This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft File: eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft (raw, json) Hash identifier: PHLfbXRb3C74sbPK7OIhu3S96mTABxsuo4QdFnfVYJo= Subject key identifier: 69:72:F8:CE:37:8D:4F:97:F0:DF:74:0B:2F:F7:8D:B6:99:D2:D6:42 Authority key identifier: 78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C Certificate issuer: /CN=78d403d938d71bdc5a3acb076d32af8283be627c Certificate serial: 019AF31B2DC3E9F5B028C6C13E99F96B393F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft Manifest number: 087F Signing time: Sat 06 Dec 2025 10:00:35 +0000 Manifest this update: Sat 06 Dec 2025 10:00:35 +0000 Manifest next update: Sun 07 Dec 2025 10:00:35 +0000 Files and hashes: 1: eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl (hash: MFuf7yhoOdy6kaqKzdr0kOapBKy8uhdee8hNH9uu25Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:2d:c3:e9:f5:b0:28:c6:c1:3e:99:f9:6b:39:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78d403d938d71bdc5a3acb076d32af8283be627c Validity Not Before: Dec 6 10:00:35 2025 GMT Not After : Dec 7 10:00:35 2025 GMT Subject: CN=6972f8ce378d4f97f0df740b2ff78db699d2d642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:17:bf:4f:38:8a:db:d3:96:52:80:e3:28: 58:87:da:10:a3:41:17:a9:ce:dd:6b:df:4d:b2:cc: 99:0a:6b:ef:df:d1:e1:53:19:d5:ef:21:56:c9:1e: 5a:02:b8:ca:7a:97:c3:2a:55:eb:ea:78:85:2e:9c: 31:7d:29:df:cb:b3:15:64:d4:d9:7a:0a:78:a8:59: 57:01:fb:bd:a0:77:88:7c:6b:01:2e:20:f0:d3:59: ce:65:81:73:e9:c4:05:a2:5b:b8:bb:a7:bf:6c:af: bf:e8:03:b0:17:35:da:8c:97:57:0c:dc:8a:22:c3: 19:22:a1:a4:e3:ab:46:d3:26:54:3d:ee:49:e7:1e: ec:85:5a:05:cc:97:47:f7:53:76:85:1f:01:63:55: 24:e7:7f:39:58:c0:ef:be:44:fc:d4:e1:c4:ce:d9: 73:c4:02:16:21:57:66:31:5a:7b:de:c6:ea:da:56: 70:86:22:87:ba:d6:74:5b:92:9f:53:f7:90:d5:ef: 03:f7:04:8f:f2:62:20:ab:a4:70:09:f1:9b:e6:e1: 4a:10:d9:11:6e:77:e7:12:c1:4f:fb:f5:93:c9:ae: e2:ec:f6:55:ca:97:ac:66:ff:0b:74:94:ae:30:bb: 15:be:48:d6:1c:be:8c:14:25:fa:cd:18:34:bb:10: c4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:72:F8:CE:37:8D:4F:97:F0:DF:74:0B:2F:F7:8D:B6:99:D2:D6:42 X509v3 Authority Key Identifier: keyid:78:D4:03:D9:38:D7:1B:DC:5A:3A:CB:07:6D:32:AF:82:83:BE:62:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNQD2TjXG9xaOssHbTKvgoO-Ynw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c4c48d-e0e7-48ea-9be7-a1a7719f988b/1/eNQD2TjXG9xaOssHbTKvgoO-Ynw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:c9:7a:28:ef:ca:55:29:fb:96:69:f3:d5:98:23:e2:06:e8: 6c:49:9a:14:5d:f5:a4:26:19:b0:34:7c:3f:b2:8e:1a:40:ba: 67:fc:b1:93:0e:d9:4c:57:8c:73:63:d0:28:21:34:98:63:50: a3:59:5c:9f:45:c6:5f:85:a4:ea:b7:a0:22:b8:1e:20:a0:64: 4d:c2:b3:68:22:96:81:85:92:88:91:8a:fa:55:34:89:3a:e0: 0f:c5:37:4b:c1:bb:90:58:56:60:19:ac:8c:86:0a:0e:ae:c4: 5a:42:54:b6:1f:52:09:08:4d:e2:99:23:29:aa:52:bd:8b:38: 2b:fe:82:10:12:8e:50:dc:7c:d8:1e:b7:53:b6:bc:d4:5b:aa: d1:85:37:4a:9f:6d:05:e4:a8:b9:60:e9:91:9e:32:63:6c:9e: 31:34:15:2a:50:17:87:64:ac:05:9c:ed:e1:66:2c:8d:45:cf: 16:c5:a6:9c:6b:77:a7:ae:86:b2:c0:3e:72:dc:dc:3a:e9:2a: 1c:ce:3b:2d:9c:e1:7e:cd:fa:f0:e5:5f:97:f9:ae:b4:e8:49: 82:e9:76:6b:73:aa:67:ac:93:d9:c8:d8:5a:21:87:d6:90:9c: 4d:da:e4:14:f7:be:ff:d7:f2:fa:f7:c1:1d:e9:48:75:ca:d8: 08:df:6f:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzGy3D6fWwKMbBPpn5azk/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZDQwM2Q5MzhkNzFiZGM1YTNhY2IwNzZkMzJhZjgyODNi ZTYyN2MwHhcNMjUxMjA2MTAwMDM1WhcNMjUxMjA3MTAwMDM1WjAzMTEwLwYDVQQD Eyg2OTcyZjhjZTM3OGQ0Zjk3ZjBkZjc0MGIyZmY3OGRiNjk5ZDJkNjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSkXv084itvTllKA4yhYh9oQo0EX qc7da99NssyZCmvv39HhUxnV7yFWyR5aArjKepfDKlXr6niFLpwxfSnfy7MVZNTZ egp4qFlXAfu9oHeIfGsBLiDw01nOZYFz6cQFolu4u6e/bK+/6AOwFzXajJdXDNyK IsMZIqGk46tG0yZUPe5J5x7shVoFzJdH91N2hR8BY1Uk5385WMDvvkT81OHEztlz xAIWIVdmMVp73sbq2lZwhiKHutZ0W5KfU/eQ1e8D9wSP8mIgq6RwCfGb5uFKENkR bnfnEsFP+/WTya7i7PZVypesZv8LdJSuMLsVvkjWHL6MFCX6zRg0uxDEtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGly+M43jU+X8N90Cy/3jbaZ0tZCMB8GA1UdIwQY MBaAFHjUA9k41xvcWjrLB20yr4KDvmJ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTct YTFhNzcxOWY5ODhiLzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9jNGM0OGQtZTBlNy00OGVhLTliZTctYTFhNzcxOWY5ODhi LzEvZU5RRDJUalhHOXhhT3NzSGJUS3Znb08tWW53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsl6KO/K VSn7lmnz1Zgj4gbobEmaFF31pCYZsDR8P7KOGkC6Z/yxkw7ZTFeMc2PQKCE0mGNQ o1lcn0XGX4Wk6regIrgeIKBkTcKzaCKWgYWSiJGK+lU0iTrgD8U3S8G7kFhWYBms jIYKDq7EWkJUth9SCQhN4pkjKapSvYs4K/6CEBKOUNx82B63U7a81Fuq0YU3Sp9t BeSouWDpkZ4yY2yeMTQVKlAXh2SsBZzt4WYsjUXPFsWmnGt3p66GssA+ctzcOukq HM47LZzhfs368OVfl/mutOhJgul2a3OqZ6yT2cjYWiGH1pCcTdrkFPe+/9fy+vfB HelIdcrYCN9vtA== -----END CERTIFICATE-----Generated at Sat Dec 6 14:39:30 2025 by rpki-client