This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json) Hash identifier: +BzpLSvE8Ob5uMgvvjqU4LUHCJlUjB0GGKqntsfO85g= Subject key identifier: A0:D3:A9:E7:EA:69:A5:83:26:B5:95:96:CD:CF:70:EC:12:C6:E7:04 Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92 Certificate serial: 019B3C46E9AA7A56AE9AB5CBC880B8809535 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 15:00:38 +0000 Manifest this update: Sat 20 Dec 2025 15:00:38 +0000 Manifest next update: Sun 21 Dec 2025 15:00:38 +0000 Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: 8KQoxuk3kSUPs4WzI9WUswRahkEQAUN6iFimpu8E5JQ=) 2: Nu5TRVd26n9AGQYBpz8f5pBcpaw.roa (hash: r28RVbjjIKsfCbL6DnjqYHTKslQLlFbIUqLf6uX2ZKw=) 3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:e9:aa:7a:56:ae:9a:b5:cb:c8:80:b8:80:95:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92 Validity Not Before: Dec 20 15:00:38 2025 GMT Not After : Dec 21 15:00:38 2025 GMT Subject: CN=a0d3a9e7ea69a58326b59596cdcf70ec12c6e704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:8c:de:a0:93:90:72:ac:b3:3a:4f:bd:29: 43:cd:cf:32:94:33:ba:eb:61:37:f6:64:30:1d:53: e3:c6:48:22:a8:ab:9a:9e:e9:70:99:20:c6:5d:58: b4:9a:cb:5e:62:49:5e:1a:90:d4:38:4f:ab:ac:a8: a0:49:28:0a:6e:66:ed:10:1b:77:0f:a6:10:84:de: 18:e2:91:f0:24:80:e0:87:41:1c:f6:73:0a:0d:18: da:18:99:1f:4d:1e:b4:76:d2:47:3c:9b:23:ca:c4: b7:c7:fb:c2:f6:3e:55:0b:67:e2:cf:e3:ce:7f:6f: 55:20:89:ac:ab:51:6d:5d:48:c8:de:7d:32:1a:53: 6b:31:12:52:82:5b:a0:6c:32:fc:a4:1a:9f:38:db: 47:90:24:ac:d8:f6:a7:dc:74:03:eb:83:29:48:52: fd:57:b2:ff:3a:9f:48:e8:99:9e:f2:36:d9:29:56: 7f:45:d1:d8:11:1a:12:56:bb:71:22:e3:33:33:a5: 0d:6f:df:22:e4:c7:92:69:95:42:a2:b4:03:0f:48: 00:df:39:d1:fe:19:fb:b3:9b:8e:05:bd:76:79:b4: 9e:5b:9a:49:81:0f:69:3b:a4:c4:81:d3:23:2b:a8: 88:ba:57:91:66:2f:9b:f8:d4:fe:72:45:b9:92:c0: 3b:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:D3:A9:E7:EA:69:A5:83:26:B5:95:96:CD:CF:70:EC:12:C6:E7:04 X509v3 Authority Key Identifier: keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5c:d5:ef:1d:c1:39:91:89:49:c9:b2:86:30:dd:ca:14:26: dc:1c:14:a8:a2:69:a3:3d:c8:81:56:40:24:37:30:2a:95:a6: ea:90:3a:02:9a:f3:2d:92:fe:ac:c9:7d:40:f3:e5:90:54:31: e4:1f:7f:e3:6e:79:3a:9f:b8:68:51:eb:fe:4b:e5:64:1e:0d: 78:75:0b:d0:6d:5b:e2:85:d0:b4:4b:22:5d:56:24:33:c6:4f: d8:0a:50:a6:e2:32:e8:4e:0f:c3:4f:52:8d:cc:41:97:9e:54: d8:9a:77:c3:2c:30:cd:25:13:a9:08:96:17:a3:0d:b3:53:38: f6:7e:d2:80:e5:39:b7:f5:d9:7d:e9:4b:fa:82:27:45:a8:3b: dc:00:76:c3:bb:63:51:24:fe:2d:a9:ae:e3:8b:52:99:ff:66: c9:f5:a5:fe:7b:e7:5f:3a:9a:1f:b0:a1:22:8a:b0:3a:35:a2: b7:2e:d9:d7:05:ce:04:0e:12:58:cd:6d:24:a2:02:d8:b9:7c: e3:6b:f8:b9:34:34:78:2c:da:b3:67:1f:21:26:5d:a8:43:82: 75:4a:28:73:5e:13:b2:61:42:92:b5:7e:a0:bf:11:bd:dc:4a: 6c:12:73:31:38:62:f1:07:e3:bb:61:88:24:f0:ba:d3:5d:ec: 1a:db:90:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8RumqelaumrXLyIC4gJU1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3 ZWVhOTIwHhcNMjUxMjIwMTUwMDM4WhcNMjUxMjIxMTUwMDM4WjAzMTEwLwYDVQQD EyhhMGQzYTllN2VhNjlhNTgzMjZiNTk1OTZjZGNmNzBlYzEyYzZlNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVCM3qCTkHKsszpPvSlDzc8ylDO6 62E39mQwHVPjxkgiqKuanulwmSDGXVi0msteYkleGpDUOE+rrKigSSgKbmbtEBt3 D6YQhN4Y4pHwJIDgh0Ec9nMKDRjaGJkfTR60dtJHPJsjysS3x/vC9j5VC2fiz+PO f29VIImsq1FtXUjI3n0yGlNrMRJSglugbDL8pBqfONtHkCSs2Pan3HQD64MpSFL9 V7L/Op9I6Jme8jbZKVZ/RdHYERoSVrtxIuMzM6UNb98i5MeSaZVCorQDD0gA3znR /hn7s5uOBb12ebSeW5pJgQ9pO6TEgdMjK6iIuleRZi+b+NT+ckW5ksA7ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDTqefqaaWDJrWVls3PcOwSxucEMB8GA1UdIwQY MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1 LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlzV7x3B OZGJScmyhjDdyhQm3BwUqKJpoz3IgVZAJDcwKpWm6pA6AprzLZL+rMl9QPPlkFQx 5B9/4255Op+4aFHr/kvlZB4NeHUL0G1b4oXQtEsiXVYkM8ZP2ApQpuIy6E4Pw09S jcxBl55U2Jp3wywwzSUTqQiWF6MNs1M49n7SgOU5t/XZfelL+oInRag73AB2w7tj UST+Lamu44tSmf9myfWl/nvnXzqaH7ChIoqwOjWity7Z1wXOBA4SWM1tJKIC2Ll8 42v4uTQ0eCzas2cfISZdqEOCdUooc14TsmFCkrV+oL8RvdxKbBJzMThi8Qfju2GI JPC6013sGtuQIg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:45:38 2025 by rpki-client