This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json) Hash identifier: GJxZyecKgzOWHE9xLaUOpal5sxJplYieTGqa5+rzbsY= Subject key identifier: F4:7F:A6:31:E5:AA:B5:C4:BC:27:ED:68:2D:BB:8B:A6:09:87:8A:C4 Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Certificate serial: 019B2E54EF7E4D36CCD1D3029BF253BF6AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft Manifest number: 178A Signing time: Wed 17 Dec 2025 22:01:16 +0000 Manifest this update: Wed 17 Dec 2025 22:01:16 +0000 Manifest next update: Thu 18 Dec 2025 22:01:16 +0000 Files and hashes: 1: NfdXthzhZ_L34HPGrLUJ0q9-LtU.roa (hash: iAmQ4V4JG26ummlLKO90sg6lAyK0jGsDeoSWyDoF0l4=) 2: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: mYO2OtJvfqHn2fAf1NpCi6PSbadnF/q13mOL1QyfPXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:ef:7e:4d:36:cc:d1:d3:02:9b:f2:53:bf:6a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Validity Not Before: Dec 17 22:01:16 2025 GMT Not After : Dec 18 22:01:16 2025 GMT Subject: CN=f47fa631e5aab5c4bc27ed682dbb8ba609878ac4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a7:ed:70:6a:88:d6:66:96:ff:ce:1a:87:e0: 72:08:b3:26:0f:ba:9d:c6:61:0c:a8:6c:81:aa:38: 5e:ed:4e:65:e4:12:38:a5:29:03:a0:60:6b:64:80: fe:aa:6e:94:b0:c1:61:5a:2d:f9:1f:60:27:21:aa: 47:21:63:0b:42:2a:9b:31:35:f1:6b:e3:f8:1b:13: 2a:6e:cc:01:89:39:84:e6:8f:fc:ca:12:1d:6f:da: 2a:53:0a:c8:ce:c0:05:04:72:04:eb:ec:03:43:4c: bb:10:e0:c0:aa:02:ea:5f:ea:a5:4c:83:07:f8:37: b5:8e:28:cd:86:48:41:25:b9:0e:b0:9e:cc:5f:7b: 97:b2:48:70:b4:a8:2d:5a:4b:a4:63:1a:1d:e9:36: 52:5c:cd:6b:dc:d0:75:bd:53:8a:6d:1d:3f:54:d9: fa:99:11:92:b4:b2:4e:2b:56:01:31:4d:63:f1:75: 8e:5c:b3:f4:c8:17:c3:39:f1:d6:d7:a6:8e:be:ea: f1:da:fd:20:1b:7e:50:35:7a:06:37:36:a2:ab:d1: 3c:39:fa:66:cd:e7:dd:c0:8f:64:5e:15:a5:71:fb: 73:2a:6c:96:31:b8:09:8c:8e:f6:cc:07:61:af:f0: 93:2d:73:5a:66:42:f9:b9:50:43:21:f4:fd:9a:95: 70:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7F:A6:31:E5:AA:B5:C4:BC:27:ED:68:2D:BB:8B:A6:09:87:8A:C4 X509v3 Authority Key Identifier: keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:76:ac:3f:d9:5e:be:c1:01:e0:25:b7:8a:c9:ac:ed:8f:aa: 7b:b3:64:a8:92:13:c4:84:5a:d6:3d:32:53:3e:8d:27:b9:1f: 62:23:91:c1:b8:0e:db:0c:0b:a5:7d:27:44:9f:9a:73:51:66: f2:30:5c:ca:9d:29:c0:cd:da:b3:2c:2a:2f:ac:e5:e1:a0:91: 1d:78:28:94:bb:78:e8:78:4f:a1:39:8f:c8:11:de:55:82:8e: bd:1e:0c:ea:07:d3:ef:ee:d5:df:b7:c4:d9:1f:ab:2f:24:75: 37:cb:28:a9:df:50:bb:25:73:16:c8:a5:90:d0:fc:a8:71:ec: c1:d3:fb:6a:c2:1c:1b:b7:24:aa:1a:ee:71:32:5d:28:65:04: ad:fb:6a:db:95:b5:1b:32:45:bc:4d:a9:16:8b:7d:f0:8d:86: f1:7c:9f:cd:85:4b:f5:1f:fe:7e:b3:17:3f:11:9f:d7:e0:c4: 33:f6:d5:7f:7c:f7:9a:5f:5f:f5:25:e1:6b:dc:05:10:a7:17: 67:16:b4:28:fa:20:19:60:e6:36:73:e0:89:94:b5:a1:ca:9d: 68:79:8a:d7:c5:5d:6a:ab:43:03:5a:c2:d9:fd:24:33:22:36: ed:ab:af:8c:f3:f4:7f:67:9d:11:73:28:01:73:fb:a3:8e:f8: 5f:81:d8:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVO9+TTbM0dMCm/JTv2qhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDBkOGEyZWE5Njc2MzY5ZTZlODE3Njc5NDkwZTRlNTA1 Yzg5ZjMwHhcNMjUxMjE3MjIwMTE2WhcNMjUxMjE4MjIwMTE2WjAzMTEwLwYDVQQD EyhmNDdmYTYzMWU1YWFiNWM0YmMyN2VkNjgyZGJiOGJhNjA5ODc4YWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaftcGqI1maW/84ah+ByCLMmD7qd xmEMqGyBqjhe7U5l5BI4pSkDoGBrZID+qm6UsMFhWi35H2AnIapHIWMLQiqbMTXx a+P4GxMqbswBiTmE5o/8yhIdb9oqUwrIzsAFBHIE6+wDQ0y7EODAqgLqX+qlTIMH +De1jijNhkhBJbkOsJ7MX3uXskhwtKgtWkukYxod6TZSXM1r3NB1vVOKbR0/VNn6 mRGStLJOK1YBMU1j8XWOXLP0yBfDOfHW16aOvurx2v0gG35QNXoGNzaiq9E8Ofpm zefdwI9kXhWlcftzKmyWMbgJjI72zAdhr/CTLXNaZkL5uVBDIfT9mpVwewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR/pjHlqrXEvCftaC27i6YJh4rEMB8GA1UdIwQY MBaAFP9A2KLqlnY2nm6BdnlJDk5QXInzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUt YjA1MGMxMTI5MTI2LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUtYjA1MGMxMTI5MTI2 LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnasP9le vsEB4CW3isms7Y+qe7NkqJITxIRa1j0yUz6NJ7kfYiORwbgO2wwLpX0nRJ+ac1Fm 8jBcyp0pwM3asywqL6zl4aCRHXgolLt46HhPoTmPyBHeVYKOvR4M6gfT7+7V37fE 2R+rLyR1N8soqd9QuyVzFsilkND8qHHswdP7asIcG7ckqhrucTJdKGUErftq25W1 GzJFvE2pFot98I2G8XyfzYVL9R/+frMXPxGf1+DEM/bVf3z3ml9f9SXha9wFEKcX Zxa0KPogGWDmNnPgiZS1ocqdaHmK18VdaqtDA1rC2f0kMyI27auvjPP0f2edEXMo AXP7o474X4HYNg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:58:57 2025 by rpki-client