This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft File: eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json) Hash identifier: F5idcgAizUQyDKS1mpzyS0Nmrl2nvQp9tkxbgNbTTMc= Subject key identifier: 53:05:64:20:C5:B0:53:2C:D2:0E:11:09:3D:FF:E2:3B:71:CE:B0:84 Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Certificate serial: 019AF50ABB175990C1D1C968F83EA77CEC46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 19:01:52 +0000 Manifest this update: Sat 06 Dec 2025 19:01:52 +0000 Manifest next update: Sun 07 Dec 2025 19:01:52 +0000 Files and hashes: 1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=) 2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=) 3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=) 4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=) 5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: 0ezE4vn5WsJ5BTTrg/xFmLoiuD9utZ7JjRDvke4QU+8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 19:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:bb:17:59:90:c1:d1:c9:68:f8:3e:a7:7c:ec:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5 Validity Not Before: Dec 6 19:01:52 2025 GMT Not After : Dec 7 19:01:52 2025 GMT Subject: CN=53056420c5b0532cd20e11093dffe23b71ceb084 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:10:6a:d8:fe:ce:c7:ac:7f:5c:9c:61:f2: 43:fc:0c:e7:c5:d9:39:b0:ef:74:c0:f5:2a:b1:4c: 1b:8f:39:bf:9e:62:76:68:12:dd:3f:c7:8b:98:ac: c1:36:02:60:d6:d1:7f:b3:22:73:ef:87:63:b2:64: 74:1e:1c:7c:f4:b8:53:9b:c6:c5:c4:e7:29:50:8f: 55:f4:43:54:e3:9a:2a:62:c9:e3:04:2f:e6:44:48: 9e:25:85:d8:15:21:56:3a:e9:22:db:4b:ed:8d:61: 92:ee:f1:53:33:71:75:af:17:3f:02:69:bb:14:1c: 43:fe:3c:e1:5a:01:f7:d7:a9:c0:f3:8e:a3:07:c7: 27:c8:c3:02:bd:2e:80:2a:85:95:87:8d:33:df:f9: 98:b6:e8:bf:57:ce:8f:76:dc:90:28:0a:27:72:6b: c2:98:a2:cf:01:a2:a1:99:94:00:28:11:0b:67:44: 76:a2:56:ad:ea:f7:f8:9d:75:7d:ab:79:2f:02:e4: 2c:87:af:4c:85:f5:80:69:45:2e:cb:24:7f:1a:68: c0:e8:8a:79:4e:c3:ac:95:bf:b9:85:28:ad:7e:0f: ae:85:f6:80:66:3c:c0:98:09:ad:86:25:9a:63:37: c1:a7:75:1a:0c:5a:ab:f4:66:17:35:b4:ba:c1:6b: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:05:64:20:C5:B0:53:2C:D2:0E:11:09:3D:FF:E2:3B:71:CE:B0:84 X509v3 Authority Key Identifier: keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:20:bb:eb:6d:bf:ad:cc:56:8c:4c:d7:11:aa:cd:21:04:31: c8:d2:8b:3f:ae:05:a5:89:2b:93:55:0e:e2:ce:e7:2b:6a:a3: 7f:d5:94:48:88:ce:01:1c:67:52:4e:78:7c:e1:f9:19:3c:0d: 25:fa:3b:27:ea:02:a0:f3:27:cd:af:c3:fe:a9:4a:1e:2c:bb: b9:5a:e2:6a:22:48:d8:0d:af:07:25:26:d4:4c:fe:3c:29:61: 87:6c:2b:a3:e3:7c:c8:c2:4e:e5:da:ee:4a:cb:ac:a9:80:f9: b9:5b:1e:cf:89:98:f1:9b:d2:1a:da:45:6c:7f:6f:f8:62:5a: 0a:5d:c0:5f:4b:e8:f6:e4:cf:44:d6:01:16:79:7a:45:52:4f: 86:c3:6f:7b:a1:dc:99:2f:fc:37:9d:f5:33:50:37:b5:aa:2d: e6:6d:df:b3:d2:24:2c:7d:8b:3f:fa:13:32:75:3a:71:5b:e9: 6d:dd:ac:d3:d2:41:02:88:9e:b5:2d:56:eb:89:46:c0:bf:46: 8d:c7:2b:d5:1b:d1:47:5e:3c:12:b8:da:4a:ef:ec:e6:53:e1: 97:e7:d9:9f:ad:03:05:3d:ef:df:ed:bc:4e:6b:0b:a5:64:fb: 56:87:b0:1e:75:05:fb:05:b1:25:cb:87:05:9a:ff:98:fb:7f: 91:6f:cd:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CrsXWZDB0clo+D6nfOxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3 ODhlZjUwHhcNMjUxMjA2MTkwMTUyWhcNMjUxMjA3MTkwMTUyWjAzMTEwLwYDVQQD Eyg1MzA1NjQyMGM1YjA1MzJjZDIwZTExMDkzZGZmZTIzYjcxY2ViMDg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p4Qatj+zsesf1ycYfJD/Aznxdk5 sO90wPUqsUwbjzm/nmJ2aBLdP8eLmKzBNgJg1tF/syJz74djsmR0Hhx89LhTm8bF xOcpUI9V9ENU45oqYsnjBC/mREieJYXYFSFWOuki20vtjWGS7vFTM3F1rxc/Amm7 FBxD/jzhWgH316nA846jB8cnyMMCvS6AKoWVh40z3/mYtui/V86PdtyQKAoncmvC mKLPAaKhmZQAKBELZ0R2olat6vf4nXV9q3kvAuQsh69MhfWAaUUuyyR/GmjA6Ip5 TsOslb+5hSitfg+uhfaAZjzAmAmthiWaYzfBp3UaDFqr9GYXNbS6wWuvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMFZCDFsFMs0g4RCT3/4jtxzrCEMB8GA1UdIwQY MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt MjMwN2JiNTkyMjVmLzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzCC7622/ rcxWjEzXEarNIQQxyNKLP64FpYkrk1UO4s7nK2qjf9WUSIjOARxnUk54fOH5GTwN Jfo7J+oCoPMnza/D/qlKHiy7uVriaiJI2A2vByUm1Ez+PClhh2wro+N8yMJO5dru SsusqYD5uVsez4mY8ZvSGtpFbH9v+GJaCl3AX0vo9uTPRNYBFnl6RVJPhsNve6Hc mS/8N531M1A3taot5m3fs9IkLH2LP/oTMnU6cVvpbd2s09JBAoietS1W64lGwL9G jccr1RvRR148ErjaSu/s5lPhl+fZn60DBT3v3+28TmsLpWT7VoewHnUF+wWxJcuH BZr/mPt/kW/N/A== -----END CERTIFICATE-----Generated at Sun Dec 7 01:33:59 2025 by rpki-client