This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: Lrv3i8ZBjYmhdBOTWxlJHgHu8KMWD/zfjOTljro1Cu8= Subject key identifier: D5:B1:5D:0B:B0:D9:3A:BE:97:63:23:6C:B7:4C:BB:14:3E:7E:FD:93 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019B0DEDC72A802CF35FF1ABE01DD41E3AE6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 178D Signing time: Thu 11 Dec 2025 15:00:45 +0000 Manifest this update: Thu 11 Dec 2025 15:00:45 +0000 Manifest next update: Fri 12 Dec 2025 15:00:45 +0000 Files and hashes: 1: 9LGSNE38RZCTyouOtHVx3qVP6lw.roa (hash: ugV2YTVWDidN8y0vBVq2PfGkhQx7PuXVEwNoZCBbGX8=) 2: OsAkT1Bjc6Bx57ink5LVscASSVM.roa (hash: Me3jYRS4jKNnlOdyWwLlCaXNsCc57NzdmZ5lT79t3Rw=) 3: RmwlFKm2A6wCOU2tiPLTSzuhAA8.roa (hash: NB+w6tJSmFPHFd2FMxkqFpCOapIk+qQqzfmt3QzOsMk=) 4: UobB1JoTOzUGFpCCZFbxasjgqAA.roa (hash: ms0cbPIRl6WuE78I/a1I+geJkM+CYYhZiVIqQ6+fwVY=) 5: VHd5a_VapfxG7J2dY8XaTIvUAnI.roa (hash: qmUiIRsWjUguSkm/l6NKSA85XaSwk7dvLg/NHHYCogc=) 6: VuROyrWs92eKXOizp2Q-0fnpLR0.roa (hash: fMjWZ/dM7054cYWsnjZNa6zVf7FPSoCGvOyM76Sl6Mc=) 7: VxRGHdP__z9RHajqH60awAUqQgg.roa (hash: tIdE9ZmAuCmbV7t2it8DIWQnm6yvOgpE7cprrHK2On0=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: c2vkDQ0FCQUQPSpFnp6uOlPAEOQB+kKigZRsMtVQ7Y8=) 9: iB5O2Dv_O9SgoFmPn7K4puMBzos.roa (hash: K+etiy0pRWQK1jSmyGFXzRfY6HxDEmZPOQqgSoVB5WI=) 10: pJnO9Ba6alCVKMIllyGL5_n-nHo.roa (hash: cF7/LpWh8txlnJKiWf+FQfbAzOZvclLDIIzD8uyNUD0=) 11: vWqmka3oaZQE1cXhvhKJIPN3ikY.roa (hash: wwmYNtR3Cqpxb6sHd4D0z140EddAwpyxzJ7dHxOqth4=) 12: zwTIjW4kVksFhIqqz0Hm86Td_eI.roa (hash: 4Gmw/YEt79d2ifSjcQjjCNUl4cViPsDbJFWDQ996oV4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:ed:c7:2a:80:2c:f3:5f:f1:ab:e0:1d:d4:1e:3a:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Dec 11 15:00:45 2025 GMT Not After : Dec 12 15:00:45 2025 GMT Subject: CN=d5b15d0bb0d93abe9763236cb74cbb143e7efd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ae:c0:bd:2c:39:b4:c0:04:ee:f8:02:7a:05: a6:f2:5c:8d:bd:36:71:69:5e:8d:32:55:8c:cb:0e: e9:bf:d4:9a:b3:01:46:57:90:67:bb:85:05:57:09: b1:b5:a9:f0:23:64:35:25:77:84:63:66:a4:fb:3e: 1c:08:7f:a4:95:f4:51:88:bb:ef:44:e7:21:4d:e8: 1f:05:85:da:0a:72:f7:c5:c2:8f:d2:eb:84:30:ee: b2:2e:24:cb:3b:ea:87:48:00:eb:c8:13:eb:37:b5: aa:7c:25:c0:87:42:b0:48:2b:79:0c:9e:9f:19:20: 98:ce:5d:67:51:24:35:e1:0f:8d:94:84:84:06:06: 7e:4c:23:a4:bb:d1:6d:e9:45:3e:ea:ed:e8:c0:13: 3d:2d:4b:f7:9d:fc:80:19:03:c6:f2:e2:0f:99:f9: 23:2f:e3:37:34:d7:7f:dc:21:cb:a7:5a:5d:cb:20: 39:52:2e:73:ce:4c:1d:ad:dc:c7:82:d2:81:e6:a5: df:81:78:f9:76:fb:ec:5a:36:69:eb:69:13:0c:ca: af:46:f9:57:cd:a3:b8:e2:f7:4e:27:fc:5a:4d:50: 25:49:4b:80:6f:7c:6f:a8:fc:33:24:b7:72:aa:ee: 0a:3c:03:96:22:6e:02:21:3a:9b:1b:f9:92:6b:61: fb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:5D:0B:B0:D9:3A:BE:97:63:23:6C:B7:4C:BB:14:3E:7E:FD:93 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:85:a5:9d:ec:5f:34:6b:ef:6e:94:c5:ee:b4:60:be:ed:66: bc:bb:c1:c2:55:96:60:d3:cf:d1:0f:00:ed:b8:83:68:8f:ce: 19:3f:48:c3:7a:3d:b0:f9:59:e1:bd:bb:52:f2:dd:76:10:a5: ab:9c:6f:6c:47:b2:40:eb:03:9a:f2:b1:60:bd:a0:79:a4:6f: 83:0f:c6:be:fe:5f:64:54:7f:70:ba:e3:a7:d4:7d:22:0b:4d: 6b:a5:3c:d7:91:79:06:31:56:77:49:4f:3e:c0:68:4c:ed:6f: e1:b6:53:54:34:7e:80:75:b9:a1:b2:3f:c3:f3:fa:4e:a6:38: 08:1b:29:1f:6d:83:22:0f:d1:e0:ef:a1:ba:e2:19:55:5d:b7: d6:4b:1e:00:43:c3:6b:a3:7a:a1:d5:a1:0a:82:cf:3b:d9:a4: 55:d3:e2:e8:06:8e:b5:cf:90:e4:c0:cc:d3:97:0f:a9:59:5a: 57:16:09:bb:d8:07:ad:94:c8:cc:b2:de:7d:06:de:5a:12:3c: 5f:44:c4:5e:0a:77:48:3f:81:b8:71:d9:6b:50:0e:68:52:dd: 0b:1b:66:8a:6e:d6:a6:1c:2c:3f:51:61:67:ef:a9:8c:a3:2e: 48:ef:4d:9c:1d:f5:c0:72:7d:55:14:1e:be:e4:9e:b1:a1:40: 30:cd:49:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsN7ccqgCzzX/Gr4B3UHjrmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjUxMjExMTUwMDQ1WhcNMjUxMjEyMTUwMDQ1WjAzMTEwLwYDVQQD EyhkNWIxNWQwYmIwZDkzYWJlOTc2MzIzNmNiNzRjYmIxNDNlN2VmZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq7AvSw5tMAE7vgCegWm8lyNvTZx aV6NMlWMyw7pv9SaswFGV5Bnu4UFVwmxtanwI2Q1JXeEY2ak+z4cCH+klfRRiLvv ROchTegfBYXaCnL3xcKP0uuEMO6yLiTLO+qHSADryBPrN7WqfCXAh0KwSCt5DJ6f GSCYzl1nUSQ14Q+NlISEBgZ+TCOku9Ft6UU+6u3owBM9LUv3nfyAGQPG8uIPmfkj L+M3NNd/3CHLp1pdyyA5Ui5zzkwdrdzHgtKB5qXfgXj5dvvsWjZp62kTDMqvRvlX zaO44vdOJ/xaTVAlSUuAb3xvqPwzJLdyqu4KPAOWIm4CITqbG/mSa2H7YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWxXQuw2Tq+l2MjbLdMuxQ+fv2TMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPoWlnexf NGvvbpTF7rRgvu1mvLvBwlWWYNPP0Q8A7biDaI/OGT9Iw3o9sPlZ4b27UvLddhCl q5xvbEeyQOsDmvKxYL2geaRvgw/Gvv5fZFR/cLrjp9R9IgtNa6U815F5BjFWd0lP PsBoTO1v4bZTVDR+gHW5obI/w/P6TqY4CBspH22DIg/R4O+huuIZVV231kseAEPD a6N6odWhCoLPO9mkVdPi6AaOtc+Q5MDM05cPqVlaVxYJu9gHrZTIzLLefQbeWhI8 X0TEXgp3SD+BuHHZa1AOaFLdCxtmim7WphwsP1FhZ++pjKMuSO9NnB31wHJ9VRQe vuSesaFAMM1JPA== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:27 2025 by rpki-client