This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft File: rrZuxejyQF9vjUhuc_uCuN4N7g8.mft (raw, json) Hash identifier: 9U8j19eDpWJdS42I0kgCetCopvposVdaNHmTidjaLr4= Subject key identifier: B2:48:B8:B5:9F:41:C4:16:F8:B0:71:5E:40:D1:93:B6:F7:B9:59:F1 Authority key identifier: AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F Certificate issuer: /CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Certificate serial: 019B4136E39D51B7E99941F0EB585E68487A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft Manifest number: 178E Signing time: Sun 21 Dec 2025 14:01:14 +0000 Manifest this update: Sun 21 Dec 2025 14:01:14 +0000 Manifest next update: Mon 22 Dec 2025 14:01:14 +0000 Files and hashes: 1: 0xAeo2a2iLttbU-9qLwxhP3W5ss.roa (hash: KCgM9KWWYMbjy0SQJWIlI1gevbRgwTSQjmHIQMhZOFo=) 2: 1GGtyTPgPlDy6MPQ5o0gS_2Q9UM.roa (hash: gOi5uzaamNISRfWC/jzX0CQnB58FX9BTQozvqpu683k=) 3: 1VO0RuZDCw_d3nrvSLXPJBFpELM.roa (hash: RVMlSLh90fckV0ULVrxGXrllRUKBMW1qpE2aUDAMp18=) 4: MHaB6YDK7hMFt-_1LMKEcRnolXY.roa (hash: HMU04XiVIqiavwZxk6eCzMS/VCWuh3NjcyT+luDuzS0=) 5: XFEEccbEsmiETxVTXsuQHob0Ig8.roa (hash: gNVdhv6luqDbEY/yZdldKTkFqgtu7cFYTeubRvuYlMs=) 6: XYvBe2DkMF52qzkhOJvtRBiIQio.roa (hash: vc4GpSOFPSWnmLVNnXKMqCyW7C32uripWcLl8WvCvmE=) 7: cgoioMwhBMFnR_o18uz7lh61zXU.roa (hash: muq8Pq9FVp8y13ZY1OD1P/qR19HpxP198AkqSx2L6EM=) 8: rrZuxejyQF9vjUhuc_uCuN4N7g8.crl (hash: 0Cd1jfzl8V8msdUfHU1onvYzBhzVtbEV7DpIQ0EEkws=) 9: s1oFGEPvL8IMjYASLXkMEl3bONc.roa (hash: ID8ZOvyObfK0KrvTgF7I419RUO3QA/UAdGzXegtjwU0=) 10: upooLs-mDkOyiBT2fNGHj5cQ7E4.roa (hash: cglav+FWNX7UNTqPwwJsYgYuI7r/rTbr7vfv4F0chKo=) 11: vVMu6Hcqt_WNniCkUUd49xRBXDg.roa (hash: PFqhmo3voRuIoBNZ1c/3YzTjWO4jWVlUC05kdiWQzXU=) 12: vzw_vkrK3T6hMf3CfVO_XMRDNQY.roa (hash: TyRzYsx0I5A5DgLqk0b56yUe558XEXu6adROBLfEbBY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:e3:9d:51:b7:e9:99:41:f0:eb:58:5e:68:48:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb66ec5e8f2405f6f8d486e73fb82b8de0dee0f Validity Not Before: Dec 21 14:01:14 2025 GMT Not After : Dec 22 14:01:14 2025 GMT Subject: CN=b248b8b59f41c416f8b0715e40d193b6f7b959f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:a1:bd:0b:74:55:f5:f2:4e:82:7b:b3:97: 36:dd:a2:94:b9:b7:54:88:0e:7f:56:a8:41:c1:5d: a6:6c:84:8b:30:ea:0d:98:69:32:a3:a7:de:63:d1: 36:60:93:6a:31:3c:d5:78:5f:28:4a:91:ba:86:9e: 17:da:7e:25:ed:f9:d2:0b:15:82:5e:1a:45:8d:b0: e3:c1:96:ac:10:19:b6:97:5e:9c:2f:77:ed:89:55: 19:2c:bf:a3:61:a0:70:ff:ba:90:5c:b0:f4:77:27: 7f:63:6a:38:e7:27:ce:14:2b:97:96:8b:b4:a4:9a: 96:b4:ee:7d:9b:9a:db:0d:d6:fa:4b:09:5e:78:f3: 1e:88:eb:26:8f:64:84:fb:c7:43:9a:b6:11:62:82: 61:37:23:af:48:4d:ab:64:d8:e0:3f:ea:5a:97:fe: 27:88:f1:32:ba:0d:bb:22:4f:08:97:c5:52:1d:2e: 4d:c7:63:da:7f:96:18:85:e3:52:a0:69:c0:d1:1f: 1a:ae:03:e1:56:d7:86:a1:52:19:0d:bc:2b:52:87: c8:a3:22:ad:81:6f:34:40:6c:0f:60:57:49:bf:f7: ab:fb:13:40:ea:74:aa:6e:c7:89:f2:00:17:c2:1d: 28:44:d7:f9:c6:70:dd:ff:6d:bd:59:7f:37:48:cd: 5d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:48:B8:B5:9F:41:C4:16:F8:B0:71:5E:40:D1:93:B6:F7:B9:59:F1 X509v3 Authority Key Identifier: keyid:AE:B6:6E:C5:E8:F2:40:5F:6F:8D:48:6E:73:FB:82:B8:DE:0D:EE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrZuxejyQF9vjUhuc_uCuN4N7g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/153788-14b7-4551-9ade-6aea9057c800/1/rrZuxejyQF9vjUhuc_uCuN4N7g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:3c:f0:fa:66:6e:f1:ae:a8:8a:4a:3e:32:c6:4e:91:42:d6: 3b:a8:3c:e8:1b:d0:c2:40:cb:df:51:4a:40:2e:e9:6f:50:ac: 1c:30:a9:75:9d:12:ce:d3:ff:f1:17:c8:f0:08:ec:49:01:e3: 81:35:08:02:d8:92:ff:21:20:76:b8:27:d1:4b:c9:9b:c9:8c: e4:af:87:b6:e1:79:c4:1d:ea:9d:47:7e:19:f3:30:d0:9e:ff: 41:33:f2:fe:b1:d8:20:29:90:87:cd:99:2a:85:43:64:0a:71: 17:e0:c2:04:0b:8d:bf:aa:62:aa:5e:8a:12:23:5e:57:e9:27: bd:2d:a2:5a:ad:a1:56:86:53:5e:25:b5:46:31:c4:40:f7:cc: d8:ca:62:1d:ad:fe:1d:3d:bd:c2:65:a8:4f:d6:5a:cc:be:6a: 99:a9:d4:6f:da:0c:84:67:2d:6a:29:61:0b:ee:f2:be:ad:a0: 25:de:fc:46:49:1c:52:fc:e7:c0:f8:21:04:3f:ef:52:95:24: d2:6c:3a:99:32:02:a4:f9:83:1e:e3:66:07:04:54:49:5d:82: 09:73:47:98:16:31:54:9c:76:2e:83:4b:71:13:ed:16:45:b0: be:bf:70:8d:14:aa:3a:c1:25:3e:e4:cb:31:ba:40:d8:df:15: 05:44:45:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNuOdUbfpmUHw61heaEh6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYjY2ZWM1ZThmMjQwNWY2ZjhkNDg2ZTczZmI4MmI4ZGUw ZGVlMGYwHhcNMjUxMjIxMTQwMTE0WhcNMjUxMjIyMTQwMTE0WjAzMTEwLwYDVQQD EyhiMjQ4YjhiNTlmNDFjNDE2ZjhiMDcxNWU0MGQxOTNiNmY3Yjk1OWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbGhvQt0VfXyToJ7s5c23aKUubdU iA5/VqhBwV2mbISLMOoNmGkyo6feY9E2YJNqMTzVeF8oSpG6hp4X2n4l7fnSCxWC XhpFjbDjwZasEBm2l16cL3ftiVUZLL+jYaBw/7qQXLD0dyd/Y2o45yfOFCuXlou0 pJqWtO59m5rbDdb6SwleePMeiOsmj2SE+8dDmrYRYoJhNyOvSE2rZNjgP+pal/4n iPEyug27Ik8Il8VSHS5Nx2Paf5YYheNSoGnA0R8argPhVteGoVIZDbwrUofIoyKt gW80QGwPYFdJv/er+xNA6nSqbseJ8gAXwh0oRNf5xnDd/229WX83SM1dXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJIuLWfQcQW+LBxXkDRk7b3uVnxMB8GA1UdIwQY MBaAFK62bsXo8kBfb41IbnP7grjeDe4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUt NmFlYTkwNTdjODAwLzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8xNTM3ODgtMTRiNy00NTUxLTlhZGUtNmFlYTkwNTdjODAw LzEvcnJadXhlanlRRjl2alVodWNfdUN1TjRON2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhzzw+mZu 8a6oiko+MsZOkULWO6g86BvQwkDL31FKQC7pb1CsHDCpdZ0SztP/8RfI8AjsSQHj gTUIAtiS/yEgdrgn0UvJm8mM5K+HtuF5xB3qnUd+GfMw0J7/QTPy/rHYICmQh82Z KoVDZApxF+DCBAuNv6piql6KEiNeV+knvS2iWq2hVoZTXiW1RjHEQPfM2MpiHa3+ HT29wmWoT9ZazL5qmanUb9oMhGctailhC+7yvq2gJd78RkkcUvznwPghBD/vUpUk 0mw6mTICpPmDHuNmBwRUSV2CCXNHmBYxVJx2LoNLcRPtFkWwvr9wjRSqOsElPuTL MbpA2N8VBURFtA== -----END CERTIFICATE-----Generated at Sun Dec 21 20:37:56 2025 by rpki-client