This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft File: eNMexT3EQF1pFeGCWWS5fXoRb4E.mft (raw, json) Hash identifier: IcUOaVXDyoMFOr2Z/Hrb8p1HNHdiZi1FrpIeK8ZNEXQ= Subject key identifier: FD:CC:FC:19:77:7C:24:D4:57:A6:76:12:E3:F7:B5:0E:04:F4:5C:A3 Authority key identifier: 78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81 Certificate issuer: /CN=78d31ec53dc4405d6915e1825964b97d7a116f81 Certificate serial: 019AF23FFAB83E3FE55D9CC6934C7FF72E84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft Manifest number: 12CF Signing time: Sat 06 Dec 2025 06:01:10 +0000 Manifest this update: Sat 06 Dec 2025 06:01:10 +0000 Manifest next update: Sun 07 Dec 2025 06:01:10 +0000 Files and hashes: 1: 5gEGlVwVZrqZpPnotBCu9f34jtg.roa (hash: haUW51qrmH8OlsZcre9A2kx3gtQnJaSmXQISoIixtmo=) 2: eNMexT3EQF1pFeGCWWS5fXoRb4E.crl (hash: S/oOp2Wc3E144its+LQBQVmU/CjXaXGS8MHKJKXPYs0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:fa:b8:3e:3f:e5:5d:9c:c6:93:4c:7f:f7:2e:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d31ec53dc4405d6915e1825964b97d7a116f81 Validity Not Before: Dec 6 06:01:10 2025 GMT Not After : Dec 7 06:01:10 2025 GMT Subject: CN=fdccfc19777c24d457a67612e3f7b50e04f45ca3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:43:ca:54:31:39:8f:ec:36:43:b1:3a:02:bc: ca:c3:9f:e8:75:5a:f0:17:9b:39:8f:ae:69:89:fa: cc:8c:5e:09:8a:3b:78:c3:29:81:57:ca:1e:ff:40: 7b:83:d0:6c:ef:36:98:61:cc:07:cb:1f:ae:21:7f: ec:b8:ae:10:a2:40:15:14:87:18:b8:2a:54:5d:6f: 69:ad:ae:35:01:02:db:35:d1:92:01:5d:36:14:91: e4:a3:6c:59:d3:e6:48:70:d1:5d:f1:c9:dd:dc:d3: 0e:99:ee:a0:99:43:6c:95:f6:bc:5f:d4:26:6c:d7: da:81:d9:60:dd:4a:8c:68:90:26:66:13:af:d0:71: e5:58:02:89:c6:15:65:d5:de:3b:53:b7:39:33:7b: ac:0f:49:3d:b4:11:b9:7e:d1:81:cb:0e:db:29:75: 39:b4:eb:29:1f:32:e2:1a:a1:de:44:d7:d4:83:e7: a0:6f:f1:d1:62:dd:df:a2:83:b8:f8:49:d9:b5:e5: c7:53:d5:28:fe:1b:56:d6:d3:03:b4:2f:6b:82:ee: 54:c6:d0:f1:c7:fc:e6:91:e1:5a:ff:88:4c:0f:96: 9a:dd:9f:bf:a4:7f:a8:70:09:1a:1a:d6:2d:d2:ca: 89:6c:6e:14:16:49:d4:1f:6d:65:26:dc:b0:3b:6d: 9d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:CC:FC:19:77:7C:24:D4:57:A6:76:12:E3:F7:B5:0E:04:F4:5C:A3 X509v3 Authority Key Identifier: keyid:78:D3:1E:C5:3D:C4:40:5D:69:15:E1:82:59:64:B9:7D:7A:11:6F:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNMexT3EQF1pFeGCWWS5fXoRb4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bf878d-0e4e-4822-881e-129bce864c22/1/eNMexT3EQF1pFeGCWWS5fXoRb4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:b7:53:a7:cb:46:f5:15:27:83:d8:9d:2e:f5:61:ad:63:2e: 59:2f:a3:c9:a2:41:de:16:6e:b1:e9:fb:45:cc:40:d6:21:38: 61:56:d6:e7:ae:36:ee:f8:0e:d5:94:3e:62:c7:d5:75:df:a8: ca:9d:9d:dd:66:a4:b1:e6:9d:6f:d0:be:b3:01:4e:72:67:99: c5:c8:57:a1:b6:6a:9b:b5:7c:3e:a7:6a:cd:b3:0f:a5:58:bd: 94:f6:5e:9e:f7:d6:03:92:cd:d2:26:d9:a2:06:10:22:dd:7f: 5c:2c:5b:c5:14:f1:8c:3d:41:e1:bc:10:a1:2d:9d:a2:fa:4f: 15:d6:33:d4:5d:67:61:5a:37:1e:b5:7d:1a:f0:09:b6:5c:fb: 73:a6:f8:73:c3:7a:8b:91:5f:c0:b3:63:f6:42:8b:c4:bb:b0: 6c:c7:1d:8c:f4:3c:b6:7d:26:cf:5d:95:54:a4:6c:c5:10:e9: 9d:c4:78:8c:86:86:57:8c:e7:11:6b:fb:3d:14:e0:be:5b:67: 70:cd:61:d3:cd:c7:86:22:73:af:06:cb:68:19:70:03:24:cf: dd:d1:fe:30:4f:57:fc:2a:42:51:66:bf:2a:08:08:83:bd:2a: 71:0e:c9:21:92:cd:1a:0b:3d:c0:65:05:f7:39:d0:60:4a:93: b9:0e:80:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP/q4Pj/lXZzGk0x/9y6EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDMxZWM1M2RjNDQwNWQ2OTE1ZTE4MjU5NjRiOTdkN2Ex MTZmODEwHhcNMjUxMjA2MDYwMTEwWhcNMjUxMjA3MDYwMTEwWjAzMTEwLwYDVQQD EyhmZGNjZmMxOTc3N2MyNGQ0NTdhNjc2MTJlM2Y3YjUwZTA0ZjQ1Y2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkPKVDE5j+w2Q7E6ArzKw5/odVrw F5s5j65pifrMjF4Jijt4wymBV8oe/0B7g9Bs7zaYYcwHyx+uIX/suK4QokAVFIcY uCpUXW9pra41AQLbNdGSAV02FJHko2xZ0+ZIcNFd8cnd3NMOme6gmUNslfa8X9Qm bNfagdlg3UqMaJAmZhOv0HHlWAKJxhVl1d47U7c5M3usD0k9tBG5ftGByw7bKXU5 tOspHzLiGqHeRNfUg+egb/HRYt3fooO4+EnZteXHU9Uo/htW1tMDtC9rgu5UxtDx x/zmkeFa/4hMD5aa3Z+/pH+ocAkaGtYt0sqJbG4UFknUH21lJtywO22dWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3M/Bl3fCTUV6Z2EuP3tQ4E9FyjMB8GA1UdIwQY MBaAFHjTHsU9xEBdaRXhgllkuX16EW+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iZjg3OGQtMGU0ZS00ODIyLTg4MWUt MTI5YmNlODY0YzIyLzEvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iZjg3OGQtMGU0ZS00ODIyLTg4MWUtMTI5YmNlODY0YzIy LzEvZU5NZXhUM0VRRjFwRmVHQ1dXUzVmWG9SYjRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrdTp8tG 9RUng9idLvVhrWMuWS+jyaJB3hZusen7RcxA1iE4YVbW56427vgO1ZQ+YsfVdd+o yp2d3Wakseadb9C+swFOcmeZxchXobZqm7V8PqdqzbMPpVi9lPZenvfWA5LN0ibZ ogYQIt1/XCxbxRTxjD1B4bwQoS2dovpPFdYz1F1nYVo3HrV9GvAJtlz7c6b4c8N6 i5FfwLNj9kKLxLuwbMcdjPQ8tn0mz12VVKRsxRDpncR4jIaGV4znEWv7PRTgvltn cM1h083HhiJzrwbLaBlwAyTP3dH+ME9X/CpCUWa/KggIg70qcQ7JIZLNGgs9wGUF 9znQYEqTuQ6Agw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:26:34 2025 by rpki-client