This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json) Hash identifier: Z0iKfeK3Y5J44yAWQLd+XeCFqgDfVsKLO1SINPr4WGA= Subject key identifier: 78:25:89:2F:EF:A2:AF:8B:DE:23:D0:84:AB:A1:78:C5:9D:39:EE:E5 Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e Certificate serial: 019AF5E5FD18E55505EA0AE829E80FE185CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft Manifest number: 1577 Signing time: Sat 06 Dec 2025 23:01:21 +0000 Manifest this update: Sat 06 Dec 2025 23:01:21 +0000 Manifest next update: Sun 07 Dec 2025 23:01:21 +0000 Files and hashes: 1: 4r5s9Mo-vxBbluV0eFMWLZ5DkEA.roa (hash: eY3z/9PA/1Maeyu8ReLI6rg+bAfCtkuJMwcQbYm1xG0=) 2: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: bdBPitaUjssvbXMKpnYlAWsoPJeyZf2NhLMXnEkkuCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:e5:fd:18:e5:55:05:ea:0a:e8:29:e8:0f:e1:85:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e Validity Not Before: Dec 6 23:01:21 2025 GMT Not After : Dec 7 23:01:21 2025 GMT Subject: CN=7825892fefa2af8bde23d084aba178c59d39eee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b3:16:87:f4:b7:37:b5:30:a6:2f:dc:58:f4: 89:24:f8:45:6b:fd:90:22:14:84:04:40:2e:0f:d3: 47:81:7f:9b:13:0d:bd:7f:9c:63:d3:a3:40:58:33: 54:bf:a2:36:2b:aa:2b:77:20:36:60:47:1a:db:62: 51:4f:59:6c:6d:71:73:3a:a0:3a:dd:e2:85:5d:a1: 62:b6:91:bc:a9:35:4c:48:9f:ea:45:22:cf:d6:dc: 4c:4c:ef:c9:97:e2:12:56:db:3a:a8:8d:47:c6:c3: 85:98:0c:97:af:2f:70:b0:b5:2c:27:5d:52:28:2a: 7e:32:69:59:5f:25:cd:17:c4:12:9a:0d:91:fe:4f: 9b:0f:cc:2e:3d:5e:e1:d7:07:55:c9:da:c1:34:e7: 5a:b8:35:c1:93:72:cd:eb:4e:a0:d1:79:db:1d:10: 61:77:5f:85:6e:75:af:1b:01:af:ac:97:7b:90:6f: 9b:ba:f8:4f:1e:25:f6:c6:0a:1e:05:39:a3:0e:00: b9:fa:27:36:f0:6c:8b:5b:c4:5f:4e:25:8e:17:48: de:bc:1c:5b:e7:db:8d:6b:3a:79:35:58:c6:3b:f3: 48:95:ce:9d:02:c3:30:0e:e2:51:fb:39:ab:13:02: fe:67:26:92:79:fc:d5:24:4f:17:44:12:f9:cb:c3: f9:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:25:89:2F:EF:A2:AF:8B:DE:23:D0:84:AB:A1:78:C5:9D:39:EE:E5 X509v3 Authority Key Identifier: keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e7:79:55:03:33:07:d9:3c:81:90:3f:43:06:b3:94:bb:c8: 15:32:35:f9:73:b6:88:6a:50:50:6e:20:ec:5e:ce:c1:55:67: ad:6f:f1:a1:b6:93:ff:61:67:4e:54:ae:e6:70:2f:c9:4b:79: 09:cd:b5:e9:06:61:15:58:96:fd:3f:f1:77:76:e3:9b:da:63: bf:12:73:3d:cd:4e:80:5c:69:26:e2:f9:59:b4:e1:9f:52:75: 36:0e:ab:4e:8a:21:fb:9d:d9:0c:eb:4a:62:17:0e:7c:f4:b0: 0d:eb:5c:25:fb:4c:5f:9d:2c:fd:4a:ec:59:76:55:2d:8c:e6: c3:65:4d:39:2d:6a:a6:d8:7b:5d:0b:8c:63:c1:68:c9:42:0d: d2:fa:42:0d:35:17:f3:73:2a:9d:63:2f:91:2e:47:2d:26:da: 16:0c:c3:95:9c:85:23:c5:6b:74:73:55:16:16:9f:9c:e9:11: bf:c4:af:6e:89:86:0a:07:b2:d0:44:8c:3a:a5:17:e3:3c:65: a3:72:86:06:8e:3b:5f:fc:ae:e5:29:71:fc:b1:42:19:f2:76: ab:32:f2:ee:c9:6a:f9:b9:03:a0:14:85:17:1f:c6:2f:19:1c: 24:5f:c8:e5:b5:47:00:8a:83:d9:a9:62:07:1d:9b:89:9b:7e: 96:66:a5:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr15f0Y5VUF6groKegP4YXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmOGMzM2E4YTYyMDFkNDBhNjAyMjBiZDYzOWI1ZDM1MjIx MjY3M2UwHhcNMjUxMjA2MjMwMTIxWhcNMjUxMjA3MjMwMTIxWjAzMTEwLwYDVQQD Eyg3ODI1ODkyZmVmYTJhZjhiZGUyM2QwODRhYmExNzhjNTlkMzllZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrMWh/S3N7Uwpi/cWPSJJPhFa/2Q IhSEBEAuD9NHgX+bEw29f5xj06NAWDNUv6I2K6ordyA2YEca22JRT1lsbXFzOqA6 3eKFXaFitpG8qTVMSJ/qRSLP1txMTO/Jl+ISVts6qI1HxsOFmAyXry9wsLUsJ11S KCp+MmlZXyXNF8QSmg2R/k+bD8wuPV7h1wdVydrBNOdauDXBk3LN606g0XnbHRBh d1+FbnWvGwGvrJd7kG+buvhPHiX2xgoeBTmjDgC5+ic28GyLW8RfTiWOF0jevBxb 59uNazp5NVjGO/NIlc6dAsMwDuJR+zmrEwL+ZyaSefzVJE8XRBL5y8P5lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgliS/voq+L3iPQhKuheMWdOe7lMB8GA1UdIwQY MBaAFO+MM6imIB1ApgIgvWObXTUiEmc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMt ZTAxYmI0ODg2M2E5LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9iZmJlNWYtOTdjOC00MzQ3LThhOGMtZTAxYmI0ODg2M2E5 LzEvNzR3enFLWWdIVUNtQWlDOVk1dGROU0lTWno0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq+d5VQMz B9k8gZA/QwazlLvIFTI1+XO2iGpQUG4g7F7OwVVnrW/xobaT/2FnTlSu5nAvyUt5 Cc216QZhFViW/T/xd3bjm9pjvxJzPc1OgFxpJuL5WbThn1J1Ng6rTooh+53ZDOtK YhcOfPSwDetcJftMX50s/UrsWXZVLYzmw2VNOS1qpth7XQuMY8FoyUIN0vpCDTUX 83MqnWMvkS5HLSbaFgzDlZyFI8VrdHNVFhafnOkRv8SvbomGCgey0ESMOqUX4zxl o3KGBo47X/yu5Slx/LFCGfJ2qzLy7slq+bkDoBSFFx/GLxkcJF/I5bVHAIqD2ali Bx2biZt+lmal+A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:21:16 2025 by rpki-client