This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft File: mKUzMIdAu70he_adzpCz9UEghFc.mft (raw, json) Hash identifier: SOsCi9EL08ypL83RNB0itiXz5am9wbDQic7+MyIzXM0= Subject key identifier: DB:D0:30:F3:36:D7:06:6A:06:14:F1:42:1D:BB:38:0D:E3:CB:81:12 Authority key identifier: 98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 Certificate issuer: /CN=98a533308740bbbd217bf69dce90b3f541208457 Certificate serial: 019B3AC685EDB94C9D94291B67B92DA063D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 08:00:47 +0000 Manifest this update: Sat 20 Dec 2025 08:00:47 +0000 Manifest next update: Sun 21 Dec 2025 08:00:47 +0000 Files and hashes: 1: 4hnUUt9Ys_eQWvU2fA6JemX65dw.roa (hash: ntUnKbzWvKshnrPe1olGFJu/nCj9Xb/2m4Wf2hJLEss=) 2: mKUzMIdAu70he_adzpCz9UEghFc.crl (hash: HG7idsi65+qx3X1sbXmjriiqLubMzmsoxa2fv3dahl8=) 3: sfQ3GEtYzhBBWxqpfOQ0GcKpsbY.roa (hash: wrk4xF0OxGaC9MkY6FPvwbKzU+JxYtuzUOz5b0tcuxA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:c6:85:ed:b9:4c:9d:94:29:1b:67:b9:2d:a0:63:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a533308740bbbd217bf69dce90b3f541208457 Validity Not Before: Dec 20 08:00:47 2025 GMT Not After : Dec 21 08:00:47 2025 GMT Subject: CN=dbd030f336d7066a0614f1421dbb380de3cb8112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:8e:99:bf:b6:d2:51:99:85:6b:2d:70:56: d4:23:7a:08:a2:3c:b7:a4:5e:4a:a9:64:db:48:d1: f9:dc:0a:16:67:57:f3:22:35:e2:3f:3f:50:1e:73: 79:bd:e5:42:63:11:8e:d4:44:f0:55:e8:86:36:7f: f0:e4:02:41:20:90:5d:f3:7e:9e:a2:41:d9:27:2c: a8:3c:e0:3b:c7:95:1d:4f:e8:43:92:21:ac:ad:c1: da:ed:b1:a6:b3:a2:d7:30:06:5c:b8:f1:fd:5c:33: be:9e:e0:99:35:95:50:62:51:02:33:67:c1:bd:ce: b0:9d:72:cb:fa:c9:81:25:72:7c:ee:00:b9:43:5f: 7a:59:18:3f:ee:a7:c0:fd:68:9d:8d:0b:94:30:cc: 7a:30:de:9d:5e:be:ba:1a:91:44:cd:d5:b9:d7:4d: a2:c7:c5:a3:f3:76:5a:4a:3c:07:81:6d:3f:89:28: c9:0a:8b:61:ff:d2:e1:b7:9f:d9:0b:5f:b6:ad:7e: b2:17:e1:f9:1f:45:b0:10:3e:01:a1:40:d9:8e:5e: 92:05:db:01:92:a9:b4:3c:ae:b3:0e:23:24:e2:1b: 8f:ce:9e:b3:e1:03:cb:65:41:aa:00:6c:22:95:7f: 75:c3:8e:af:62:96:7f:3e:d0:58:6e:f7:c4:44:1f: 1d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D0:30:F3:36:D7:06:6A:06:14:F1:42:1D:BB:38:0D:E3:CB:81:12 X509v3 Authority Key Identifier: keyid:98:A5:33:30:87:40:BB:BD:21:7B:F6:9D:CE:90:B3:F5:41:20:84:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKUzMIdAu70he_adzpCz9UEghFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/6a5394-0b05-4538-b0cd-9f6890f92e60/1/mKUzMIdAu70he_adzpCz9UEghFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:44:e3:dd:a7:b9:51:aa:6a:ca:69:22:5e:2b:af:c6:22:d9: b2:fc:46:c3:cb:d5:3b:35:8c:1a:37:b6:d6:09:fe:fd:51:3a: 67:da:ab:9e:d3:1d:02:ad:c0:7d:9d:5c:33:aa:03:12:2f:23: b9:91:5c:7c:af:7c:b6:84:97:90:f4:0e:ba:45:f3:11:25:3f: 35:3c:8b:07:e4:b6:ee:41:94:16:61:de:ae:c3:71:31:f8:2a: e3:4a:7d:41:57:75:eb:83:00:45:62:3e:4f:34:26:9c:ae:3d: a7:cd:26:e7:12:42:54:43:3d:11:b1:b0:fd:7a:0f:e3:98:19: 32:7b:eb:8a:81:c8:53:fb:a7:23:c6:52:14:b1:67:5b:3b:ab: eb:57:75:cd:40:8b:aa:4e:34:fb:8d:63:52:c1:66:40:5d:32: 63:41:3d:fb:b0:4c:04:1a:34:d1:d9:5d:2b:1b:93:70:c1:65: 4d:f5:e8:2e:25:8b:cb:4a:74:2a:21:86:04:45:b4:b5:b0:f2: 03:df:69:2e:80:56:c0:bb:4c:0c:1b:4b:7b:e8:91:51:dc:8e: e6:52:c5:b3:47:ee:89:2f:4f:32:bd:f0:ac:62:79:8a:42:4a: c3:6e:cf:14:49:13:e0:cc:d9:3b:fd:5a:71:8d:47:86:09:7e: 53:50:ac:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6xoXtuUydlCkbZ7ktoGPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4YTUzMzMwODc0MGJiYmQyMTdiZjY5ZGNlOTBiM2Y1NDEy MDg0NTcwHhcNMjUxMjIwMDgwMDQ3WhcNMjUxMjIxMDgwMDQ3WjAzMTEwLwYDVQQD EyhkYmQwMzBmMzM2ZDcwNjZhMDYxNGYxNDIxZGJiMzgwZGUzY2I4MTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+WOmb+20lGZhWstcFbUI3oIojy3 pF5KqWTbSNH53AoWZ1fzIjXiPz9QHnN5veVCYxGO1ETwVeiGNn/w5AJBIJBd836e okHZJyyoPOA7x5UdT+hDkiGsrcHa7bGms6LXMAZcuPH9XDO+nuCZNZVQYlECM2fB vc6wnXLL+smBJXJ87gC5Q196WRg/7qfA/WidjQuUMMx6MN6dXr66GpFEzdW5102i x8Wj83ZaSjwHgW0/iSjJCoth/9Lht5/ZC1+2rX6yF+H5H0WwED4BoUDZjl6SBdsB kqm0PK6zDiMk4huPzp6z4QPLZUGqAGwilX91w46vYpZ/PtBYbvfERB8dVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNvQMPM21wZqBhTxQh27OA3jy4ESMB8GA1UdIwQY MBaAFJilMzCHQLu9IXv2nc6Qs/VBIIRXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2Qt OWY2ODkwZjkyZTYwLzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi82YTUzOTQtMGIwNS00NTM4LWIwY2QtOWY2ODkwZjkyZTYw LzEvbUtVek1JZEF1NzBoZV9hZHpwQ3o5VUVnaEZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw0Tj3ae5 UapqymkiXiuvxiLZsvxGw8vVOzWMGje21gn+/VE6Z9qrntMdAq3AfZ1cM6oDEi8j uZFcfK98toSXkPQOukXzESU/NTyLB+S27kGUFmHersNxMfgq40p9QVd164MARWI+ TzQmnK49p80m5xJCVEM9EbGw/XoP45gZMnvrioHIU/unI8ZSFLFnWzur61d1zUCL qk40+41jUsFmQF0yY0E9+7BMBBo00dldKxuTcMFlTfXoLiWLy0p0KiGGBEW0tbDy A99pLoBWwLtMDBtLe+iRUdyO5lLFs0fuiS9PMr3wrGJ5ikJKw27PFEkT4MzZO/1a cY1Hhgl+U1CsyA== -----END CERTIFICATE-----Generated at Sat Dec 20 15:13:59 2025 by rpki-client