This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json) Hash identifier: Z/9kfi/cF2lL76K0wdGXI1wyP+X8ahQPA5xYo8EovVk= Subject key identifier: D0:C8:E5:DA:C2:33:AF:54:21:4C:F3:29:49:DF:E7:D0:EF:97:E8:F5 Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629 Certificate serial: 019B38D863DCBADF18D64F11584566CCFD46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: QQyuygKlW1lheMUCgRfNgpAjWnY.roa (hash: sGKiznK/9zahMlRBx+pheUHNlRkFSMU1Tbssjd9hPaU=) 2: VsYWJvV29iqYwBRne5YKEb7eIlA.roa (hash: bC7uDhhNEikOG1uya0DM29sggq/yJxcTAuRZ0CEZezI=) 3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: b6nJFSCHpL5EwKiwFOAFaz66ayJ/Esy+Fh3O0xxC0MA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:63:dc:ba:df:18:d6:4f:11:58:45:66:cc:fd:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629 Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=d0c8e5dac233af54214cf32949dfe7d0ef97e8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:59:5c:3c:b1:1b:93:5a:17:20:2b:7a:9a:64: 43:b7:4b:fc:fe:3d:c4:a7:d3:b9:67:10:fa:ff:5b: 47:a2:22:5e:2b:d6:e7:91:ae:49:51:35:27:b0:88: 46:5f:5f:28:27:c8:25:57:ca:2f:b2:ae:42:0e:b4: ed:76:17:a3:a2:c9:24:a8:f8:08:f8:1c:6a:cc:52: 08:03:3c:80:93:ca:e7:9c:d4:34:8d:ae:58:b5:28: 26:e0:aa:c7:04:81:8b:f8:a1:33:2e:6a:89:ec:3d: c0:0d:bb:71:a7:d6:46:9d:0c:35:b9:f7:11:9a:80: 76:0a:a5:22:48:06:4f:ad:f8:02:21:1e:93:38:e7: fe:34:ce:53:fa:e5:aa:87:ba:a9:3c:6e:af:20:c1: 62:59:2d:be:ee:ed:7d:06:79:96:39:0c:9e:a1:a0: 08:cc:47:d1:ab:b4:69:f2:c5:00:63:d3:fb:72:55: 2f:a9:8f:f8:32:64:eb:16:6b:81:fa:69:e7:cc:a3: c1:87:2d:e8:e4:9b:ff:f5:5c:b5:c8:25:8d:13:93: 50:9a:a3:4f:bd:f7:47:3a:41:fa:a3:8c:cc:d6:ae: c9:98:f7:d7:d3:7d:d5:e8:df:17:f0:3b:bd:31:17: 2e:52:40:df:4b:71:24:6c:4d:30:c8:5a:c4:bc:bc: 88:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C8:E5:DA:C2:33:AF:54:21:4C:F3:29:49:DF:E7:D0:EF:97:E8:F5 X509v3 Authority Key Identifier: keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:7d:9b:05:00:91:da:b1:62:08:db:9a:76:68:31:c7:c7:f8: 2e:4d:8d:f3:03:ac:71:e4:70:9a:10:59:a5:b4:48:80:0a:8f: 4f:37:7b:2d:5e:17:69:0b:43:59:fc:07:66:30:a8:ca:ae:53: e2:38:cd:9f:b8:8f:85:0f:7e:ae:9b:b1:99:15:93:df:fd:bd: 28:73:eb:6b:1a:57:1b:92:c7:11:91:0a:5b:09:6a:d5:e1:bc: 2c:9a:b9:36:f6:51:37:a8:85:a2:09:69:70:62:6c:84:67:a3: 69:a6:a0:a9:87:6e:07:b1:67:14:a5:09:aa:5b:cc:ce:76:30: 40:c7:82:1e:73:52:df:1c:43:1a:77:71:bf:cf:1f:38:74:f6: fa:44:1b:58:3b:cd:5b:a1:76:37:56:ba:62:d9:32:61:38:2b: b7:53:a2:6b:e8:2f:7e:ab:00:22:23:98:19:74:12:3f:bd:0b: 73:0c:df:d5:5a:08:63:a3:68:70:82:10:d3:fe:9f:55:7f:49: 6b:c8:94:b6:09:34:60:e1:58:53:39:c2:92:e5:cc:90:e6:cf: 3b:6a:97:91:f7:e9:8d:c3:d7:55:f5:7b:bf:2a:50:74:ba:f1: 65:89:9a:2c:a5:b7:a7:16:87:fa:c6:f5:fa:4f:99:fe:92:bf: 65:9e:ea:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GPcut8Y1k8RWEVmzP1GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzNWM0Mjg1N2UzMDJmZWIxNDAxNzMwMWU0M2MzOWZlNDVl N2Y2MjkwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD EyhkMGM4ZTVkYWMyMzNhZjU0MjE0Y2YzMjk0OWRmZTdkMGVmOTdlOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VlcPLEbk1oXICt6mmRDt0v8/j3E p9O5ZxD6/1tHoiJeK9bnka5JUTUnsIhGX18oJ8glV8ovsq5CDrTtdhejoskkqPgI +BxqzFIIAzyAk8rnnNQ0ja5YtSgm4KrHBIGL+KEzLmqJ7D3ADbtxp9ZGnQw1ufcR moB2CqUiSAZPrfgCIR6TOOf+NM5T+uWqh7qpPG6vIMFiWS2+7u19BnmWOQyeoaAI zEfRq7Rp8sUAY9P7clUvqY/4MmTrFmuB+mnnzKPBhy3o5Jv/9Vy1yCWNE5NQmqNP vfdHOkH6o4zM1q7JmPfX033V6N8X8Du9MRcuUkDfS3EkbE0wyFrEvLyIGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNDI5drCM69UIUzzKUnf59Dvl+j1MB8GA1UdIwQY MBaAFJNcQoV+MC/rFAFzAeQ8Of5F5/YpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQt MWJmZDEwYTg4NDVhLzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS81NWU1MjktYjgzOS00NDRmLTg3MmQtMWJmZDEwYTg4NDVh LzEvazF4Q2hYNHdMLXNVQVhNQjVEdzVfa1huOWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOX2bBQCR 2rFiCNuadmgxx8f4Lk2N8wOsceRwmhBZpbRIgAqPTzd7LV4XaQtDWfwHZjCoyq5T 4jjNn7iPhQ9+rpuxmRWT3/29KHPraxpXG5LHEZEKWwlq1eG8LJq5NvZRN6iFoglp cGJshGejaaagqYduB7FnFKUJqlvMznYwQMeCHnNS3xxDGndxv88fOHT2+kQbWDvN W6F2N1a6YtkyYTgrt1Oia+gvfqsAIiOYGXQSP70Lcwzf1VoIY6NocIIQ0/6fVX9J a8iUtgk0YOFYUznCkuXMkObPO2qXkffpjcPXVfV7vypQdLrxZYmaLKW3pxaH+sb1 +k+Z/pK/ZZ7qFg== -----END CERTIFICATE-----Generated at Sat Dec 20 02:59:41 2025 by rpki-client