This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft File: 29f8UFSCh96up86SCZ5HoEpw1FE.mft (raw, json) Hash identifier: S5R0YMWLBv3tc0W1oHcPbA9C5fGnYm/d8rM+EldzF4U= Subject key identifier: B6:EC:90:F4:B4:3A:24:4B:83:70:0B:C0:02:69:E2:0C:A3:CE:6F:4F Authority key identifier: DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 Certificate issuer: /CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Certificate serial: 019B3D91176F43B53253FFA347F98CEC10A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft Manifest number: 178D Signing time: Sat 20 Dec 2025 21:01:17 +0000 Manifest this update: Sat 20 Dec 2025 21:01:17 +0000 Manifest next update: Sun 21 Dec 2025 21:01:17 +0000 Files and hashes: 1: 29f8UFSCh96up86SCZ5HoEpw1FE.crl (hash: D9d1/K1Q2MaP5Rgo44Z2LlZ9IB1g8eEHxcWLXlqmDco=) 2: 9jFcc2sIX-Fs3ktxs-58gEPmasY.roa (hash: HePH1DofBb+MqG0ob+GiLGVr062e3DxtUkrb0KPep7A=) 3: H91ljrtEOQ88LobyOBXsYKfsM_I.roa (hash: OrACEmPH7XE22MmlMeWAN/5nVKUIlnVGt10JM2JOUl8=) 4: fcd14E2UvKzJ6kaKcrYKQVlljT8.roa (hash: KoJteDfILqkEJ6UJs3cPi3xqWQVLa33IGp0XJE/3JLc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:91:17:6f:43:b5:32:53:ff:a3:47:f9:8c:ec:10:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7fc50548287deaea7ce92099e47a04a70d451 Validity Not Before: Dec 20 21:01:17 2025 GMT Not After : Dec 21 21:01:17 2025 GMT Subject: CN=b6ec90f4b43a244b83700bc00269e20ca3ce6f4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:29:18:4c:ac:7e:9a:13:e7:2f:ce:68:63:6f: 34:c3:66:d0:e1:b0:59:e5:fa:28:aa:8d:80:a8:85: 13:45:dd:18:93:4e:22:ff:55:a4:01:2e:fe:a0:d1: 86:66:3b:c6:2b:a2:64:3a:45:a9:05:16:c1:a9:73: 99:84:13:4a:e8:e1:cc:41:44:39:50:53:ac:64:48: 7a:17:19:8d:4a:07:68:5a:e2:52:6c:e2:50:b1:fd: cc:ce:a2:41:90:ed:4f:42:a2:5a:51:84:db:c2:e3: 6b:0d:b2:ea:fc:34:05:a6:a0:f1:56:6f:39:a7:c2: eb:98:6a:92:97:a5:62:cb:dc:94:dd:45:3a:85:1e: ba:66:b5:fc:db:8c:a2:9a:18:41:cc:8f:3a:51:9c: 6e:7e:48:3a:0d:25:31:32:5f:5b:53:d4:43:d9:6d: 3d:dd:98:58:77:01:97:1c:46:96:13:ad:45:d8:94: 07:32:14:9b:dc:2a:5b:7d:f4:d7:21:f8:fc:c7:69: a9:d0:94:58:d9:8d:c9:63:7f:da:d1:cd:5b:fc:ea: 15:ca:be:5b:2e:8a:97:6e:0e:f0:91:25:f3:27:0e: 1a:8a:c3:90:9f:4b:23:f5:22:51:29:42:5d:c4:40: 58:d5:ee:99:4f:b1:77:b8:e0:b0:0e:16:fd:f8:c5: 20:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:EC:90:F4:B4:3A:24:4B:83:70:0B:C0:02:69:E2:0C:A3:CE:6F:4F X509v3 Authority Key Identifier: keyid:DB:D7:FC:50:54:82:87:DE:AE:A7:CE:92:09:9E:47:A0:4A:70:D4:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29f8UFSCh96up86SCZ5HoEpw1FE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/606ea9-4834-4b63-9e0a-f25604c4be82/1/29f8UFSCh96up86SCZ5HoEpw1FE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6d:50:9a:e8:35:2c:e7:8e:6e:f9:46:3f:5a:d0:9f:78:20: c3:24:db:d1:97:f2:bf:59:b1:f2:c5:ca:f4:bf:a9:84:b9:32: 22:9c:d2:af:e0:75:b9:15:3b:83:d1:60:52:86:fc:e6:f7:93: a1:85:49:17:d8:4c:38:94:88:ed:26:64:46:d7:c5:94:34:cd: 9c:fc:f7:bd:20:79:b7:60:66:10:e7:c3:d9:8b:3c:a3:92:62: ba:b5:f7:be:5a:d7:fe:03:4f:44:33:35:1d:71:1a:67:ce:00: 87:e0:30:93:b0:30:89:1b:81:47:51:b5:91:09:c3:f6:30:7d: 1e:e0:86:28:98:25:d8:d1:56:ea:27:64:75:0a:b6:bc:32:32: 9f:f6:a4:0c:f0:52:dd:db:af:a1:85:7a:57:6b:2f:77:80:f9: 6c:47:ce:d9:83:22:95:6e:05:05:4f:b5:bc:ab:3b:4f:c5:31: 7e:fe:e8:9a:3f:07:71:26:70:73:5d:48:3e:b3:c9:a0:9c:6a: 9e:cb:aa:09:4d:41:04:86:91:2b:c8:e5:00:36:7f:35:b7:77: f6:d5:98:c1:f0:b8:8f:9f:49:ff:02:ca:1c:79:09:88:fe:bb: 93:aa:7a:c5:1d:a6:30:d0:39:5b:d0:46:fc:c2:c8:2e:dd:54: 34:39:b2:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kRdvQ7UyU/+jR/mM7BCmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdmYzUwNTQ4Mjg3ZGVhZWE3Y2U5MjA5OWU0N2EwNGE3 MGQ0NTEwHhcNMjUxMjIwMjEwMTE3WhcNMjUxMjIxMjEwMTE3WjAzMTEwLwYDVQQD EyhiNmVjOTBmNGI0M2EyNDRiODM3MDBiYzAwMjY5ZTIwY2EzY2U2ZjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CkYTKx+mhPnL85oY280w2bQ4bBZ 5fooqo2AqIUTRd0Yk04i/1WkAS7+oNGGZjvGK6JkOkWpBRbBqXOZhBNK6OHMQUQ5 UFOsZEh6FxmNSgdoWuJSbOJQsf3MzqJBkO1PQqJaUYTbwuNrDbLq/DQFpqDxVm85 p8LrmGqSl6Viy9yU3UU6hR66ZrX824yimhhBzI86UZxufkg6DSUxMl9bU9RD2W09 3ZhYdwGXHEaWE61F2JQHMhSb3CpbffTXIfj8x2mp0JRY2Y3JY3/a0c1b/OoVyr5b LoqXbg7wkSXzJw4aisOQn0sj9SJRKUJdxEBY1e6ZT7F3uOCwDhb9+MUg4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLbskPS0OiRLg3ALwAJp4gyjzm9PMB8GA1UdIwQY MBaAFNvX/FBUgoferqfOkgmeR6BKcNRRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEt ZjI1NjA0YzRiZTgyLzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS82MDZlYTktNDgzNC00YjYzLTllMGEtZjI1NjA0YzRiZTgy LzEvMjlmOFVGU0NoOTZ1cDg2U0NaNUhvRXB3MUZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm1Qmug1 LOeObvlGP1rQn3ggwyTb0Zfyv1mx8sXK9L+phLkyIpzSr+B1uRU7g9FgUob85veT oYVJF9hMOJSI7SZkRtfFlDTNnPz3vSB5t2BmEOfD2Ys8o5JiurX3vlrX/gNPRDM1 HXEaZ84Ah+Awk7AwiRuBR1G1kQnD9jB9HuCGKJgl2NFW6idkdQq2vDIyn/akDPBS 3duvoYV6V2svd4D5bEfO2YMilW4FBU+1vKs7T8Uxfv7omj8HcSZwc11IPrPJoJxq nsuqCU1BBIaRK8jlADZ/Nbd39tWYwfC4j59J/wLKHHkJiP67k6p6xR2mMNA5W9BG /MLILt1UNDmy/A== -----END CERTIFICATE-----Generated at Sun Dec 21 06:29:19 2025 by rpki-client