This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft File: 79kZGXhjH8lVrA9RBi1c6YROrgM.mft (raw, json) Hash identifier: juH2srKKPcyV960Dsu/PUISDn1+M4y9Z+M4ABPnrqhw= Subject key identifier: 6B:C3:BA:81:D8:57:19:F6:76:51:6E:1E:89:DD:B9:10:F8:A1:CA:D8 Authority key identifier: EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03 Certificate issuer: /CN=efd9191978631fc955ac0f51062d5ce9844eae03 Certificate serial: 019AF1642EB033749AF753191711BCC378C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft Manifest number: 175F Signing time: Sat 06 Dec 2025 02:01:05 +0000 Manifest this update: Sat 06 Dec 2025 02:01:05 +0000 Manifest next update: Sun 07 Dec 2025 02:01:05 +0000 Files and hashes: 1: 79kZGXhjH8lVrA9RBi1c6YROrgM.crl (hash: VtMUwT0wOeMBv2iov8pCBZe/kYMrpsg/+hKElP2j6Zw=) 2: arsEMbCDi2wvIB9pruDthcas_84.roa (hash: ilM4++SMMDRks/dY7/gazwzm3WAh1QbyvXCjkzciULs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2e:b0:33:74:9a:f7:53:19:17:11:bc:c3:78:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efd9191978631fc955ac0f51062d5ce9844eae03 Validity Not Before: Dec 6 02:01:05 2025 GMT Not After : Dec 7 02:01:05 2025 GMT Subject: CN=6bc3ba81d85719f676516e1e89ddb910f8a1cad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4e:7e:89:13:b7:dd:00:ff:f9:f0:86:59:50: 19:5a:6f:c3:61:d0:c3:96:91:4e:75:c0:35:aa:44: 5b:ed:cd:a4:8d:f0:ae:ae:02:50:ac:5c:b2:70:31: ae:80:5e:5f:44:bc:b0:20:91:3b:b5:fa:ba:8f:49: 40:de:56:ed:a2:f0:b2:de:3f:59:c5:57:45:ab:d4: db:45:6a:58:4e:6e:5b:9d:91:0c:dc:b3:b3:eb:44: ef:85:c8:6d:cd:db:4c:62:57:15:f4:ba:18:d8:f1: cc:91:e8:b5:e1:ad:02:b0:be:7e:1c:47:4a:8d:16: 2d:4b:03:20:42:f0:f5:6c:cf:60:3b:86:bd:b7:12: 71:8a:32:51:65:04:2a:b0:f1:a4:41:a6:d9:b3:dc: 93:73:c1:34:bb:24:6d:23:0a:a6:c2:d7:d7:f2:51: 3f:78:4d:bd:6f:0a:37:b1:76:84:62:0c:32:b4:24: da:38:b3:e2:4e:cb:f6:63:46:a7:c4:4c:86:eb:d8: 32:4f:d5:6c:37:99:23:53:c0:98:ed:40:fe:af:18: 77:98:ea:63:ed:f9:25:3d:57:f3:38:a7:8b:7e:fd: e9:98:6f:14:89:4b:8a:8b:1d:50:b8:f5:87:39:7c: bf:4b:9b:d3:71:d8:61:fc:87:22:b9:1c:0c:a3:5d: 29:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C3:BA:81:D8:57:19:F6:76:51:6E:1E:89:DD:B9:10:F8:A1:CA:D8 X509v3 Authority Key Identifier: keyid:EF:D9:19:19:78:63:1F:C9:55:AC:0F:51:06:2D:5C:E9:84:4E:AE:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79kZGXhjH8lVrA9RBi1c6YROrgM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/9007dc-2354-4e1b-87e5-bc180dacdf05/1/79kZGXhjH8lVrA9RBi1c6YROrgM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:87:1a:b0:f5:7b:c7:ec:e9:4b:e4:11:85:e8:2e:8e:fa:ef: e1:ce:7c:ae:b3:c1:98:4e:4f:44:d6:fb:0d:d4:bd:d6:f0:78: fa:ee:f6:66:10:e7:ca:e5:a6:cd:43:5d:f2:07:a0:39:e3:ba: 07:20:8b:03:ce:87:09:79:ee:15:bb:52:5a:1b:a3:1a:f3:7f: e4:5e:95:76:ab:bd:64:b1:63:8e:8b:b1:c4:37:dc:7f:cc:3e: b3:5b:db:47:02:6e:77:75:76:24:8a:71:53:a1:23:99:48:3f: cf:13:0d:5f:f2:b7:32:26:3c:4e:a9:f7:a3:6f:8d:e8:15:61: a3:e5:75:63:1b:a6:15:a9:98:04:55:27:f4:ae:fa:a7:bb:73: 8b:7b:b1:17:b1:72:5c:c6:50:e8:42:11:4f:37:69:01:20:1f: e7:52:b3:66:14:8a:23:60:b2:a4:e7:e1:81:8f:5b:c5:57:a1: 85:59:b1:e1:33:e7:b3:d4:de:12:04:3a:c4:8f:d5:ba:3f:dc: 95:13:d5:d6:f1:0b:ff:c7:3a:b4:c8:dd:b9:1a:5f:64:e6:18: dd:c1:d6:e5:da:e9:29:99:cd:2d:66:eb:f4:27:03:a8:0d:9a: da:f8:53:86:e7:76:65:39:12:0b:50:12:65:86:60:11:bb:65: a5:df:9c:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZC6wM3Sa91MZFxG8w3jFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmZDkxOTE5Nzg2MzFmYzk1NWFjMGY1MTA2MmQ1Y2U5ODQ0 ZWFlMDMwHhcNMjUxMjA2MDIwMTA1WhcNMjUxMjA3MDIwMTA1WjAzMTEwLwYDVQQD Eyg2YmMzYmE4MWQ4NTcxOWY2NzY1MTZlMWU4OWRkYjkxMGY4YTFjYWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE5+iRO33QD/+fCGWVAZWm/DYdDD lpFOdcA1qkRb7c2kjfCurgJQrFyycDGugF5fRLywIJE7tfq6j0lA3lbtovCy3j9Z xVdFq9TbRWpYTm5bnZEM3LOz60TvhchtzdtMYlcV9LoY2PHMkei14a0CsL5+HEdK jRYtSwMgQvD1bM9gO4a9txJxijJRZQQqsPGkQabZs9yTc8E0uyRtIwqmwtfX8lE/ eE29bwo3sXaEYgwytCTaOLPiTsv2Y0anxEyG69gyT9VsN5kjU8CY7UD+rxh3mOpj 7fklPVfzOKeLfv3pmG8UiUuKix1QuPWHOXy/S5vTcdhh/IciuRwMo10phwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvDuoHYVxn2dlFuHonduRD4ocrYMB8GA1UdIwQY MBaAFO/ZGRl4Yx/JVawPUQYtXOmETq4DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC85MDA3ZGMtMjM1NC00ZTFiLTg3ZTUt YmMxODBkYWNkZjA1LzEvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC85MDA3ZGMtMjM1NC00ZTFiLTg3ZTUtYmMxODBkYWNkZjA1 LzEvNzlrWkdYaGpIOGxWckE5UkJpMWM2WVJPcmdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYcasPV7 x+zpS+QRhegujvrv4c58rrPBmE5PRNb7DdS91vB4+u72ZhDnyuWmzUNd8gegOeO6 ByCLA86HCXnuFbtSWhujGvN/5F6Vdqu9ZLFjjouxxDfcf8w+s1vbRwJud3V2JIpx U6EjmUg/zxMNX/K3MiY8Tqn3o2+N6BVho+V1YxumFamYBFUn9K76p7tzi3uxF7Fy XMZQ6EIRTzdpASAf51KzZhSKI2CypOfhgY9bxVehhVmx4TPns9TeEgQ6xI/Vuj/c lRPV1vEL/8c6tMjduRpfZOYY3cHW5drpKZnNLWbr9CcDqA2a2vhThud2ZTkSC1AS ZYZgEbtlpd+c9g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:35 2025 by rpki-client