This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft File: eFhA46DwR0pKzORe1fyc_3eFjZM.mft (raw, json) Hash identifier: u+6zns+M3e3rZH311gvKwyD/ICHYFGINkJ5J65RRxh0= Subject key identifier: 4F:97:21:D8:07:2F:63:6F:BC:78:88:69:89:12:32:A6:CB:A7:08:37 Authority key identifier: 78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 Certificate issuer: /CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Certificate serial: 019AF208DB54AB32D49EA572542E47E77443 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft Manifest number: 1123 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: CTNFh3zDqVb5mt-Jx8_ayocVyU0.roa (hash: by7tMv6BNU4Al1Mh+/XP1AYFRV5/OSpxIrkraq6SF4g=) 2: aZfIA1mdNwDoDxgfY6tBelF7aNY.roa (hash: NjtTz5KeQEE5wv9Gv/KkLD9huPimRUXA9UXZF96THEY=) 3: eFhA46DwR0pKzORe1fyc_3eFjZM.crl (hash: pDklgsLhPTopq5we8coLEC3sIzWwSB+zdQ0HILnHvvQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:db:54:ab:32:d4:9e:a5:72:54:2e:47:e7:74:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=785840e3a0f0474a4acce45ed5fc9cff77858d93 Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=4f9721d8072f636fbc788869891232a6cba70837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b3:08:de:15:da:f7:52:d1:56:22:f7:13:7e: 60:0c:9c:6d:d5:78:fa:1b:86:57:43:a8:dd:11:98: b7:09:7d:da:7c:cb:fe:57:e1:70:a5:ca:ab:03:6e: 37:e2:9e:fe:a5:63:c9:16:16:a3:6d:8d:be:5e:65: 9c:e2:65:08:a0:00:d7:36:43:90:97:a3:41:9e:85: 3a:d4:da:57:df:c6:7e:4a:e8:dd:8f:18:dc:86:ab: 0f:4e:c1:c1:b1:de:7b:66:22:eb:06:f3:1b:99:8c: 31:cd:e6:47:4a:e8:f0:2c:7d:c6:f0:52:f0:4a:86: 48:db:ac:c1:43:87:e9:9a:84:23:f2:15:d8:24:4b: 63:46:c4:d2:93:ca:f8:2c:f5:15:92:bc:0e:24:e3: 1d:73:64:41:7b:f2:45:d0:5e:fb:8b:e7:41:e3:1f: 2f:77:4a:79:9a:44:0b:28:9b:1c:f3:bd:38:e9:45: fa:28:d5:93:fd:1d:38:6b:01:c1:25:80:ff:b4:8b: 89:a6:f8:62:0c:e7:76:35:2e:75:28:f8:64:15:81: ec:a2:52:a3:0d:55:6f:fc:2b:21:9d:a7:61:fe:11: 26:3e:0f:b5:10:07:35:fa:b8:a8:24:12:63:e3:15: 78:a6:ea:2a:26:01:d8:48:1b:2c:6b:ab:82:95:c8: ca:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:97:21:D8:07:2F:63:6F:BC:78:88:69:89:12:32:A6:CB:A7:08:37 X509v3 Authority Key Identifier: keyid:78:58:40:E3:A0:F0:47:4A:4A:CC:E4:5E:D5:FC:9C:FF:77:85:8D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFhA46DwR0pKzORe1fyc_3eFjZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/142664-4c33-442a-b432-fafb12a16c31/1/eFhA46DwR0pKzORe1fyc_3eFjZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:9f:90:e1:29:b8:f1:74:32:99:68:7f:96:88:ec:ce:44:6e: c7:12:8e:47:4e:38:a2:64:e4:a0:43:2c:d3:6c:c0:26:15:24: 58:ba:26:a8:ac:6f:44:62:d9:d6:41:7e:8c:8b:bc:d5:c4:a1: 5e:c8:14:f1:f9:54:ac:ca:e8:5c:1c:b7:e5:f4:0e:f0:a3:5c: ee:36:1f:fd:23:9e:ca:d9:b5:3d:e1:bc:da:6d:cc:0e:88:83: 81:3d:83:90:63:90:4a:5d:41:1a:15:8a:32:8f:8f:02:6c:32: 32:16:47:32:df:0c:15:6a:67:e0:34:b4:1c:4a:7a:ce:cd:84: 5a:d0:d0:be:9d:8f:71:d7:b7:cb:1f:c0:3a:91:0f:9d:27:56: 02:ee:f1:25:eb:1a:23:3d:13:b6:b9:09:af:c0:b5:8a:70:f2: da:fd:de:ec:e5:81:b6:d7:ae:b1:27:32:82:1e:7b:3b:bf:63: 07:a3:df:85:60:c2:b7:cd:1a:bb:95:dd:eb:94:83:5a:d6:f0: 68:90:9c:74:a2:de:62:37:44:7a:5f:12:6e:71:d7:a0:e6:c9: 13:d5:22:41:b9:74:ce:14:e7:e1:eb:50:f6:ff:0a:bc:99:00: d3:4c:61:03:8a:e9:d9:56:f4:85:4c:99:31:e2:69:e6:e7:da: f5:98:56:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNtUqzLUnqVyVC5H53RDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4NTg0MGUzYTBmMDQ3NGE0YWNjZTQ1ZWQ1ZmM5Y2ZmNzc4 NThkOTMwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD Eyg0Zjk3MjFkODA3MmY2MzZmYmM3ODg4Njk4OTEyMzJhNmNiYTcwODM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLMI3hXa91LRViL3E35gDJxt1Xj6 G4ZXQ6jdEZi3CX3afMv+V+FwpcqrA2434p7+pWPJFhajbY2+XmWc4mUIoADXNkOQ l6NBnoU61NpX38Z+SujdjxjchqsPTsHBsd57ZiLrBvMbmYwxzeZHSujwLH3G8FLw SoZI26zBQ4fpmoQj8hXYJEtjRsTSk8r4LPUVkrwOJOMdc2RBe/JF0F77i+dB4x8v d0p5mkQLKJsc87046UX6KNWT/R04awHBJYD/tIuJpvhiDOd2NS51KPhkFYHsolKj DVVv/Cshnadh/hEmPg+1EAc1+rioJBJj4xV4puoqJgHYSBssa6uClcjK2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE+XIdgHL2NvvHiIaYkSMqbLpwg3MB8GA1UdIwQY MBaAFHhYQOOg8EdKSszkXtX8nP93hY2TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzIt ZmFmYjEyYTE2YzMxLzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xNDI2NjQtNGMzMy00NDJhLWI0MzItZmFmYjEyYTE2YzMx LzEvZUZoQTQ2RHdSMHBLek9SZTFmeWNfM2VGalpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKZ+Q4Sm4 8XQymWh/lojszkRuxxKOR044omTkoEMs02zAJhUkWLomqKxvRGLZ1kF+jIu81cSh XsgU8flUrMroXBy35fQO8KNc7jYf/SOeytm1PeG82m3MDoiDgT2DkGOQSl1BGhWK Mo+PAmwyMhZHMt8MFWpn4DS0HEp6zs2EWtDQvp2Pcde3yx/AOpEPnSdWAu7xJesa Iz0TtrkJr8C1inDy2v3e7OWBtteusScygh57O79jB6PfhWDCt80au5Xd65SDWtbw aJCcdKLeYjdEel8SbnHXoObJE9UiQbl0zhTn4etQ9v8KvJkA00xhA4rp2Vb0hUyZ MeJp5ufa9ZhW8g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:37 2025 by rpki-client