This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft File: aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json) Hash identifier: TygDL3WVGkIMKPHzl/hk2vh5BnuGOIXFvaz63TJLLI8= Subject key identifier: C9:4E:B1:BF:92:B4:F6:94:43:D6:F7:72:4C:05:82:0F:C3:B3:59:FB Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B3CB4B55F4D54DEE25A367ECF0B544E17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 17:00:34 +0000 Manifest this update: Sat 20 Dec 2025 17:00:34 +0000 Manifest next update: Sun 21 Dec 2025 17:00:34 +0000 Files and hashes: 1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: vE+NDRoBPrOlG2IR00xsoo6yJKtUeU6RUMz8JUMZSRU=) 2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=) 3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=) 4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=) 5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b4:b5:5f:4d:54:de:e2:5a:36:7e:cf:0b:54:4e:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Dec 20 17:00:34 2025 GMT Not After : Dec 21 17:00:34 2025 GMT Subject: CN=c94eb1bf92b4f69443d6f7724c05820fc3b359fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:cc:2e:1b:00:c1:9c:47:1b:ca:38:d9:36:95: 97:34:fc:0c:ea:b8:52:ea:68:e2:03:dc:b5:78:12: e8:33:ab:51:8f:17:a8:06:07:ba:8d:e9:f6:5c:33: 64:67:0c:2a:ec:84:18:83:28:d2:3e:fa:24:2a:c3: fb:d4:a8:28:86:ab:c6:af:e7:b6:58:2a:e3:71:91: e9:55:28:e1:fd:8e:6a:57:81:ca:1e:71:ca:17:76: 71:36:e2:3b:68:f5:02:7a:a1:f6:2d:7f:e1:f1:90: c2:6e:9e:ea:d8:a9:4b:cd:dc:ad:24:ff:94:b6:3b: 99:ce:14:13:dd:15:cc:36:81:98:2f:8b:30:b4:38: d0:c8:ef:5d:07:25:fb:d7:a8:84:00:67:30:de:56: 84:cc:2b:d1:52:39:eb:1b:75:c8:fc:99:ca:1d:b0: d8:d6:14:4e:d1:66:61:a4:09:a0:a9:49:4a:86:fb: 76:8d:0f:1c:da:1c:b9:f8:44:af:45:13:e9:27:f0: b8:ee:11:d7:29:f2:6d:ef:6f:fc:e5:90:fd:af:fe: 77:e7:ab:ce:0b:08:42:9c:89:f5:25:36:58:dc:b7: 34:0e:e8:86:d7:f6:78:6a:8f:e0:5c:bf:80:51:38: 83:33:e9:72:c8:8d:3d:2b:d0:fd:9c:02:cc:3e:fe: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4E:B1:BF:92:B4:F6:94:43:D6:F7:72:4C:05:82:0F:C3:B3:59:FB X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:26:8b:61:15:db:9c:68:00:f0:27:8a:75:42:0c:87:00:b0: 53:e3:c9:54:77:46:36:06:f6:79:aa:0d:f2:e3:b9:bf:1a:cf: 1a:3f:4d:9f:03:b4:cf:15:e9:08:49:76:2a:db:89:d0:0f:e7: 9c:dc:63:25:c3:b5:b5:e6:bd:2e:77:de:7b:96:5b:82:03:7d: d0:0a:12:52:d0:e0:8e:7a:a0:a4:59:a5:03:7f:9e:e3:d3:e7: 89:ca:f6:d3:c8:65:a6:f0:e2:bc:29:0d:9f:fe:c1:e5:03:1e: 6b:18:d3:72:a3:ed:1b:b5:12:b3:99:25:2e:48:e6:2c:f5:9a: 9f:a9:75:91:42:6e:73:65:06:6f:ec:00:87:b0:9b:89:b4:bc: d4:cc:2f:73:2d:88:54:b8:8c:0e:d1:97:ae:b1:73:4f:e1:a7: da:f1:ed:e2:9d:35:d7:55:b3:b0:fd:23:ff:8b:1b:c0:f8:52: 08:56:d1:68:7a:5f:f7:42:c1:43:cc:7c:e0:c3:61:fc:c8:42: bd:9e:24:4b:87:dd:01:f2:c7:49:ee:fa:aa:a4:3f:e0:d9:33: bf:0d:a9:d9:1b:bb:0c:9b:ca:52:7d:35:fd:10:a9:38:4d:df: 18:f5:46:05:83:81:1e:1f:51:fb:d7:ea:f8:39:c7:54:4d:3c: 2d:3e:f2:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tLVfTVTe4lo2fs8LVE4XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjUxMjIwMTcwMDM0WhcNMjUxMjIxMTcwMDM0WjAzMTEwLwYDVQQD EyhjOTRlYjFiZjkyYjRmNjk0NDNkNmY3NzI0YzA1ODIwZmMzYjM1OWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApswuGwDBnEcbyjjZNpWXNPwM6rhS 6mjiA9y1eBLoM6tRjxeoBge6jen2XDNkZwwq7IQYgyjSPvokKsP71KgohqvGr+e2 WCrjcZHpVSjh/Y5qV4HKHnHKF3ZxNuI7aPUCeqH2LX/h8ZDCbp7q2KlLzdytJP+U tjuZzhQT3RXMNoGYL4swtDjQyO9dByX716iEAGcw3laEzCvRUjnrG3XI/JnKHbDY 1hRO0WZhpAmgqUlKhvt2jQ8c2hy5+ESvRRPpJ/C47hHXKfJt72/85ZD9r/5356vO CwhCnIn1JTZY3Lc0DuiG1/Z4ao/gXL+AUTiDM+lyyI09K9D9nALMPv5zfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMlOsb+StPaUQ9b3ckwFgg/Ds1n7MB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSaLYRXb nGgA8CeKdUIMhwCwU+PJVHdGNgb2eaoN8uO5vxrPGj9NnwO0zxXpCEl2KtuJ0A/n nNxjJcO1tea9Lnfee5ZbggN90AoSUtDgjnqgpFmlA3+e49Pnicr208hlpvDivCkN n/7B5QMeaxjTcqPtG7USs5klLkjmLPWan6l1kUJuc2UGb+wAh7CbibS81Mwvcy2I VLiMDtGXrrFzT+Gn2vHt4p0111WzsP0j/4sbwPhSCFbRaHpf90LBQ8x84MNh/MhC vZ4kS4fdAfLHSe76qqQ/4Nkzvw2p2Ru7DJvKUn01/RCpOE3fGPVGBYOBHh9R+9fq +DnHVE08LT7yyw== -----END CERTIFICATE-----Generated at Sat Dec 20 23:09:26 2025 by rpki-client