This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json) Hash identifier: 0D9Gavn1enD9eDegzNY1Q0BxJMcBNYFb0EueBGDNPmw= Subject key identifier: 3C:28:D8:86:FF:3C:58:9D:8C:B6:34:23:DE:46:06:32:45:F8:B3:41 Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Certificate serial: 019AF164359CC21E0052115E6782AC5D64EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft Manifest number: 01F0 Signing time: Sat 06 Dec 2025 02:01:07 +0000 Manifest this update: Sat 06 Dec 2025 02:01:07 +0000 Manifest next update: Sun 07 Dec 2025 02:01:07 +0000 Files and hashes: 1: lB6tM26XvybAjC_i9gyukbY90Gs.roa (hash: QCUB0nbnI7vfbQcfu12QO8f17dboTNQ2oQD6KvaVOOo=) 2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: DF22++ac2A0oNgPfbNmJt0nG1JC0kWERyF9zqPrTjbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:35:9c:c2:1e:00:52:11:5e:67:82:ac:5d:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369 Validity Not Before: Dec 6 02:01:07 2025 GMT Not After : Dec 7 02:01:07 2025 GMT Subject: CN=3c28d886ff3c589d8cb63423de46063245f8b341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:76:82:77:e8:f7:ba:bd:fa:fe:dc:39:33:81: 10:cb:b2:75:98:d2:1a:06:16:bf:31:cd:a9:b1:ee: 89:60:da:68:e7:c3:5c:7f:d0:3f:fa:b9:42:35:a0: 89:15:8a:01:68:76:a1:6e:a3:d2:21:21:43:c3:5e: 7e:a9:68:44:0b:ec:41:7c:c3:24:f4:04:b5:55:e5: d3:26:38:e2:73:ba:fd:1a:e0:42:fc:c8:e0:43:c5: e0:f0:3e:4d:09:94:fb:f6:ee:87:b0:ee:0a:66:56: 96:b9:7e:c5:0a:a2:0a:66:66:16:d3:17:5f:bb:9e: f6:8b:ac:45:5f:19:67:45:2f:a6:f7:63:ae:93:ac: c3:35:30:88:ca:b0:47:62:a0:2c:9d:43:2b:13:00: 3c:87:1c:c9:91:b4:3d:05:e2:3c:67:e1:01:a0:97: df:cb:84:ad:30:0c:57:be:29:e4:f6:f9:62:97:30: 61:e2:a1:98:c9:54:03:e8:eb:98:6f:54:f6:31:cc: 4b:32:15:1c:05:e6:87:57:8b:68:25:02:a6:cc:fc: c1:66:29:19:3a:67:0c:46:b7:f9:c9:e9:7d:c6:9d: 54:c8:7b:94:8f:cd:1b:7b:1f:98:53:69:5b:86:b2: 5f:ec:6f:5f:15:0b:bd:7f:a7:3b:d4:d3:f1:2d:6d: 5e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:28:D8:86:FF:3C:58:9D:8C:B6:34:23:DE:46:06:32:45:F8:B3:41 X509v3 Authority Key Identifier: keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e0:5a:79:42:1f:9d:bb:32:12:99:fd:f5:f2:4e:28:4c:8a: ba:74:41:93:39:c9:10:87:c5:8d:6e:dc:b6:6b:88:4b:e7:b8: 18:2c:15:e6:78:ed:88:7c:8e:30:dd:21:ce:4b:b9:90:25:43: a0:e4:06:56:c0:2e:ef:b7:a4:f4:26:34:29:6a:82:c6:e5:00: f2:16:28:eb:a5:9b:e9:09:d5:24:c0:69:6e:f6:c2:05:a7:76: d4:4d:f4:49:c1:2a:c7:6c:5a:83:9b:ed:4c:5b:e6:0a:ec:f8: d5:fd:ee:65:8d:bd:af:ed:d1:5f:53:e0:02:46:01:93:96:c5: 94:ff:ac:99:66:4f:b4:20:39:9c:70:fb:a2:c7:b0:0b:6a:0f: 6a:c9:c7:d8:82:f3:b8:94:df:4d:ba:92:5f:4e:96:6a:6b:80: 3f:77:91:20:57:3e:13:7b:90:0b:55:0a:8a:85:55:ee:0d:cd: 3c:bb:d3:64:fe:4b:7e:94:3b:7c:dc:70:e0:91:2b:f5:ad:32: 3c:8f:0b:01:78:fd:11:33:7d:39:f3:2f:41:58:21:0e:a2:15: 53:06:33:2c:0b:ad:a6:ba:cd:05:f1:d0:c9:c5:45:7d:e8:6c: f5:03:a0:ef:58:29:bb:15:05:18:a6:2d:b1:17:b8:fc:00:6a: 6f:2d:f0:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZDWcwh4AUhFeZ4KsXWTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmYmYwMmYwNGVjNDMwOGNiNWI2MDc4YmQwNmExN2NiMDBk ODMzNjkwHhcNMjUxMjA2MDIwMTA3WhcNMjUxMjA3MDIwMTA3WjAzMTEwLwYDVQQD EygzYzI4ZDg4NmZmM2M1ODlkOGNiNjM0MjNkZTQ2MDYzMjQ1ZjhiMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6naCd+j3ur36/tw5M4EQy7J1mNIa Bha/Mc2pse6JYNpo58Ncf9A/+rlCNaCJFYoBaHahbqPSISFDw15+qWhEC+xBfMMk 9AS1VeXTJjjic7r9GuBC/MjgQ8Xg8D5NCZT79u6HsO4KZlaWuX7FCqIKZmYW0xdf u572i6xFXxlnRS+m92Ouk6zDNTCIyrBHYqAsnUMrEwA8hxzJkbQ9BeI8Z+EBoJff y4StMAxXvink9vlilzBh4qGYyVQD6OuYb1T2McxLMhUcBeaHV4toJQKmzPzBZikZ OmcMRrf5yel9xp1UyHuUj80bex+YU2lbhrJf7G9fFQu9f6c71NPxLW1eQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDwo2Ib/PFidjLY0I95GBjJF+LNBMB8GA1UdIwQY MBaAFJ+/AvBOxDCMtbYHi9BqF8sA2DNpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEt NWZhOWRhMDNmNTcwLzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9jYWY0NjYtNmU2Yy00MDA5LWE1NWEtNWZhOWRhMDNmNTcw LzEvbjc4QzhFN0VNSXkxdGdlTDBHb1h5d0RZTTJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+BaeUIf nbsyEpn99fJOKEyKunRBkznJEIfFjW7ctmuIS+e4GCwV5njtiHyOMN0hzku5kCVD oOQGVsAu77ek9CY0KWqCxuUA8hYo66Wb6QnVJMBpbvbCBad21E30ScEqx2xag5vt TFvmCuz41f3uZY29r+3RX1PgAkYBk5bFlP+smWZPtCA5nHD7osewC2oPasnH2ILz uJTfTbqSX06WamuAP3eRIFc+E3uQC1UKioVV7g3NPLvTZP5LfpQ7fNxw4JEr9a0y PI8LAXj9ETN9OfMvQVghDqIVUwYzLAutprrNBfHQycVFfehs9QOg71gpuxUFGKYt sRe4/ABqby3w0g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:14:38 2025 by rpki-client