:c9:f7:62:fd:f1:c1:66:38:cc:d9:c8:f0:17: 48:68:f2:46:f6:77:e2:a8:18:65:85:b5:d6:d3:ac: 28:a9:02:b9:05:9d:59:ad:ca:c7:f8:d8:83:94:fe: 41:40:fa:00:47:5d:64:82:f2:ee:11:99:89:8c:ce: 9e:93:f5:5a:98:10:98:e1:1d:b1:58:3e:fd:fb:5d: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:E7:9D:27:72:64:5D:9B:0C:53:99:41:E6:83:6A:A9:EA:ED:62:9B X509v3 Authority Key Identifier: keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:a3:dd:05:c6:f1:37:b1:2e:a2:76:ad:fd:e9:15:7e:e8:fd: 56:ce:d1:32:4a:a6:8d:b9:4e:2b:94:a5:5e:c3:16:0a:31:22: 11:ce:5f:80:35:50:cd:dd:89:b6:05:5e:b8:e0:8f:73:d5:99: ba:3c:8f:f6:08:33:e4:dd:b2:46:36:10:4f:26:54:85:75:48: 4e:19:77:b1:64:61:9f:50:2f:5c:56:ac:9c:59:22:55:a2:b6: 3f:4b:7d:fe:45:0a:6e:b8:23:fc:b8:a7:5c:09:74:b9:74:fa: 0e:30:26:fe:ba:ba:df:2b:1a:4c:cc:a7:a4:dc:96:f9:52:f3: b9:8d:6b:93:58:f1:52:18:55:56:b0:a2:1a:5c:06:da:20:24: 22:5c:eb:25:7d:95:50:ec:01:23:29:b9:f9:6b:43:9b:e2:63: d9:0b:2b:f9:a2:20:77:0d:10:7b:e3:44:ef:04:d5:98:13:d4: 19:2c:18:b0:bb:7e:6d:4a:5f:15:84:e3:cb:e9:06:be:0a:62: e6:1d:73:7b:fc:6a:e5:41:e4:b9:b5:3d:23:1f:fd:e4:d9:d5: ce:20:74:53:23:6f:56:bb:16:ba:6a:fc:18:09:82:e2:37:c5: 3b:3f:76:a7:43:62:a4:c4:47:1c:92:5b:b8:f5:53:6c:e4:f7: 28:0b:26:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZZHqz89SF0o9mL1qc9vYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDYzNmM1MDVkNTZhZjQyYTQxNGMxNjdkNTI0MDdkMzU2 YjNkMGIwHhcNMjUxMjA2MTYwMTI4WhcNMjUxMjA3MTYwMTI4WjAzMTEwLwYDVQQD EygxY2U3OWQyNzcyNjQ1ZDliMGM1Mzk5NDFlNjgzNmFhOWVhZWQ2MjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1k0lSL1nNWOwp2vAA6VMwkXtDlZI /Wv5yZLbvRD39UdrbSSkX6tDPbcpPjmyZLlTr98vuuRaoHWdGmfJrjWqXJgK6rkc Ftk0XN2swBCKYAJ2C79sc4Vylj6Qr/GiPvYZClaLU9aYyE8I9LvIf/7SiBtPA9Wi bN9B96BoigdOZ1Eo/ZAcHi2uUIrN67GSK7HViYNh2/KOsbvNh51BFUXDHkalGgof GFgoajA4Bql9KSrI9xE7lMn3Yv3xwWY4zNnI8BdIaPJG9nfiqBhlhbXW06woqQK5 BZ1ZrcrH+NiDlP5BQPoAR11kgvLuEZmJjM6ek/VamBCY4R2xWD79+12A7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBznnSdyZF2bDFOZQeaDaqnq7WKbMB8GA1UdIwQY MBaAFHjWNsUF1Wr0KkFMFn1SQH01az0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTIt ZGRjZDRkOTM1MDMwLzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8xZmE5NDUtNTBlNy00NzlhLTlkOTItZGRjZDRkOTM1MDMw LzEvZU5ZMnhRWFZhdlFxUVV3V2ZWSkFmVFZyUFFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaPdBcbx N7Euonat/ekVfuj9Vs7RMkqmjblOK5SlXsMWCjEiEc5fgDVQzd2JtgVeuOCPc9WZ ujyP9ggz5N2yRjYQTyZUhXVIThl3sWRhn1AvXFasnFkiVaK2P0t9/kUKbrgj/Lin XAl0uXT6DjAm/rq63ysaTMynpNyW+VLzuY1rk1jxUhhVVrCiGlwG2iAkIlzrJX2V UOwBIym5+WtDm+Jj2Qsr+aIgdw0Qe+NE7wTVmBPUGSwYsLt+bUpfFYTjy+kGvgpi 5h1ze/xq5UHkubU9Ix/95NnVziB0UyNvVrsWumr8GAmC4jfFOz92p0NipMRHHJJb uPVTbOT3KAsm8w== -----END CERTIFICATE-----Generated at Sat Dec 6 20:42:27 2025 by rpki-client