This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft File: dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft (raw, json) Hash identifier: WPTGooq9XTAzAFkK762qJ6D7Ctuvm8xIya+zsY+STPI= Subject key identifier: C7:69:49:39:36:FC:C0:87:C1:17:53:A6:89:6B:13:63:01:FC:24:D8 Authority key identifier: 74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC Certificate issuer: /CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Certificate serial: 019B3CB53FAB4B017102E133D42702BA55A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 17:01:09 +0000 Manifest this update: Sat 20 Dec 2025 17:01:09 +0000 Manifest next update: Sun 21 Dec 2025 17:01:09 +0000 Files and hashes: 1: 0gep-REqlULawvS-x4T-wK7S7GA.roa (hash: FGJj6xlXiADWsaDG4OrAocOgRs0lC02TjnV2BjtgY1E=) 2: Q1XUBD_s1D_F0SITgp44J4I9gSg.roa (hash: w5981UwpX34Mt96TzsvSXFggOvVKomyq+xMftlqjtX8=) 3: dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl (hash: 4QWWBN8yVmKk/WxYYPK0ZT43ObOx4eEf3haSO97iXUA=) 4: wN2TdkfIPR3J0gvl0DtgYNB7D9w.roa (hash: NqvC6VGS3DEUxOPhIZWiZLcfYzHuOJ6bd3D616XpZos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:b5:3f:ab:4b:01:71:02:e1:33:d4:27:02:ba:55:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74896c544b461d8b062eff9e3d2c29cd3cc960ec Validity Not Before: Dec 20 17:01:09 2025 GMT Not After : Dec 21 17:01:09 2025 GMT Subject: CN=c769493936fcc087c11753a6896b136301fc24d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c4:2a:fe:35:61:60:73:16:73:96:e3:17:b4: a5:72:c5:bd:f9:4c:02:d3:ea:6f:fe:a9:c7:1a:3e: d4:87:84:b6:60:69:61:0b:38:5b:5c:d0:bf:c7:28: 01:3a:1e:54:0c:3e:c5:d9:46:e9:6d:d6:5f:cc:d8: bd:65:07:e1:7d:12:25:e5:89:73:8a:cf:a0:79:a1: 09:02:51:19:7c:0b:d8:24:0e:0b:dd:f1:47:30:d3: ea:d2:73:2d:25:77:12:f2:3a:aa:77:a4:7b:f8:e8: 37:42:2d:5b:0e:53:e4:5b:ee:85:14:e4:fa:50:a0: 3e:0b:fe:65:ad:64:0d:b1:0c:6c:c8:0f:af:77:1d: 8d:62:d2:8b:06:e6:12:52:b3:24:75:5a:2f:c2:82: 87:08:29:98:b7:d7:7d:18:14:6c:98:75:56:f4:c8: d7:73:00:ec:e4:84:b6:12:80:9c:80:52:24:77:63: de:3f:ee:10:d0:c3:55:31:a5:1c:a3:4c:0a:82:dd: 34:e7:5f:70:e8:f8:67:f1:a5:53:6e:80:62:72:9c: f1:c2:0e:ec:c5:50:18:75:3d:2b:b3:3d:8d:34:23: bf:35:93:d9:35:67:32:e3:38:b8:21:e0:73:26:97: 7b:fd:fa:02:ac:89:48:55:66:f9:1d:00:bb:b5:20: 34:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:69:49:39:36:FC:C0:87:C1:17:53:A6:89:6B:13:63:01:FC:24:D8 X509v3 Authority Key Identifier: keyid:74:89:6C:54:4B:46:1D:8B:06:2E:FF:9E:3D:2C:29:CD:3C:C9:60:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIlsVEtGHYsGLv-ePSwpzTzJYOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/bc22a9-f871-400c-8fcf-cf1740823400/1/dIlsVEtGHYsGLv-ePSwpzTzJYOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:af:cc:7e:f3:bb:fc:60:d4:eb:4d:81:f1:93:83:4c:a4:7c: 20:24:73:c3:ff:59:39:b0:24:30:1b:73:ec:2e:ff:c8:ee:34: 6e:84:78:8d:b4:05:82:1c:ff:92:ef:cf:a5:8f:68:3b:61:c9: 48:20:08:2a:a5:45:92:a8:25:48:a4:48:db:e3:01:98:7a:6f: 4d:53:28:d4:de:13:6b:9e:db:07:4d:2a:30:eb:2f:d6:30:11: f5:7f:0e:e6:0d:98:40:0c:69:57:b6:e5:82:35:90:6c:11:0f: d0:eb:e0:4c:23:40:ef:93:c1:d5:0a:83:57:87:63:f4:4b:1a: 89:57:7d:a2:19:7a:e0:52:61:4e:11:e9:97:b8:fb:9e:77:35: 3f:31:4e:da:5a:8d:79:d4:0d:c6:ae:67:ba:ad:0d:c2:25:58: c8:06:ca:af:5a:f1:0a:f7:63:db:dc:d0:f5:6d:af:8e:d1:83: 54:24:ce:3d:25:5b:60:2b:98:de:46:28:76:ec:1a:7a:46:1a: 8d:be:ec:ab:ea:b8:0d:c1:13:59:3a:79:fe:a6:58:6c:1d:89: 80:88:28:77:cc:b1:26:cb:09:49:25:0d:b7:76:83:d4:8a:7b: 7c:e3:dc:6b:b4:ff:6d:3b:53:55:ff:74:85:39:b0:a8:1b:95: 7d:30:9b:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8tT+rSwFxAuEz1CcCulWlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODk2YzU0NGI0NjFkOGIwNjJlZmY5ZTNkMmMyOWNkM2Nj OTYwZWMwHhcNMjUxMjIwMTcwMTA5WhcNMjUxMjIxMTcwMTA5WjAzMTEwLwYDVQQD EyhjNzY5NDkzOTM2ZmNjMDg3YzExNzUzYTY4OTZiMTM2MzAxZmMyNGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcQq/jVhYHMWc5bjF7SlcsW9+UwC 0+pv/qnHGj7Uh4S2YGlhCzhbXNC/xygBOh5UDD7F2UbpbdZfzNi9ZQfhfRIl5Ylz is+geaEJAlEZfAvYJA4L3fFHMNPq0nMtJXcS8jqqd6R7+Og3Qi1bDlPkW+6FFOT6 UKA+C/5lrWQNsQxsyA+vdx2NYtKLBuYSUrMkdVovwoKHCCmYt9d9GBRsmHVW9MjX cwDs5IS2EoCcgFIkd2PeP+4Q0MNVMaUco0wKgt00519w6Phn8aVTboBicpzxwg7s xVAYdT0rsz2NNCO/NZPZNWcy4zi4IeBzJpd7/foCrIlIVWb5HQC7tSA0pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMdpSTk2/MCHwRdTpolrE2MB/CTYMB8GA1UdIwQY MBaAFHSJbFRLRh2LBi7/nj0sKc08yWDsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2Yt Y2YxNzQwODIzNDAwLzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9iYzIyYTktZjg3MS00MDBjLThmY2YtY2YxNzQwODIzNDAw LzEvZElsc1ZFdEdIWXNHTHYtZVBTd3B6VHpKWU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6/MfvO7 /GDU602B8ZODTKR8ICRzw/9ZObAkMBtz7C7/yO40boR4jbQFghz/ku/PpY9oO2HJ SCAIKqVFkqglSKRI2+MBmHpvTVMo1N4Ta57bB00qMOsv1jAR9X8O5g2YQAxpV7bl gjWQbBEP0OvgTCNA75PB1QqDV4dj9EsaiVd9ohl64FJhThHpl7j7nnc1PzFO2lqN edQNxq5nuq0NwiVYyAbKr1rxCvdj29zQ9W2vjtGDVCTOPSVbYCuY3kYoduwaekYa jb7sq+q4DcETWTp5/qZYbB2JgIgod8yxJssJSSUNt3aD1Ip7fOPca7T/bTtTVf90 hTmwqBuVfTCb3w== -----END CERTIFICATE-----Generated at Sat Dec 20 18:29:56 2025 by rpki-client