This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft File: aDg_-p8gvwIcCQJimUIS1xZn7QI.mft (raw, json) Hash identifier: fYn0hUEzAFP9aeYeVkCl2tX5RoW8PjbMXs4Pry3O1Iw= Subject key identifier: 49:9E:47:50:B2:B2:94:A9:BC:7C:42:B4:B8:99:6C:6A:47:31:D1:E7 Authority key identifier: 68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 Certificate issuer: /CN=68383ffa9f20bf021c090262994212d71667ed02 Certificate serial: 019B3EA318CE767E3B869C37FEC23C5E82E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:00:34 +0000 Manifest this update: Sun 21 Dec 2025 02:00:34 +0000 Manifest next update: Mon 22 Dec 2025 02:00:34 +0000 Files and hashes: 1: aDg_-p8gvwIcCQJimUIS1xZn7QI.crl (hash: oGLxKJg75bnuVkJH14P/Ylie48cl4p58Q31RBgBFkZM=) 2: au3QsLFo03d8LYUAjCFPkrVh1G4.roa (hash: isOlLFXxz/6TcM6N4LdFi3q+A0FHjScvgWUQkggZJpo=) 3: bqsYblKj7hcMS1s1tPb3Q-dO_OY.roa (hash: C6NQjixTOIceoGsxhMeDSn6DTrvOtIxF3QPKT2AqmUU=) 4: fZN-mJc8fZOK-6XrfXacVqv1tuE.roa (hash: dKX6X2ROArIQd/pMehz+1TmwgekylLZCGEI0q4Su81U=) 5: qT9a3yWCoydql47MfRG9zQlfRRU.roa (hash: sztKYcCFWM27FMQp6a+1b3A1caK/AF/jWPueCOzMPvo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:18:ce:76:7e:3b:86:9c:37:fe:c2:3c:5e:82:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68383ffa9f20bf021c090262994212d71667ed02 Validity Not Before: Dec 21 02:00:34 2025 GMT Not After : Dec 22 02:00:34 2025 GMT Subject: CN=499e4750b2b294a9bc7c42b4b8996c6a4731d1e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:da:94:2d:3b:e4:2c:23:57:b4:18:a3:3a:e3: 57:d9:6b:83:66:d7:af:b9:6f:3e:bd:49:d8:4f:81: 0a:f7:d4:95:6a:5b:c0:6e:41:e5:f5:c7:ba:7f:4c: 5f:43:e3:87:75:87:5b:f1:2a:30:38:91:fd:51:23: 01:cd:53:45:8f:a7:09:8c:3c:06:65:3b:12:0b:69: be:4a:ec:01:ac:92:39:40:c0:75:2f:8d:36:b9:ba: 98:c5:1c:8a:e6:e2:8b:ed:3f:a0:62:8b:2e:e9:7f: 82:18:29:41:c9:86:5d:86:5d:57:e1:54:9e:9a:33: ad:70:bd:34:34:23:9d:51:b2:9c:6b:02:1f:9b:2a: 91:d3:97:8f:88:d5:c1:96:17:38:af:49:a4:1b:dd: b7:97:23:a4:bf:3b:ae:eb:e3:13:c5:8a:ee:93:ae: ff:0c:73:f5:41:22:48:8f:56:a1:a2:be:18:55:ca: 1b:0f:43:93:b2:a8:97:51:24:2d:da:35:3c:e7:d0: 3a:d9:07:dd:13:d3:fc:3c:44:06:dd:02:37:20:a9: f3:e6:d1:0f:ac:4b:6f:a1:ab:94:b9:ef:2f:c3:38: bb:8f:f6:a5:97:69:83:cc:b9:08:c6:fd:44:27:e3: dd:22:47:38:b8:2c:91:c0:c8:87:89:a3:cf:b3:a7: b9:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9E:47:50:B2:B2:94:A9:BC:7C:42:B4:B8:99:6C:6A:47:31:D1:E7 X509v3 Authority Key Identifier: keyid:68:38:3F:FA:9F:20:BF:02:1C:09:02:62:99:42:12:D7:16:67:ED:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDg_-p8gvwIcCQJimUIS1xZn7QI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/b8e940-2201-406e-8aaf-4060e9eeeb9e/1/aDg_-p8gvwIcCQJimUIS1xZn7QI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:84:52:af:e6:0d:39:ec:5e:2b:b3:9d:09:19:ff:99:70:cb: e8:fb:fd:ae:df:c1:21:c3:cf:6f:f4:84:68:24:20:79:82:26: ab:b4:a6:01:79:8b:2a:4f:3d:06:4e:5f:45:8f:84:7d:17:b3: 6f:2d:3d:27:0b:63:ce:66:40:bc:95:ba:24:b2:5e:1f:45:eb: a0:a9:5a:34:9b:90:5a:6d:e8:e5:c5:22:2b:99:26:09:d4:52: 9e:fe:75:76:a6:b9:14:17:d2:9a:df:83:b3:c9:05:d2:75:9e: 9f:3b:ba:ba:02:9f:dc:4f:85:9a:ce:45:50:76:df:fb:b6:d2: 0b:67:b8:63:b6:f9:79:ab:d9:56:3e:1f:76:6e:22:41:eb:cc: 90:87:61:cc:c5:78:cb:b1:54:fc:3e:9a:bf:94:c1:9b:9d:ba: 4f:13:fb:a1:b1:9e:ed:d6:92:7c:80:ec:24:85:db:db:75:fe: bd:35:e6:f1:65:ac:cf:39:ca:77:0b:3a:95:85:a4:8d:25:00: 30:9a:a7:85:db:39:00:2b:ad:f2:ed:48:ba:78:71:74:8c:af: 33:0f:1e:52:97:07:28:6f:de:76:6b:d3:40:d8:e4:9d:99:fb: d7:19:87:80:e4:a7:c9:2a:6f:03:50:a0:43:78:31:8b:41:0b: e1:1b:0e:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+oxjOdn47hpw3/sI8XoLgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MzgzZmZhOWYyMGJmMDIxYzA5MDI2Mjk5NDIxMmQ3MTY2 N2VkMDIwHhcNMjUxMjIxMDIwMDM0WhcNMjUxMjIyMDIwMDM0WjAzMTEwLwYDVQQD Eyg0OTllNDc1MGIyYjI5NGE5YmM3YzQyYjRiODk5NmM2YTQ3MzFkMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNqULTvkLCNXtBijOuNX2WuDZtev uW8+vUnYT4EK99SValvAbkHl9ce6f0xfQ+OHdYdb8SowOJH9USMBzVNFj6cJjDwG ZTsSC2m+SuwBrJI5QMB1L402ubqYxRyK5uKL7T+gYosu6X+CGClByYZdhl1X4VSe mjOtcL00NCOdUbKcawIfmyqR05ePiNXBlhc4r0mkG923lyOkvzuu6+MTxYruk67/ DHP1QSJIj1ahor4YVcobD0OTsqiXUSQt2jU859A62QfdE9P8PEQG3QI3IKnz5tEP rEtvoauUue8vwzi7j/all2mDzLkIxv1EJ+PdIkc4uCyRwMiHiaPPs6e5mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEmeR1CyspSpvHxCtLiZbGpHMdHnMB8GA1UdIwQY MBaAFGg4P/qfIL8CHAkCYplCEtcWZ+0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYt NDA2MGU5ZWVlYjllLzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iOGU5NDAtMjIwMS00MDZlLThhYWYtNDA2MGU5ZWVlYjll LzEvYURnXy1wOGd2d0ljQ1FKaW1VSVMxeFpuN1FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4RSr+YN OexeK7OdCRn/mXDL6Pv9rt/BIcPPb/SEaCQgeYImq7SmAXmLKk89Bk5fRY+EfRez by09JwtjzmZAvJW6JLJeH0XroKlaNJuQWm3o5cUiK5kmCdRSnv51dqa5FBfSmt+D s8kF0nWenzu6ugKf3E+Fms5FUHbf+7bSC2e4Y7b5eavZVj4fdm4iQevMkIdhzMV4 y7FU/D6av5TBm526TxP7obGe7daSfIDsJIXb23X+vTXm8WWszznKdws6lYWkjSUA MJqnhds5ACut8u1IunhxdIyvMw8eUpcHKG/edmvTQNjknZn71xmHgOSnySpvA1Cg Q3gxi0EL4RsOkQ== -----END CERTIFICATE-----Generated at Sun Dec 21 07:23:27 2025 by rpki-client