This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json) Hash identifier: w8YXesoVtvBaLAE5QQ5eP0dkzc+WGE5jgpBPncEVOeE= Subject key identifier: 27:4A:98:9A:13:CE:32:CE:0F:D6:C5:0C:0E:2C:C9:24:7E:A1:24:F2 Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Certificate serial: 019B435C2B10D68E3AE81147CFA601EA891D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 00:01:12 +0000 Manifest this update: Mon 22 Dec 2025 00:01:12 +0000 Manifest next update: Tue 23 Dec 2025 00:01:12 +0000 Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=) 2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: 9fXUsmD12MeV6bYtiEizxYttoAkm9VQa3slaY+QABZM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:5c:2b:10:d6:8e:3a:e8:11:47:cf:a6:01:ea:89:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd Validity Not Before: Dec 22 00:01:12 2025 GMT Not After : Dec 23 00:01:12 2025 GMT Subject: CN=274a989a13ce32ce0fd6c50c0e2cc9247ea124f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:74:13:b9:f6:bd:8e:33:3d:a3:55:28:55:d0: ed:8f:6a:d3:ad:dd:ea:c9:42:8e:98:dd:bb:1d:34: a7:b1:8f:db:84:6d:2d:52:4c:cd:3b:c7:44:50:44: 2c:48:5c:06:b4:90:c1:be:56:cd:09:1e:a2:6f:5c: b8:5c:4a:e4:ee:cb:92:1d:e6:ec:b5:a2:a7:0e:2b: 5f:2d:da:78:52:4f:57:66:dd:2f:f1:e0:bd:4d:03: 60:9a:6c:47:87:76:5a:02:be:ce:d8:da:a1:66:f5: c2:98:75:65:fb:f5:b5:37:e1:3b:f6:00:9f:cf:e2: 1e:30:a5:b2:d9:48:eb:b5:d6:48:5a:4e:eb:b8:7b: 83:48:19:14:eb:48:fe:0c:88:10:ba:29:ce:8a:c0: 8a:8b:64:a4:0f:60:ee:70:63:b6:b4:18:86:a8:d9: 03:7b:cb:19:ef:a9:26:a7:26:a9:11:c5:3d:41:cb: b9:98:e2:2e:4b:4d:6b:9c:a3:a6:44:5e:19:66:bb: f7:c8:f6:7b:13:c4:ff:df:35:87:ee:80:e6:dc:f9: f1:f5:1c:f3:64:af:c7:a3:c6:71:9a:da:40:fb:6a: 6f:01:6d:d4:1d:6a:b9:b8:91:f0:e9:6c:a3:8c:d7: be:56:b7:86:d7:bc:8d:16:4a:4d:c9:22:92:c7:30: 08:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4A:98:9A:13:CE:32:CE:0F:D6:C5:0C:0E:2C:C9:24:7E:A1:24:F2 X509v3 Authority Key Identifier: keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:69:2b:51:60:4a:20:48:50:71:06:18:b1:83:6d:15:ca:a9: 24:49:10:81:2d:38:a2:8f:69:5f:dc:d0:b6:bf:79:bb:27:3a: 82:27:28:7c:69:ca:9e:ba:36:d7:5b:9d:00:a8:1e:94:e3:78: 4d:04:96:0f:8d:35:7b:89:a7:eb:0e:2f:2c:7b:42:5c:37:9c: 5a:5c:0a:21:1a:f7:50:f9:ae:5d:f7:97:bf:30:ad:1b:23:5e: 27:69:c8:2d:37:a8:75:4b:e4:96:e7:75:bb:38:84:f8:5d:99: af:8a:5c:0b:6c:52:14:b1:82:f2:35:13:e9:a6:36:ac:51:4a: aa:14:11:12:39:be:80:6d:8d:67:86:43:b9:ea:70:05:a5:ad: 80:98:f8:8f:de:ae:79:b2:4e:a5:47:75:96:ba:2a:cc:87:ec: 1d:56:af:46:d4:38:9e:c7:43:7c:93:0b:47:ae:bf:c9:92:5b: 9d:99:11:cf:19:bd:78:49:29:33:af:13:20:a2:ad:fd:d5:0b: f1:ec:7a:79:fc:cc:0c:27:05:3d:92:5f:af:6d:a3:dd:63:c6: e3:cd:be:d3:9a:79:1b:11:ae:b3:65:05:26:12:ba:80:e0:45: 3d:69:fb:42:2a:cf:5c:7e:b6:2a:c9:66:a9:7f:1a:d6:69:37: 09:50:47:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDXCsQ1o466BFHz6YB6okdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0 NmE0ZGQwHhcNMjUxMjIyMDAwMTEyWhcNMjUxMjIzMDAwMTEyWjAzMTEwLwYDVQQD EygyNzRhOTg5YTEzY2UzMmNlMGZkNmM1MGMwZTJjYzkyNDdlYTEyNGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3QTufa9jjM9o1UoVdDtj2rTrd3q yUKOmN27HTSnsY/bhG0tUkzNO8dEUEQsSFwGtJDBvlbNCR6ib1y4XErk7suSHebs taKnDitfLdp4Uk9XZt0v8eC9TQNgmmxHh3ZaAr7O2NqhZvXCmHVl+/W1N+E79gCf z+IeMKWy2UjrtdZIWk7ruHuDSBkU60j+DIgQuinOisCKi2SkD2DucGO2tBiGqNkD e8sZ76kmpyapEcU9Qcu5mOIuS01rnKOmRF4ZZrv3yPZ7E8T/3zWH7oDm3Pnx9Rzz ZK/Ho8ZxmtpA+2pvAW3UHWq5uJHw6WyjjNe+VreG17yNFkpNySKSxzAIrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCdKmJoTzjLOD9bFDA4sySR+oSTyMB8GA1UdIwQY MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4 LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWkrUWBK IEhQcQYYsYNtFcqpJEkQgS04oo9pX9zQtr95uyc6gicofGnKnro211udAKgelON4 TQSWD401e4mn6w4vLHtCXDecWlwKIRr3UPmuXfeXvzCtGyNeJ2nILTeodUvklud1 uziE+F2Zr4pcC2xSFLGC8jUT6aY2rFFKqhQREjm+gG2NZ4ZDuepwBaWtgJj4j96u ebJOpUd1lroqzIfsHVavRtQ4nsdDfJMLR66/yZJbnZkRzxm9eEkpM68TIKKt/dUL 8ex6efzMDCcFPZJfr22j3WPG482+05p5GxGus2UFJhK6gOBFPWn7QirPXH62Kslm qX8a1mk3CVBHYA== -----END CERTIFICATE-----Generated at Mon Dec 22 06:28:12 2025 by rpki-client