This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft File: c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json) Hash identifier: hp/MlCwCO6knPKc8OIlYkbI/N1x6K1pKVUUu2FXAZas= Subject key identifier: 51:F1:B4:A4:1A:39:43:B0:AC:46:01:EE:7E:E3:90:2C:F4:7A:E4:0F Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Certificate serial: 019AF68A79E85F2B526DEB15F726FFCB9A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft Manifest number: 178B Signing time: Sun 07 Dec 2025 02:01:01 +0000 Manifest this update: Sun 07 Dec 2025 02:01:01 +0000 Manifest next update: Mon 08 Dec 2025 02:01:01 +0000 Files and hashes: 1: 7v-L1KuWY_QeDJxKFVyRkWnFePQ.roa (hash: bVQczQ08ozX20fYuXzWGYS1jimxc5e2Qx5nVzF/4kuk=) 2: H74wGZKnnU6XEP7nVKoqw4XaEjE.roa (hash: zhm555s3zw/KlbcjZuumbYd6+z6n6717Q/inEo++9C0=) 3: KFKPGq8CDIQff00UekrfFEmWWU4.roa (hash: pndCMKJbI0Ffrf6VYH3lHviYtYItndyotazCLP7aZyE=) 4: TLCOp8VQQYT-sDLZMkb_dNE0wJI.roa (hash: 8TF1RbnrjzrAYcRglOW5PIK7TmKRhUoFu7HvQr3ZHoA=) 5: XfGBei_fvFP0LcnT4xlGOunfSHY.roa (hash: ApG5cEMi+MNJR6ahm8kTy/uN64zS0fv0zRdzd/i6biA=) 6: ZLCgOlPZ-adZViTKhsMv3BABRVQ.roa (hash: y37YnkCGLdmrEa4m8cGkKpYMZJFVaIJVqpcOQKXrYQA=) 7: ZrwHnbp0cmRv-8Aq-3dTrUs96b8.roa (hash: laG521bBX3KOp9w13a5/N7g1SD2gsHS2KdTqelNAv1g=) 8: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: RuaATC6+3ddD44C81oxQBw/9l9tVXYI6gkf0OFovrbc=) 9: fUiU9NND6NDkXeCCtG2FpkvLAtQ.roa (hash: BipzZjfv9NJLde/5SLk/7HBxUjct/iO+maQqs2utFTw=) 10: mJUNw4dhsVDBnFTg7x4G5Co4xf0.roa (hash: uA/rqJShT3FbqgkbYlEQFRj/7911uoTUqkA+K2PLe1c=) 11: nT9Kl7qa4avyYi6PobndNFEx2JI.roa (hash: 4NhOocRVxQsq48Sjltw5zBhFh6NiUij1mxelAtmoUp0=) 12: tORFCAGU_ExqN7Mewd4Qy6LCTnI.roa (hash: uPuXkPZSEOXMpoFnzdu2ibc0loihcwKdhAnVhzFJMng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:79:e8:5f:2b:52:6d:eb:15:f7:26:ff:cb:9a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9 Validity Not Before: Dec 7 02:01:01 2025 GMT Not After : Dec 8 02:01:01 2025 GMT Subject: CN=51f1b4a41a3943b0ac4601ee7ee3902cf47ae40f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:92:bc:90:50:a7:89:09:80:e2:ed:38:90:78: 51:df:2a:0e:be:6c:f2:fe:f3:0b:f0:cf:66:02:b3: 1b:80:54:1c:f8:b9:b8:05:66:48:3c:78:e8:3f:f9: 16:4f:f8:00:20:f0:52:2d:b8:48:50:31:88:fa:27: 16:55:8b:4a:1b:80:06:6d:4d:2c:84:b0:c7:56:6f: 16:52:5e:a2:7a:b5:71:2a:e9:d4:f4:31:00:23:30: 73:c6:b3:2e:29:ad:a4:cb:1f:95:58:f4:f6:9c:ec: 18:3d:05:30:31:49:de:7d:01:f2:6f:94:79:c9:f0: c5:48:f3:7b:1b:9f:d3:30:83:68:67:e0:55:01:8a: 7b:f0:fa:c2:26:7e:91:c9:ea:df:30:b3:be:67:bf: a1:2a:62:09:ef:bd:39:7e:34:25:6a:df:26:43:e8: ab:11:b5:6e:fd:55:08:0f:55:78:c1:3e:1e:c1:6b: d0:df:a7:55:02:02:16:46:d9:ed:58:63:fc:4c:f3: 98:40:52:a2:58:bb:d3:ad:5e:b7:66:d0:ed:fb:5d: 50:b2:43:18:e9:28:e3:11:e6:2e:10:80:0d:c0:d6: 1c:53:d1:93:f8:a7:15:6e:38:41:d5:28:e3:d3:88: 31:27:f4:f2:97:5c:3e:7c:74:94:86:ec:74:fc:0c: e2:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F1:B4:A4:1A:39:43:B0:AC:46:01:EE:7E:E3:90:2C:F4:7A:E4:0F X509v3 Authority Key Identifier: keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b0:e0:85:5f:f2:47:0e:4f:8b:7e:31:3c:dd:19:ce:d0:2e: 51:21:be:9b:a0:e0:b4:62:80:3d:7c:b8:a6:8f:3d:3a:3d:85: bd:50:dc:27:5a:6b:ac:19:9c:dc:8d:f2:d4:58:d8:ac:da:f5: 9d:90:ba:88:1c:46:53:82:58:0f:42:12:10:42:e8:cb:1a:91: 49:aa:50:c0:dc:1b:04:ab:0e:56:5d:c3:13:bf:b8:33:7e:d6: 1d:df:10:b6:cb:43:32:f8:3d:c7:4f:52:05:0d:98:cd:93:f9: 3a:cf:95:97:82:f5:c2:01:f4:e4:c0:99:04:ac:a8:3b:74:e8: 20:e3:44:a6:fa:22:32:88:ed:c5:f6:2a:d7:e5:fd:7b:4b:70: 8f:de:65:90:fc:c2:7f:fb:47:bf:6c:d3:5c:a7:5c:e2:18:60: cb:cb:ba:05:d7:fa:63:87:c2:1a:c9:de:11:64:01:98:3d:5e: b2:8c:50:a1:f9:f8:f3:9e:3c:13:4b:3c:67:77:4f:0b:76:0a: 9c:f2:ce:87:1f:57:6d:d4:53:d8:1f:b9:60:fa:0c:94:2a:56: 57:87:04:7b:c2:79:4b:8f:da:55:28:42:c1:45:4c:f3:fd:47: 5a:95:eb:c0:d4:d4:2b:fd:62:39:2b:af:8e:bd:6a:c0:de:84: 6d:06:8f:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2innoXytSbesV9yb/y5qUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky ZDMwYTkwHhcNMjUxMjA3MDIwMTAxWhcNMjUxMjA4MDIwMTAxWjAzMTEwLwYDVQQD Eyg1MWYxYjRhNDFhMzk0M2IwYWM0NjAxZWU3ZWUzOTAyY2Y0N2FlNDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5K8kFCniQmA4u04kHhR3yoOvmzy /vML8M9mArMbgFQc+Lm4BWZIPHjoP/kWT/gAIPBSLbhIUDGI+icWVYtKG4AGbU0s hLDHVm8WUl6ierVxKunU9DEAIzBzxrMuKa2kyx+VWPT2nOwYPQUwMUnefQHyb5R5 yfDFSPN7G5/TMINoZ+BVAYp78PrCJn6RyerfMLO+Z7+hKmIJ7705fjQlat8mQ+ir EbVu/VUID1V4wT4ewWvQ36dVAgIWRtntWGP8TPOYQFKiWLvTrV63ZtDt+11QskMY 6SjjEeYuEIANwNYcU9GT+KcVbjhB1Sjj04gxJ/Tyl1w+fHSUhux0/AzifwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHxtKQaOUOwrEYB7n7jkCz0euQPMB8GA1UdIwQY MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt Yjk0NjQ3MThiYTM3LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3 LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7DghV/y Rw5Pi34xPN0ZztAuUSG+m6DgtGKAPXy4po89Oj2FvVDcJ1prrBmc3I3y1FjYrNr1 nZC6iBxGU4JYD0ISEELoyxqRSapQwNwbBKsOVl3DE7+4M37WHd8QtstDMvg9x09S BQ2YzZP5Os+Vl4L1wgH05MCZBKyoO3ToIONEpvoiMojtxfYq1+X9e0twj95lkPzC f/tHv2zTXKdc4hhgy8u6Bdf6Y4fCGsneEWQBmD1esoxQofn48548E0s8Z3dPC3YK nPLOhx9XbdRT2B+5YPoMlCpWV4cEe8J5S4/aVShCwUVM8/1HWpXrwNTUK/1iOSuv jr1qwN6EbQaPhg== -----END CERTIFICATE-----Generated at Sun Dec 7 04:10:14 2025 by rpki-client