This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json) Hash identifier: 0xeH5swh7je14wWK8S+YpEJ2runmMtykPEEhoMbMnFQ= Subject key identifier: A6:85:62:AD:61:7D:88:2D:B3:F1:23:CF:1F:C2:31:66:BA:5A:E7:1C Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011 Certificate serial: 019B217499D343C82412130B45977F17ED01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft Manifest number: 177A Signing time: Mon 15 Dec 2025 10:00:48 +0000 Manifest this update: Mon 15 Dec 2025 10:00:48 +0000 Manifest next update: Tue 16 Dec 2025 10:00:48 +0000 Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=) 2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: qU1bp2HPqFtGsVtDpkol/XBeU/j/+k5nZ24gE5Tiyjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:74:99:d3:43:c8:24:12:13:0b:45:97:7f:17:ed:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011 Validity Not Before: Dec 15 10:00:48 2025 GMT Not After : Dec 16 10:00:48 2025 GMT Subject: CN=a68562ad617d882db3f123cf1fc23166ba5ae71c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:17:dc:ff:12:2a:d6:97:bc:93:4b:24:d7:61: 70:81:93:ec:ee:bc:9b:62:b7:b9:52:71:82:88:b5: c4:a2:c1:85:8c:4f:44:30:2a:e2:cd:ae:2a:ad:c2: cf:c7:ea:b8:8b:45:5b:c7:d4:11:c8:6d:38:f2:d7: 0b:92:02:2a:19:a1:8a:f3:ac:e7:b3:e8:74:6b:0c: cd:42:40:db:77:73:43:5e:d7:de:c3:df:aa:20:44: 4e:73:51:6c:ad:cd:7b:eb:aa:cb:b1:ff:ae:21:a0: dc:12:2c:4e:3b:10:66:71:33:8f:4d:06:34:e5:90: 55:de:e5:10:69:5e:68:d6:0f:b4:9f:d0:2f:d6:27: 93:9d:b5:9c:01:12:6b:9e:4f:6d:35:b5:bd:f9:06: 52:fd:ce:a5:c5:0b:98:4b:82:35:2a:09:16:64:e5: 98:cb:90:63:23:d1:d9:f1:66:95:49:8d:56:99:1f: 25:ba:33:01:0c:43:5e:02:dd:d9:48:0b:fe:b1:86: a8:d4:e9:7d:b9:69:e6:c2:c0:69:a7:54:f3:02:76: 82:96:71:5c:07:79:48:cd:86:cc:50:c7:86:75:d6: b3:ba:dd:7c:4f:4b:af:23:6e:8f:4b:47:75:f2:de: 7c:c3:a4:4a:85:67:9f:d2:a1:98:e9:65:5f:40:82: a6:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:62:AD:61:7D:88:2D:B3:F1:23:CF:1F:C2:31:66:BA:5A:E7:1C X509v3 Authority Key Identifier: keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:f8:4f:55:38:77:0d:3f:24:86:76:e4:c3:e6:ef:66:be:e5: 02:7b:1b:57:9e:f5:c0:c2:94:45:2e:ee:13:f2:fc:f8:88:2e: 28:8c:c5:ac:64:60:31:7c:cd:bf:0a:32:d9:20:93:1d:f3:5d: 3e:f0:c5:80:bd:77:77:b4:9e:fb:ab:15:c2:e8:17:43:a7:33: 4f:5a:6c:aa:2c:88:38:6d:1d:61:02:78:93:9b:d3:83:3a:75: 8d:16:60:07:c5:b7:38:c1:55:c0:84:95:71:8b:43:bd:09:4c: ff:af:66:78:77:a3:da:91:85:3c:3f:db:92:bb:38:0e:ad:04: 91:f5:16:2a:70:22:17:87:44:c0:a0:55:a2:8b:ce:3a:30:a6: 10:9e:cb:cb:ff:ed:74:ec:cb:fe:8e:e6:13:88:86:d2:74:25: 5c:00:16:40:53:fc:ec:12:ba:6c:89:bf:de:95:e2:47:ec:2f: 3b:2b:ac:ac:d2:f7:74:ba:27:86:ce:6f:97:5b:3b:8c:98:48: a5:67:47:96:d5:91:f2:29:44:f6:81:db:c1:03:fe:cd:8a:10: 27:66:cb:b8:30:74:49:40:b2:42:f3:88:be:af:74:31:53:87: 10:15:f3:c3:dd:9b:35:92:5f:0d:2d:24:1e:26:13:bd:d1:26: de:d8:b7:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshdJnTQ8gkEhMLRZd/F+0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2 MGIwMTEwHhcNMjUxMjE1MTAwMDQ4WhcNMjUxMjE2MTAwMDQ4WjAzMTEwLwYDVQQD EyhhNjg1NjJhZDYxN2Q4ODJkYjNmMTIzY2YxZmMyMzE2NmJhNWFlNzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshfc/xIq1pe8k0sk12FwgZPs7ryb Yre5UnGCiLXEosGFjE9EMCriza4qrcLPx+q4i0Vbx9QRyG048tcLkgIqGaGK86zn s+h0awzNQkDbd3NDXtfew9+qIEROc1Fsrc1766rLsf+uIaDcEixOOxBmcTOPTQY0 5ZBV3uUQaV5o1g+0n9Av1ieTnbWcARJrnk9tNbW9+QZS/c6lxQuYS4I1KgkWZOWY y5BjI9HZ8WaVSY1WmR8lujMBDENeAt3ZSAv+sYao1Ol9uWnmwsBpp1TzAnaClnFc B3lIzYbMUMeGddazut18T0uvI26PS0d18t58w6RKhWef0qGY6WVfQIKmRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaFYq1hfYgts/Ejzx/CMWa6WuccMB8GA1UdIwQY MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt OWYzMDNlYTY3ZTY1LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1 LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY/hPVTh3 DT8khnbkw+bvZr7lAnsbV571wMKURS7uE/L8+IguKIzFrGRgMXzNvwoy2SCTHfNd PvDFgL13d7Se+6sVwugXQ6czT1psqiyIOG0dYQJ4k5vTgzp1jRZgB8W3OMFVwISV cYtDvQlM/69meHej2pGFPD/bkrs4Dq0EkfUWKnAiF4dEwKBVoovOOjCmEJ7Ly//t dOzL/o7mE4iG0nQlXAAWQFP87BK6bIm/3pXiR+wvOyusrNL3dLonhs5vl1s7jJhI pWdHltWR8ilE9oHbwQP+zYoQJ2bLuDB0SUCyQvOIvq90MVOHEBXzw92bNZJfDS0k HiYTvdEm3ti3Mg== -----END CERTIFICATE-----Generated at Mon Dec 15 14:45:11 2025 by rpki-client