This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft File: 42tMWObP2fp-ciKlizYm23uYUyQ.mft (raw, json) Hash identifier: uAgrmBS7S6CLOAg/ihM7vx0IVp2nyBiUxUCHDxMsN7s= Subject key identifier: 1D:1B:9A:D0:40:EC:4A:E5:7E:68:E4:22:76:52:94:62:4C:1C:AD:5B Authority key identifier: E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 Certificate issuer: /CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Certificate serial: 019B38D8637A825723102409B9EFC48CA74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft Manifest number: 178B Signing time: Fri 19 Dec 2025 23:01:03 +0000 Manifest this update: Fri 19 Dec 2025 23:01:03 +0000 Manifest next update: Sat 20 Dec 2025 23:01:03 +0000 Files and hashes: 1: 42tMWObP2fp-ciKlizYm23uYUyQ.crl (hash: MOhklN4VgP+rOpf1yMM6QkWREbsRelsbZe9JWJySGvU=) 2: OS--Lk_-r0Q1zq4QqDjYyZsHuMY.roa (hash: MVTlexALEq+OtJ89dtjZODG5hLFqDXsO9MxPnvJn09w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 23:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:d8:63:7a:82:57:23:10:24:09:b9:ef:c4:8c:a7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e36b4c58e6cfd9fa7e7222a58b3626db7b985324 Validity Not Before: Dec 19 23:01:03 2025 GMT Not After : Dec 20 23:01:03 2025 GMT Subject: CN=1d1b9ad040ec4ae57e68e422765294624c1cad5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:79:8f:58:4a:80:5e:7a:cb:2c:f3:f3:fc:cd: d0:1b:1c:38:a1:04:73:3d:ce:46:0c:74:8b:d2:55: 28:4f:84:80:52:b1:0e:39:1d:35:56:d9:0a:e0:1e: 18:26:0d:06:77:c9:03:4e:b2:e6:9f:a8:be:87:fe: 7c:4a:9c:ea:b6:37:2a:80:a4:67:c2:00:8a:c4:d6: fb:b3:0b:7b:7c:45:2c:1c:04:b0:49:d9:2b:2b:9f: b3:fa:29:65:76:98:97:2e:44:ac:6d:4a:a5:bd:a4: 9f:91:ef:21:dd:26:f7:c2:37:fd:ae:69:99:d1:a5: c8:31:c0:43:e9:2b:54:f9:47:6a:43:9e:6d:49:d1: 1d:1c:96:e8:b8:75:df:e6:e0:54:80:76:30:1d:14: 16:0e:64:fb:e7:23:04:ff:57:f5:72:65:26:2a:ae: f2:26:92:a3:89:60:7d:a8:fb:56:d5:25:44:69:06: 7e:9d:2d:48:c9:c4:5f:5b:62:30:4b:db:64:e8:24: 2d:a7:01:5b:33:4b:88:10:71:a7:8b:61:f7:48:a6: 7d:86:df:c7:f9:26:5c:86:cd:c2:4a:fb:24:ba:91: bb:a0:49:2d:91:cd:b1:dc:1c:e6:34:8b:b0:f1:c3: aa:68:10:81:10:a0:9c:3b:a9:14:33:1a:f7:84:11: 7c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1B:9A:D0:40:EC:4A:E5:7E:68:E4:22:76:52:94:62:4C:1C:AD:5B X509v3 Authority Key Identifier: keyid:E3:6B:4C:58:E6:CF:D9:FA:7E:72:22:A5:8B:36:26:DB:7B:98:53:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/42tMWObP2fp-ciKlizYm23uYUyQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5d7df8-b464-4ca7-ba6c-800c99851368/1/42tMWObP2fp-ciKlizYm23uYUyQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bf:50:5e:1c:0e:42:05:4c:fb:f0:4e:f6:25:8f:9c:aa:74: 46:e7:08:50:60:32:29:a9:6a:d0:66:ee:de:b8:c8:b4:81:10: 25:08:8b:78:03:be:08:c8:21:d7:3c:28:bf:87:ed:8a:dd:8f: 04:67:1a:44:61:30:eb:72:11:09:1d:e3:eb:36:77:4a:a7:8b: 0c:c8:57:bc:7c:1e:90:55:20:9f:ed:9f:81:06:17:e7:cf:2d: 82:d5:5e:a2:e5:cc:6e:47:40:e3:79:df:e2:32:42:0c:a5:00: 34:22:9e:80:23:c4:48:7a:87:40:a0:50:bf:fa:d5:ce:94:32: af:f2:6e:94:6d:52:88:c3:fc:a3:4d:24:6f:7d:74:17:50:7f: 46:25:9c:7e:74:7a:d6:f9:4b:ee:90:0e:36:8e:4b:7e:10:d0: 23:55:fb:2f:dc:78:1d:36:fd:cc:42:a6:a5:b4:ee:e6:c8:aa: 00:c3:18:9e:2c:85:ca:b7:2b:87:62:22:8f:7f:b9:73:aa:88: fd:fd:a6:bd:1b:f2:83:cb:8f:ff:de:c9:c2:76:2f:d5:7f:9e: b3:a7:41:e1:80:58:7c:6e:d4:bb:c7:54:47:cc:75:40:70:88: e9:b0:e5:da:a6:ce:4d:bf:28:24:8c:06:4a:55:6b:e6:39:3d: 51:57:e6:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs42GN6glcjECQJue/EjKdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzNmI0YzU4ZTZjZmQ5ZmE3ZTcyMjJhNThiMzYyNmRiN2I5 ODUzMjQwHhcNMjUxMjE5MjMwMTAzWhcNMjUxMjIwMjMwMTAzWjAzMTEwLwYDVQQD EygxZDFiOWFkMDQwZWM0YWU1N2U2OGU0MjI3NjUyOTQ2MjRjMWNhZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXmPWEqAXnrLLPPz/M3QGxw4oQRz Pc5GDHSL0lUoT4SAUrEOOR01VtkK4B4YJg0Gd8kDTrLmn6i+h/58SpzqtjcqgKRn wgCKxNb7swt7fEUsHASwSdkrK5+z+illdpiXLkSsbUqlvaSfke8h3Sb3wjf9rmmZ 0aXIMcBD6StU+UdqQ55tSdEdHJbouHXf5uBUgHYwHRQWDmT75yME/1f1cmUmKq7y JpKjiWB9qPtW1SVEaQZ+nS1IycRfW2IwS9tk6CQtpwFbM0uIEHGni2H3SKZ9ht/H +SZchs3CSvskupG7oEktkc2x3BzmNIuw8cOqaBCBEKCcO6kUMxr3hBF8RQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0bmtBA7ErlfmjkInZSlGJMHK1bMB8GA1UdIwQY MBaAFONrTFjmz9n6fnIipYs2Jtt7mFMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMt ODAwYzk5ODUxMzY4LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81ZDdkZjgtYjQ2NC00Y2E3LWJhNmMtODAwYzk5ODUxMzY4 LzEvNDJ0TVdPYlAyZnAtY2lLbGl6WW0yM3VZVXlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN79QXhwO QgVM+/BO9iWPnKp0RucIUGAyKalq0Gbu3rjItIEQJQiLeAO+CMgh1zwov4ftit2P BGcaRGEw63IRCR3j6zZ3SqeLDMhXvHwekFUgn+2fgQYX588tgtVeouXMbkdA43nf 4jJCDKUANCKegCPESHqHQKBQv/rVzpQyr/JulG1SiMP8o00kb310F1B/RiWcfnR6 1vlL7pAONo5LfhDQI1X7L9x4HTb9zEKmpbTu5siqAMMYniyFyrcrh2Iij3+5c6qI /f2mvRvyg8uP/97JwnYv1X+es6dB4YBYfG7Uu8dUR8x1QHCI6bDl2qbOTb8oJIwG SlVr5jk9UVfmQA== -----END CERTIFICATE-----Generated at Sat Dec 20 07:36:07 2025 by rpki-client