This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft File: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft (raw, json) Hash identifier: 80Q+rFfeYeu7pD5wNiijl7inzKVBc25qlgWGtBwF4hM= Subject key identifier: D8:B4:8C:30:72:AA:64:87:0F:6B:EB:8E:AE:A4:B4:8E:9A:F7:05:37 Authority key identifier: 33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C Certificate issuer: /CN=339cbb1e439a3a71eb8796692f622bf838f8488c Certificate serial: 019B3FB67644F6DE97694518096705B8B6CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 07:01:20 +0000 Manifest this update: Sun 21 Dec 2025 07:01:20 +0000 Manifest next update: Mon 22 Dec 2025 07:01:20 +0000 Files and hashes: 1: F3E0kox0yNLNp6GPi3ZmqfgQKTs.roa (hash: UneyfmP6aoU2v1WkHtcA23llsK6rkwb/p+IXrda/FUg=) 2: M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl (hash: 9Fr2dNIlyXaWdTYIllKNh6aernwfIKW2/CmchRr3b1U=) 3: jukzQpP3Hs9hT3M_u2swPOcw5vQ.roa (hash: /+E7Xpgo8ugKY85NqX64gyU8Uakmwa+zSPYJruYsfmI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:b6:76:44:f6:de:97:69:45:18:09:67:05:b8:b6:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=339cbb1e439a3a71eb8796692f622bf838f8488c Validity Not Before: Dec 21 07:01:20 2025 GMT Not After : Dec 22 07:01:20 2025 GMT Subject: CN=d8b48c3072aa64870f6beb8eaea4b48e9af70537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:82:fa:32:05:d6:e3:73:3b:34:87:fe:69: db:10:a9:9a:a3:fe:b0:b4:cd:ed:fc:16:b1:30:99: 00:54:b4:25:e8:58:e9:89:8e:e7:03:ee:c9:ad:23: e6:3d:c6:d0:1d:a1:eb:ab:39:9f:4c:74:87:12:15: 8d:52:66:19:7a:bb:43:b1:95:de:54:4d:20:49:65: 2c:fa:43:8e:de:0d:28:34:90:18:86:66:17:18:bc: 6e:00:19:e6:0a:81:df:a5:e0:05:12:99:9a:0e:26: 25:c0:57:4a:27:b2:a4:1f:6d:21:3f:73:d8:a6:5c: 91:59:36:0d:a9:bd:bb:38:e5:ce:c8:24:4b:ab:47: 5c:ce:37:df:9c:9d:56:a9:0e:a2:30:e5:f0:2e:d2: 71:b8:b1:2b:73:71:18:2c:e5:ce:49:a4:23:2b:be: 9f:dd:49:9e:30:63:ce:8c:0b:c5:ba:c4:d3:58:66: ce:b1:09:19:cb:5d:78:10:c4:bd:1d:b2:94:6c:10: 9d:94:50:86:8a:9f:d7:e7:7e:f2:b7:12:85:0c:9c: da:67:87:f5:ec:11:65:dc:99:36:08:0c:0b:ba:95: 9c:63:f6:f1:9e:9a:91:c1:81:b4:04:a6:64:23:49: f4:d6:cf:ec:bb:31:80:6e:c0:dd:64:7c:53:9f:21: 48:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B4:8C:30:72:AA:64:87:0F:6B:EB:8E:AE:A4:B4:8E:9A:F7:05:37 X509v3 Authority Key Identifier: keyid:33:9C:BB:1E:43:9A:3A:71:EB:87:96:69:2F:62:2B:F8:38:F8:48:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/7e500d-5552-4b82-a3bd-aa0071b7bf84/1/M5y7HkOaOnHrh5ZpL2Ir-Dj4SIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:34:d9:ae:9c:68:a3:30:73:3d:6b:fb:bb:9c:f5:2f:6b:41: 64:67:d1:e6:4a:fa:a5:77:77:3b:ed:2c:1b:be:46:09:69:67: 90:ea:81:dc:31:5b:03:ba:c9:21:21:9d:24:00:ed:30:25:49: 0b:24:25:6c:f6:0b:07:ed:e6:b6:93:13:c8:26:cf:78:5a:0e: fc:3c:c2:91:f8:bb:d8:a6:23:ca:10:2c:ad:55:1d:25:b7:7c: b1:73:50:b4:0d:44:ee:bc:7c:6c:2e:95:73:f3:ff:34:b3:39: 37:d3:b5:e4:d4:61:8a:94:9b:7e:1f:10:f0:20:1e:59:5d:f8: 5a:cb:6b:23:eb:97:db:eb:ff:8c:5e:4c:01:7b:82:94:ac:e5: 88:d6:2e:10:3c:8d:30:1c:ca:df:8a:97:ce:fd:e4:fd:da:ce: 3a:45:56:a0:a4:b7:27:9d:3d:d4:0f:3f:2f:13:6b:d5:00:fa: 43:bc:d6:31:34:4b:4a:cf:78:c3:2f:52:a3:13:0f:73:e4:7e: 05:b9:55:aa:b2:3e:a0:1a:6e:f0:f5:96:2b:62:88:35:dc:f4: 16:a9:bd:5e:f8:bb:01:11:44:11:2f:08:27:82:24:4e:08:48: 9a:b9:cd:4d:21:ee:98:30:6f:95:37:c9:28:7e:67:94:f9:e1: 2e:e0:48:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/tnZE9t6XaUUYCWcFuLbLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzOWNiYjFlNDM5YTNhNzFlYjg3OTY2OTJmNjIyYmY4Mzhm ODQ4OGMwHhcNMjUxMjIxMDcwMTIwWhcNMjUxMjIyMDcwMTIwWjAzMTEwLwYDVQQD EyhkOGI0OGMzMDcyYWE2NDg3MGY2YmViOGVhZWE0YjQ4ZTlhZjcwNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobuC+jIF1uNzOzSH/mnbEKmao/6w tM3t/BaxMJkAVLQl6FjpiY7nA+7JrSPmPcbQHaHrqzmfTHSHEhWNUmYZertDsZXe VE0gSWUs+kOO3g0oNJAYhmYXGLxuABnmCoHfpeAFEpmaDiYlwFdKJ7KkH20hP3PY plyRWTYNqb27OOXOyCRLq0dczjffnJ1WqQ6iMOXwLtJxuLErc3EYLOXOSaQjK76f 3UmeMGPOjAvFusTTWGbOsQkZy114EMS9HbKUbBCdlFCGip/X537ytxKFDJzaZ4f1 7BFl3Jk2CAwLupWcY/bxnpqRwYG0BKZkI0n01s/suzGAbsDdZHxTnyFIawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNi0jDByqmSHD2vrjq6ktI6a9wU3MB8GA1UdIwQY MBaAFDOcux5Dmjpx64eWaS9iK/g4+EiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQt YWEwMDcxYjdiZjg0LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83ZTUwMGQtNTU1Mi00YjgyLWEzYmQtYWEwMDcxYjdiZjg0 LzEvTTV5N0hrT2FPbkhyaDVacEwySXItRGo0U0l3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzTZrpxo ozBzPWv7u5z1L2tBZGfR5kr6pXd3O+0sG75GCWlnkOqB3DFbA7rJISGdJADtMCVJ CyQlbPYLB+3mtpMTyCbPeFoO/DzCkfi72KYjyhAsrVUdJbd8sXNQtA1E7rx8bC6V c/P/NLM5N9O15NRhipSbfh8Q8CAeWV34WstrI+uX2+v/jF5MAXuClKzliNYuEDyN MBzK34qXzv3k/drOOkVWoKS3J5091A8/LxNr1QD6Q7zWMTRLSs94wy9SoxMPc+R+ BblVqrI+oBpu8PWWK2KINdz0Fqm9Xvi7ARFEES8IJ4IkTghImrnNTSHumDBvlTfJ KH5nlPnhLuBIBQ== -----END CERTIFICATE-----Generated at Sun Dec 21 09:44:53 2025 by rpki-client