This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft File: eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json) Hash identifier: JQk4Tk5FOsom2JY+w6H5GVHsiJmwl/c2RXjU2cVvv8w= Subject key identifier: 94:E7:CB:1E:C0:E6:BE:E8:C4:15:5D:41:1F:E7:73:C7:D9:B3:72:12 Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C Certificate issuer: /CN=78d403d938d71bdc5a3acb076d32af8283be627c Certificate serial: 019B2EF922FB06F5415C7EB285A7412B745F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft Manifest number: 089E Signing time: Thu 18 Dec 2025 01:00:37 +0000 Manifest this update: Thu 18 Dec 2025 01:00:37 +0000 Manifest next update: Fri 19 Dec 2025 01:00:37 +0000 Files and hashes: 1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: gnqg7kC6OPRY6G9mHmJPIvtdDS1kU8YTbtVKYavhxgI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 01:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:f9:22:fb:06:f5:41:5c:7e:b2:85:a7:41:2b:74:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c Validity Not Before: Dec 18 01:00:37 2025 GMT Not After : Dec 19 01:00:37 2025 GMT Subject: CN=94e7cb1ec0e6bee8c4155d411fe773c7d9b37212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c6:a5:9b:e6:27:ff:c9:d7:ca:0c:2d:bf:24: 95:95:79:ed:c3:19:4a:17:c8:f7:72:eb:c0:51:2e: aa:5c:fe:ca:bc:1d:dd:77:5e:d9:e9:b9:cf:5f:1c: 6e:ba:59:75:59:25:e3:b2:d2:b3:1c:fb:8d:a3:ac: 1f:84:b7:da:38:8e:bb:fe:dc:9b:f7:29:d4:61:85: 02:84:e0:26:cb:ac:b6:34:19:df:b4:8a:41:1b:e6: 99:fd:65:4e:63:48:51:cb:2c:d7:3c:56:a7:af:6f: 1a:37:2d:ba:77:52:83:e8:4a:92:c2:61:88:dd:9b: 8c:b5:26:e7:85:3a:6c:c3:18:d8:d7:bf:a3:1a:65: 42:f8:5a:cb:31:6e:a5:61:11:10:1e:5e:ea:0d:f3: 61:02:cd:77:7f:04:5b:40:36:96:c7:01:3b:4e:a6: 82:68:5c:3b:0e:63:30:c9:9e:b6:d5:37:14:f8:75: a7:49:7e:24:c6:2e:2f:32:4f:99:b8:a0:2e:61:22: 4f:b0:b8:80:e5:af:a2:52:c8:f8:d7:85:49:9a:12: df:75:5a:fa:12:ff:a5:33:1f:10:6b:ac:1f:a9:86: fe:45:b4:93:87:63:e6:36:98:5f:2a:e6:61:4c:5b: 4d:df:f9:a7:97:95:ee:a7:79:75:79:37:56:ee:06: 46:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:CB:1E:C0:E6:BE:E8:C4:15:5D:41:1F:E7:73:C7:D9:B3:72:12 X509v3 Authority Key Identifier: keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:75:9c:fb:2a:47:4b:62:f5:25:18:54:37:f0:99:ea:d0:9c: b5:bf:fd:16:7d:75:e3:fe:92:2d:0d:f8:7a:86:7f:5f:05:c1: f5:43:44:01:67:aa:97:15:08:03:09:6a:c9:11:43:ad:9e:21: 31:2a:26:8f:31:3c:b0:e5:7d:34:0a:5b:ad:d6:1e:3a:28:88: 77:58:68:22:57:c4:a9:04:4e:e2:75:e4:17:7c:94:c1:b0:38: ff:1f:47:73:3b:e0:f1:07:f1:69:94:79:fd:bf:1d:ba:8b:f0: 63:d7:06:42:8f:68:84:a7:7e:63:c7:a3:bc:85:30:f7:66:9f: 88:89:2f:39:51:c3:5c:e9:e6:ec:49:60:25:e2:5a:97:0b:32: 21:c0:10:da:ad:56:03:83:9a:08:7e:88:89:7a:ff:74:d2:fa: 56:fe:ec:bf:5a:cd:a7:8b:c1:45:62:a3:a0:23:f0:d8:51:aa: 64:87:ac:2e:66:af:f9:70:72:8f:59:11:73:02:5a:28:d3:11: 45:ff:cd:08:39:bc:79:2c:3e:56:55:72:99:54:79:f8:f9:60: 9b:8d:39:6b:34:01:6e:20:eb:7b:54:8d:1e:92:8f:e6:07:c0: 41:c4:a6:a0:55:90:fa:54:8e:11:9d:f1:ad:9c:5d:8c:35:a2: 85:0b:15:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsu+SL7BvVBXH6yhadBK3RfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDQwM2Q5MzhkNzFiZGM1YTNhY2IwNzZkMzJhZjgyODNi ZTYyN2MwHhcNMjUxMjE4MDEwMDM3WhcNMjUxMjE5MDEwMDM3WjAzMTEwLwYDVQQD Eyg5NGU3Y2IxZWMwZTZiZWU4YzQxNTVkNDExZmU3NzNjN2Q5YjM3MjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8alm+Yn/8nXygwtvySVlXntwxlK F8j3cuvAUS6qXP7KvB3dd17Z6bnPXxxuull1WSXjstKzHPuNo6wfhLfaOI67/tyb 9ynUYYUChOAmy6y2NBnftIpBG+aZ/WVOY0hRyyzXPFanr28aNy26d1KD6EqSwmGI 3ZuMtSbnhTpswxjY17+jGmVC+FrLMW6lYREQHl7qDfNhAs13fwRbQDaWxwE7TqaC aFw7DmMwyZ621TcU+HWnSX4kxi4vMk+ZuKAuYSJPsLiA5a+iUsj414VJmhLfdVr6 Ev+lMx8Qa6wfqYb+RbSTh2PmNphfKuZhTFtN3/mnl5Xup3l1eTdW7gZGxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJTnyx7A5r7oxBVdQR/nc8fZs3ISMB8GA1UdIwQY MBaAFHjUA9k41xvcWjrLB20yr4KDvmJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTct YTFhNzcxOWY5ODhiLzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTctYTFhNzcxOWY5ODhi LzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdHWc+ypH S2L1JRhUN/CZ6tCctb/9Fn114/6SLQ34eoZ/XwXB9UNEAWeqlxUIAwlqyRFDrZ4h MSomjzE8sOV9NApbrdYeOiiId1hoIlfEqQRO4nXkF3yUwbA4/x9Hczvg8QfxaZR5 /b8duovwY9cGQo9ohKd+Y8ejvIUw92afiIkvOVHDXOnm7ElgJeJalwsyIcAQ2q1W A4OaCH6IiXr/dNL6Vv7sv1rNp4vBRWKjoCPw2FGqZIesLmav+XByj1kRcwJaKNMR Rf/NCDm8eSw+VlVymVR5+Plgm405azQBbiDre1SNHpKP5gfAQcSmoFWQ+lSOEZ3x rZxdjDWihQsVIA== -----END CERTIFICATE-----Generated at Thu Dec 18 07:35:15 2025 by rpki-client