This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft File: __RCr_uhz67zECyYHXVpUCzmUVw.mft (raw, json) Hash identifier: aVxU6GyvMb5h9Ho1XQ8kP+bGOLxz82cyKcJ6EvC6KIQ= Subject key identifier: D7:10:5B:D6:4C:3A:D6:C5:FD:67:81:BB:DE:44:65:64:99:34:B9:59 Authority key identifier: FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C Certificate issuer: /CN=fff442affba1cfaef3102c981d7569502ce6515c Certificate serial: 019B3E6E28E8D74392CD9EDF84591E36FD90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:02:45 +0000 Manifest this update: Sun 21 Dec 2025 01:02:45 +0000 Manifest next update: Mon 22 Dec 2025 01:02:45 +0000 Files and hashes: 1: __RCr_uhz67zECyYHXVpUCzmUVw.crl (hash: mO1ueoJZr1+5CTXbTlvdBdA3x96vOLPEbDBA0jc010k=) 2: cfHPpH74hHCJK1pLDEwyQ7AMZJY.roa (hash: Gmnr746njngjtdW+doOVMtWLzbG5WcOtPqH2dI9MOLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6e:28:e8:d7:43:92:cd:9e:df:84:59:1e:36:fd:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff442affba1cfaef3102c981d7569502ce6515c Validity Not Before: Dec 21 01:02:45 2025 GMT Not After : Dec 22 01:02:45 2025 GMT Subject: CN=d7105bd64c3ad6c5fd6781bbde4465649934b959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b2:0a:97:29:20:ee:d3:8a:7d:bb:3a:bc:e3: c4:1a:63:85:8b:50:3a:c9:d7:88:e4:9e:9a:b2:1a: ea:28:bc:b1:3f:ac:8f:cd:d6:de:40:1e:4c:01:1c: a2:be:4a:83:5c:d4:78:3a:47:60:b3:fd:58:c7:fa: d8:ac:3e:4f:c5:58:ce:b9:3c:95:58:f8:19:4a:99: 78:80:ff:16:30:49:6a:58:0e:1f:f2:5c:1e:17:40: f8:28:e9:86:12:50:13:e4:be:29:12:95:03:47:a3: 6b:39:c4:7c:c6:b8:bc:10:09:5b:d2:22:08:09:f6: aa:13:0f:97:8e:54:14:4f:88:ef:fb:5c:86:cc:61: e4:04:70:a9:5a:88:e6:d4:68:07:02:e7:bf:df:c3: 66:eb:ce:d2:36:69:60:87:7e:27:92:b4:8e:ac:69: fc:d1:3e:d8:5c:7e:a1:f1:22:66:3a:db:da:8d:61: ea:01:86:0d:27:17:e5:56:26:79:3f:61:99:33:d1: cc:9f:fc:7b:57:68:f9:3f:a4:68:cc:fb:db:b2:b9: b9:b6:30:c2:26:2b:7b:5a:3f:a9:dc:9d:98:a5:23: ad:fb:4f:a3:57:2c:56:9c:ae:1e:cc:f9:e1:95:20: 31:1e:c0:03:c4:a3:01:ca:a7:9d:95:e9:6b:41:78: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:5B:D6:4C:3A:D6:C5:FD:67:81:BB:DE:44:65:64:99:34:B9:59 X509v3 Authority Key Identifier: keyid:FF:F4:42:AF:FB:A1:CF:AE:F3:10:2C:98:1D:75:69:50:2C:E6:51:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__RCr_uhz67zECyYHXVpUCzmUVw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9fedd0-4ed7-4419-8e73-b5ca0adf2f08/1/__RCr_uhz67zECyYHXVpUCzmUVw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:49:bd:7e:02:31:9e:b1:07:5f:97:5e:80:5b:e4:79:d1:87: 59:08:3d:5f:5b:34:b7:3c:60:f8:aa:17:c5:df:71:04:b5:10: bb:d2:f7:38:07:b7:c8:93:ef:8c:12:13:69:4c:f6:85:dd:f9: d9:da:e9:83:78:40:19:70:b3:b5:25:64:44:0f:d5:08:a0:44: 22:bd:2b:c4:e8:93:9d:d5:dc:a5:7d:03:ce:85:7c:42:d4:5b: 92:42:fd:7f:f0:14:b9:93:5b:64:16:79:29:b7:59:33:0b:5b: 4d:61:3b:86:54:fb:68:0c:1e:37:02:7c:35:bf:a6:4f:bf:b5: 6a:b1:3b:55:07:96:8c:ea:46:19:e2:38:ac:26:c0:19:fd:d1: 87:2d:6b:aa:c5:12:c3:9d:3a:e1:8b:93:b1:dd:4f:1e:49:f1: 35:96:96:67:77:9e:6e:b1:fc:ec:e4:d4:57:ac:2b:15:5e:c5: 2b:a1:a4:f0:99:f3:27:b3:18:70:f6:45:95:77:4e:05:62:a4: 11:e0:6f:74:2c:19:76:28:a5:05:31:8d:f4:55:85:b0:3a:ea: ba:14:ee:f8:dc:7b:5d:5c:08:b1:2d:ba:fd:67:a9:45:fa:c7: d6:ef:d3:0c:35:c6:b1:55:ff:ef:1c:66:bc:3e:2b:da:40:fd: 41:f0:cc:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bijo10OSzZ7fhFkeNv2QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZjQ0MmFmZmJhMWNmYWVmMzEwMmM5ODFkNzU2OTUwMmNl NjUxNWMwHhcNMjUxMjIxMDEwMjQ1WhcNMjUxMjIyMDEwMjQ1WjAzMTEwLwYDVQQD EyhkNzEwNWJkNjRjM2FkNmM1ZmQ2NzgxYmJkZTQ0NjU2NDk5MzRiOTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6bIKlykg7tOKfbs6vOPEGmOFi1A6 ydeI5J6ashrqKLyxP6yPzdbeQB5MARyivkqDXNR4Okdgs/1Yx/rYrD5PxVjOuTyV WPgZSpl4gP8WMElqWA4f8lweF0D4KOmGElAT5L4pEpUDR6NrOcR8xri8EAlb0iII CfaqEw+XjlQUT4jv+1yGzGHkBHCpWojm1GgHAue/38Nm687SNmlgh34nkrSOrGn8 0T7YXH6h8SJmOtvajWHqAYYNJxflViZ5P2GZM9HMn/x7V2j5P6RozPvbsrm5tjDC Jit7Wj+p3J2YpSOt+0+jVyxWnK4ezPnhlSAxHsADxKMByqedlelrQXjzkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcQW9ZMOtbF/WeBu95EZWSZNLlZMB8GA1UdIwQY MBaAFP/0Qq/7oc+u8xAsmB11aVAs5lFcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMt YjVjYTBhZGYyZjA4LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC85ZmVkZDAtNGVkNy00NDE5LThlNzMtYjVjYTBhZGYyZjA4 LzEvX19SQ3JfdWh6Njd6RUN5WUhYVnBVQ3ptVVZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANkm9fgIx nrEHX5degFvkedGHWQg9X1s0tzxg+KoXxd9xBLUQu9L3OAe3yJPvjBITaUz2hd35 2drpg3hAGXCztSVkRA/VCKBEIr0rxOiTndXcpX0DzoV8QtRbkkL9f/AUuZNbZBZ5 KbdZMwtbTWE7hlT7aAweNwJ8Nb+mT7+1arE7VQeWjOpGGeI4rCbAGf3Rhy1rqsUS w5064YuTsd1PHknxNZaWZ3eebrH87OTUV6wrFV7FK6Gk8JnzJ7MYcPZFlXdOBWKk EeBvdCwZdiilBTGN9FWFsDrquhTu+Nx7XVwIsS26/WepRfrH1u/TDDXGsVX/7xxm vD4r2kD9QfDMsw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:43:18 2025 by rpki-client