This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft File: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft (raw, json) Hash identifier: 94G7pWh2ZZWMtZW/NW7MnHMtJSCdIc7ODGvEerAD7Dc= Subject key identifier: 52:83:9E:E9:D9:34:D8:DB:F0:D7:17:DB:9B:1A:43:47:36:CF:89:70 Authority key identifier: 77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC Certificate issuer: /CN=776405e0283743cf52180d5b13812dfba3ded7fc Certificate serial: 019B3EA33C6960F6103B4A8A32ABB41BCBCE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 02:00:43 +0000 Manifest this update: Sun 21 Dec 2025 02:00:43 +0000 Manifest next update: Mon 22 Dec 2025 02:00:43 +0000 Files and hashes: 1: 8sj8akoHRTPz11r3jLvMNT_NbaE.roa (hash: P2s2WOOKeXdgHhsxpLmfEClu5cRmFqEQjIJDZyeuzkg=) 2: WGokscrqIFlveSQ3XENDC_qxhbE.roa (hash: +LF+EeNcjsZJ5uw2CKGcqJlYFeUGcZcbeYs75HR4O74=) 3: d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl (hash: zNjkQ+O1s7CXGeACVwsWEmspVIxMOa6pywgGk3VIlsk=) 4: dnAa52jzMLokgprr8j83t7M0O7A.roa (hash: RXb076NQLFmuO+ZHzSd4Sn5TggUypoGBas2+Hq6jEsg=) 5: wIY_dvatExTHxCY_kuzX-QET3Ok.roa (hash: kjV0Ojugy4LwLs+YAfKt1FqrpFMJ2uDqQ/zPE3W7Ris=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:3c:69:60:f6:10:3b:4a:8a:32:ab:b4:1b:cb:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=776405e0283743cf52180d5b13812dfba3ded7fc Validity Not Before: Dec 21 02:00:43 2025 GMT Not After : Dec 22 02:00:43 2025 GMT Subject: CN=52839ee9d934d8dbf0d717db9b1a434736cf8970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c0:21:33:7c:f0:6f:f6:81:53:19:f7:a8:e6: 12:e6:ac:8e:a2:a1:14:91:75:98:94:19:5c:7a:03: 5b:e2:ba:6e:ff:1e:1b:30:71:2a:c3:b4:db:00:39: 63:4e:0d:8d:32:fd:96:dc:8e:3e:11:7c:75:5e:96: eb:b3:5b:3b:52:18:b5:7e:4b:c8:8a:cd:30:c0:ef: d4:7b:ea:d5:e6:89:2f:de:c5:12:1c:bf:48:1c:39: 75:c8:1b:dc:24:1c:ee:ba:45:d5:41:11:80:f8:2e: 8b:f3:95:f4:0b:49:5b:df:80:a3:b1:b2:a9:0a:54: eb:c2:5b:4c:7d:96:ed:a8:d2:83:fd:31:3a:40:d6: 1b:dd:06:09:14:3f:d0:b3:08:e3:61:05:4e:e0:35: fd:ac:8d:03:24:b9:a1:d6:ba:1d:7f:43:39:67:56: 99:1a:14:56:80:fb:91:84:04:55:01:75:07:9c:f4: 39:52:3d:9f:c4:71:e2:7d:2a:79:6e:d9:70:ab:13: e7:21:ac:26:a4:2f:4a:31:34:38:11:25:ee:05:ce: 74:ac:2c:9c:b3:f8:5a:fa:22:ba:86:7b:ce:65:3b: ef:1b:01:dd:1d:7d:09:04:5c:52:d5:af:c4:9f:b0: ba:17:53:84:a9:f0:f7:b7:6d:c2:4e:38:73:17:b5: 09:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:9E:E9:D9:34:D8:DB:F0:D7:17:DB:9B:1A:43:47:36:CF:89:70 X509v3 Authority Key Identifier: keyid:77:64:05:E0:28:37:43:CF:52:18:0D:5B:13:81:2D:FB:A3:DE:D7:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/363586-9b80-457b-bdf0-6ca52e029cbe/1/d2QF4Cg3Q89SGA1bE4Et-6Pe1_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:f4:45:32:07:a3:f8:d0:dd:1d:03:ef:03:7c:c7:3d:70:ef: aa:d1:c1:95:86:34:8a:e4:f6:51:53:d5:ea:54:8f:a9:bd:98: 5b:8a:2a:81:fe:96:14:db:d1:55:e3:e6:06:dd:0a:0a:2c:8b: 8b:2b:dd:45:e2:8e:76:7c:51:ae:36:a9:3b:2a:0b:d5:2a:47: 18:8a:82:6c:ce:e8:74:c3:f9:8e:2c:e5:8a:a2:5f:25:bf:7f: d7:49:55:e6:7e:26:8e:97:67:88:ad:38:05:71:30:93:2c:0f: 89:7e:fa:be:5c:f6:a0:ea:05:03:2a:82:d8:0c:1a:57:a3:e4: 5c:5f:11:60:89:ce:62:c8:8a:31:30:58:fa:eb:4f:db:49:39: 98:94:87:1b:85:8f:b4:7b:d4:c9:61:76:09:b0:67:5e:70:73: c4:5e:af:91:d8:f3:ce:01:c5:40:cf:d3:8c:10:78:5d:3a:84: a6:91:88:4c:53:a2:8f:7a:df:75:ab:f9:a5:70:74:4d:75:18: a8:f5:fd:da:33:f5:6e:74:91:d3:94:c6:6a:b6:b5:bc:7c:63: 65:3a:03:0f:7e:53:92:d9:4f:96:9b:83:b9:a3:2e:b9:ad:df: fc:53:54:c0:cd:82:d6:7d:a3:d1:af:b5:be:43:98:71:fe:d2: e2:4a:b5:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+ozxpYPYQO0qKMqu0G8vOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NjQwNWUwMjgzNzQzY2Y1MjE4MGQ1YjEzODEyZGZiYTNk ZWQ3ZmMwHhcNMjUxMjIxMDIwMDQzWhcNMjUxMjIyMDIwMDQzWjAzMTEwLwYDVQQD Eyg1MjgzOWVlOWQ5MzRkOGRiZjBkNzE3ZGI5YjFhNDM0NzM2Y2Y4OTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88AhM3zwb/aBUxn3qOYS5qyOoqEU kXWYlBlcegNb4rpu/x4bMHEqw7TbADljTg2NMv2W3I4+EXx1Xpbrs1s7Uhi1fkvI is0wwO/Ue+rV5okv3sUSHL9IHDl1yBvcJBzuukXVQRGA+C6L85X0C0lb34CjsbKp ClTrwltMfZbtqNKD/TE6QNYb3QYJFD/QswjjYQVO4DX9rI0DJLmh1rodf0M5Z1aZ GhRWgPuRhARVAXUHnPQ5Uj2fxHHifSp5btlwqxPnIawmpC9KMTQ4ESXuBc50rCyc s/ha+iK6hnvOZTvvGwHdHX0JBFxS1a/En7C6F1OEqfD3t23CTjhzF7UJbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFKDnunZNNjb8NcX25saQ0c2z4lwMB8GA1UdIwQY MBaAFHdkBeAoN0PPUhgNWxOBLfuj3tf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAt NmNhNTJlMDI5Y2JlLzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8zNjM1ODYtOWI4MC00NTdiLWJkZjAtNmNhNTJlMDI5Y2Jl LzEvZDJRRjRDZzNRODlTR0ExYkU0RXQtNlBlMV93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPRFMgej +NDdHQPvA3zHPXDvqtHBlYY0iuT2UVPV6lSPqb2YW4oqgf6WFNvRVePmBt0KCiyL iyvdReKOdnxRrjapOyoL1SpHGIqCbM7odMP5jizliqJfJb9/10lV5n4mjpdniK04 BXEwkywPiX76vlz2oOoFAyqC2AwaV6PkXF8RYInOYsiKMTBY+utP20k5mJSHG4WP tHvUyWF2CbBnXnBzxF6vkdjzzgHFQM/TjBB4XTqEppGITFOij3rfdav5pXB0TXUY qPX92jP1bnSR05TGara1vHxjZToDD35TktlPlpuDuaMuua3f/FNUwM2C1n2j0a+1 vkOYcf7S4kq1RQ== -----END CERTIFICATE-----Generated at Sun Dec 21 08:44:46 2025 by rpki-client