This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft File: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft (raw, json) Hash identifier: O8qLnEzuoDhfezjrLkx8x7BuEipoL4MMwf+/Gur8sGA= Subject key identifier: CC:8D:FA:BB:BB:93:69:D3:C9:47:58:06:58:27:11:6D:C3:6C:22:88 Authority key identifier: D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 Certificate issuer: /CN=d5a193671dc59d76fc311db2d6689a3c88299094 Certificate serial: 019B1FF446690E17868A42C97EE8BCB73A28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft Manifest number: 177B Signing time: Mon 15 Dec 2025 03:01:01 +0000 Manifest this update: Mon 15 Dec 2025 03:01:01 +0000 Manifest next update: Tue 16 Dec 2025 03:01:01 +0000 Files and hashes: 1: 1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl (hash: 3ycznDI3cP7S/gEwwfsEVIE5TFgemQfgHappm1Xk2VI=) 2: ceTKZ_Kbl5fdTbjM1BoGVl6TegM.roa (hash: DR/tSwdyZFDYwu3nLD2VKueV4ylVlrU59jgXrK70o90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f4:46:69:0e:17:86:8a:42:c9:7e:e8:bc:b7:3a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5a193671dc59d76fc311db2d6689a3c88299094 Validity Not Before: Dec 15 03:01:01 2025 GMT Not After : Dec 16 03:01:01 2025 GMT Subject: CN=cc8dfabbbb9369d3c94758065827116dc36c2288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:25:a7:1b:ab:3f:a6:b3:82:d9:52:54:0e:7a: 63:57:54:99:33:c0:16:53:90:2a:09:1a:2b:ec:81: 68:94:6e:73:12:7e:d7:5f:80:78:11:98:4e:f1:4d: 5a:ad:99:0a:22:ba:95:e1:2c:69:ff:3a:85:50:09: 07:d5:ca:0a:6a:7c:38:d1:3c:96:87:e5:fc:7b:9b: c3:6a:5f:60:87:b2:73:13:50:ec:b8:04:ad:44:bc: 88:65:b0:57:e6:ee:76:6b:4b:b9:e0:31:35:68:1a: f1:93:ca:76:35:ef:e4:c5:e6:bc:99:43:8a:5c:ec: 60:b3:e2:89:b2:52:69:ff:3a:97:0d:92:d3:c2:0b: 5b:f5:9a:6c:30:d6:5d:db:6f:15:79:ca:92:d9:63: 3a:be:11:eb:d6:00:f1:2e:a6:57:90:2f:bb:3e:66: af:d3:43:97:f8:5e:9f:1f:78:8e:7e:49:74:27:7f: 06:f7:3c:fb:bd:70:c7:67:55:3e:e4:92:43:08:35: 48:7f:98:25:4a:37:fa:3f:0c:0e:50:b0:73:ef:7f: ee:2c:9b:af:59:02:99:87:37:43:0c:ec:75:04:23: 62:6e:b7:47:53:67:36:22:4d:93:ec:3d:55:18:32: f6:66:eb:21:52:2b:eb:b7:c9:5f:3c:8d:73:62:e1: 9c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8D:FA:BB:BB:93:69:D3:C9:47:58:06:58:27:11:6D:C3:6C:22:88 X509v3 Authority Key Identifier: keyid:D5:A1:93:67:1D:C5:9D:76:FC:31:1D:B2:D6:68:9A:3C:88:29:90:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aGTZx3FnXb8MR2y1miaPIgpkJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3d259d-9183-40a0-92a1-2b2a6e27f96f/1/1aGTZx3FnXb8MR2y1miaPIgpkJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:aa:7a:ac:74:bf:d8:ac:5d:9a:dc:7f:e9:6f:df:20:e0:b9: 53:13:02:ac:6c:6a:25:ca:fa:8f:f9:30:4e:2a:85:45:93:0d: 2b:db:47:d7:2d:fe:93:17:78:c9:7c:14:61:fe:07:32:5e:90: 45:d8:15:b6:c1:49:83:5f:3e:fb:31:42:08:9c:c6:cd:c1:47: 3c:e8:49:c4:28:75:36:b2:e1:02:34:d6:f9:d6:d5:30:bb:5b: 65:60:cf:f0:c1:85:9b:38:99:9a:17:1a:c6:78:7e:af:92:22: 87:a9:a3:fc:dd:a1:ee:b1:fc:a0:82:22:01:da:85:e8:80:c7: 75:39:4c:8a:5f:21:a7:ef:82:96:01:42:92:c3:b9:9a:20:b1: 82:55:63:4a:9a:21:ba:b9:0f:6a:ff:10:23:d4:58:0e:de:2d: da:fe:26:40:7a:cb:d2:7d:08:64:38:9b:50:68:98:c3:6a:e8: 30:92:b6:ee:68:a9:50:5d:56:63:63:80:e6:2d:bf:7e:21:bb: 3b:15:55:4e:5b:82:17:d4:6c:c0:b2:a6:77:a6:09:a0:34:76: 5c:a1:05:52:8b:86:7c:b4:70:a8:04:d3:8d:a5:05:42:9b:f8: e7:9f:49:f9:ba:8b:90:8f:8f:57:d1:44:f3:5e:ad:9b:b9:d1: c9:42:27:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf9EZpDheGikLJfui8tzooMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YTE5MzY3MWRjNTlkNzZmYzMxMWRiMmQ2Njg5YTNjODgy OTkwOTQwHhcNMjUxMjE1MDMwMTAxWhcNMjUxMjE2MDMwMTAxWjAzMTEwLwYDVQQD EyhjYzhkZmFiYmJiOTM2OWQzYzk0NzU4MDY1ODI3MTE2ZGMzNmMyMjg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1CWnG6s/prOC2VJUDnpjV1SZM8AW U5AqCRor7IFolG5zEn7XX4B4EZhO8U1arZkKIrqV4Sxp/zqFUAkH1coKanw40TyW h+X8e5vDal9gh7JzE1DsuAStRLyIZbBX5u52a0u54DE1aBrxk8p2Ne/kxea8mUOK XOxgs+KJslJp/zqXDZLTwgtb9ZpsMNZd228VecqS2WM6vhHr1gDxLqZXkC+7Pmav 00OX+F6fH3iOfkl0J38G9zz7vXDHZ1U+5JJDCDVIf5glSjf6PwwOULBz73/uLJuv WQKZhzdDDOx1BCNibrdHU2c2Ik2T7D1VGDL2ZushUivrt8lfPI1zYuGcMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMyN+ru7k2nTyUdYBlgnEW3DbCKIMB8GA1UdIwQY MBaAFNWhk2cdxZ12/DEdstZomjyIKZCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEt MmIyYTZlMjdmOTZmLzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zZDI1OWQtOTE4My00MGEwLTkyYTEtMmIyYTZlMjdmOTZm LzEvMWFHVFp4M0ZuWGI4TVIyeTFtaWFQSWdwa0pRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqp6rHS/ 2Kxdmtx/6W/fIOC5UxMCrGxqJcr6j/kwTiqFRZMNK9tH1y3+kxd4yXwUYf4HMl6Q RdgVtsFJg18++zFCCJzGzcFHPOhJxCh1NrLhAjTW+dbVMLtbZWDP8MGFmziZmhca xnh+r5Iih6mj/N2h7rH8oIIiAdqF6IDHdTlMil8hp++ClgFCksO5miCxglVjSpoh urkPav8QI9RYDt4t2v4mQHrL0n0IZDibUGiYw2roMJK27mipUF1WY2OA5i2/fiG7 OxVVTluCF9RswLKmd6YJoDR2XKEFUouGfLRwqATTjaUFQpv4559J+bqLkI+PV9FE 816tm7nRyUInIg== -----END CERTIFICATE-----Generated at Mon Dec 15 04:59:20 2025 by rpki-client