This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json) Hash identifier: xwz4wEijGFHTmuDLLeYXDCazat1ULbDTwVz+jqkoR90= Subject key identifier: 5A:02:04:1B:EF:EA:22:49:7A:6E:37:20:05:84:0D:F4:19:6A:B0:CC Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c Certificate serial: 019B424A02FC283FA29548B11FCBAFF39FAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 19:01:45 +0000 Manifest this update: Sun 21 Dec 2025 19:01:45 +0000 Manifest next update: Mon 22 Dec 2025 19:01:45 +0000 Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: 9dAcejJUkbMHp4Pzly6YvMaHgAQfh8RncTJoRgNxegE=) 2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 19:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:4a:02:fc:28:3f:a2:95:48:b1:1f:cb:af:f3:9f:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c Validity Not Before: Dec 21 19:01:45 2025 GMT Not After : Dec 22 19:01:45 2025 GMT Subject: CN=5a02041befea22497a6e372005840df4196ab0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:54:82:f7:5e:f9:79:24:48:1b:e7:51:b9:2d: 4d:a9:90:f5:3f:42:d8:b0:f6:fa:35:64:1a:6e:b5: 46:9c:8d:53:45:9f:32:5a:3e:15:42:18:a8:d5:0c: fe:b7:07:92:e9:31:2e:ef:00:d7:84:77:18:b3:1a: aa:b5:11:a1:dc:2f:92:2a:31:68:dc:3b:fb:92:0f: 68:94:dc:bb:9f:68:35:ce:a5:45:6a:9f:c6:8f:29: 2e:74:db:fd:e8:00:16:a0:68:21:d3:9a:5b:ff:19: e2:b9:fe:a7:e8:17:e5:38:0f:4d:40:65:70:90:56: 07:6d:d7:30:6a:b2:39:3d:f9:fd:6b:2a:89:3c:42: ac:a2:cb:e1:f6:fb:cd:e4:b6:1f:17:99:6b:cd:81: 55:91:c4:19:e7:b0:33:59:cc:e7:d2:69:9d:76:0a: ee:ce:88:21:42:35:7e:de:e5:40:16:c1:13:17:52: 9b:dd:c7:af:59:e0:39:81:00:ca:96:fe:2f:4d:14: 21:32:1e:a5:5c:ad:9c:4c:dd:0f:d0:0e:df:e4:47: cd:cf:27:68:6e:16:75:48:30:0b:77:bd:79:a4:7c: 0e:d6:09:37:26:0b:c7:1c:f8:67:d3:41:3f:4c:ac: d8:8d:78:4c:26:56:6f:94:f0:c6:1f:d1:ea:64:08: d9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:04:1B:EF:EA:22:49:7A:6E:37:20:05:84:0D:F4:19:6A:B0:CC X509v3 Authority Key Identifier: keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:35:10:ec:0c:2d:29:dc:10:99:ac:64:bf:fb:16:c8:fb:79: 28:c9:4c:a7:e4:e0:82:9c:13:f6:0a:75:e7:0d:8c:5e:d1:40: 51:b0:88:91:32:6e:03:cf:31:ea:10:d6:8f:02:fa:8a:ee:7b: e9:45:10:dc:8f:b8:82:87:7b:b7:2f:78:83:af:03:2c:3a:dd: cd:df:04:00:3f:b6:04:88:6a:f4:86:da:6b:3f:5f:30:86:be: 51:0b:59:0c:94:4d:02:db:56:32:8a:a4:14:c1:a3:39:be:19: 82:fb:8e:ad:0b:07:4b:d9:99:18:3d:49:35:e4:b7:82:a2:ad: e6:b8:5a:06:34:c1:66:5c:61:a8:fc:5f:2e:32:4c:72:88:e0: 61:fd:95:10:09:e6:f2:51:84:ca:06:12:b6:13:8b:7e:28:54: 1b:8b:28:a5:82:34:64:6b:74:06:52:89:99:9d:ea:cf:c6:7c: 0d:3a:b6:f3:66:2f:28:7a:f2:ec:02:70:30:11:62:7f:04:6f: b6:c4:13:61:d0:95:ae:38:00:fe:58:04:18:fe:e4:94:b9:9d: 14:55:27:fe:b9:60:fc:2b:f7:43:18:a2:93:6c:a6:c3:79:9a: 4d:69:19:6d:27:8e:dc:c6:0f:e9:ce:3a:7c:00:dc:bc:83:13: a2:00:b0:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCSgL8KD+ilUixH8uv85+qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl NjUxNWMwHhcNMjUxMjIxMTkwMTQ1WhcNMjUxMjIyMTkwMTQ1WjAzMTEwLwYDVQQD Eyg1YTAyMDQxYmVmZWEyMjQ5N2E2ZTM3MjAwNTg0MGRmNDE5NmFiMGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulSC9175eSRIG+dRuS1NqZD1P0LY sPb6NWQabrVGnI1TRZ8yWj4VQhio1Qz+tweS6TEu7wDXhHcYsxqqtRGh3C+SKjFo 3Dv7kg9olNy7n2g1zqVFap/GjykudNv96AAWoGgh05pb/xniuf6n6BflOA9NQGVw kFYHbdcwarI5Pfn9ayqJPEKsosvh9vvN5LYfF5lrzYFVkcQZ57AzWczn0mmddgru zoghQjV+3uVAFsETF1Kb3cevWeA5gQDKlv4vTRQhMh6lXK2cTN0P0A7f5EfNzydo bhZ1SDALd715pHwO1gk3JgvHHPhn00E/TKzYjXhMJlZvlPDGH9HqZAjZ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFoCBBvv6iJJem43IAWEDfQZarDMMB8GA1UdIwQY MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt YjVjYTBhZGYyZjA4LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4 LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjUQ7Awt KdwQmaxkv/sWyPt5KMlMp+TggpwT9gp15w2MXtFAUbCIkTJuA88x6hDWjwL6iu57 6UUQ3I+4god7ty94g68DLDrdzd8EAD+2BIhq9Ibaaz9fMIa+UQtZDJRNAttWMoqk FMGjOb4ZgvuOrQsHS9mZGD1JNeS3gqKt5rhaBjTBZlxhqPxfLjJMcojgYf2VEAnm 8lGEygYSthOLfihUG4sopYI0ZGt0BlKJmZ3qz8Z8DTq282YvKHry7AJwMBFifwRv tsQTYdCVrjgA/lgEGP7klLmdFFUn/rlg/Cv3Qxiik2ymw3maTWkZbSeO3MYP6c46 fADcvIMTogCwYw== -----END CERTIFICATE-----Generated at Mon Dec 22 00:46:57 2025 by rpki-client