This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json) Hash identifier: fpTJx6wNJhhwMcAneFX7UKLu7R+46PvY8rZkYrsWLxo= Subject key identifier: 80:4C:0C:8C:69:15:E0:65:47:E3:7B:34:6F:27:A1:DF:18:0C:80:08 Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Certificate serial: 019B3E6C9CBF9C59C4760A8AA155AD4A9387 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft Manifest number: 178F Signing time: Sun 21 Dec 2025 01:01:03 +0000 Manifest this update: Sun 21 Dec 2025 01:01:03 +0000 Manifest next update: Mon 22 Dec 2025 01:01:03 +0000 Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=) 2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=) 3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=) 4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=) 5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: HyUtFE5DzuXpcM9yM85GdnnwFwSLshM8NadBkRsYErU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6c:9c:bf:9c:59:c4:76:0a:8a:a1:55:ad:4a:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02 Validity Not Before: Dec 21 01:01:03 2025 GMT Not After : Dec 22 01:01:03 2025 GMT Subject: CN=804c0c8c6915e06547e37b346f27a1df180c8008 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d2:ef:93:9c:8d:bb:d1:d9:ef:fa:9b:29:3d: c3:3b:30:5a:d0:02:f3:78:a5:e2:8a:dc:95:07:39: e4:c3:26:7c:73:8b:8f:be:0b:4b:b2:0f:cd:80:e1: 99:b8:84:1a:23:28:ea:f7:ce:dd:75:89:94:11:b3: 5b:3e:fb:a0:00:08:14:72:46:f2:49:6a:97:c5:79: 62:a0:e2:d6:b9:81:82:9b:0b:d1:90:0e:b0:68:fb: 45:f2:e9:76:50:6d:18:77:0b:2e:68:c9:0c:4d:f7: 9d:f1:9e:32:a9:e5:d6:1f:ae:62:7d:a1:d0:0f:55: 19:ee:fb:c7:41:3f:a5:0f:00:4a:80:24:6f:c3:f9: d2:43:f0:20:a2:18:15:1d:02:a0:40:dc:d7:0d:b3: 3e:bf:bd:90:37:b4:a2:c9:e9:29:7c:57:08:e3:e8: cf:9d:46:b7:f7:b5:6a:75:2d:31:65:38:9c:19:9a: 0c:95:b5:e5:7b:47:64:98:f6:4a:c9:86:ba:8c:76: fd:6e:06:85:25:a9:ed:33:95:55:10:67:52:5a:da: 85:98:3d:3d:31:04:85:8d:10:9e:e7:77:c8:08:f0: c7:f3:21:1d:5b:d8:f8:db:53:61:b8:df:6b:80:98: 8c:92:c6:cf:5e:35:82:3c:02:86:5f:22:e5:68:fd: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:4C:0C:8C:69:15:E0:65:47:E3:7B:34:6F:27:A1:DF:18:0C:80:08 X509v3 Authority Key Identifier: keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:d2:0f:e5:58:ed:83:8e:89:40:d5:55:65:9a:05:89:12:66: 68:78:d5:f6:f7:ea:a2:df:f0:33:cd:0b:cf:2e:77:d1:66:c7: db:67:7f:d0:ad:a8:9b:03:af:ed:45:90:90:c5:22:f1:e5:b4: ff:91:a0:14:c0:22:2f:2e:8c:8a:16:1d:87:83:dc:57:03:13: 06:ce:15:73:32:71:08:8c:48:68:47:60:1b:56:84:c3:b7:b5: 6d:34:9b:b3:68:35:67:f1:38:39:95:f0:8d:e2:de:7e:42:4d: 7e:62:dd:18:88:09:f7:e4:3c:9b:4d:8c:65:78:02:a3:db:b4: 75:4a:11:43:49:9f:1e:3e:be:dc:04:a7:41:f0:9e:a6:25:96: 58:81:d7:86:a4:77:17:36:66:d9:57:72:18:07:a3:9d:6c:75: 7c:e3:bd:41:4d:02:3a:2c:fb:34:d2:7f:35:94:40:51:54:9c: 6d:4f:b5:0a:af:81:10:d5:6d:98:e7:d3:5e:94:51:23:6b:88: 49:e9:df:e0:6d:da:df:68:ff:b5:dd:aa:8c:38:8c:fe:e5:f5: 0f:9d:a9:8f:48:bf:06:2b:62:7d:a1:83:60:8b:b3:c5:5e:6d: 7b:2f:09:39:fe:45:24:aa:9a:30:3d:2e:6b:c3:9e:23:a5:34: 91:fc:cb:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bJy/nFnEdgqKoVWtSpOHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZWM0ZjRhMTZjYzUxYmQ1MTYyMTAxMTUzOWNlYjU3NGFj MTVkMDIwHhcNMjUxMjIxMDEwMTAzWhcNMjUxMjIyMDEwMTAzWjAzMTEwLwYDVQQD Eyg4MDRjMGM4YzY5MTVlMDY1NDdlMzdiMzQ2ZjI3YTFkZjE4MGM4MDA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudLvk5yNu9HZ7/qbKT3DOzBa0ALz eKXiityVBznkwyZ8c4uPvgtLsg/NgOGZuIQaIyjq987ddYmUEbNbPvugAAgUckby SWqXxXlioOLWuYGCmwvRkA6waPtF8ul2UG0YdwsuaMkMTfed8Z4yqeXWH65ifaHQ D1UZ7vvHQT+lDwBKgCRvw/nSQ/AgohgVHQKgQNzXDbM+v72QN7SiyekpfFcI4+jP nUa397VqdS0xZTicGZoMlbXle0dkmPZKyYa6jHb9bgaFJantM5VVEGdSWtqFmD09 MQSFjRCe53fICPDH8yEdW9j421NhuN9rgJiMksbPXjWCPAKGXyLlaP1QfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIBMDIxpFeBlR+N7NG8nod8YDIAIMB8GA1UdIwQY MBaAFK/sT0oWzFG9UWIQEVOc61dKwV0CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0Nzgt MjdlZmMxM2FmZjFlLzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni85ZjdiNmItYjI5ZC00ODZlLTg0NzgtMjdlZmMxM2FmZjFl LzEvci14UFNoYk1VYjFSWWhBUlU1enJWMHJCWFFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUtIP5Vjt g46JQNVVZZoFiRJmaHjV9vfqot/wM80Lzy530WbH22d/0K2omwOv7UWQkMUi8eW0 /5GgFMAiLy6MihYdh4PcVwMTBs4VczJxCIxIaEdgG1aEw7e1bTSbs2g1Z/E4OZXw jeLefkJNfmLdGIgJ9+Q8m02MZXgCo9u0dUoRQ0mfHj6+3ASnQfCepiWWWIHXhqR3 FzZm2VdyGAejnWx1fOO9QU0COiz7NNJ/NZRAUVScbU+1Cq+BENVtmOfTXpRRI2uI Senf4G3a32j/td2qjDiM/uX1D52pj0i/BitifaGDYIuzxV5tey8JOf5FJKqaMD0u a8OeI6U0kfzLqg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:08 2025 by rpki-client