This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft File: Dg9Icq0cH0_LITtrLts4ii2cmiM.mft (raw, json) Hash identifier: j2EhFo7wBdcSDV3CADF4us5DtIVxuODR/NrQmP3vvBA= Subject key identifier: 71:FF:67:D4:54:4C:AA:14:0C:C9:7C:75:CF:0A:59:26:32:BF:E8:D7 Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Certificate serial: 019B4136CBDA3AC98746FF1371851F09655D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft Manifest number: 179A Signing time: Sun 21 Dec 2025 14:01:08 +0000 Manifest this update: Sun 21 Dec 2025 14:01:08 +0000 Manifest next update: Mon 22 Dec 2025 14:01:08 +0000 Files and hashes: 1: 1-0L6QihwgCIdPcxlSZx30BVCxIU.roa (hash: r/v9bB2/O8eoqo0SdsHJ+0cV0GGG/FpWoOUcPgNpIWM=) 2: Dg9Icq0cH0_LITtrLts4ii2cmiM.crl (hash: pKoWUCZQghHzHudCI/ZDDjZvSc5ZoxtL2eWQHk1lY9M=) 3: IJAOzCgcOmnwLYeg7ILsOnQE_C4.roa (hash: qNB39/8R46KNEQ+i+JNvTzUgavEQepnYZFITugyt9Gk=) 4: J2u59yFgmuGdudgIENAeqcAIi5A.roa (hash: 1czvcte4D1PcVrf098gt6GCTblFnQnU2WnM5dPM5CwQ=) 5: K-WcYZp1Vr4DrhTlbDa1XAsuu4s.roa (hash: FTkwxwLsNPLRvw7XfELnO2lGIpcQ3JUT+SSorDdEIQk=) 6: fPUfeSK-zqhYqo9RI5ZO_RvTAnI.roa (hash: 2BLh0mt6BN3cuK7N2qRXjH6g7/lfrSvhbtCftnz6qGo=) 7: l4iAztFdyWZxSOfl8q_e1dKH1is.roa (hash: Uv7SVk02b8fR8AImRa4OOMzROmZWxN56DleM+7FbEo4=) 8: wdQu71DwsSZCWEGjtF-c6H8Remk.roa (hash: nQC972cihJ5AOMxuc+A8aMUofttqjMugRlO4fZX1z8w=) 9: zwK7zErLOq-Lh2vm_AxCgFBZ4xs.roa (hash: iF8UE/8pbMpYaV1IVf6cowiiQQTnx+niOONavMOR9ho=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:41:36:cb:da:3a:c9:87:46:ff:13:71:85:1f:09:65:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23 Validity Not Before: Dec 21 14:01:08 2025 GMT Not After : Dec 22 14:01:08 2025 GMT Subject: CN=71ff67d4544caa140cc97c75cf0a592632bfe8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:34:0f:94:ca:06:95:3b:d9:6f:e4:a9:a2:cc: 8f:6c:c5:67:1c:5f:1c:e8:56:63:41:fd:17:ba:6a: 6b:23:b8:37:f4:d1:91:f7:38:f2:34:1f:98:fc:44: 16:b8:dc:42:c5:41:1a:34:f9:bd:9a:b5:37:c1:be: f9:49:09:b9:0c:3f:c4:ac:77:ef:de:ac:53:45:ca: 08:b2:2f:db:2a:a6:58:26:23:68:80:4c:17:2c:2c: e1:8f:7d:41:b1:eb:27:0d:51:cf:c6:47:94:bf:cd: 4b:bc:9b:32:07:f0:6f:15:bd:c1:e2:a4:74:60:82: 5e:5e:63:1d:cd:55:f9:ec:55:b1:3f:fc:d3:f1:31: 9e:c2:7d:53:56:3e:1e:31:31:6b:c2:7e:78:a4:9f: 3a:e2:8e:52:63:fb:c7:19:46:47:be:ce:f7:15:2c: f5:7b:82:2f:c5:f9:ee:2f:b8:96:e9:70:33:98:62: 1c:a1:32:46:c7:66:05:1b:35:61:f1:c0:16:dc:e0: d3:64:3a:ca:11:dc:e8:98:24:c9:c4:35:4c:bf:00: b1:9f:bb:67:c8:0a:a2:47:8b:bd:d5:9f:99:59:af: 03:ad:dd:97:39:28:70:74:59:d9:c5:40:fb:fd:61: 2e:c3:d8:1a:f5:8e:94:c3:34:f5:9d:51:4e:be:45: 9c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:FF:67:D4:54:4C:AA:14:0C:C9:7C:75:CF:0A:59:26:32:BF:E8:D7 X509v3 Authority Key Identifier: keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:3d:89:bb:9d:5d:62:43:7e:4b:5a:cb:60:1a:89:49:49:f4: e3:2d:f2:27:3d:9f:3b:06:54:f2:bc:d1:56:60:4d:75:34:b1: 09:52:cc:d7:7b:5a:eb:b1:ae:fa:0e:5e:11:ee:de:4b:1e:5a: d0:61:b9:d8:29:56:47:d0:38:f7:c6:73:c0:69:d6:93:53:ca: a1:df:45:b4:6c:e4:6d:38:fb:82:23:c8:a6:46:89:67:69:61: f1:48:73:35:49:09:e3:dd:41:c9:c8:29:50:7a:f9:30:e1:80: 36:a3:53:09:72:32:8c:ed:ab:66:33:96:56:b9:52:77:2a:6a: f9:f5:60:da:fd:0d:8b:b1:6b:6b:88:6e:a9:ae:56:ba:bb:d0: 20:b8:f0:89:8f:0d:b2:fb:3a:10:91:9d:40:c1:25:d5:2a:ad: 75:52:f7:41:f9:09:d1:9c:a8:61:8c:15:9a:16:59:08:9f:a9: fb:ba:61:e7:07:d3:b2:f2:f1:c3:6d:98:65:52:1b:94:6d:7a: 58:2f:b3:f5:ca:5a:c1:1e:78:b2:08:0e:ca:34:3f:19:10:a4: 36:6f:5e:eb:9b:47:43:86:2a:57:fe:8a:f8:59:f1:3d:d9:9f: ec:d8:bf:8e:3e:82:e5:79:f0:7e:7d:68:27:ae:f9:84:6e:4f: 57:b1:02:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtBNsvaOsmHRv8TcYUfCWVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5 YzlhMjMwHhcNMjUxMjIxMTQwMTA4WhcNMjUxMjIyMTQwMTA4WjAzMTEwLwYDVQQD Eyg3MWZmNjdkNDU0NGNhYTE0MGNjOTdjNzVjZjBhNTkyNjMyYmZlOGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDQPlMoGlTvZb+SposyPbMVnHF8c 6FZjQf0XumprI7g39NGR9zjyNB+Y/EQWuNxCxUEaNPm9mrU3wb75SQm5DD/ErHfv 3qxTRcoIsi/bKqZYJiNogEwXLCzhj31BsesnDVHPxkeUv81LvJsyB/BvFb3B4qR0 YIJeXmMdzVX57FWxP/zT8TGewn1TVj4eMTFrwn54pJ864o5SY/vHGUZHvs73FSz1 e4IvxfnuL7iW6XAzmGIcoTJGx2YFGzVh8cAW3ODTZDrKEdzomCTJxDVMvwCxn7tn yAqiR4u91Z+ZWa8Drd2XOShwdFnZxUD7/WEuw9ga9Y6UwzT1nVFOvkWcAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHH/Z9RUTKoUDMl8dc8KWSYyv+jXMB8GA1UdIwQY MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt YzAxZjgwYTFjODA1LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1 LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVz2Ju51d YkN+S1rLYBqJSUn04y3yJz2fOwZU8rzRVmBNdTSxCVLM13ta67Gu+g5eEe7eSx5a 0GG52ClWR9A498ZzwGnWk1PKod9FtGzkbTj7giPIpkaJZ2lh8UhzNUkJ491Bycgp UHr5MOGANqNTCXIyjO2rZjOWVrlSdypq+fVg2v0Ni7Fra4huqa5WurvQILjwiY8N svs6EJGdQMEl1SqtdVL3QfkJ0ZyoYYwVmhZZCJ+p+7ph5wfTsvLxw22YZVIblG16 WC+z9cpawR54sggOyjQ/GRCkNm9e65tHQ4YqV/6K+FnxPdmf7Ni/jj6C5Xnwfn1o J675hG5PV7ECFQ== -----END CERTIFICATE-----Generated at Sun Dec 21 22:27:09 2025 by rpki-client