This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft File: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft (raw, json) Hash identifier: 2rLVViruHTfUd94madM/WFcL3eIbb9nnlYRxrHIGekk= Subject key identifier: DD:CC:AC:0E:53:83:3E:84:01:44:0E:6C:6F:36:5D:93:D4:25:F1:57 Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Certificate serial: 019B6768B5E9212852DC638B0293190E62C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft Manifest number: 179E Signing time: Mon 29 Dec 2025 00:01:14 +0000 Manifest this update: Mon 29 Dec 2025 00:01:14 +0000 Manifest next update: Tue 30 Dec 2025 00:01:14 +0000 Files and hashes: 1: FbMzdZ6d131ZqxxEpoI_GtnkvJI.roa (hash: 7d7wChwbMGPeRXkmkbPscoua0cT1OAJDT7heJW95UEI=) 2: rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl (hash: t6vQy7L4IdHwDwv+cyZSh+AF8viM5wqcYcrYjofS7ek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 00:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:67:68:b5:e9:21:28:52:dc:63:8b:02:93:19:0e:62:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Validity Not Before: Dec 29 00:01:14 2025 GMT Not After : Dec 30 00:01:14 2025 GMT Subject: CN=ddccac0e53833e8401440e6c6f365d93d425f157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:ed:33:2c:b3:79:86:c7:09:2a:54:33:75: 86:cf:90:52:d6:31:3c:66:d1:51:11:0c:d2:2a:02: c8:38:89:cc:c7:ae:2e:9a:e0:5a:d1:8c:60:c7:71: ed:46:4d:8a:1f:1f:af:37:8c:80:f0:26:36:89:4e: 55:e0:39:a3:96:bf:68:24:8f:64:d0:e6:42:4c:13: 52:aa:76:8d:fb:9e:07:38:b1:6f:f8:a8:15:7c:20: 47:31:ac:0f:a9:fc:4d:66:c0:b9:6f:56:7c:06:c0: 8c:94:8d:84:06:db:3f:70:ae:59:26:31:6e:5a:06: 0e:91:ea:c8:03:6e:40:6b:71:14:bb:98:f5:3c:90: 44:84:30:63:ad:11:22:f8:e6:75:92:60:13:9f:37: c6:c4:28:8a:4f:f4:22:34:7c:20:ba:d3:c1:87:b0: 39:3f:9d:74:87:42:af:ed:d1:af:a2:5e:1f:d4:b7: 66:b6:06:4d:69:15:a2:f2:36:fb:cc:28:b4:76:79: 52:65:e7:07:68:3c:93:88:59:22:cf:f2:c2:02:12: cf:f9:94:a7:eb:42:79:b4:08:e3:cf:a3:43:df:d6: 46:24:2c:da:a2:e0:54:08:2f:08:44:76:a2:27:f5: 21:81:1f:76:e9:89:96:39:b5:e2:82:e7:01:24:90: e1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CC:AC:0E:53:83:3E:84:01:44:0E:6C:6F:36:5D:93:D4:25:F1:57 X509v3 Authority Key Identifier: keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6c:f4:ec:c5:6b:bc:92:35:95:bf:4d:7b:ec:36:be:9a:44: 56:b9:f9:06:22:ad:44:d0:2b:a9:b6:c8:b9:ba:54:76:71:4e: 1a:1d:86:be:11:92:ac:8d:89:8a:50:1f:3d:f0:cb:83:a7:81: be:86:87:b4:b3:b3:bc:18:eb:54:87:01:4d:1e:86:ec:29:c5: ba:1b:71:e1:7b:c4:38:2f:29:62:5d:fc:0c:da:3d:79:79:fd: 8d:68:86:71:ea:1a:32:73:82:8d:d2:04:00:a1:4f:e0:c6:59: 8c:24:e1:0d:74:3a:03:fb:b8:69:73:63:2c:f9:d4:9d:bf:71: a0:99:e0:72:98:e2:ee:b1:1a:1d:ed:ea:f5:c3:b6:54:db:1f: 48:bf:6b:b8:7f:f6:f3:74:7a:9e:ed:ad:d8:81:fe:d3:fc:84: 37:ba:14:d0:ac:e0:ce:97:cc:3a:df:17:e3:ed:4f:90:1c:52: 3e:a6:78:81:85:f6:df:6a:88:3e:e1:14:c0:24:32:7b:45:0c: 3e:fb:5b:d6:54:0e:69:68:4f:fb:b6:2f:7f:7a:04:27:93:8e: 27:f7:10:6e:6c:a5:b5:6c:da:d5:01:b5:3d:21:77:34:ff:8f: 5c:cb:f1:23:c1:62:90:91:29:5c:37:76:a9:e5:94:e1:fc:b0: ac:d2:57:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtnaLXpIShS3GOLApMZDmLFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTAyZjFhZjE3ZDAwZmQ4MGEzZDlmZTlmZmU4MWQwNGNl MTc0NDcwHhcNMjUxMjI5MDAwMTE0WhcNMjUxMjMwMDAwMTE0WjAzMTEwLwYDVQQD EyhkZGNjYWMwZTUzODMzZTg0MDE0NDBlNmM2ZjM2NWQ5M2Q0MjVmMTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW3tMyyzeYbHCSpUM3WGz5BS1jE8 ZtFREQzSKgLIOInMx64umuBa0Yxgx3HtRk2KHx+vN4yA8CY2iU5V4Dmjlr9oJI9k 0OZCTBNSqnaN+54HOLFv+KgVfCBHMawPqfxNZsC5b1Z8BsCMlI2EBts/cK5ZJjFu WgYOkerIA25Aa3EUu5j1PJBEhDBjrREi+OZ1kmATnzfGxCiKT/QiNHwgutPBh7A5 P510h0Kv7dGvol4f1LdmtgZNaRWi8jb7zCi0dnlSZecHaDyTiFkiz/LCAhLP+ZSn 60J5tAjjz6ND39ZGJCzaouBUCC8IRHaiJ/UhgR926YmWObXigucBJJDhlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3MrA5Tgz6EAUQObG82XZPUJfFXMB8GA1UdIwQY MBaAFK0QLxrxfQD9gKPZ/p/+gdBM4XRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAt M2IxYWFkOWZkZDU3LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAtM2IxYWFkOWZkZDU3 LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn2z07MVr vJI1lb9Ne+w2vppEVrn5BiKtRNArqbbIubpUdnFOGh2GvhGSrI2JilAfPfDLg6eB voaHtLOzvBjrVIcBTR6G7CnFuhtx4XvEOC8pYl38DNo9eXn9jWiGceoaMnOCjdIE AKFP4MZZjCThDXQ6A/u4aXNjLPnUnb9xoJngcpji7rEaHe3q9cO2VNsfSL9ruH/2 83R6nu2t2IH+0/yEN7oU0KzgzpfMOt8X4+1PkBxSPqZ4gYX232qIPuEUwCQye0UM Pvtb1lQOaWhP+7Yvf3oEJ5OOJ/cQbmyltWza1QG1PSF3NP+PXMvxI8FikJEpXDd2 qeWU4fywrNJX0Q== -----END CERTIFICATE-----Generated at Mon Dec 29 10:01:32 2025 by rpki-client