This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft File: eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft (raw, json) Hash identifier: 053sAPXQ1NEr+eqKnP+A/3VSoykWn+L5ghrygX1mXuQ= Subject key identifier: 97:80:82:77:FE:4D:E9:75:9C:C9:69:6E:1A:36:D2:7D:FF:D9:A7:7A Authority key identifier: 78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B Certificate issuer: /CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Certificate serial: 019B3AC6F7A5959EE04D35398F181830B96D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 08:01:16 +0000 Manifest this update: Sat 20 Dec 2025 08:01:16 +0000 Manifest next update: Sun 21 Dec 2025 08:01:16 +0000 Files and hashes: 1: eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl (hash: YpBNA1Cgk1y82h0Mx+NRyGK1GijD93BmIDFSSFfLB8g=) 2: hpIZj1aNVGCRsSVDc00BaExDrD4.roa (hash: 8bGQ2/PFRjS1aWZOpnSHBKRNTQbhLOIjn95p+sx+IoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:f7:a5:95:9e:e0:4d:35:39:8f:18:18:30:b9:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78a4c4eaef6fe1705698b00e61915677a2fb8d5b Validity Not Before: Dec 20 08:01:16 2025 GMT Not After : Dec 21 08:01:16 2025 GMT Subject: CN=97808277fe4de9759cc9696e1a36d27dffd9a77a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:00:d3:e5:eb:ee:64:eb:d6:6b:79:af:e2:c7: f7:7a:2c:62:75:95:8c:37:7a:91:0a:8b:61:72:8e: ad:ad:b9:66:73:ce:a8:9c:9b:40:0f:65:e5:9e:ea: b0:99:c0:4c:69:f1:32:a5:fa:2d:94:eb:b4:05:bd: dd:8b:ce:e2:c0:6b:c3:91:4b:38:e7:24:8c:bd:68: 9d:d9:dd:0b:ec:38:fa:26:bf:1e:d2:7f:51:b2:3b: f5:61:04:0b:30:f0:f2:ac:c8:63:86:cf:3a:e5:b1: 05:e0:ba:80:48:d0:dc:41:d3:91:3c:a5:4f:28:51: e2:25:ea:bb:3d:d4:1a:de:6b:91:9f:90:92:70:79: 4f:7c:c6:48:57:e2:39:e8:d0:62:69:86:7a:7d:9b: 1f:06:90:2f:4c:68:70:56:4d:47:20:f5:b8:59:3a: 38:ac:33:12:4b:d4:42:ab:bd:03:e1:37:46:40:d9: e2:e9:4e:96:45:98:28:44:61:4d:5e:ea:37:1f:08: a6:78:f3:6f:1f:ca:39:27:d4:ce:dc:02:97:1f:06: 29:87:c8:3a:03:58:8a:00:92:c2:5f:25:5c:59:ce: 34:0f:90:1c:0a:57:87:d9:3b:43:f3:fc:81:ac:ca: 7c:1d:72:20:f6:56:b5:39:3e:ee:cc:14:10:50:6c: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:80:82:77:FE:4D:E9:75:9C:C9:69:6E:1A:36:D2:7D:FF:D9:A7:7A X509v3 Authority Key Identifier: keyid:78:A4:C4:EA:EF:6F:E1:70:56:98:B0:0E:61:91:56:77:A2:FB:8D:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eKTE6u9v4XBWmLAOYZFWd6L7jVs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/51ba0b-69c6-4ed9-82c7-429307f24320/1/eKTE6u9v4XBWmLAOYZFWd6L7jVs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:bb:86:aa:7e:32:56:71:1a:2d:3a:2c:19:ac:2b:47:f0:8d: e3:08:21:92:f0:fd:74:16:9d:dd:24:be:be:42:5f:24:e0:e4: 30:45:0e:d5:b3:01:d4:c1:b5:ed:43:da:a5:29:9a:1f:eb:2f: e8:8c:76:70:58:ba:c1:06:e8:50:83:57:0f:e5:68:a8:0a:cf: 4e:40:b6:00:73:11:43:ef:ed:76:9e:96:29:6a:db:95:21:94: 2e:c5:e8:ea:68:34:e3:e3:9e:b9:f0:64:aa:78:ee:87:c0:21: c0:4a:11:5c:1d:25:3f:2c:56:ad:4a:fd:17:f6:16:bb:4d:19: ca:0a:04:91:54:24:5a:c2:e9:68:4c:f5:cc:5d:a1:5c:95:99: 28:b9:0a:a1:84:dc:88:13:26:15:2e:4a:83:ad:6d:5d:65:08: 7f:52:5b:26:35:fa:3a:39:4b:a0:07:2c:66:39:ff:c8:c1:ed: 06:00:1a:d3:76:05:89:4a:6d:64:58:34:79:87:23:4b:a2:57: d4:e8:34:31:d0:28:fd:f6:8d:6f:43:77:fa:b6:43:71:5a:30: ab:7c:ee:cb:2f:1a:50:d4:f3:47:d0:24:96:3b:6c:de:66:ae: 8a:fe:a2:38:bd:a3:73:7b:ff:dd:d9:fc:35:14:88:74:ee:db: 05:32:2b:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xvellZ7gTTU5jxgYMLltMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4YTRjNGVhZWY2ZmUxNzA1Njk4YjAwZTYxOTE1Njc3YTJm YjhkNWIwHhcNMjUxMjIwMDgwMTE2WhcNMjUxMjIxMDgwMTE2WjAzMTEwLwYDVQQD Eyg5NzgwODI3N2ZlNGRlOTc1OWNjOTY5NmUxYTM2ZDI3ZGZmZDlhNzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgDT5evuZOvWa3mv4sf3eixidZWM N3qRCothco6trblmc86onJtAD2XlnuqwmcBMafEypfotlOu0Bb3di87iwGvDkUs4 5ySMvWid2d0L7Dj6Jr8e0n9Rsjv1YQQLMPDyrMhjhs865bEF4LqASNDcQdORPKVP KFHiJeq7PdQa3muRn5CScHlPfMZIV+I56NBiaYZ6fZsfBpAvTGhwVk1HIPW4WTo4 rDMSS9RCq70D4TdGQNni6U6WRZgoRGFNXuo3HwimePNvH8o5J9TO3AKXHwYph8g6 A1iKAJLCXyVcWc40D5AcCleH2TtD8/yBrMp8HXIg9la1OT7uzBQQUGz6dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeAgnf+Tel1nMlpbho20n3/2ad6MB8GA1UdIwQY MBaAFHikxOrvb+FwVpiwDmGRVnei+41bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzct NDI5MzA3ZjI0MzIwLzEvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi81MWJhMGItNjljNi00ZWQ5LTgyYzctNDI5MzA3ZjI0MzIw LzEvZUtURTZ1OXY0WEJXbUxBT1laRldkNkw3alZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4LuGqn4y VnEaLTosGawrR/CN4wghkvD9dBad3SS+vkJfJODkMEUO1bMB1MG17UPapSmaH+sv 6Ix2cFi6wQboUINXD+VoqArPTkC2AHMRQ+/tdp6WKWrblSGULsXo6mg04+OeufBk qnjuh8AhwEoRXB0lPyxWrUr9F/YWu00ZygoEkVQkWsLpaEz1zF2hXJWZKLkKoYTc iBMmFS5Kg61tXWUIf1JbJjX6OjlLoAcsZjn/yMHtBgAa03YFiUptZFg0eYcjS6JX 1Og0MdAo/faNb0N3+rZDcVowq3zuyy8aUNTzR9Akljts3mauiv6iOL2jc3v/3dn8 NRSIdO7bBTIrHg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:55:16 2025 by rpki-client