This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json) Hash identifier: TU/g/W/TPxI+U3aZDtDI7gtT1s1GSEIwC8II/29XkLM= Subject key identifier: D4:69:A0:C3:E4:FB:01:2F:07:86:79:83:54:72:1F:22:5D:E1:D4:1D Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019B1CBBD2556A28BBB2452BD36F3A378B89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft Manifest number: 178B Signing time: Sun 14 Dec 2025 12:00:29 +0000 Manifest this update: Sun 14 Dec 2025 12:00:29 +0000 Manifest next update: Mon 15 Dec 2025 12:00:29 +0000 Files and hashes: 1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=) 2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: e5sPkRd4s12/z+YjjsvptNoEuaATN5nxJhDqugpBtnI=) 3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=) 4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=) 5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=) 6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=) 7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1c:bb:d2:55:6a:28:bb:b2:45:2b:d3:6f:3a:37:8b:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Dec 14 12:00:29 2025 GMT Not After : Dec 15 12:00:29 2025 GMT Subject: CN=d469a0c3e4fb012f0786798354721f225de1d41d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:bd:0e:87:be:5a:9b:f2:38:16:73:4d:0d:48: ab:f8:d5:50:3b:d6:a4:d1:4a:3f:01:7f:48:f1:53: 5a:6f:be:ef:7e:cb:8b:8a:ad:f9:dd:25:3e:46:b8: b8:3b:11:ce:3a:80:2d:9d:67:46:65:e3:d3:6d:e8: a1:a8:53:ba:47:12:31:77:16:25:d7:88:e5:28:ca: 7e:3a:8e:15:49:31:b3:2f:7b:bd:c1:86:6d:bb:cc: 63:b8:53:65:0e:74:12:04:de:dc:dc:a7:15:46:7d: dd:b2:ae:42:61:d0:12:48:8e:5b:19:67:9f:ee:5d: 91:5c:b0:89:8d:b2:e0:66:d2:d1:fa:c6:c2:08:c2: d1:c7:8c:8b:39:19:27:8d:0a:31:ad:b7:34:81:07: 2d:0a:ff:a4:a8:8c:aa:56:38:de:d3:f0:55:92:86: 6a:7f:55:5a:86:fa:52:06:e2:64:47:ce:f0:a2:7c: 3c:90:31:1e:20:78:ab:07:56:b8:3e:85:0c:88:62: 9e:41:8c:db:08:22:4e:32:6f:0a:ac:a7:e1:6e:1b: a1:52:28:b6:f3:68:64:11:6f:48:bb:a9:ec:27:0b: 7b:ae:86:68:96:ee:9a:7a:23:b0:3f:fd:cc:9b:fb: 35:56:cc:91:7d:29:85:dc:b1:9b:b2:30:0c:ae:02: a5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:69:A0:C3:E4:FB:01:2F:07:86:79:83:54:72:1F:22:5D:E1:D4:1D X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:64:58:77:55:8c:c4:fe:f4:23:88:54:4f:cd:5e:cd:c9: ec:30:e2:9b:99:68:17:9a:d4:85:7b:c2:aa:a5:45:eb:55:e6: ab:16:47:0a:dc:3e:43:83:22:96:e2:4f:c4:b9:cf:f3:94:a1: e0:41:1f:ee:dc:5d:da:0d:28:79:60:bf:68:54:45:1e:b0:e2: 2f:95:12:6c:77:23:56:62:89:86:07:7f:e2:51:aa:5f:63:97: b6:7b:93:d2:5d:38:39:7c:65:70:5c:c7:12:63:35:b7:b1:ae: 5b:d4:80:34:97:b1:67:0d:f5:d9:1e:47:1b:b3:7d:74:5f:d4: 50:4c:57:6f:c1:04:51:98:aa:cf:0c:32:e4:c0:52:ee:0c:67: 78:77:64:92:ba:0a:69:59:9f:02:c8:0a:b0:d4:df:da:5e:b4: ee:2a:d1:67:3c:23:e5:79:fe:63:66:69:1e:2a:8c:d4:9a:a8: 50:88:c2:50:64:4f:d3:2d:2b:31:8c:c9:02:fb:c5:e2:91:47: 9d:6a:bf:ec:29:2c:62:88:5d:28:53:c4:b6:a9:1d:d5:cc:77: 71:df:9f:ec:ef:15:56:cb:f7:ed:09:44:c5:73:07:c4:59:07: 54:ed:06:3f:c4:48:1e:25:b0:9d:ac:93:83:a6:ab:50:30:14: ce:f3:ff:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZscu9JVaii7skUr0286N4uJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjUxMjE0MTIwMDI5WhcNMjUxMjE1MTIwMDI5WjAzMTEwLwYDVQQD EyhkNDY5YTBjM2U0ZmIwMTJmMDc4Njc5ODM1NDcyMWYyMjVkZTFkNDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0b0Oh75am/I4FnNNDUir+NVQO9ak 0Uo/AX9I8VNab77vfsuLiq353SU+Rri4OxHOOoAtnWdGZePTbeihqFO6RxIxdxYl 14jlKMp+Oo4VSTGzL3u9wYZtu8xjuFNlDnQSBN7c3KcVRn3dsq5CYdASSI5bGWef 7l2RXLCJjbLgZtLR+sbCCMLRx4yLORknjQoxrbc0gQctCv+kqIyqVjje0/BVkoZq f1VahvpSBuJkR87wonw8kDEeIHirB1a4PoUMiGKeQYzbCCJOMm8KrKfhbhuhUii2 82hkEW9Iu6nsJwt7roZolu6aeiOwP/3Mm/s1VsyRfSmF3LGbsjAMrgKlrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRpoMPk+wEvB4Z5g1RyHyJd4dQdMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQZkWHdV jMT+9COIVE/NXs3J7DDim5loF5rUhXvCqqVF61XmqxZHCtw+Q4MiluJPxLnP85Sh 4EEf7txd2g0oeWC/aFRFHrDiL5USbHcjVmKJhgd/4lGqX2OXtnuT0l04OXxlcFzH EmM1t7GuW9SANJexZw312R5HG7N9dF/UUExXb8EEUZiqzwwy5MBS7gxneHdkkroK aVmfAsgKsNTf2l607irRZzwj5Xn+Y2ZpHiqM1JqoUIjCUGRP0y0rMYzJAvvF4pFH nWq/7CksYohdKFPEtqkd1cx3cd+f7O8VVsv37QlExXMHxFkHVO0GP8RIHiWwnayT g6arUDAUzvP/iA== -----END CERTIFICATE-----Generated at Sun Dec 14 17:08:35 2025 by rpki-client