This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft File: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft (raw, json) Hash identifier: LskCtv2pbrGLk5zlPVRVOuke/4v2XqAKqN/jIu9t0vE= Subject key identifier: 14:FB:ED:5D:68:AA:54:8F:E5:73:CD:DE:1F:81:9E:99:28:85:31:8F Authority key identifier: AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 Certificate issuer: /CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Certificate serial: 019B0E26746FFAE12F1DBB5E35050F2F3F0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft Manifest number: 178A Signing time: Thu 11 Dec 2025 16:02:39 +0000 Manifest this update: Thu 11 Dec 2025 16:02:39 +0000 Manifest next update: Fri 12 Dec 2025 16:02:39 +0000 Files and hashes: 1: nd7EMYxqZskNG-8RUiwICJeXwqY.roa (hash: mY3khCwzfzEen/6QsaBVskA8rJ9h0QmksXwmEPcvkIM=) 2: oz9BBzN_BuPcGQT11NYYdsxnqjY.roa (hash: nvAXPeVrUMWzLRMYMGEkxTC8HsMJu8Sz1cS7HP/e1xI=) 3: rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl (hash: 6W1ldcBhimQYjYZOqlbj6Vo3aIOnIfvSl++mQBJKLJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 16:02:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:26:74:6f:fa:e1:2f:1d:bb:5e:35:05:0f:2f:3f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae0a5a1b38617cc161f60613d98e179b5360c054 Validity Not Before: Dec 11 16:02:39 2025 GMT Not After : Dec 12 16:02:39 2025 GMT Subject: CN=14fbed5d68aa548fe573cdde1f819e992885318f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:17:b7:ca:6f:2b:b4:6f:b1:c4:bf:22:48:b7: ff:89:11:59:cb:a2:c0:29:da:02:2c:85:de:2d:48: 8f:5c:bf:8f:96:2d:65:c3:a2:61:52:04:ce:21:41: c4:24:e0:1d:1b:ef:30:90:da:32:ee:e1:b6:5e:fa: 2a:1d:7e:65:06:dc:35:cc:b8:e2:b8:6e:85:89:b8: 7c:e4:98:d8:8d:99:d1:15:16:f0:c6:19:1e:80:3d: ea:86:5d:0d:6f:29:9d:43:4e:fb:3b:0f:cb:41:f2: f2:30:b1:19:9a:c7:ee:55:f1:06:78:49:b8:9e:b5: 80:a8:4d:02:33:05:30:40:83:87:14:54:5f:1a:eb: 5b:0f:c4:90:36:a3:75:5e:16:58:bb:57:30:54:d6: 70:0c:89:14:e5:4b:4f:f4:6c:67:8b:31:7f:be:a7: 7d:a0:4f:11:c1:64:0c:4b:0c:e3:a7:4e:22:0b:54: ca:c8:bf:f2:e3:a9:b3:67:73:97:19:62:c0:9d:ce: 76:a2:22:8a:be:0c:42:ea:fe:31:75:75:79:2c:c9: 65:c6:bf:f4:ba:b1:4b:03:f1:39:5c:63:50:85:c0: 75:33:aa:81:21:59:31:0f:33:bc:d6:61:97:7a:8f: bf:36:f7:48:aa:1a:4b:3d:ef:50:38:64:06:d0:f2: a3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:FB:ED:5D:68:AA:54:8F:E5:73:CD:DE:1F:81:9E:99:28:85:31:8F X509v3 Authority Key Identifier: keyid:AE:0A:5A:1B:38:61:7C:C1:61:F6:06:13:D9:8E:17:9B:53:60:C0:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/31991a-bdb8-4b5b-ae5d-b29812c3e465/1/rgpaGzhhfMFh9gYT2Y4Xm1NgwFQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:52:5d:9f:e9:65:5e:fe:80:36:4b:67:52:c3:4d:7c:a5:33: a3:9c:9d:85:76:eb:4c:c8:9b:15:60:f2:fe:d7:70:88:79:66: f1:5e:60:3b:08:a5:ea:11:3c:bc:40:6e:bf:d4:9f:ee:0d:ae: c7:8d:0b:1a:f4:f1:da:3c:44:7c:12:73:bb:b9:09:ec:ad:72: f1:0c:2b:33:25:4a:af:62:49:b4:31:08:f7:97:5a:c0:f7:6e: 3d:0b:11:44:ed:63:fb:c2:4f:5e:42:20:87:fc:6c:7a:66:63: 7c:ee:55:9a:ec:6a:03:51:82:2a:bf:3b:2e:72:83:5f:66:8c: ff:dc:d1:0d:87:47:1b:b8:eb:61:ce:f1:40:01:8e:b1:99:9c: ce:fd:3f:6f:97:22:38:5d:d7:dc:72:21:8d:58:c9:95:e8:20: db:02:17:e0:f9:47:41:ec:30:e9:7f:c2:ac:cb:69:b3:0e:ca: c7:7a:70:6a:b0:f0:4a:80:01:27:f3:cf:44:b1:a8:43:fc:cf: 36:7c:cf:b5:79:87:35:84:19:5f:48:de:a1:2e:95:23:93:4d: 0a:b9:fb:b7:b7:1f:7d:b6:25:c9:67:97:9d:e4:d1:8b:8e:5b: 09:8f:78:02:87:65:0a:62:78:9b:7e:c4:38:2a:c7:59:8d:48: 65:b1:60:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJnRv+uEvHbteNQUPLz8OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMGE1YTFiMzg2MTdjYzE2MWY2MDYxM2Q5OGUxNzliNTM2 MGMwNTQwHhcNMjUxMjExMTYwMjM5WhcNMjUxMjEyMTYwMjM5WjAzMTEwLwYDVQQD EygxNGZiZWQ1ZDY4YWE1NDhmZTU3M2NkZGUxZjgxOWU5OTI4ODUzMThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Be3ym8rtG+xxL8iSLf/iRFZy6LA KdoCLIXeLUiPXL+Pli1lw6JhUgTOIUHEJOAdG+8wkNoy7uG2XvoqHX5lBtw1zLji uG6Fibh85JjYjZnRFRbwxhkegD3qhl0NbymdQ077Ow/LQfLyMLEZmsfuVfEGeEm4 nrWAqE0CMwUwQIOHFFRfGutbD8SQNqN1XhZYu1cwVNZwDIkU5UtP9GxnizF/vqd9 oE8RwWQMSwzjp04iC1TKyL/y46mzZ3OXGWLAnc52oiKKvgxC6v4xdXV5LMllxr/0 urFLA/E5XGNQhcB1M6qBIVkxDzO81mGXeo+/NvdIqhpLPe9QOGQG0PKj1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBT77V1oqlSP5XPN3h+BnpkohTGPMB8GA1UdIwQY MBaAFK4KWhs4YXzBYfYGE9mOF5tTYMBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQt YjI5ODEyYzNlNDY1LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8zMTk5MWEtYmRiOC00YjViLWFlNWQtYjI5ODEyYzNlNDY1 LzEvcmdwYUd6aGhmTUZoOWdZVDJZNFhtMU5nd0ZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlJdn+ll Xv6ANktnUsNNfKUzo5ydhXbrTMibFWDy/tdwiHlm8V5gOwil6hE8vEBuv9Sf7g2u x40LGvTx2jxEfBJzu7kJ7K1y8QwrMyVKr2JJtDEI95dawPduPQsRRO1j+8JPXkIg h/xsemZjfO5VmuxqA1GCKr87LnKDX2aM/9zRDYdHG7jrYc7xQAGOsZmczv0/b5ci OF3X3HIhjVjJlegg2wIX4PlHQeww6X/CrMtpsw7Kx3pwarDwSoABJ/PPRLGoQ/zP NnzPtXmHNYQZX0jeoS6VI5NNCrn7t7cffbYlyWeXneTRi45bCY94AodlCmJ4m37E OCrHWY1IZbFgtw== -----END CERTIFICATE-----Generated at Fri Dec 12 01:27:12 2025 by rpki-client