This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft File: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft (raw, json) Hash identifier: Ql4raDuckHXexW4hxR2K1E+6lx0OXqAtSRrUrFTN348= Subject key identifier: 3F:55:FC:FD:FC:F9:7F:62:EB:9E:C6:F7:61:B2:57:C0:E3:40:62:71 Authority key identifier: EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 Certificate issuer: /CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Certificate serial: 019AF163E705627C79BB3BB3DFC7A9BECF5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft Manifest number: 1358 Signing time: Sat 06 Dec 2025 02:00:47 +0000 Manifest this update: Sat 06 Dec 2025 02:00:47 +0000 Manifest next update: Sun 07 Dec 2025 02:00:47 +0000 Files and hashes: 1: 78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl (hash: WM52iL1rqFA0EmQ7nv621ZjS5Z69eHSVIKljIfNfl8k=) 2: xdN7zAwA3EjYRNYWSDmhNTl2c5A.roa (hash: HUhxo6JRum8cUC4GCldE8jMW5HQn+DFBF6vESEvE0ms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:e7:05:62:7c:79:bb:3b:b3:df:c7:a9:be:cf:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efcfc7cf5709588a7087e6c9e10ecaaa8aba59f5 Validity Not Before: Dec 6 02:00:47 2025 GMT Not After : Dec 7 02:00:47 2025 GMT Subject: CN=3f55fcfdfcf97f62eb9ec6f761b257c0e3406271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b7:8e:00:31:23:49:ef:c5:12:1f:51:92:a0: c1:b9:2b:b5:de:f9:c8:21:5d:9f:e8:e5:a5:3a:61: 70:22:7e:50:a1:d1:ed:db:e3:c2:ae:04:df:3d:37: f8:58:1d:bf:e8:d0:5d:97:dc:e4:8b:89:d2:b0:9e: c0:8b:28:40:8b:0c:fd:39:0d:fb:17:be:02:48:cf: d7:2b:3e:d9:b9:bc:39:40:32:8f:78:0d:2c:3a:1a: 10:81:f6:6f:fb:0b:46:18:8c:1d:66:b1:f2:07:a9: b7:a0:29:0b:ad:98:94:af:46:8d:bc:29:98:63:fd: 5b:44:11:ca:ad:2c:c0:a7:54:0e:e7:ac:af:b6:d6: f2:97:7b:1f:fd:34:ee:b1:cd:d8:d1:f6:c1:f5:a1: fc:b9:fd:91:49:1b:3b:2f:de:94:98:2f:9f:4f:c2: 4b:34:ea:62:d5:e7:e5:6b:61:ea:40:71:92:af:1d: 8f:a5:af:a6:9d:6d:f4:a1:a6:72:0e:19:36:20:7a: 12:63:eb:c5:99:8b:2d:89:7a:74:7a:af:41:b9:60: 28:62:4e:98:a9:8f:01:97:f3:92:e5:dc:1f:12:d4: 32:fa:39:28:be:e2:f2:6f:75:d5:2e:19:c2:d6:bd: ba:d8:ce:06:cc:e4:19:1c:a4:a1:ae:ef:5e:a1:c9: ae:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:55:FC:FD:FC:F9:7F:62:EB:9E:C6:F7:61:B2:57:C0:E3:40:62:71 X509v3 Authority Key Identifier: keyid:EF:CF:C7:CF:57:09:58:8A:70:87:E6:C9:E1:0E:CA:AA:8A:BA:59:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd3f48-f7b2-4405-a159-ac1bf80544ca/1/78_Hz1cJWIpwh-bJ4Q7Kqoq6WfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:f3:c8:6d:8b:cc:23:5e:cc:fb:b4:0f:04:f3:ec:c1:4d:2d: 8b:de:9f:10:76:20:09:09:b5:99:0f:81:12:56:25:74:59:17: 20:44:0e:3c:b0:f4:74:ed:eb:91:2c:b8:d3:c2:68:37:64:53: 13:d4:5c:58:c1:7e:51:92:20:c9:c3:05:0c:84:a3:d6:2e:4d: 7b:1e:1a:ad:b6:f4:7a:79:d9:51:84:6b:97:23:c7:40:1d:8a: cc:0f:8a:dc:c1:b3:d0:81:d0:c6:3b:67:47:f4:0d:30:b7:fb: 3e:96:07:b3:67:dd:97:46:85:63:8c:7a:4e:26:77:0f:f6:06: 0c:3c:22:e2:5e:92:a5:6e:bf:9e:7f:81:8f:7d:75:40:46:58: 4b:dd:48:c2:36:5e:29:32:93:7d:ee:43:a3:82:0e:28:6d:b2: ec:00:bc:6c:fc:8f:8d:f0:09:21:75:ac:8b:fd:d6:f0:f7:b3: 0c:2b:9b:91:91:00:c5:f5:38:96:21:79:3d:ae:81:2d:54:09: 95:bc:ca:56:a2:df:bb:31:47:37:a5:46:eb:01:ff:8a:47:f8: 9d:df:31:52:b4:ba:02:bf:2d:bf:25:ff:cb:79:2d:6d:9d:32: f8:e5:b9:3c:ad:46:2f:b2:d5:31:40:de:51:d7:6e:0c:63:4c: 83:47:22:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY+cFYnx5uzuz38epvs9eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmY2ZjN2NmNTcwOTU4OGE3MDg3ZTZjOWUxMGVjYWFhOGFi YTU5ZjUwHhcNMjUxMjA2MDIwMDQ3WhcNMjUxMjA3MDIwMDQ3WjAzMTEwLwYDVQQD EygzZjU1ZmNmZGZjZjk3ZjYyZWI5ZWM2Zjc2MWIyNTdjMGUzNDA2MjcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlreOADEjSe/FEh9RkqDBuSu13vnI IV2f6OWlOmFwIn5QodHt2+PCrgTfPTf4WB2/6NBdl9zki4nSsJ7AiyhAiwz9OQ37 F74CSM/XKz7Zubw5QDKPeA0sOhoQgfZv+wtGGIwdZrHyB6m3oCkLrZiUr0aNvCmY Y/1bRBHKrSzAp1QO56yvttbyl3sf/TTusc3Y0fbB9aH8uf2RSRs7L96UmC+fT8JL NOpi1efla2HqQHGSrx2Ppa+mnW30oaZyDhk2IHoSY+vFmYstiXp0eq9BuWAoYk6Y qY8Bl/OS5dwfEtQy+jkovuLyb3XVLhnC1r262M4GzOQZHKShru9eocmupQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9V/P38+X9i657G92GyV8DjQGJxMB8GA1UdIwQY MBaAFO/Px89XCViKcIfmyeEOyqqKuln1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTkt YWMxYmY4MDU0NGNhLzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9jZDNmNDgtZjdiMi00NDA1LWExNTktYWMxYmY4MDU0NGNh LzEvNzhfSHoxY0pXSXB3aC1iSjRRN0txb3E2V2ZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAufPIbYvM I17M+7QPBPPswU0ti96fEHYgCQm1mQ+BElYldFkXIEQOPLD0dO3rkSy408JoN2RT E9RcWMF+UZIgycMFDISj1i5Nex4arbb0ennZUYRrlyPHQB2KzA+K3MGz0IHQxjtn R/QNMLf7PpYHs2fdl0aFY4x6TiZ3D/YGDDwi4l6SpW6/nn+Bj311QEZYS91IwjZe KTKTfe5Do4IOKG2y7AC8bPyPjfAJIXWsi/3W8PezDCubkZEAxfU4liF5Pa6BLVQJ lbzKVqLfuzFHN6VG6wH/ikf4nd8xUrS6Ar8tvyX/y3ktbZ0y+OW5PK1GL7LVMUDe UdduDGNMg0ciMQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:28 2025 by rpki-client