This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft File: CAdgG8REIsjSOjzXK_6hu_KgVjo.mft (raw, json) Hash identifier: Oqgl1y0B+EzpCJ09nA2ejmSL1mpk42k7apQPlbUqFQQ= Subject key identifier: 15:9C:63:36:9B:1B:4C:29:E0:67:98:CF:A5:3F:A9:7A:6C:D2:C1:C7 Authority key identifier: 08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A Certificate issuer: /CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a Certificate serial: 019B405B424CCD3401DE56DA1E039C9D38D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 10:01:21 +0000 Manifest this update: Sun 21 Dec 2025 10:01:21 +0000 Manifest next update: Mon 22 Dec 2025 10:01:21 +0000 Files and hashes: 1: 3O8SjjWsPfLABa3jrVc6djhtyEs.roa (hash: HeQvLqUlnnayNmN/r7cxXFLVXADWQxZs3mFygr2LMHc=) 2: CAdgG8REIsjSOjzXK_6hu_KgVjo.crl (hash: qj0pXQdboAPhSB7gnB8uITXWYFwkUmYQoa+AgNEfcl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5b:42:4c:cd:34:01:de:56:da:1e:03:9c:9d:38:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0807601bc44422c8d23a3cd72bfea1bbf2a0563a Validity Not Before: Dec 21 10:01:21 2025 GMT Not After : Dec 22 10:01:21 2025 GMT Subject: CN=159c63369b1b4c29e06798cfa53fa97a6cd2c1c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d8:94:52:c2:7d:b2:d9:ec:62:d1:e9:09:f1: cf:48:0d:1d:26:c3:7f:b9:8f:67:f4:dc:c3:2e:55: 74:8a:c8:9b:20:0a:1a:36:db:00:a0:a6:38:a9:2e: c3:13:9e:af:24:df:4c:d6:21:e2:19:42:b8:82:fb: 6a:83:b6:1e:db:0a:6f:d7:dc:27:c4:85:95:af:4f: 7a:b0:f6:50:d6:58:fb:09:6d:fa:30:f2:1e:49:f0: 51:25:8a:d1:08:2a:34:72:3e:53:e0:69:91:12:eb: 2c:06:ea:71:79:91:b0:67:ef:d8:c4:d8:7a:36:c0: 06:e7:2e:17:e6:32:70:08:5e:00:52:1f:a0:68:38: b4:a5:b6:4a:8c:57:9c:0e:08:a5:d6:32:9e:78:dd: 2b:96:47:37:22:bf:c1:64:1f:a8:b9:f2:81:7d:3f: 79:63:8c:a8:10:a2:de:df:5b:cd:1e:40:93:d9:23: 8e:3e:15:31:30:fe:ac:5e:36:81:9d:e0:83:aa:ec: fc:55:da:96:7a:02:bc:e2:e3:f8:70:f4:49:b8:20: ad:c9:c7:68:09:3e:5b:48:44:6a:93:29:bd:7c:f9: 98:1c:e2:d7:f9:11:9a:d9:94:11:91:4f:ad:7c:ef: 9f:7c:6c:1e:2f:2f:56:f6:ca:ae:7e:61:83:28:38: e1:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:9C:63:36:9B:1B:4C:29:E0:67:98:CF:A5:3F:A9:7A:6C:D2:C1:C7 X509v3 Authority Key Identifier: keyid:08:07:60:1B:C4:44:22:C8:D2:3A:3C:D7:2B:FE:A1:BB:F2:A0:56:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAdgG8REIsjSOjzXK_6hu_KgVjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/182621-cc99-4385-9368-5d61fe2631d0/1/CAdgG8REIsjSOjzXK_6hu_KgVjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:51:41:80:f0:65:5f:71:e0:89:3d:a6:2c:1b:89:d5:f2:24: b1:6a:ca:a4:11:e9:84:dd:bf:30:c1:34:86:16:7e:38:35:8f: 3c:97:07:f5:b0:0f:7e:46:5d:55:51:51:07:b8:65:e9:3d:08: 0a:14:ea:74:0f:4e:c8:f2:8b:ab:bb:06:46:5f:c2:80:d5:2a: 62:3d:88:60:60:3d:8c:cd:d8:67:c0:c3:b6:44:dd:91:99:b6: 35:80:3f:c6:1a:f2:cf:15:88:a1:bf:eb:9c:c1:2c:97:22:c3: 9f:18:53:7d:e8:43:61:4c:5d:b2:81:1f:10:e7:59:91:6b:3c: 05:0f:3d:9e:72:b3:39:13:c0:0a:e6:9b:73:bb:a3:62:31:4f: b8:44:2c:48:6d:8f:83:07:a5:2d:e4:60:c7:07:ab:d2:79:46: e7:9f:d7:a5:8c:a7:19:c4:54:61:2a:a9:2b:49:55:20:50:87: 6a:c5:71:d7:b5:7e:0c:92:bd:57:6f:d5:85:b8:63:0b:61:15: 4e:1d:9e:b8:a7:c6:00:7b:37:88:4f:3a:9b:23:8c:09:20:2e: 4b:6a:ec:a8:80:06:6c:de:9c:33:b0:36:a8:e3:0f:0a:1e:21: e7:47:e7:5b:1c:d6:d5:96:2f:c3:26:f1:b5:0f:67:18:f8:cc: 72:87:99:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAW0JMzTQB3lbaHgOcnTjUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDc2MDFiYzQ0NDIyYzhkMjNhM2NkNzJiZmVhMWJiZjJh MDU2M2EwHhcNMjUxMjIxMTAwMTIxWhcNMjUxMjIyMTAwMTIxWjAzMTEwLwYDVQQD EygxNTljNjMzNjliMWI0YzI5ZTA2Nzk4Y2ZhNTNmYTk3YTZjZDJjMWM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtiUUsJ9stnsYtHpCfHPSA0dJsN/ uY9n9NzDLlV0isibIAoaNtsAoKY4qS7DE56vJN9M1iHiGUK4gvtqg7Ye2wpv19wn xIWVr096sPZQ1lj7CW36MPIeSfBRJYrRCCo0cj5T4GmREussBupxeZGwZ+/YxNh6 NsAG5y4X5jJwCF4AUh+gaDi0pbZKjFecDgil1jKeeN0rlkc3Ir/BZB+oufKBfT95 Y4yoEKLe31vNHkCT2SOOPhUxMP6sXjaBneCDquz8VdqWegK84uP4cPRJuCCtycdo CT5bSERqkym9fPmYHOLX+RGa2ZQRkU+tfO+ffGweLy9W9squfmGDKDjhmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWcYzabG0wp4GeYz6U/qXps0sHHMB8GA1UdIwQY MBaAFAgHYBvERCLI0jo81yv+obvyoFY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgt NWQ2MWZlMjYzMWQwLzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8xODI2MjEtY2M5OS00Mzg1LTkzNjgtNWQ2MWZlMjYzMWQw LzEvQ0FkZ0c4UkVJc2pTT2p6WEtfNmh1X0tnVmpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjVFBgPBl X3HgiT2mLBuJ1fIksWrKpBHphN2/MME0hhZ+ODWPPJcH9bAPfkZdVVFRB7hl6T0I ChTqdA9OyPKLq7sGRl/CgNUqYj2IYGA9jM3YZ8DDtkTdkZm2NYA/xhryzxWIob/r nMEslyLDnxhTfehDYUxdsoEfEOdZkWs8BQ89nnKzORPACuabc7ujYjFPuEQsSG2P gwelLeRgxwer0nlG55/XpYynGcRUYSqpK0lVIFCHasVx17V+DJK9V2/VhbhjC2EV Th2euKfGAHs3iE86myOMCSAuS2rsqIAGbN6cM7A2qOMPCh4h50fnWxzW1ZYvwybx tQ9nGPjMcoeZag== -----END CERTIFICATE-----Generated at Sun Dec 21 18:55:30 2025 by rpki-client