This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft File: c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft (raw, json) Hash identifier: bgQ7wKslV94JFRJETY5rFpJI4zj5rGr7jIFNzgGYpek= Subject key identifier: 8F:B6:74:AB:1F:53:08:60:3B:DE:07:FE:48:AA:C8:4C:8B:B2:0F:59 Authority key identifier: 73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6 Certificate issuer: /CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6 Certificate serial: 019B1125F2D3E202BBFC4E444B38F216028A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft Manifest number: 177A Signing time: Fri 12 Dec 2025 06:00:58 +0000 Manifest this update: Fri 12 Dec 2025 06:00:58 +0000 Manifest next update: Sat 13 Dec 2025 06:00:58 +0000 Files and hashes: 1: 0PiYBdxARRXjKJ5FesVWJAu_FMA.roa (hash: w4vAM6MoKtVTj5z9YUnQQ55u8WtiSlBeHs3CzkimFHA=) 2: DKpd0FWoSa9JOhnTSUeOAHEojFQ.roa (hash: pJjsYkDAabv/EkTWBVq7tQJ2cKhCWbGhb3faDIO/OsQ=) 3: GqOUJDMk-IFQdrsD-fU9eu4Qyek.roa (hash: pmdKsVvhyhUrb6RefnEOlCVulb4+abNUam2FCZO1InY=) 4: a-p1UhUt4t3M5odJCGB7R5m1rzM.roa (hash: 2U39CobRw9KssePwQXfRPFLNg8MC7aWq6D0bgHVvK7A=) 5: c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl (hash: gCr2uS5KQLlB8O68RkpgZP1pND4L/L3plyAVQxppD6Y=) 6: f0HMDLVx5t59P591PrAxrNnUs2c.roa (hash: /wxFlOgstgeKK54T7FynNE0uD4UjWWlnpZIecJhWOqM=) 7: h4W-VjJcy1QFeMUrhU0dF3Ixqa0.roa (hash: 5B5X7otDiidFA+PB/Jg+nfAWrr9IuoZCHyarTdrsmt0=) 8: jdGQJIZnkRjBDTTHnu0krS57iP8.roa (hash: e+2axTWyygbixhenSw9GiW7DCvps0Y82zf10NziEjRo=) 9: xyxr3pfItv9o4W3QbYDO6voIQ0Q.roa (hash: 8cnzmry/1ExM44UYvG1JFsqTRR1vf8KTHcvSzmwD5MY=) 10: yDomHUFVSb_vaV7A7wWb5nAhjlc.roa (hash: yYYELV3m9YlCfoig7ujzEpQib6RUtY2OkBAFEppcwPU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:25:f2:d3:e2:02:bb:fc:4e:44:4b:38:f2:16:02:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73f986c7705bd808c1b02ebd754fbfa91807e9b6 Validity Not Before: Dec 12 06:00:58 2025 GMT Not After : Dec 13 06:00:58 2025 GMT Subject: CN=8fb674ab1f5308603bde07fe48aac84c8bb20f59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f2:88:30:d0:82:d4:29:d7:66:fb:54:0f:23: 36:76:94:c1:8e:4f:18:e1:fa:48:cc:4d:37:3b:11: cb:ae:01:ec:ff:92:e5:7d:85:da:86:5c:da:c9:70: 49:ac:f8:c5:4c:a3:a5:1a:b3:7a:dd:64:ad:0d:02: 51:36:51:3a:44:66:65:39:26:32:e6:d6:18:40:94: 14:da:ad:3b:98:0e:ca:b2:24:4c:fc:58:cb:73:a7: cf:ab:23:b6:3f:c7:ac:93:4f:8c:3c:51:bb:a3:d7: 50:a2:3b:ba:ea:a1:d4:98:35:99:46:f9:11:ef:e8: df:9a:41:13:c7:d2:c9:40:cd:44:ab:0c:f6:fc:e7: a4:5d:74:af:eb:04:40:f8:41:24:fe:74:a9:e1:5e: 70:cf:84:ff:40:4a:b6:3f:ae:83:55:a7:17:c1:ed: d0:9a:39:e2:f4:57:d9:2c:50:ce:c8:4f:37:d6:ed: 7b:d7:f3:df:9f:b0:c0:3b:8a:4f:3f:54:8a:7f:73: e4:22:d6:00:81:9f:73:67:a2:f9:f8:97:3b:40:cd: 7a:86:3e:ef:cc:a2:fb:9f:fe:28:3c:d3:17:b1:7b: bf:a6:80:98:ae:dd:a9:e0:8a:5d:dd:05:cd:57:a8: b0:ee:48:51:c0:b0:e0:30:65:d6:5c:9a:76:f9:5c: 32:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:74:AB:1F:53:08:60:3B:DE:07:FE:48:AA:C8:4C:8B:B2:0F:59 X509v3 Authority Key Identifier: keyid:73:F9:86:C7:70:5B:D8:08:C1:B0:2E:BD:75:4F:BF:A9:18:07:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_mGx3Bb2AjBsC69dU-_qRgH6bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/db1aca-2659-42a3-a631-9a1295f02f2e/1/c_mGx3Bb2AjBsC69dU-_qRgH6bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:70:03:cc:db:a5:74:26:55:10:a4:df:86:95:7c:f6:76:f7: 6d:6e:08:49:71:1d:5b:2b:8e:d7:50:fa:41:a7:cc:61:62:a7: ba:76:4f:38:de:7e:8e:68:ba:bd:a6:d8:b0:e0:2f:94:c5:83: 6f:58:5b:f3:32:05:66:fb:55:db:3f:8a:e2:e5:07:1a:c7:ee: ce:88:3f:04:4c:0d:cb:1c:70:6f:60:fe:72:45:14:92:14:a2: 00:ae:23:33:8d:a9:8f:7f:6d:31:98:9e:ec:74:5c:ed:81:9b: 8a:5d:44:60:e7:64:b9:35:19:63:21:99:38:d6:5b:a1:af:9b: d8:9a:b7:f6:59:72:a9:fb:11:a4:27:ff:6a:4e:3c:29:12:bb: f4:25:68:fa:f8:f8:5b:6f:1c:5e:b9:b7:76:99:49:d1:4b:ef: b1:56:1c:0b:7f:75:78:29:0c:ca:8e:4c:dd:70:b6:79:96:bf: 36:f2:3b:a9:48:bf:3a:bf:22:bd:b9:64:7d:60:15:b4:ba:90: 2b:63:84:a5:2f:d9:47:eb:56:f8:f9:24:b9:99:c3:a9:dc:a2: 50:69:be:26:60:d0:7b:6e:b8:fb:e6:ef:3e:1c:44:93:9b:07: 1e:5b:94:24:2d:39:5f:56:a7:4f:4e:e7:e3:7f:c2:c6:af:db: bd:62:1e:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJfLT4gK7/E5ESzjyFgKKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczZjk4NmM3NzA1YmQ4MDhjMWIwMmViZDc1NGZiZmE5MTgw N2U5YjYwHhcNMjUxMjEyMDYwMDU4WhcNMjUxMjEzMDYwMDU4WjAzMTEwLwYDVQQD Eyg4ZmI2NzRhYjFmNTMwODYwM2JkZTA3ZmU0OGFhYzg0YzhiYjIwZjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifKIMNCC1CnXZvtUDyM2dpTBjk8Y 4fpIzE03OxHLrgHs/5LlfYXahlzayXBJrPjFTKOlGrN63WStDQJRNlE6RGZlOSYy 5tYYQJQU2q07mA7KsiRM/FjLc6fPqyO2P8esk0+MPFG7o9dQoju66qHUmDWZRvkR 7+jfmkETx9LJQM1Eqwz2/OekXXSv6wRA+EEk/nSp4V5wz4T/QEq2P66DVacXwe3Q mjni9FfZLFDOyE831u171/Pfn7DAO4pPP1SKf3PkItYAgZ9zZ6L5+Jc7QM16hj7v zKL7n/4oPNMXsXu/poCYrt2p4Ipd3QXNV6iw7khRwLDgMGXWXJp2+VwylwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+2dKsfUwhgO94H/kiqyEyLsg9ZMB8GA1UdIwQY MBaAFHP5hsdwW9gIwbAuvXVPv6kYB+m2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEt OWExMjk1ZjAyZjJlLzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kYjFhY2EtMjY1OS00MmEzLWE2MzEtOWExMjk1ZjAyZjJl LzEvY19tR3gzQmIyQWpCc0M2OWRVLV9xUmdINmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnnADzNul dCZVEKTfhpV89nb3bW4ISXEdWyuO11D6QafMYWKnunZPON5+jmi6vabYsOAvlMWD b1hb8zIFZvtV2z+K4uUHGsfuzog/BEwNyxxwb2D+ckUUkhSiAK4jM42pj39tMZie 7HRc7YGbil1EYOdkuTUZYyGZONZboa+b2Jq39llyqfsRpCf/ak48KRK79CVo+vj4 W28cXrm3dplJ0UvvsVYcC391eCkMyo5M3XC2eZa/NvI7qUi/Or8ivblkfWAVtLqQ K2OEpS/ZR+tW+PkkuZnDqdyiUGm+JmDQe264++bvPhxEk5sHHluUJC05X1anT07n 43/Cxq/bvWIePA== -----END CERTIFICATE-----Generated at Fri Dec 12 13:57:54 2025 by rpki-client