This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft File: eAl9X3eghkNQCkNtDpjwM9D1SPk.mft (raw, json) Hash identifier: lkNGXmUUIWtJ7WimFdC+WcKaffaV2tnfBb0en0GIiQ0= Subject key identifier: 10:D9:39:6F:2D:4C:76:2E:38:F3:E9:63:D6:29:56:94:7B:BC:31:98 Authority key identifier: 78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9 Certificate issuer: /CN=78097d5f77a08643500a436d0e98f033d0f548f9 Certificate serial: 019AF087E7FA5B8F8EA06B41C8876AB7B05E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft Manifest number: 175F Signing time: Fri 05 Dec 2025 22:00:29 +0000 Manifest this update: Fri 05 Dec 2025 22:00:29 +0000 Manifest next update: Sat 06 Dec 2025 22:00:29 +0000 Files and hashes: 1: eAl9X3eghkNQCkNtDpjwM9D1SPk.crl (hash: 52AYtExnERYGe2UqRfx1f1WjiHf4jWui0rLv3DDWpZ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:87:e7:fa:5b:8f:8e:a0:6b:41:c8:87:6a:b7:b0:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78097d5f77a08643500a436d0e98f033d0f548f9 Validity Not Before: Dec 5 22:00:29 2025 GMT Not After : Dec 6 22:00:29 2025 GMT Subject: CN=10d9396f2d4c762e38f3e963d62956947bbc3198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5b:3c:bc:f0:9a:13:1a:b5:10:71:97:cd:17: 35:19:2f:23:1a:c6:64:fe:c1:35:b0:a3:2b:16:2e: 38:07:5f:16:8b:2e:41:47:86:ce:5e:93:bd:54:0d: ec:36:29:9c:f6:c8:2f:34:8a:b9:2d:bc:e3:1c:31: d0:6e:e7:0c:9d:27:4e:98:cc:07:25:dd:8a:92:a2: 20:10:8f:eb:47:06:72:a9:1f:f8:da:5e:0c:5b:90: fb:45:5a:e3:96:5d:b0:95:e6:b1:6d:1c:21:34:f0: 28:c4:3e:b7:b5:fa:fa:23:73:d3:9a:fe:8e:b1:87: 3f:7c:fd:9a:01:3d:ec:a4:c4:5e:fe:50:c8:99:4b: 45:be:82:14:fe:b4:09:d7:f0:f8:cc:da:ca:b8:18: 74:49:57:f5:10:4b:76:6d:6f:c2:74:ee:38:a1:21: 09:99:68:2a:47:77:a0:f2:c8:4c:db:dc:87:9d:7d: 38:c8:68:39:f4:cc:83:6d:2f:e0:05:4b:c0:7d:63: a8:35:81:d3:70:ec:cb:3f:1b:3b:f4:4f:b4:08:c4: 96:c8:66:2e:0f:b8:cd:7f:57:a1:9c:46:9c:91:03: a2:7d:e1:6b:df:55:49:df:ed:12:68:64:d2:8f:23: 09:cd:2b:a6:5a:0e:65:c3:cc:19:3b:a9:40:f1:11: 4a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D9:39:6F:2D:4C:76:2E:38:F3:E9:63:D6:29:56:94:7B:BC:31:98 X509v3 Authority Key Identifier: keyid:78:09:7D:5F:77:A0:86:43:50:0A:43:6D:0E:98:F0:33:D0:F5:48:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eAl9X3eghkNQCkNtDpjwM9D1SPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3525d3-862e-4978-a5f1-a18e4006f80a/1/eAl9X3eghkNQCkNtDpjwM9D1SPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:b8:bf:d5:5d:d0:7f:10:62:16:01:35:93:0b:59:06:4a:bd: d8:57:da:58:30:3b:52:22:c7:df:f0:38:61:2f:ae:5c:61:6b: 4f:ad:86:2c:de:b1:4d:02:62:39:a0:8b:93:07:4a:13:84:20: 56:5d:f9:0e:4c:5f:d6:cb:75:1b:d9:98:18:ab:89:41:3c:2d: ea:5d:9c:a6:7d:6b:97:6d:39:86:f8:23:a7:69:aa:71:1e:78: 05:78:4c:0d:4c:5b:7e:2f:dd:7e:b5:94:7d:25:b2:7f:fe:3e: c6:02:b1:61:3c:dd:2c:1d:8a:cc:1d:a4:4a:c5:de:12:14:61: 7b:35:5d:1f:b7:46:dd:9d:82:33:e0:ba:29:f5:ae:7c:68:f8: b9:97:85:2b:90:81:de:01:db:af:a9:ec:ea:01:ec:13:bd:d6: 22:a9:cb:55:68:8a:da:3a:33:f5:e4:7c:85:01:df:be:84:98: cd:b8:7d:4b:c0:0a:08:6b:86:f9:f8:cd:6e:e6:cb:f8:a3:9a: f8:85:5f:a4:6b:bd:34:14:db:94:54:3f:c8:cc:9a:bc:40:4a: c6:c0:a8:bc:6c:4e:f0:fe:cb:24:d5:04:14:ff:e4:b1:b6:58: fe:27:dc:a6:b1:24:78:44:88:f1:a8:df:08:a6:d1:7c:14:0c: e0:9f:aa:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwh+f6W4+OoGtByIdqt7BeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4MDk3ZDVmNzdhMDg2NDM1MDBhNDM2ZDBlOThmMDMzZDBm NTQ4ZjkwHhcNMjUxMjA1MjIwMDI5WhcNMjUxMjA2MjIwMDI5WjAzMTEwLwYDVQQD EygxMGQ5Mzk2ZjJkNGM3NjJlMzhmM2U5NjNkNjI5NTY5NDdiYmMzMTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Fs8vPCaExq1EHGXzRc1GS8jGsZk /sE1sKMrFi44B18Wiy5BR4bOXpO9VA3sNimc9sgvNIq5LbzjHDHQbucMnSdOmMwH Jd2KkqIgEI/rRwZyqR/42l4MW5D7RVrjll2wleaxbRwhNPAoxD63tfr6I3PTmv6O sYc/fP2aAT3spMRe/lDImUtFvoIU/rQJ1/D4zNrKuBh0SVf1EEt2bW/CdO44oSEJ mWgqR3eg8shM29yHnX04yGg59MyDbS/gBUvAfWOoNYHTcOzLPxs79E+0CMSWyGYu D7jNf1ehnEackQOifeFr31VJ3+0SaGTSjyMJzSumWg5lw8wZO6lA8RFKrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBDZOW8tTHYuOPPpY9YpVpR7vDGYMB8GA1UdIwQY MBaAFHgJfV93oIZDUApDbQ6Y8DPQ9Uj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEt YTE4ZTQwMDZmODBhLzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi8zNTI1ZDMtODYyZS00OTc4LWE1ZjEtYTE4ZTQwMDZmODBh LzEvZUFsOVgzZWdoa05RQ2tOdERwandNOUQxU1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ7i/1V3Q fxBiFgE1kwtZBkq92FfaWDA7UiLH3/A4YS+uXGFrT62GLN6xTQJiOaCLkwdKE4Qg Vl35Dkxf1st1G9mYGKuJQTwt6l2cpn1rl205hvgjp2mqcR54BXhMDUxbfi/dfrWU fSWyf/4+xgKxYTzdLB2KzB2kSsXeEhRhezVdH7dG3Z2CM+C6KfWufGj4uZeFK5CB 3gHbr6ns6gHsE73WIqnLVWiK2joz9eR8hQHfvoSYzbh9S8AKCGuG+fjNbubL+KOa +IVfpGu9NBTblFQ/yMyavEBKxsCovGxO8P7LJNUEFP/ksbZY/ifcprEkeESI8ajf CKbRfBQM4J+q+A== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:36 2025 by rpki-client