This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json) Hash identifier: jdwSldu7ggV+ezXBjo+bfCSskkcM1kzF92lPNt1tUis= Subject key identifier: A0:AF:81:53:6D:CD:67:79:A3:91:D2:25:1A:60:B3:AA:EE:6A:BA:04 Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Certificate serial: 019B2174C8836C468B689043504AC7CAA964 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 10:01:00 +0000 Manifest this update: Mon 15 Dec 2025 10:01:00 +0000 Manifest next update: Tue 16 Dec 2025 10:01:00 +0000 Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=) 2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=) 3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: 9vMSDq0oMJ1y1IQqKRH0uf9O60eWihkAWcKimLIjH6I=) 4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:c8:83:6c:46:8b:68:90:43:50:4a:c7:ca:a9:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Validity Not Before: Dec 15 10:01:00 2025 GMT Not After : Dec 16 10:01:00 2025 GMT Subject: CN=a0af81536dcd6779a391d2251a60b3aaee6aba04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:89:df:61:18:3a:cd:cc:96:d5:53:fb:b6:fb: b6:fc:b0:05:b2:78:91:bf:76:f8:66:92:4a:e1:a5: c4:9b:00:2b:ec:4f:1e:13:38:c0:52:e7:b2:8d:7c: 70:9b:c1:7a:3a:c8:4c:a4:4b:21:8d:74:29:5f:5a: bb:c3:d9:5b:73:e2:a3:b8:4e:2c:ec:75:22:c9:de: 96:37:4b:94:e6:6f:a7:b0:8d:55:17:c1:7f:1c:d3: 7a:6e:25:95:ff:e4:98:ab:c3:71:1e:ab:68:03:d2: 3d:b2:b2:15:0c:2e:5f:b3:39:b7:ab:91:6f:00:ff: 7b:a1:11:28:28:cb:a4:30:75:a5:ad:86:7a:28:47: d4:7d:76:6b:d1:56:ae:64:b9:b7:4b:f5:ba:52:ea: 26:15:89:c9:d2:10:78:71:bc:9d:7e:89:d8:e9:82: 8f:ac:5b:48:cd:dd:cd:ea:87:68:0f:ad:69:d5:3b: 83:76:54:32:11:2e:6f:4f:a2:8f:e7:a5:70:26:39: 0e:71:44:ae:86:31:57:04:93:da:d6:01:f9:21:55: 2b:8a:b7:31:73:e9:bc:e9:7e:45:34:6b:a5:de:10: f4:82:b6:1c:14:5e:17:e7:94:08:49:72:75:4a:e5: 7d:49:97:74:9a:0c:df:91:79:e5:0a:a4:a2:b7:ae: 1b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:81:53:6D:CD:67:79:A3:91:D2:25:1A:60:B3:AA:EE:6A:BA:04 X509v3 Authority Key Identifier: keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:67:cf:9a:6c:6a:fa:69:83:fc:e2:55:af:a2:d4:dd:02:fd: f6:e4:34:d2:bd:9f:b1:95:79:e3:1f:b3:bf:27:08:54:b0:91: 2f:42:56:29:5a:35:1e:75:c8:c1:a9:bb:88:22:e2:b5:a9:07: 3e:3d:09:41:23:9d:6c:56:a9:64:a1:0b:26:86:dc:ea:a4:9e: 83:8d:fd:2f:eb:e5:dc:0f:4f:e1:b1:d9:a6:a2:0d:01:90:8c: af:02:41:f9:8d:29:dc:d6:45:80:7b:96:a0:a8:33:12:77:55: b3:ec:12:b7:b2:c9:4e:8b:66:00:a2:8c:14:23:da:e9:f1:cd: 8e:af:e3:02:7a:98:70:0e:69:92:77:43:a2:48:b0:a0:e5:f5: 57:40:4a:03:8a:7b:1f:ac:7f:74:6d:f6:f0:d8:ea:fa:96:2e: ba:4e:79:be:17:d7:6d:b8:05:1f:d7:de:6f:cc:4b:c7:b8:05: ea:d8:d7:02:4c:0f:96:90:89:9d:84:a3:56:9a:35:9d:3c:37: d7:cc:43:e9:43:b9:72:6d:4d:c5:21:2a:f9:c5:4e:ba:37:29: 78:f1:b3:d1:01:35:eb:de:0d:46:e7:a5:e3:ca:b5:d4:70:c3: 5c:f6:91:7f:bc:bb:78:b4:f5:0b:d6:79:c5:08:cf:bc:b7:d4: df:68:d4:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdMiDbEaLaJBDUErHyqlkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4 NWQyYzgwHhcNMjUxMjE1MTAwMTAwWhcNMjUxMjE2MTAwMTAwWjAzMTEwLwYDVQQD EyhhMGFmODE1MzZkY2Q2Nzc5YTM5MWQyMjUxYTYwYjNhYWVlNmFiYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4nfYRg6zcyW1VP7tvu2/LAFsniR v3b4ZpJK4aXEmwAr7E8eEzjAUueyjXxwm8F6OshMpEshjXQpX1q7w9lbc+KjuE4s 7HUiyd6WN0uU5m+nsI1VF8F/HNN6biWV/+SYq8NxHqtoA9I9srIVDC5fszm3q5Fv AP97oREoKMukMHWlrYZ6KEfUfXZr0VauZLm3S/W6UuomFYnJ0hB4cbydfonY6YKP rFtIzd3N6odoD61p1TuDdlQyES5vT6KP56VwJjkOcUSuhjFXBJPa1gH5IVUrircx c+m86X5FNGul3hD0grYcFF4X55QISXJ1SuV9SZd0mgzfkXnlCqSit64b1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCvgVNtzWd5o5HSJRpgs6ruaroEMB8GA1UdIwQY MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGfPmmxq +mmD/OJVr6LU3QL99uQ00r2fsZV54x+zvycIVLCRL0JWKVo1HnXIwam7iCLitakH Pj0JQSOdbFapZKELJobc6qSeg439L+vl3A9P4bHZpqINAZCMrwJB+Y0p3NZFgHuW oKgzEndVs+wSt7LJTotmAKKMFCPa6fHNjq/jAnqYcA5pkndDokiwoOX1V0BKA4p7 H6x/dG328Njq+pYuuk55vhfXbbgFH9feb8xLx7gF6tjXAkwPlpCJnYSjVpo1nTw3 18xD6UO5cm1NxSEq+cVOujcpePGz0QE1694NRuel48q11HDDXPaRf7y7eLT1C9Z5 xQjPvLfU32jUhQ== -----END CERTIFICATE-----Generated at Mon Dec 15 13:17:02 2025 by rpki-client