This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft File: eINdJYNK4Na8nZKPZGEn-8VL0z0.mft (raw, json) Hash identifier: yBlVtVAHk+cdMolPtWYBl9EY6PA/O5AIqvXSU/QHXUU= Subject key identifier: A9:DE:F8:C4:21:FF:42:76:B4:52:C6:24:72:83:D3:59:6B:3F:0D:A5 Authority key identifier: 78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D Certificate issuer: /CN=78835d25834ae0d6bc9d928f646127fbc54bd33d Certificate serial: 019AF12E6563AE607D01428EE3125594A8AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft Manifest number: 175E Signing time: Sat 06 Dec 2025 01:02:20 +0000 Manifest this update: Sat 06 Dec 2025 01:02:20 +0000 Manifest next update: Sun 07 Dec 2025 01:02:20 +0000 Files and hashes: 1: eINdJYNK4Na8nZKPZGEn-8VL0z0.crl (hash: TnWlidxIlzU1writRwF3tBNp+96k+ai+8X4bkM96uTE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:65:63:ae:60:7d:01:42:8e:e3:12:55:94:a8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78835d25834ae0d6bc9d928f646127fbc54bd33d Validity Not Before: Dec 6 01:02:20 2025 GMT Not After : Dec 7 01:02:20 2025 GMT Subject: CN=a9def8c421ff4276b452c6247283d3596b3f0da5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:15:a1:86:58:46:ab:f9:ac:bd:9f:4a:9b:8d: 33:67:89:b0:da:b2:44:74:e2:ac:0e:e2:21:e4:7b: 3a:e2:a6:fc:3d:f6:1d:0d:66:03:dc:9d:ad:be:f2: c6:8e:2e:1a:4c:eb:42:ab:13:80:9b:46:a3:48:e5: 98:d6:78:6d:c6:15:b5:0a:af:2a:b7:a1:bd:07:b2: aa:51:e5:c6:b3:6c:82:7d:bd:15:74:4b:9c:e0:e2: 5a:5d:0b:7b:85:71:9c:4e:5b:ee:22:0a:eb:00:d3: 23:92:e4:3e:0c:78:ca:d3:36:4a:d2:4a:90:8f:9f: 28:4e:ed:56:cd:49:bd:42:80:46:8d:72:63:60:99: 09:1d:22:a4:74:bb:8d:7a:d9:d7:61:79:19:df:a8: 24:04:c3:f3:a8:c3:83:4c:63:f2:44:5a:d9:0a:b7: 98:1d:31:aa:c5:a2:e4:be:63:f8:f8:ed:d8:1d:a2: 33:73:0d:f5:cc:13:2a:a8:ba:30:33:33:91:ab:5c: 10:65:bf:4b:b6:a7:dc:d5:dc:d5:b7:1b:27:1a:ad: 10:67:21:bc:4f:62:fd:28:55:01:14:bf:81:56:1b: 90:73:91:b5:bd:01:2a:1b:6d:5d:8f:d9:f5:47:f5: d5:b5:8a:84:6b:f5:54:12:7a:dc:b8:61:ed:26:d7: 04:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DE:F8:C4:21:FF:42:76:B4:52:C6:24:72:83:D3:59:6B:3F:0D:A5 X509v3 Authority Key Identifier: keyid:78:83:5D:25:83:4A:E0:D6:BC:9D:92:8F:64:61:27:FB:C5:4B:D3:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eINdJYNK4Na8nZKPZGEn-8VL0z0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/231051-b912-4b05-92af-8206297392d9/1/eINdJYNK4Na8nZKPZGEn-8VL0z0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:97:6c:e7:3b:9f:64:8d:99:95:ec:5b:64:3b:ca:ee:e1:c8: 82:08:85:2d:6a:18:32:43:b8:97:7b:4e:87:94:91:ed:2a:a9: 7e:4c:68:0f:60:b1:33:71:b4:e5:39:11:e7:60:2c:b8:fb:a4: 98:f9:56:6b:d8:e1:be:b3:85:07:a6:a5:8f:b5:b0:2a:ab:df: 90:d8:79:bd:a5:9e:f2:48:ef:ee:f1:88:20:ca:e9:66:1e:28: 97:6e:9c:1f:96:2b:62:2c:5f:d1:cc:53:76:78:4b:c1:4f:70: 6b:36:cd:3a:12:4e:4b:44:36:a2:85:3d:c4:6e:11:cf:df:bc: 6e:bb:f2:ea:04:ae:c0:c5:93:11:fa:02:39:88:5d:87:98:b8: 86:e5:06:bb:86:dc:bc:a9:39:e5:95:8c:40:43:91:8e:7d:62: 27:1f:13:be:45:df:c2:67:2a:0c:3e:cc:fa:8d:ac:f3:c5:45: 94:77:a9:54:c1:bc:a9:00:10:6a:46:24:65:9e:c4:a7:f1:63: ae:a0:d7:89:6d:2f:c8:ec:b5:f0:28:0e:05:c2:a0:9c:e5:2b: 97:aa:7c:1a:a0:89:37:64:80:5b:cc:6b:d1:8b:9c:46:b6:8e: e7:68:9c:f9:d6:18:68:52:ff:00:2d:9e:96:a3:19:df:86:3b: 3b:7e:9d:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLmVjrmB9AUKO4xJVlKivMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ODM1ZDI1ODM0YWUwZDZiYzlkOTI4ZjY0NjEyN2ZiYzU0 YmQzM2QwHhcNMjUxMjA2MDEwMjIwWhcNMjUxMjA3MDEwMjIwWjAzMTEwLwYDVQQD EyhhOWRlZjhjNDIxZmY0Mjc2YjQ1MmM2MjQ3MjgzZDM1OTZiM2YwZGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxWhhlhGq/msvZ9Km40zZ4mw2rJE dOKsDuIh5Hs64qb8PfYdDWYD3J2tvvLGji4aTOtCqxOAm0ajSOWY1nhtxhW1Cq8q t6G9B7KqUeXGs2yCfb0VdEuc4OJaXQt7hXGcTlvuIgrrANMjkuQ+DHjK0zZK0kqQ j58oTu1WzUm9QoBGjXJjYJkJHSKkdLuNetnXYXkZ36gkBMPzqMODTGPyRFrZCreY HTGqxaLkvmP4+O3YHaIzcw31zBMqqLowMzORq1wQZb9Ltqfc1dzVtxsnGq0QZyG8 T2L9KFUBFL+BVhuQc5G1vQEqG21dj9n1R/XVtYqEa/VUEnrcuGHtJtcEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKne+MQh/0J2tFLGJHKD01lrPw2lMB8GA1UdIwQY MBaAFHiDXSWDSuDWvJ2Sj2RhJ/vFS9M9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMzEwNTEtYjkxMi00YjA1LTkyYWYt ODIwNjI5NzM5MmQ5LzEvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS8yMzEwNTEtYjkxMi00YjA1LTkyYWYtODIwNjI5NzM5MmQ5 LzEvZUlOZEpZTks0TmE4blpLUFpHRW4tOFZMMHowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepds5zuf ZI2ZlexbZDvK7uHIggiFLWoYMkO4l3tOh5SR7SqpfkxoD2CxM3G05TkR52AsuPuk mPlWa9jhvrOFB6alj7WwKqvfkNh5vaWe8kjv7vGIIMrpZh4ol26cH5YrYixf0cxT dnhLwU9wazbNOhJOS0Q2ooU9xG4Rz9+8brvy6gSuwMWTEfoCOYhdh5i4huUGu4bc vKk55ZWMQEORjn1iJx8TvkXfwmcqDD7M+o2s88VFlHepVMG8qQAQakYkZZ7Ep/Fj rqDXiW0vyOy18CgOBcKgnOUrl6p8GqCJN2SAW8xr0YucRraO52ic+dYYaFL/AC2e lqMZ34Y7O36d7g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:41:14 2025 by rpki-client