This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft File: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft (raw, json) Hash identifier: APRUGMTWh3iq9L8bbvjwpuvjHTAvR2yjo9b6Buyzi3I= Subject key identifier: 2A:38:06:DD:14:15:BC:33:B9:79:F5:40:EC:14:98:2A:B0:76:0F:AC Authority key identifier: AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A Certificate issuer: /CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Certificate serial: 019B619D084C3B2DB3A8A3E0BFF72D524631 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft Manifest number: 179E Signing time: Sat 27 Dec 2025 21:00:39 +0000 Manifest this update: Sat 27 Dec 2025 21:00:39 +0000 Manifest next update: Sun 28 Dec 2025 21:00:39 +0000 Files and hashes: 1: 8GfQJwSm8WOL4eiiEZHqevjvttA.roa (hash: 3bVJWVWZRhXVWLoMKn0YWpgHV5qRAlMtfEADmaxXPBY=) 2: rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl (hash: dxf3YaVZsRdQ+QV7g1BQDkzer4mndI63tz91efJrxjQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 21:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:61:9d:08:4c:3b:2d:b3:a8:a3:e0:bf:f7:2d:52:46:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac27bc245e76ba5e5c1fc5e9ee55b4b48de7f85a Validity Not Before: Dec 27 21:00:39 2025 GMT Not After : Dec 28 21:00:39 2025 GMT Subject: CN=2a3806dd1415bc33b979f540ec14982ab0760fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:bb:6c:ca:d3:b2:a3:80:0a:40:ed:b3:6c:1c: b5:66:54:ab:6f:f1:f3:b9:2c:ca:f8:f3:24:1f:f6: 43:e6:3f:cd:4f:5f:a7:7f:82:ca:36:5a:55:bd:2a: 5d:17:e5:e7:c3:77:09:9c:c9:27:99:84:53:71:e6: a7:1e:91:d5:1a:74:e5:27:ee:d8:f8:f3:a7:b2:dc: c6:c5:4e:08:32:1e:f1:28:a8:c3:17:db:ea:fd:89: 0b:b1:97:0c:60:e4:bc:bd:1f:8f:6a:9f:09:47:05: 24:c5:26:36:2b:57:1d:aa:6f:15:23:57:8e:e2:7d: b5:81:da:e8:16:dc:1d:ac:22:34:b1:60:5a:d7:a8: 26:87:63:24:9b:e0:5f:59:42:7b:6a:9b:e8:ae:4f: 9c:fd:ae:da:25:dd:26:0b:f1:ca:71:f4:49:b9:50: c4:bf:6e:90:94:e9:96:49:4f:85:bc:59:79:f1:d3: 70:8d:40:48:1b:4d:6b:02:36:22:d1:f0:38:7a:bc: 23:17:59:35:c4:16:db:49:45:0a:54:30:42:f3:02: 4a:37:94:13:57:74:6e:3e:57:07:71:d5:19:21:dd: ab:5e:37:5d:0c:ff:0c:a5:1b:c3:95:27:1f:d6:c1: 9b:dc:46:8e:7d:c4:19:21:67:c8:c1:9c:34:f8:2e: 4e:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:38:06:DD:14:15:BC:33:B9:79:F5:40:EC:14:98:2A:B0:76:0F:AC X509v3 Authority Key Identifier: keyid:AC:27:BC:24:5E:76:BA:5E:5C:1F:C5:E9:EE:55:B4:B4:8D:E7:F8:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/e85375-40ff-4e77-b4e9-bb0671d8ea32/1/rCe8JF52ul5cH8Xp7lW0tI3n-Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:34:fe:90:2c:67:30:2a:c5:4c:bb:1a:75:3c:12:8e:9a: c3:e5:32:5e:99:2f:5d:4b:92:39:5c:45:b0:1c:7d:5a:bd:2e: cb:e6:aa:12:7c:bb:6e:61:db:40:67:fc:3d:c9:7b:0e:5d:09: 32:a2:ac:5b:63:98:ba:a4:ce:83:76:66:a0:f2:2e:1d:50:98: a0:26:e4:ab:a7:ac:b3:ed:02:f2:62:d7:28:aa:8f:b5:d9:50: a1:76:37:ba:7a:32:20:14:e8:d6:40:b0:b9:ca:c6:5a:d0:47: 04:82:73:7d:f7:a8:68:21:96:f7:41:aa:b7:82:9c:78:c1:b3: 0a:2a:a3:44:cf:a8:17:8c:83:9c:95:45:b5:4c:ff:cb:a7:f0: b0:76:ee:6c:2f:b8:51:c1:32:36:2e:88:e2:16:0d:fa:12:14: 78:e6:fa:c0:9d:e9:22:c4:84:c6:9b:22:8e:0c:0f:7b:89:16: eb:0f:66:1d:dc:e6:00:dc:f8:c9:20:f0:98:e8:8c:79:6e:b6: 44:6a:34:09:a4:83:84:6d:08:63:8f:bb:75:13:30:61:e1:8b: b8:d9:b0:12:3c:53:29:37:7a:e5:a4:3f:3c:18:66:f9:79:ba: 9f:c4:a0:0e:2e:a8:36:8e:72:51:15:a4:b4:94:49:65:72:cc: f4:ce:98:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZthnQhMOy2zqKPgv/ctUkYxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMjdiYzI0NWU3NmJhNWU1YzFmYzVlOWVlNTViNGI0OGRl N2Y4NWEwHhcNMjUxMjI3MjEwMDM5WhcNMjUxMjI4MjEwMDM5WjAzMTEwLwYDVQQD EygyYTM4MDZkZDE0MTViYzMzYjk3OWY1NDBlYzE0OTgyYWIwNzYwZmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbtsytOyo4AKQO2zbBy1ZlSrb/Hz uSzK+PMkH/ZD5j/NT1+nf4LKNlpVvSpdF+Xnw3cJnMknmYRTceanHpHVGnTlJ+7Y +POnstzGxU4IMh7xKKjDF9vq/YkLsZcMYOS8vR+Pap8JRwUkxSY2K1cdqm8VI1eO 4n21gdroFtwdrCI0sWBa16gmh2Mkm+BfWUJ7apvork+c/a7aJd0mC/HKcfRJuVDE v26QlOmWSU+FvFl58dNwjUBIG01rAjYi0fA4erwjF1k1xBbbSUUKVDBC8wJKN5QT V3RuPlcHcdUZId2rXjddDP8MpRvDlScf1sGb3EaOfcQZIWfIwZw0+C5OiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCo4Bt0UFbwzuXn1QOwUmCqwdg+sMB8GA1UdIwQY MBaAFKwnvCRedrpeXB/F6e5VtLSN5/haMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTkt YmIwNjcxZDhlYTMyLzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9lODUzNzUtNDBmZi00ZTc3LWI0ZTktYmIwNjcxZDhlYTMy LzEvckNlOEpGNTJ1bDVjSDhYcDdsVzB0STNuLUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgg0/pAs ZzAqxUy7GnU8Eo6aw+UyXpkvXUuSOVxFsBx9Wr0uy+aqEny7bmHbQGf8Pcl7Dl0J MqKsW2OYuqTOg3ZmoPIuHVCYoCbkq6ess+0C8mLXKKqPtdlQoXY3unoyIBTo1kCw ucrGWtBHBIJzffeoaCGW90Gqt4KceMGzCiqjRM+oF4yDnJVFtUz/y6fwsHbubC+4 UcEyNi6I4hYN+hIUeOb6wJ3pIsSExpsijgwPe4kW6w9mHdzmANz4ySDwmOiMeW62 RGo0CaSDhG0IY4+7dRMwYeGLuNmwEjxTKTd65aQ/PBhm+Xm6n8SgDi6oNo5yURWk tJRJZXLM9M6Y/A== -----END CERTIFICATE-----Generated at Sun Dec 28 06:21:09 2025 by rpki-client