This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft File: Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json) Hash identifier: vCBj++vrOBB8vqF5F+lUrIile6kcVfYQvHjveO930wk= Subject key identifier: 5F:F7:89:E5:A3:0E:E2:BC:80:C9:4A:70:48:ED:C5:3D:44:31:1E:15 Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 Certificate issuer: /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627 Certificate serial: 019B484B03A5FB7D5365D456B9AEBA9D77AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 23:00:34 +0000 Manifest this update: Mon 22 Dec 2025 23:00:34 +0000 Manifest next update: Tue 23 Dec 2025 23:00:34 +0000 Files and hashes: 1: 3oSlrT_DUhFvQJ6zfs8CrZzLtN0.roa (hash: kD23fxg6HJol+5c+jQle3o8CP0BhvDm3gW0I2oTpUsE=) 2: 9ZGSbvVWGJA03vrSyQUEVarRr-4.roa (hash: cPvp9kLsR1g5wI6QgkJQ/4iEUD2cM7N5TL8rSHXBr1c=) 3: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: iWQEFOitu2qQMHylU5/lNzgMvjZ/d2sb1If+N5ThO1E=) 4: k6_D03YidxIC349EjXRq0tAB-Qo.roa (hash: EeEY/m7OL+tVaal0Hy7U3tDs+glAoHmKchjSxGhakus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:4b:03:a5:fb:7d:53:65:d4:56:b9:ae:ba:9d:77:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627 Validity Not Before: Dec 22 23:00:34 2025 GMT Not After : Dec 23 23:00:34 2025 GMT Subject: CN=5ff789e5a30ee2bc80c94a7048edc53d44311e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:31:fc:5f:d8:d6:43:3b:c9:3a:39:d5:bc: 1c:15:49:c2:cd:2f:2d:91:ae:e3:b5:30:65:56:36: 16:41:46:52:bc:77:f9:77:56:36:c5:cd:5d:0b:73: 1f:15:09:87:b7:e9:a2:b8:58:49:9b:99:ec:ad:85: 3d:4a:09:3a:5a:ed:f0:fe:92:0e:06:89:71:8e:5f: 6c:89:81:ae:6c:1b:85:02:fe:6d:20:1a:69:e5:3e: 21:3f:76:5f:97:09:85:7f:41:f3:46:53:20:a7:77: f7:e2:26:9e:55:52:3c:b9:f0:23:23:ce:d8:44:4a: 55:42:4b:9f:6a:10:81:6c:6b:72:a9:4b:89:4e:eb: 31:2b:d8:33:03:52:48:a0:af:8a:c6:68:db:65:be: 64:3b:c2:f3:42:ec:67:bd:bc:e3:a6:87:60:fb:58: 92:34:f2:13:56:2b:ee:98:64:9c:4f:13:8c:7d:c0: f9:a8:99:0a:98:ac:d3:f5:39:bc:e6:69:5b:e2:e5: cd:ed:1d:cb:83:e2:8e:d5:04:b9:8e:36:f0:70:77: 3b:9a:f1:77:f5:e5:08:03:88:aa:af:ba:0d:ff:24: be:ad:f0:80:3c:7b:af:ee:47:62:68:16:c0:e2:7c: 2b:d9:86:fb:c4:7d:4e:df:a6:ab:1e:a0:dd:d2:6f: c4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:F7:89:E5:A3:0E:E2:BC:80:C9:4A:70:48:ED:C5:3D:44:31:1E:15 X509v3 Authority Key Identifier: keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:52:45:3d:01:de:a5:bf:e1:a8:19:0d:ee:0f:ac:1f:dd:1d: 79:f4:af:33:26:e3:89:aa:d0:b5:aa:c2:8b:56:d0:fd:19:74: 14:ae:ae:30:51:70:63:d7:fa:87:68:39:ad:dd:cf:94:30:77: 7a:6a:dd:af:64:5f:9e:e0:cd:39:3d:aa:24:51:b2:c3:b9:78: 42:79:15:9b:f2:2f:33:2e:42:da:c5:11:41:50:6b:90:e5:1d: 10:8a:d1:a4:a0:e8:46:75:42:c6:93:9f:84:21:31:86:cd:13: 71:e0:c8:94:1b:39:a5:90:e5:52:a6:c0:8a:d4:ef:9a:01:98: 57:5e:58:47:b6:53:9e:12:8e:e8:ed:5e:f4:0c:06:21:20:a7: 73:32:49:96:85:ff:3f:65:bc:8b:c2:f1:64:5c:b2:b0:ff:e8: 41:43:8e:98:30:4f:a9:c4:d0:b5:27:13:14:58:c9:bb:16:cd: b2:da:31:49:48:80:d1:f3:4e:25:e0:5f:0e:19:f1:3e:2b:1d: d3:79:ca:da:1f:a0:95:8f:19:03:04:12:43:49:0b:5a:5e:c8: c8:3a:02:31:29:ec:87:29:53:39:84:4e:1a:47:5d:f2:cc:9a: 2b:fb:d4:73:93:da:55:f7:24:da:14:62:5c:4d:a0:38:fc:44: 95:39:1f:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtISwOl+31TZdRWua66nXesMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNkZWYxMWJiOGE4ZDQ4MGEwMzEzZTFmMjE4YTY2YmRmNGU5 NWY2MjcwHhcNMjUxMjIyMjMwMDM0WhcNMjUxMjIzMjMwMDM0WjAzMTEwLwYDVQQD Eyg1ZmY3ODllNWEzMGVlMmJjODBjOTRhNzA0OGVkYzUzZDQ0MzExZTE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu4x/F/Y1kM7yTo51bwcFUnCzS8t ka7jtTBlVjYWQUZSvHf5d1Y2xc1dC3MfFQmHt+miuFhJm5nsrYU9Sgk6Wu3w/pIO Bolxjl9siYGubBuFAv5tIBpp5T4hP3ZflwmFf0HzRlMgp3f34iaeVVI8ufAjI87Y REpVQkufahCBbGtyqUuJTusxK9gzA1JIoK+KxmjbZb5kO8LzQuxnvbzjpodg+1iS NPITVivumGScTxOMfcD5qJkKmKzT9Tm85mlb4uXN7R3Lg+KO1QS5jjbwcHc7mvF3 9eUIA4iqr7oN/yS+rfCAPHuv7kdiaBbA4nwr2Yb7xH1O36arHqDd0m/E0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/3ieWjDuK8gMlKcEjtxT1EMR4VMB8GA1UdIwQY MBaAFD3vEbuKjUgKAxPh8hima99OlfYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYt YjQ5NDY2NDcyNGFkLzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9kMWYxNzItMmRlZi00Nzk3LTgwNWYtYjQ5NDY2NDcyNGFk LzEvUGU4UnU0cU5TQW9ERS1IeUdLWnIzMDZWOWljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1JFPQHe pb/hqBkN7g+sH90defSvMybjiarQtarCi1bQ/Rl0FK6uMFFwY9f6h2g5rd3PlDB3 emrdr2RfnuDNOT2qJFGyw7l4QnkVm/IvMy5C2sURQVBrkOUdEIrRpKDoRnVCxpOf hCExhs0TceDIlBs5pZDlUqbAitTvmgGYV15YR7ZTnhKO6O1e9AwGISCnczJJloX/ P2W8i8LxZFyysP/oQUOOmDBPqcTQtScTFFjJuxbNstoxSUiA0fNOJeBfDhnxPisd 03nK2h+glY8ZAwQSQ0kLWl7IyDoCMSnshylTOYROGkdd8syaK/vUc5PaVfck2hRi XE2gOPxElTkfQw== -----END CERTIFICATE-----Generated at Tue Dec 23 05:03:44 2025 by rpki-client