This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft File: inuFwxZYaxmdJr_Ej-JZiTnLb94.mft (raw, json) Hash identifier: 4YVNDsIn8kDNhMzZR5MMsDLe9VxIMD0J3XqMBcGFqIU= Subject key identifier: E7:75:B1:41:98:D7:1D:13:6F:E1:DF:FF:90:41:C7:48:FA:22:6F:E2 Authority key identifier: 8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE Certificate issuer: /CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Certificate serial: 019B4926AE6E69DCC293EEEE3D3FEAF8CF9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft Manifest number: 178E Signing time: Tue 23 Dec 2025 03:00:30 +0000 Manifest this update: Tue 23 Dec 2025 03:00:30 +0000 Manifest next update: Wed 24 Dec 2025 03:00:30 +0000 Files and hashes: 1: TTn8sD8XVXKDyT7akuDl-7NaiVA.roa (hash: G+wfHyyl2e/lbOKV3OV3aaADlcnryO/8kE2PLZtYozg=) 2: inuFwxZYaxmdJr_Ej-JZiTnLb94.crl (hash: H01E3J8qoWXbGLLxpzvUjpEnPNfBSYFMSfqOHv9FeHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:49:26:ae:6e:69:dc:c2:93:ee:ee:3d:3f:ea:f8:cf:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7b85c316586b199d26bfc48fe2598939cb6fde Validity Not Before: Dec 23 03:00:30 2025 GMT Not After : Dec 24 03:00:30 2025 GMT Subject: CN=e775b14198d71d136fe1dfff9041c748fa226fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:bd:9e:2b:ad:a6:50:49:6c:30:77:c9:7a: 33:eb:4d:f3:1c:e4:aa:22:4d:f7:10:b5:79:2a:90: a5:76:13:19:49:f9:2d:3b:d0:83:f7:37:38:5d:5e: 83:3d:0e:a1:2e:ba:06:75:93:c3:bb:3b:4a:3a:16: 42:db:9f:1f:8f:8c:96:1f:84:05:cd:db:d9:62:c4: a7:4f:62:10:8a:8b:bc:df:eb:3d:ec:a7:81:e7:36: e3:6d:87:c8:c0:e7:75:10:5c:1c:5a:a9:a9:6a:4c: 4f:04:09:bc:da:2f:9e:a4:f6:8a:1f:37:49:1e:1e: dc:4a:a8:a2:8c:86:8a:11:19:1a:09:74:42:f5:7f: 9b:06:2d:7d:16:4b:84:06:81:54:19:3a:bc:90:74: af:c6:3c:e3:cd:a2:24:18:5a:6a:3c:75:00:b6:55: d8:bb:23:4b:bd:33:a7:34:99:45:30:a4:c6:cd:2d: 77:19:23:bd:f9:f7:8b:2d:a5:c5:bd:10:16:ff:5a: 83:e4:66:d3:d5:8a:9e:6a:92:9d:76:53:55:d1:76: c5:c3:65:71:7b:53:2e:a0:71:e5:fb:f4:59:2c:ad: 7b:00:63:06:b9:ee:3f:ad:4c:f6:8d:48:fc:73:2e: 3a:11:40:08:7c:cf:d3:11:7a:10:f2:b8:db:54:db: 99:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:75:B1:41:98:D7:1D:13:6F:E1:DF:FF:90:41:C7:48:FA:22:6F:E2 X509v3 Authority Key Identifier: keyid:8A:7B:85:C3:16:58:6B:19:9D:26:BF:C4:8F:E2:59:89:39:CB:6F:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inuFwxZYaxmdJr_Ej-JZiTnLb94.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/0db348-8ca8-40de-82cd-29f20dc8eaf4/1/inuFwxZYaxmdJr_Ej-JZiTnLb94.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:be:f0:bb:e9:2f:1d:a0:94:50:ca:6d:ee:c9:0b:42:75:f8: 6f:b2:12:c7:e1:8a:21:d1:45:f7:2e:b0:9e:10:05:ae:03:76: c0:69:41:93:31:bc:00:c0:d9:42:13:5a:e9:fb:45:ac:86:5c: 36:b3:86:fc:dc:a8:1d:57:26:48:03:8d:88:bd:c0:e4:ee:94: f5:5a:a6:ad:d2:b1:27:c3:7e:d4:8f:a8:1c:56:1b:59:0e:64: fc:81:d9:72:46:4f:71:8c:f9:8a:23:85:ae:22:38:18:02:bd: d6:cf:d5:54:ef:0e:5f:6b:15:23:3f:16:08:40:9a:20:e0:49: d4:ab:3d:16:82:79:8e:14:71:9b:53:a4:2d:81:5a:97:9b:2c: 8d:41:e8:d1:62:ce:fe:7a:b8:32:ad:e5:0d:bd:a5:cd:ef:47: d6:da:91:16:37:df:11:4c:50:6f:0f:df:94:81:f4:7f:45:74: 31:37:14:5f:d6:0c:50:a1:89:4d:44:a7:ee:81:f8:ae:96:5f: 9c:3e:57:bd:82:66:be:8f:0a:58:6b:f5:a3:33:5e:62:ee:e5: ea:70:c8:a7:61:6f:78:40:54:33:18:18:26:07:20:18:41:cc: ce:75:a1:bc:ca:36:ef:bc:5a:cc:61:a8:cb:47:4c:ca:8c:62: 9a:b4:31:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtJJq5uadzCk+7uPT/q+M+cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhN2I4NWMzMTY1ODZiMTk5ZDI2YmZjNDhmZTI1OTg5Mzlj YjZmZGUwHhcNMjUxMjIzMDMwMDMwWhcNMjUxMjI0MDMwMDMwWjAzMTEwLwYDVQQD EyhlNzc1YjE0MTk4ZDcxZDEzNmZlMWRmZmY5MDQxYzc0OGZhMjI2ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspi9niutplBJbDB3yXoz603zHOSq Ik33ELV5KpCldhMZSfktO9CD9zc4XV6DPQ6hLroGdZPDuztKOhZC258fj4yWH4QF zdvZYsSnT2IQiou83+s97KeB5zbjbYfIwOd1EFwcWqmpakxPBAm82i+epPaKHzdJ Hh7cSqiijIaKERkaCXRC9X+bBi19FkuEBoFUGTq8kHSvxjzjzaIkGFpqPHUAtlXY uyNLvTOnNJlFMKTGzS13GSO9+feLLaXFvRAW/1qD5GbT1YqeapKddlNV0XbFw2Vx e1MuoHHl+/RZLK17AGMGue4/rUz2jUj8cy46EUAIfM/TEXoQ8rjbVNuZtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOd1sUGY1x0Tb+Hf/5BBx0j6Im/iMB8GA1UdIwQY MBaAFIp7hcMWWGsZnSa/xI/iWYk5y2/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2Qt MjlmMjBkYzhlYWY0LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8wZGIzNDgtOGNhOC00MGRlLTgyY2QtMjlmMjBkYzhlYWY0 LzEvaW51Rnd4WllheG1kSnJfRWotSlppVG5MYjk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD77wu+kv HaCUUMpt7skLQnX4b7ISx+GKIdFF9y6wnhAFrgN2wGlBkzG8AMDZQhNa6ftFrIZc NrOG/NyoHVcmSAONiL3A5O6U9VqmrdKxJ8N+1I+oHFYbWQ5k/IHZckZPcYz5iiOF riI4GAK91s/VVO8OX2sVIz8WCECaIOBJ1Ks9FoJ5jhRxm1OkLYFal5ssjUHo0WLO /nq4Mq3lDb2lze9H1tqRFjffEUxQbw/flIH0f0V0MTcUX9YMUKGJTUSn7oH4rpZf nD5XvYJmvo8KWGv1ozNeYu7l6nDIp2FveEBUMxgYJgcgGEHMznWhvMo277xazGGo y0dMyoximrQx+A== -----END CERTIFICATE-----Generated at Tue Dec 23 06:05:24 2025 by rpki-client