This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft File: fGlngv8SGuWm2dXPo4R5dotr8L0.mft (raw, json) Hash identifier: HimMdDZenlMGvd0mYqnMc+ZmL2PT1ZYwfaLA/Pwpj68= Subject key identifier: 41:C0:8C:B5:1A:0A:74:9F:60:5A:55:34:4F:4B:A6:B7:C4:92:9A:59 Authority key identifier: 7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD Certificate issuer: /CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Certificate serial: 019B42802E8D6CE01F1131DF797196785922 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 20:00:55 +0000 Manifest this update: Sun 21 Dec 2025 20:00:55 +0000 Manifest next update: Mon 22 Dec 2025 20:00:55 +0000 Files and hashes: 1: CqEll3qj27nC3RPq0fziUJlBCNs.roa (hash: ne9W9a5q+GjzbaXSyhc66nMcJYTTVJvwji8w4P/0Sl4=) 2: dPc9m_TH3I35OVg96ErdD-dIFxE.roa (hash: 6rEh+8XVtIQuMK//Hp1XM75izAZwXIaq6ISFlV91ktM=) 3: fGlngv8SGuWm2dXPo4R5dotr8L0.crl (hash: JO0avAAY2Ph7ZzQrRrba33yyzWkPUsGqs3W92RgElC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:80:2e:8d:6c:e0:1f:11:31:df:79:71:96:78:59:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c696782ff121ae5a6d9d5cfa38479768b6bf0bd Validity Not Before: Dec 21 20:00:55 2025 GMT Not After : Dec 22 20:00:55 2025 GMT Subject: CN=41c08cb51a0a749f605a55344f4ba6b7c4929a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:3d:97:26:19:61:9e:35:4d:f3:35:e6:f1: 88:2c:58:e0:c4:94:55:b0:e6:75:12:d0:d8:3a:e6: 4b:56:ce:08:f1:0d:10:38:93:dd:98:4a:6f:c4:9d: 7c:f4:49:35:a6:3a:07:54:e7:42:9b:f9:79:78:61: f3:a9:7f:d0:7d:fc:32:3a:d1:c9:b0:68:86:60:04: 0f:ef:8d:9d:e4:05:c9:cc:7b:7c:bf:6f:b2:3a:31: f1:07:1d:28:e8:6d:40:6d:1a:37:1f:07:d0:54:ae: ad:d0:c9:e7:f7:b0:23:7d:e4:2a:4c:9a:6d:59:14: 6a:82:d5:6c:16:bd:8c:19:0b:39:32:2b:0a:10:da: 4b:79:94:0d:37:a8:18:81:0d:85:cf:95:e1:ec:68: 82:a2:4d:73:c3:c7:19:93:9d:17:d0:77:3a:49:ed: 5b:4f:5f:87:9b:4a:1c:0a:d8:de:9e:e1:a0:2a:8a: 55:03:bd:e6:71:66:c9:3a:b1:53:2c:84:8b:a6:5e: b0:e2:4d:5b:94:96:ca:01:ca:df:17:ea:a5:5a:4f: ad:c3:35:8c:2d:37:44:2a:5d:1f:86:9d:dc:7a:b2: dc:ba:cc:08:99:6f:dc:e7:45:4e:de:89:e7:1e:94: e3:c7:97:14:b7:de:dd:e5:ed:ab:ad:03:fd:fa:90: 9c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C0:8C:B5:1A:0A:74:9F:60:5A:55:34:4F:4B:A6:B7:C4:92:9A:59 X509v3 Authority Key Identifier: keyid:7C:69:67:82:FF:12:1A:E5:A6:D9:D5:CF:A3:84:79:76:8B:6B:F0:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGlngv8SGuWm2dXPo4R5dotr8L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8ec8e0-9b93-48fc-962a-6f836f35f594/1/fGlngv8SGuWm2dXPo4R5dotr8L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2f:6a:c8:07:85:af:d0:0f:71:e8:35:5b:fb:4f:d7:e9:01: cc:c8:60:24:f4:a2:90:a7:96:e5:a2:b2:40:4d:82:fc:43:f6: af:ba:fe:7f:c9:55:69:17:30:bd:6e:db:c8:f6:2e:4f:57:d2: d9:75:15:68:66:5e:90:15:f6:5f:20:96:30:a5:9d:3c:80:29: 44:ab:81:16:5f:aa:8e:56:92:41:fc:c8:f3:e7:1c:8c:1f:88: 5f:59:cd:8a:38:c9:82:93:f7:d5:64:95:7a:eb:51:08:d8:67: ba:c5:b9:26:13:bf:1e:65:85:e1:47:e1:4a:8a:9a:91:30:ae: 4f:8e:e6:97:7f:ac:81:b3:47:56:b9:fa:9a:06:e3:f5:92:72: 24:81:e0:41:0f:64:11:c4:5b:f1:12:79:0b:21:19:99:dc:41: ea:ab:dd:6f:08:04:65:ea:e2:f2:0e:60:88:f8:0d:a3:27:ec: 71:04:72:f8:a2:e1:f8:9a:c5:7e:d1:ca:6c:5f:e7:e4:4a:01: a6:c6:f5:03:d3:7d:6e:36:eb:55:98:92:94:36:19:c6:c3:47: 2b:0d:62:67:f1:29:47:2d:16:88:8f:36:2f:a2:4f:e3:fa:e4: 27:e3:7c:2a:54:24:02:2d:b5:f7:e8:6f:a3:31:2f:9b:ba:7b: cb:65:2d:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCgC6NbOAfETHfeXGWeFkiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjk2NzgyZmYxMjFhZTVhNmQ5ZDVjZmEzODQ3OTc2OGI2 YmYwYmQwHhcNMjUxMjIxMjAwMDU1WhcNMjUxMjIyMjAwMDU1WjAzMTEwLwYDVQQD Eyg0MWMwOGNiNTFhMGE3NDlmNjA1YTU1MzQ0ZjRiYTZiN2M0OTI5YTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooY9lyYZYZ41TfM15vGILFjgxJRV sOZ1EtDYOuZLVs4I8Q0QOJPdmEpvxJ189Ek1pjoHVOdCm/l5eGHzqX/QffwyOtHJ sGiGYAQP742d5AXJzHt8v2+yOjHxBx0o6G1AbRo3HwfQVK6t0Mnn97AjfeQqTJpt WRRqgtVsFr2MGQs5MisKENpLeZQNN6gYgQ2Fz5Xh7GiCok1zw8cZk50X0Hc6Se1b T1+Hm0ocCtjenuGgKopVA73mcWbJOrFTLISLpl6w4k1blJbKAcrfF+qlWk+twzWM LTdEKl0fhp3cerLcuswImW/c50VO3onnHpTjx5cUt97d5e2rrQP9+pCcUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEHAjLUaCnSfYFpVNE9LprfEkppZMB8GA1UdIwQY MBaAFHxpZ4L/EhrlptnVz6OEeXaLa/C9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEt NmY4MzZmMzVmNTk0LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC84ZWM4ZTAtOWI5My00OGZjLTk2MmEtNmY4MzZmMzVmNTk0 LzEvZkdsbmd2OFNHdVdtMmRYUG80UjVkb3RyOEwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC9qyAeF r9APceg1W/tP1+kBzMhgJPSikKeW5aKyQE2C/EP2r7r+f8lVaRcwvW7byPYuT1fS 2XUVaGZekBX2XyCWMKWdPIApRKuBFl+qjlaSQfzI8+ccjB+IX1nNijjJgpP31WSV eutRCNhnusW5JhO/HmWF4UfhSoqakTCuT47ml3+sgbNHVrn6mgbj9ZJyJIHgQQ9k EcRb8RJ5CyEZmdxB6qvdbwgEZeri8g5giPgNoyfscQRy+KLh+JrFftHKbF/n5EoB psb1A9N9bjbrVZiSlDYZxsNHKw1iZ/EpRy0WiI82L6JP4/rkJ+N8KlQkAi219+hv ozEvm7p7y2Ut3w== -----END CERTIFICATE-----Generated at Sun Dec 21 22:30:01 2025 by rpki-client