This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json) Hash identifier: NBaju4paxutEPA2M3nOfOb/LoAfUVtW+EAooXceg8Nk= Subject key identifier: 23:25:D1:21:19:34:CD:9A:4D:FA:0F:02:8D:79:56:9F:3E:C3:27:0A Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Certificate serial: 019B3EDA9403358F76530EACFF79D9DCB1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 03:01:10 +0000 Manifest this update: Sun 21 Dec 2025 03:01:10 +0000 Manifest next update: Mon 22 Dec 2025 03:01:10 +0000 Files and hashes: 1: 8GfQJwSm8WOL4eiiEZHqevjvttA.roa (hash: 3bVJWVWZRhXVWLoMKn0YWpgHV5qRAlMtfEADmaxXPBY=) 2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: 7Ckrmj2kb7UTMmBmFM2923gt0xtToUEdFQRdijQIoOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:94:03:35:8f:76:53:0e:ac:ff:79:d9:dc:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Validity Not Before: Dec 21 03:01:10 2025 GMT Not After : Dec 22 03:01:10 2025 GMT Subject: CN=2325d1211934cd9a4dfa0f028d79569f3ec3270a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:29:da:60:18:25:b3:05:49:6a:d4:bd:f1:0a: 6c:59:f4:a6:43:f1:69:8f:f1:fe:92:f3:d6:30:a1: c0:81:3a:a8:8a:a6:fe:a4:de:8f:43:f1:09:1d:f6: 72:91:b0:24:36:ff:b0:86:69:59:2f:e9:7b:82:59: b2:5b:01:dc:9f:33:ff:29:a0:a1:26:fe:73:d7:e5: 04:5f:c7:91:e3:9b:c2:39:aa:d1:7a:f0:94:7e:32: c3:7d:87:bc:d0:8a:09:00:c5:25:f5:61:6c:ee:f4: d5:4f:2a:6b:93:87:72:be:e2:eb:3a:20:ea:9c:31: d4:c2:26:6d:2e:a3:a8:87:d8:a3:0c:9c:f2:f8:d7: 65:d5:a1:68:74:43:57:a4:91:3a:3b:da:f8:0b:4e: 95:fa:c3:93:3c:f7:4f:4d:66:9a:90:4e:50:00:df: c0:41:6c:f2:4a:31:96:d8:52:32:ad:5d:59:86:c1: a1:32:3e:f7:88:09:7d:7d:d7:f7:8e:3e:a0:a2:43: 0a:98:55:f9:c4:a8:7d:90:7c:01:23:4e:e1:ac:68: c4:2f:54:c4:16:77:d6:94:5f:50:05:8e:5f:05:a3: 39:ce:f9:7d:c0:9e:af:32:31:00:86:c1:d8:b2:37: f0:10:c8:ae:f2:dc:f1:82:2b:0f:51:35:ef:0d:c1: be:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:25:D1:21:19:34:CD:9A:4D:FA:0F:02:8D:79:56:9F:3E:C3:27:0A X509v3 Authority Key Identifier: keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:93:d0:80:5c:7e:e7:c5:b0:d0:67:31:8e:fe:98:79:e4:c9: 24:12:6f:78:93:57:e2:11:40:72:5e:5e:fe:b8:ce:3c:a5:a6: 9d:78:02:ec:b8:96:65:0b:da:4f:bf:11:2e:c4:ed:f7:4f:62: 1a:14:7e:dd:a9:12:67:a6:b8:69:24:03:e6:a2:b8:fa:b7:f6: 7b:3d:f3:7f:08:33:fb:8f:2e:9f:79:b0:93:7b:b0:63:bd:dd: 81:df:f5:31:f2:0f:b5:76:8d:93:ba:bf:ac:1c:29:db:da:ff: 08:a5:47:43:18:62:e3:0f:8c:56:19:81:2d:c5:61:5c:19:a8: 6b:57:00:f2:69:ea:22:04:04:c8:3c:4e:0d:fa:d0:32:ca:c3: 53:86:e6:8e:00:5d:cf:c2:7f:4c:f2:b6:5d:29:6c:8b:75:ba: 2e:92:f6:34:24:77:66:8b:52:0b:32:4f:87:24:55:13:08:8f: c8:7a:81:a6:98:12:ca:78:16:5f:33:f8:c5:58:1a:f3:33:3a: 78:18:aa:02:c2:d1:2f:d6:eb:96:93:67:4b:89:ea:d9:01:14: 74:79:53:84:0a:c8:6f:dc:51:fc:cc:ba:58:dc:22:4f:c8:ef: 15:0b:6d:03:87:95:b6:54:9b:e8:af:ff:4b:45:6f:7c:ce:eb: 03:c9:53:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2pQDNY92Uw6s/3nZ3LHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl N2Y4NWEwHhcNMjUxMjIxMDMwMTEwWhcNMjUxMjIyMDMwMTEwWjAzMTEwLwYDVQQD EygyMzI1ZDEyMTE5MzRjZDlhNGRmYTBmMDI4ZDc5NTY5ZjNlYzMyNzBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuinaYBglswVJatS98QpsWfSmQ/Fp j/H+kvPWMKHAgTqoiqb+pN6PQ/EJHfZykbAkNv+whmlZL+l7glmyWwHcnzP/KaCh Jv5z1+UEX8eR45vCOarRevCUfjLDfYe80IoJAMUl9WFs7vTVTyprk4dyvuLrOiDq nDHUwiZtLqOoh9ijDJzy+Ndl1aFodENXpJE6O9r4C06V+sOTPPdPTWaakE5QAN/A QWzySjGW2FIyrV1ZhsGhMj73iAl9fdf3jj6gokMKmFX5xKh9kHwBI07hrGjEL1TE FnfWlF9QBY5fBaM5zvl9wJ6vMjEAhsHYsjfwEMiu8tzxgisPUTXvDcG+RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMl0SEZNM2aTfoPAo15Vp8+wycKMB8GA1UdIwQY MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJPQgFx+ 58Ww0Gcxjv6YeeTJJBJveJNX4hFAcl5e/rjOPKWmnXgC7LiWZQvaT78RLsTt909i GhR+3akSZ6a4aSQD5qK4+rf2ez3zfwgz+48un3mwk3uwY73dgd/1MfIPtXaNk7q/ rBwp29r/CKVHQxhi4w+MVhmBLcVhXBmoa1cA8mnqIgQEyDxODfrQMsrDU4bmjgBd z8J/TPK2XSlsi3W6LpL2NCR3ZotSCzJPhyRVEwiPyHqBppgSyngWXzP4xVga8zM6 eBiqAsLRL9brlpNnS4nq2QEUdHlThArIb9xR/My6WNwiT8jvFQttA4eVtlSb6K// S0VvfM7rA8lTOg== -----END CERTIFICATE-----Generated at Sun Dec 21 07:42:12 2025 by rpki-client