This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft File: aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json) Hash identifier: yJOImq1b/6S9Gi5F6Y1iZlhLw2dGFW7cqRXRuCFvINE= Subject key identifier: CA:15:82:D5:51:85:BC:04:5C:32:D5:B7:A6:06:E6:DF:A2:A9:A1:CC Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 Certificate issuer: /CN=682c842dfa2a1e714727bccb95f165347103f277 Certificate serial: 019B3DC81F8A7D34091173EE40FD74BA89C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft Manifest number: 178E Signing time: Sat 20 Dec 2025 22:01:23 +0000 Manifest this update: Sat 20 Dec 2025 22:01:23 +0000 Manifest next update: Sun 21 Dec 2025 22:01:23 +0000 Files and hashes: 1: AM2eguci0WqAjvDa2wEEs02a9ss.roa (hash: HxFw3QSA2IdlaBzDSdCXTHy8cdzWxokmTf+38kzfwKI=) 2: Pe92asVi3-iv4Efk4aEpPnXE4Ok.roa (hash: Dai1lG17fGD9BnTUUlUvQILwXK5E8pX/ztfvO8UR/Sc=) 3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: z/ApYst+Pusjww+/UoEdXPiBeC/tfKr7hUv2kSIVbYA=) 4: ygPca0O99w3Q4m6yQX8TO0Whs5s.roa (hash: qvcmTDWYJNgYWiCmf5F1FBjGQvGT5OVUplX4UvYYEFk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1f:8a:7d:34:09:11:73:ee:40:fd:74:ba:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277 Validity Not Before: Dec 20 22:01:23 2025 GMT Not After : Dec 21 22:01:23 2025 GMT Subject: CN=ca1582d55185bc045c32d5b7a606e6dfa2a9a1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:d7:90:bc:ed:ac:64:aa:f5:ec:8a:2c:ab: 85:ed:d2:5f:b9:f0:35:5c:ab:29:77:b9:37:67:d4: 0c:34:88:47:17:36:67:9c:9f:39:76:ed:73:c1:78: 67:e8:1d:fb:38:c0:99:4a:d1:61:32:a2:3d:74:15: ed:39:7b:5a:52:f8:54:0d:88:db:92:14:60:04:c7: d2:b3:56:f6:6a:42:a8:f7:a3:3f:7a:cb:05:24:d4: e2:05:53:1d:af:a5:09:78:fd:6a:55:f4:79:3f:ce: 91:df:c2:04:d7:95:8b:b7:28:ed:67:d5:4c:b3:b3: f2:e8:04:12:08:9a:76:18:24:d1:f4:17:2c:a4:17: 85:3f:0f:37:85:4e:5e:0d:c2:aa:10:e5:08:82:0f: ec:c6:20:6f:26:1b:88:f5:2a:29:fc:1f:f9:84:29: ce:c8:f5:c2:1b:ca:b0:f1:15:ff:11:fe:57:40:2d: 28:3c:db:43:c6:6c:65:4b:2b:d0:25:14:4f:2b:c8: 5b:e3:6b:6b:8e:3f:fd:6d:86:ae:8f:7b:77:18:29: c1:3a:8a:98:f9:98:40:c4:82:97:49:7a:63:c0:43: dd:f7:8a:4b:a2:b4:f2:1d:c8:e9:72:90:1e:c8:09: a6:35:7d:7c:4d:88:9b:b0:f9:f3:cb:d6:92:13:75: 25:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:15:82:D5:51:85:BC:04:5C:32:D5:B7:A6:06:E6:DF:A2:A9:A1:CC X509v3 Authority Key Identifier: keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:e9:ac:df:fb:92:97:4d:73:86:51:c4:a8:b7:f2:7f:66:41: 0f:48:3f:04:9f:53:b2:8e:42:90:70:a0:04:52:e7:69:d0:ff: 34:fb:aa:3a:fd:b7:c0:2f:25:31:b7:f0:33:05:45:cb:39:b7: 2e:31:ad:60:71:a0:80:92:a5:97:e0:b3:10:dd:36:ef:c2:ea: ca:99:d8:cc:1a:e5:21:c2:31:e2:0b:24:09:e2:2e:af:61:08: c1:01:15:ef:58:ea:57:f8:9d:89:9e:05:07:ec:d8:01:24:eb: a4:cf:a8:f7:bb:22:a8:8c:56:1f:82:fe:15:48:30:ba:22:5b: 3b:26:d5:74:b4:1e:25:b3:83:43:3c:28:de:46:de:84:d6:6b: fe:41:d8:cc:c0:ae:3a:69:a6:1a:ec:54:cb:02:e7:f7:ee:61: 2c:6a:ed:7c:93:63:44:02:5a:3f:f6:eb:89:fd:80:e9:ef:cd: 29:e7:06:57:c7:bc:a4:3e:3e:a4:c6:19:74:6f:00:18:49:aa: 63:bd:29:2b:b7:aa:8b:d8:2c:2b:c9:3e:70:9c:56:b8:77:a2: 8b:30:76:20:5e:f1:ee:92:a7:2b:0c:5e:0a:38:18:dc:ef:9c: 74:77:55:43:44:85:2e:e1:51:64:e6:2c:43:f9:e4:3a:53:e9: dd:39:45:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yB+KfTQJEXPuQP10uonAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw M2YyNzcwHhcNMjUxMjIwMjIwMTIzWhcNMjUxMjIxMjIwMTIzWjAzMTEwLwYDVQQD EyhjYTE1ODJkNTUxODViYzA0NWMzMmQ1YjdhNjA2ZTZkZmEyYTlhMWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvTXkLztrGSq9eyKLKuF7dJfufA1 XKspd7k3Z9QMNIhHFzZnnJ85du1zwXhn6B37OMCZStFhMqI9dBXtOXtaUvhUDYjb khRgBMfSs1b2akKo96M/essFJNTiBVMdr6UJeP1qVfR5P86R38IE15WLtyjtZ9VM s7Py6AQSCJp2GCTR9BcspBeFPw83hU5eDcKqEOUIgg/sxiBvJhuI9Sop/B/5hCnO yPXCG8qw8RX/Ef5XQC0oPNtDxmxlSyvQJRRPK8hb42trjj/9bYauj3t3GCnBOoqY +ZhAxIKXSXpjwEPd94pLorTyHcjpcpAeyAmmNX18TYibsPnzy9aSE3UliwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMoVgtVRhbwEXDLVt6YG5t+iqaHMMB8GA1UdIwQY MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt MDhkNjViMzg2MzlkLzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbOms3/uS l01zhlHEqLfyf2ZBD0g/BJ9Tso5CkHCgBFLnadD/NPuqOv23wC8lMbfwMwVFyzm3 LjGtYHGggJKll+CzEN0278LqypnYzBrlIcIx4gskCeIur2EIwQEV71jqV/idiZ4F B+zYASTrpM+o97siqIxWH4L+FUgwuiJbOybVdLQeJbODQzwo3kbehNZr/kHYzMCu OmmmGuxUywLn9+5hLGrtfJNjRAJaP/brif2A6e/NKecGV8e8pD4+pMYZdG8AGEmq Y70pK7eqi9gsK8k+cJxWuHeiizB2IF7x7pKnKwxeCjgY3O+cdHdVQ0SFLuFRZOYs Q/nkOlPp3TlFZw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:23:25 2025 by rpki-client