This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft File: _x9hW5GDn1HtOltTdTsnsCx22pU.mft (raw, json) Hash identifier: cqMvREsoIPq4W4hDGuXlQOEoEGBaLu1vP7zp1qIwuYg= Subject key identifier: 7C:AF:F7:10:95:BF:2F:92:A3:22:82:80:32:BD:DB:C2:FE:8C:3A:6C Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Certificate serial: 019B3C46F6665942ECEC6C46AFE1DD33197E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 15:00:42 +0000 Manifest this update: Sat 20 Dec 2025 15:00:42 +0000 Manifest next update: Sun 21 Dec 2025 15:00:42 +0000 Files and hashes: 1: 7a7WUL8xvDPo2P-5omM4jYtGU5Y.roa (hash: UostfHkB3oR0Iku8D5pESC2eAmHKknmIvGYXu5RiVk8=) 2: E72VdoRs1WH4lPVFyfKcgtxOU8Q.roa (hash: LmX4spgkKMlRcTCE+F8dcGQpsB1FUNFcfYjRwXtYks0=) 3: _x9hW5GDn1HtOltTdTsnsCx22pU.crl (hash: qHLXvjVlsh2M7mU2HibJN7Sq694xH9GZH5YwuuynuBg=) 4: utXzgzMJjaIrp5ghklXHQNuDj0w.roa (hash: Y9s+msDVsT/czxYxM2UzwdwxQOsm8/16ui4R//h8OS4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:f6:66:59:42:ec:ec:6c:46:af:e1:dd:33:19:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95 Validity Not Before: Dec 20 15:00:42 2025 GMT Not After : Dec 21 15:00:42 2025 GMT Subject: CN=7caff71095bf2f92a322828032bddbc2fe8c3a6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:65:02:b9:68:14:a4:0e:9b:e1:2f:32:cb: 4a:08:e1:58:62:9b:fe:16:16:ca:7c:f4:49:1e:ac: 58:eb:61:dc:d8:7e:4e:c3:f7:46:e6:e9:de:09:22: bd:51:d4:67:ec:13:7e:d9:67:59:d9:b1:d2:3c:65: 19:88:d6:3d:86:de:7a:63:13:07:fc:16:dc:5f:cc: 2a:39:20:9e:16:09:c8:12:39:c1:87:70:f8:39:25: 35:1c:36:1b:68:83:08:2f:c9:a6:15:dd:4d:8a:97: 64:3d:9d:ef:fc:49:67:a9:ea:8d:bf:4b:f0:34:ed: ee:e8:14:a2:4c:c2:5d:00:4c:e7:06:e4:0e:64:6b: 6e:e7:64:e9:10:ce:3c:91:5f:5e:e7:f2:8b:02:4a: c2:bb:97:5d:62:41:5d:9d:52:a6:92:d1:35:10:ae: 83:3f:c4:1c:56:e2:af:5a:fa:29:02:ef:f1:36:4a: 5f:42:39:94:b6:e6:76:8e:36:e0:6f:a6:14:21:7b: e9:d3:b1:c1:4d:4c:1a:60:ee:74:60:a6:e4:d8:e9: d2:9a:01:3c:ec:0e:e6:d4:fa:44:68:49:bc:7e:09: bf:97:e3:57:d9:d9:02:b1:f5:69:ee:4c:31:9b:d3: bf:33:32:e7:2c:37:c9:d8:78:87:81:1a:9d:8a:a4: 31:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:AF:F7:10:95:BF:2F:92:A3:22:82:80:32:BD:DB:C2:FE:8C:3A:6C X509v3 Authority Key Identifier: keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:2d:8c:1a:76:3d:19:b0:37:64:f1:b5:a1:f6:47:8a:20:f9: 01:99:fe:ae:03:de:0d:23:ff:61:8e:10:2f:ac:c8:a6:da:92: 56:d9:a2:ae:2e:ed:96:e8:53:75:a8:e0:16:41:de:fa:eb:06: ed:36:28:e5:d6:e1:3c:e2:fc:db:39:1c:38:55:48:a8:26:67: c9:c8:a1:d1:29:1c:04:3c:63:3d:ba:33:39:37:0c:ed:2a:0d: e2:fe:37:78:51:f8:b2:fd:7e:69:06:12:26:c5:fc:39:ad:59: 2a:60:64:7d:91:97:75:34:e9:c1:1f:08:8a:10:19:c3:3e:1a: 48:f6:b6:7e:e0:e1:5f:fa:f0:eb:ff:69:3e:c6:a1:5f:f6:7a: dc:d6:e1:3e:77:7a:77:fc:a9:e4:7a:d0:9f:25:9d:7b:f6:85: 67:46:8b:79:3a:81:60:fa:fc:ef:82:b2:9f:0a:2a:2f:af:ed: bf:f4:8f:ab:21:37:e9:b0:7a:bb:54:08:7d:71:b0:60:6e:af: 51:4c:11:9e:2e:bc:95:54:f3:af:44:b3:3e:20:fb:1e:a3:6e: 65:99:59:f8:d6:a7:89:2f:ce:91:da:37:37:a9:1a:3b:77:d9: 25:af:da:30:83:57:fd:55:6e:72:de:18:26:d4:e9:ba:7f:78: 09:6d:79:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RvZmWULs7GxGr+HdMxl+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMWY2MTViOTE4MzlmNTFlZDNhNWI1Mzc1M2IyN2IwMmM3 NmRhOTUwHhcNMjUxMjIwMTUwMDQyWhcNMjUxMjIxMTUwMDQyWjAzMTEwLwYDVQQD Eyg3Y2FmZjcxMDk1YmYyZjkyYTMyMjgyODAzMmJkZGJjMmZlOGMzYTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGdlArloFKQOm+EvMstKCOFYYpv+ FhbKfPRJHqxY62Hc2H5Ow/dG5uneCSK9UdRn7BN+2WdZ2bHSPGUZiNY9ht56YxMH /BbcX8wqOSCeFgnIEjnBh3D4OSU1HDYbaIMIL8mmFd1NipdkPZ3v/ElnqeqNv0vw NO3u6BSiTMJdAEznBuQOZGtu52TpEM48kV9e5/KLAkrCu5ddYkFdnVKmktE1EK6D P8QcVuKvWvopAu/xNkpfQjmUtuZ2jjbgb6YUIXvp07HBTUwaYO50YKbk2OnSmgE8 7A7m1PpEaEm8fgm/l+NX2dkCsfVp7kwxm9O/MzLnLDfJ2HiHgRqdiqQxFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHyv9xCVvy+SoyKCgDK928L+jDpsMB8GA1UdIwQY MBaAFP8fYVuRg59R7TpbU3U7J7AsdtqVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQt NzQ3NWY3MGRmOWZhLzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9iNDE2YTUtZWU0Zi00Y2M3LWIwYzQtNzQ3NWY3MGRmOWZh LzEvX3g5aFc1R0RuMUh0T2x0VGRUc25zQ3gyMnBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXS2MGnY9 GbA3ZPG1ofZHiiD5AZn+rgPeDSP/YY4QL6zIptqSVtmiri7tluhTdajgFkHe+usG 7TYo5dbhPOL82zkcOFVIqCZnycih0SkcBDxjPbozOTcM7SoN4v43eFH4sv1+aQYS JsX8Oa1ZKmBkfZGXdTTpwR8IihAZwz4aSPa2fuDhX/rw6/9pPsahX/Z63NbhPnd6 d/yp5HrQnyWde/aFZ0aLeTqBYPr874KynwoqL6/tv/SPqyE36bB6u1QIfXGwYG6v UUwRni68lVTzr0SzPiD7HqNuZZlZ+NaniS/Okdo3N6kaO3fZJa/aMINX/VVuct4Y JtTpun94CW15vg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:29:13 2025 by rpki-client