This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json) Hash identifier: Y57AKiEXdOdF/DBuZCGH5bvwG1iJxjZ9es9rTbcvQU4= Subject key identifier: 5F:06:07:3A:EC:71:B8:BF:F1:33:BE:BC:6A:76:16:C9:1E:A3:B8:7C Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019B330CCEDD0CEB7E8DA9EF0DECFE782EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft Manifest number: 137A Signing time: Thu 18 Dec 2025 20:00:35 +0000 Manifest this update: Thu 18 Dec 2025 20:00:35 +0000 Manifest next update: Fri 19 Dec 2025 20:00:35 +0000 Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: gKJmBtzvGbst/zsekvDPP4CZjJ4L6YgC90agfnnhL9Y=) 2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:0c:ce:dd:0c:eb:7e:8d:a9:ef:0d:ec:fe:78:2e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Dec 18 20:00:35 2025 GMT Not After : Dec 19 20:00:35 2025 GMT Subject: CN=5f06073aec71b8bff133bebc6a7616c91ea3b87c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:18:e5:d6:b9:e5:19:4d:e3:71:c6:26:aa:c4: a3:4a:7a:01:ea:01:cb:65:f8:00:02:66:63:36:26: f5:ae:92:dd:37:32:99:13:b1:40:c6:63:6f:a1:a1: b9:3b:4f:cf:0d:4b:ae:e2:00:7b:84:93:52:7e:24: 65:ac:1a:e6:23:bb:1f:31:8a:d7:3b:32:ff:28:b4: cb:01:74:95:90:60:99:cd:4b:de:0a:a3:ae:2e:d1: 9d:4d:4f:f6:33:d6:4b:eb:e4:0f:5f:df:2c:25:27: 4a:49:99:ea:0b:68:48:6f:75:16:aa:6b:79:53:5b: 32:b8:4a:d3:f9:5c:dd:e2:da:1f:b6:cd:cc:86:e2: f1:ce:de:ca:d8:69:43:4f:2a:ee:a9:45:b0:ff:f4: 0c:56:d8:10:1c:3f:a7:54:18:9b:a7:77:c9:d0:78: 79:d4:11:24:27:44:ce:ca:25:80:36:b0:b7:70:bf: 54:34:79:54:54:1c:1b:dc:d6:61:c9:ee:d7:3b:36: 81:dc:37:c7:13:74:77:cb:a8:53:ae:78:64:82:b0: 56:d3:1a:bf:5c:89:53:17:2f:e5:e7:6b:85:f1:b7: 56:c4:ba:b3:4b:ba:16:bc:57:96:24:c9:ed:d6:bb: aa:a1:d2:0f:0d:86:2b:6c:62:b5:5b:fb:b9:ec:07: 97:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:06:07:3A:EC:71:B8:BF:F1:33:BE:BC:6A:76:16:C9:1E:A3:B8:7C X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:11:2f:94:26:a9:77:05:3e:60:89:0e:88:75:40:ea:0b:1c: 2e:85:51:56:f7:c9:53:e6:23:58:28:b2:65:d4:74:70:ef:9f: 06:23:30:a8:2f:12:38:47:24:a5:f5:3a:5a:cf:06:b5:58:e7: eb:41:10:61:07:b7:56:76:ea:89:50:6d:1f:6d:22:6c:a1:70: a2:b7:cc:0e:87:c2:a8:58:80:a2:e9:6d:bf:4f:b6:ed:9d:1f: 0f:4f:f6:e9:9a:16:a3:5d:eb:76:36:e8:0e:79:b4:87:54:94: 62:45:36:6e:d8:fd:2a:9e:ab:41:ca:f8:ba:d9:d5:bb:31:5d: d7:ee:8f:24:db:6d:ed:b5:dc:d7:88:21:64:9b:26:f4:f6:03: b6:e4:11:2c:08:3f:9c:eb:7a:fd:26:88:50:81:85:66:68:43: 3b:43:ad:c5:a9:46:72:7f:8e:89:a6:d3:ff:f1:d7:46:5f:a1: 9e:31:6d:33:25:2d:49:92:27:13:80:14:57:db:53:dd:c8:95: 28:8c:dd:ba:42:bf:ff:56:24:99:cc:3c:66:81:7d:c3:be:bd: 84:dc:a7:77:4e:34:a4:f9:a5:6d:a6:12:b0:7b:17:56:b5:b7: 1d:6d:de:88:e4:08:36:60:b3:12:5f:75:96:7f:99:ff:7a:fd: 9f:a5:47:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszDM7dDOt+janvDez+eC7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjUxMjE4MjAwMDM1WhcNMjUxMjE5MjAwMDM1WjAzMTEwLwYDVQQD Eyg1ZjA2MDczYWVjNzFiOGJmZjEzM2JlYmM2YTc2MTZjOTFlYTNiODdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRjl1rnlGU3jccYmqsSjSnoB6gHL ZfgAAmZjNib1rpLdNzKZE7FAxmNvoaG5O0/PDUuu4gB7hJNSfiRlrBrmI7sfMYrX OzL/KLTLAXSVkGCZzUveCqOuLtGdTU/2M9ZL6+QPX98sJSdKSZnqC2hIb3UWqmt5 U1syuErT+Vzd4tofts3MhuLxzt7K2GlDTyruqUWw//QMVtgQHD+nVBibp3fJ0Hh5 1BEkJ0TOyiWANrC3cL9UNHlUVBwb3NZhye7XOzaB3DfHE3R3y6hTrnhkgrBW0xq/ XIlTFy/l52uF8bdWxLqzS7oWvFeWJMnt1ruqodIPDYYrbGK1W/u57AeXuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8GBzrscbi/8TO+vGp2Fskeo7h8MB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhEvlCap dwU+YIkOiHVA6gscLoVRVvfJU+YjWCiyZdR0cO+fBiMwqC8SOEckpfU6Ws8GtVjn 60EQYQe3VnbqiVBtH20ibKFworfMDofCqFiAoultv0+27Z0fD0/26ZoWo13rdjbo Dnm0h1SUYkU2btj9Kp6rQcr4utnVuzFd1+6PJNtt7bXc14ghZJsm9PYDtuQRLAg/ nOt6/SaIUIGFZmhDO0OtxalGcn+OiabT//HXRl+hnjFtMyUtSZInE4AUV9tT3ciV KIzdukK//1Ykmcw8ZoF9w769hNynd040pPmlbaYSsHsXVrW3HW3eiOQINmCzEl91 ln+Z/3r9n6VHJQ== -----END CERTIFICATE-----Generated at Thu Dec 18 22:04:28 2025 by rpki-client