This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft File: 29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json) Hash identifier: QyI/a1dIy2LGkC/Pr89EjUhNWjeO/XIURZ2mKOMXoWg= Subject key identifier: 0B:1D:CB:44:0B:46:7A:00:D4:87:50:BD:2E:67:D4:BE:31:AE:8B:6C Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 Certificate issuer: /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Certificate serial: 019B3AFE01B7354E2E4E948BE6FBB138A849 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 09:01:23 +0000 Manifest this update: Sat 20 Dec 2025 09:01:23 +0000 Manifest next update: Sun 21 Dec 2025 09:01:23 +0000 Files and hashes: 1: 16VwzWVgNRyLCtAXch9PWfSWgeM.roa (hash: C203Vfz7VUs5MzzkDe6+jJ/0Hm3QJ8YvUWmNLcGjW6Q=) 2: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: pWqWWZy5DiRJyXSP97rvBORFo/V6tEHsMXG/t84H6oo=) 3: RoOd2HW-hclsaajPqLH0ri7W8zo.roa (hash: AkuyZ5XIC7eywYVom8E+pvjHdZCKK00C97/hKtRD6Tw=) 4: si754UrpKqsViXC-aHyx2LtipFA.roa (hash: VCYyh8ACSkDGJLu/cfRmB43QT8YqJ4jUUodjDefcg/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fe:01:b7:35:4e:2e:4e:94:8b:e6:fb:b1:38:a8:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4 Validity Not Before: Dec 20 09:01:23 2025 GMT Not After : Dec 21 09:01:23 2025 GMT Subject: CN=0b1dcb440b467a00d48750bd2e67d4be31ae8b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:ad:3f:2f:d2:29:38:7c:ef:b7:34:48:75: 56:c9:8d:aa:af:2f:ac:79:0a:ad:1d:ba:e3:31:3d: 95:c0:53:41:2f:07:eb:9c:6e:02:97:7e:3c:db:24: 06:96:7f:29:72:d4:ac:73:21:95:a6:3a:34:60:48: 10:46:6f:e9:10:a4:4f:f1:3c:c6:ed:84:8b:c9:ab: 5f:4c:0c:58:aa:96:3d:79:87:62:be:b7:71:6c:df: 3b:ca:14:ef:4f:e8:ac:f9:42:6e:3d:30:ad:39:64: 06:05:ef:33:e0:9b:01:79:79:40:ec:c5:e8:55:08: 9a:86:6f:a3:bb:09:b0:b6:75:c2:66:14:34:2c:cf: 59:1b:be:ae:fb:09:8b:b6:99:f3:0c:74:c5:13:c1: 23:41:84:84:39:3c:0a:e6:28:ec:9f:d5:b0:09:4f: 61:9d:f0:bb:0f:50:6a:e8:b3:36:88:fc:6f:f6:8f: 6d:9c:41:7a:94:de:43:bf:73:61:af:b1:18:76:df: 0a:bd:8e:24:79:d2:7e:f7:fd:60:a2:01:c2:0d:aa: a8:ef:ac:94:31:ca:44:dc:77:d2:1b:f3:25:4d:2b: 76:f3:75:4d:96:23:62:02:9f:33:55:ae:b6:3e:dd: bf:5d:e1:46:53:b6:0f:5b:41:2c:f1:08:f0:d9:3f: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:CB:44:0B:46:7A:00:D4:87:50:BD:2E:67:D4:BE:31:AE:8B:6C X509v3 Authority Key Identifier: keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:d3:08:be:ad:ce:51:2a:39:72:e0:65:90:3b:1d:bb:65:8f: c3:51:a7:74:a8:a3:64:13:bc:5e:ca:b3:93:e9:b5:e9:c3:7b: 7b:be:9b:e0:79:01:82:b1:62:83:39:bb:c8:1d:74:43:c4:05: 87:90:23:90:b5:93:41:7e:e5:03:19:c4:ab:89:b8:d4:b2:86: 9e:6b:ce:72:11:b2:87:05:20:d2:d7:09:20:94:05:09:64:20: 85:81:2c:ef:42:d2:4d:2a:db:f7:4f:b4:59:ff:4a:1c:0c:b3: 95:6e:3e:2c:33:66:7a:04:22:c1:63:cc:8a:5c:91:c7:1b:7f: b1:a3:a3:9c:df:83:76:fc:b3:88:8c:62:7d:16:9a:8c:6c:90: bd:cc:2f:c8:59:46:3b:40:e5:3b:ff:a1:fe:90:0c:68:78:ab: 65:2f:b5:d2:a3:9c:e2:5f:14:18:a9:c6:21:41:74:bb:8f:9e: 66:62:55:0f:a9:77:01:cd:1d:d5:57:30:95:0e:a0:37:9d:d0: f4:1f:d4:6e:37:25:3f:a9:1e:9a:33:4d:4a:26:c8:19:01:a6: 4a:72:53:be:78:21:d2:18:0b:69:96:ba:73:c8:6f:93:9f:0e: 8e:f9:e8:d7:42:78:42:18:fe:10:b6:34:29:27:01:a9:4c:15: 2e:2d:8e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/gG3NU4uTpSL5vuxOKhJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZDdjOTUxMzQ4YmQyZTA5Y2NhZjc2ZjU3YjgzODVmMTVk ZjQ0ZTQwHhcNMjUxMjIwMDkwMTIzWhcNMjUxMjIxMDkwMTIzWjAzMTEwLwYDVQQD EygwYjFkY2I0NDBiNDY3YTAwZDQ4NzUwYmQyZTY3ZDRiZTMxYWU4YjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3KtPy/SKTh877c0SHVWyY2qry+s eQqtHbrjMT2VwFNBLwfrnG4Cl3482yQGln8pctSscyGVpjo0YEgQRm/pEKRP8TzG 7YSLyatfTAxYqpY9eYdivrdxbN87yhTvT+is+UJuPTCtOWQGBe8z4JsBeXlA7MXo VQiahm+juwmwtnXCZhQ0LM9ZG76u+wmLtpnzDHTFE8EjQYSEOTwK5ijsn9WwCU9h nfC7D1Bq6LM2iPxv9o9tnEF6lN5Dv3Nhr7EYdt8KvY4kedJ+9/1gogHCDaqo76yU McpE3HfSG/MlTSt283VNliNiAp8zVa62Pt2/XeFGU7YPW0Es8Qjw2T+wGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsdy0QLRnoA1IdQvS5n1L4xrotsMB8GA1UdIwQY MBaAFNvXyVE0i9LgnMr3b1e4OF8V30TkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEt N2QwYWM1MjgxNWE2LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NTNjNzYtYTM5OC00MzVhLWJlNDEtN2QwYWM1MjgxNWE2 LzEvMjlmSlVUU0wwdUNjeXZkdlY3ZzRYeFhmUk9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANMIvq3O USo5cuBlkDsdu2WPw1GndKijZBO8Xsqzk+m16cN7e76b4HkBgrFigzm7yB10Q8QF h5AjkLWTQX7lAxnEq4m41LKGnmvOchGyhwUg0tcJIJQFCWQghYEs70LSTSrb90+0 Wf9KHAyzlW4+LDNmegQiwWPMilyRxxt/saOjnN+DdvyziIxifRaajGyQvcwvyFlG O0DlO/+h/pAMaHirZS+10qOc4l8UGKnGIUF0u4+eZmJVD6l3Ac0d1VcwlQ6gN53Q 9B/UbjclP6kemjNNSibIGQGmSnJTvngh0hgLaZa6c8hvk58Ojvno10J4Qhj+ELY0 KScBqUwVLi2ONg== -----END CERTIFICATE-----Generated at Sat Dec 20 16:03:27 2025 by rpki-client