This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft File: mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft (raw, json) Hash identifier: 3MIdKMeHEhVMWpitF27+ZP5VlGJnFpLXItZdJJHCMNc= Subject key identifier: 02:14:DB:3C:9A:C8:7B:55:CF:61:A3:27:BB:5F:35:5D:A1:2C:2C:41 Authority key identifier: 98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB Certificate issuer: /CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Certificate serial: 019B2A787019535F62ED91CEBB1F1F332146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft Manifest number: 177C Signing time: Wed 17 Dec 2025 04:01:34 +0000 Manifest this update: Wed 17 Dec 2025 04:01:34 +0000 Manifest next update: Thu 18 Dec 2025 04:01:34 +0000 Files and hashes: 1: E2H2EgczXO4vEC46FZxvsHwh6_8.roa (hash: 9qoKSnH10eUGGs+3culoGCr3jfo4da0aiqS7K6wGUPQ=) 2: mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl (hash: f0iiEEAENwpNIREMy2uJA4jPmir1C+tMq0tWzSlroQY=) 3: tYbAWeHoGjW4_0OkM4yMqFJOybI.roa (hash: htZo5UqGGeI3toMrh3D8Z6/VXgbSZywSkH3LLl1S9Ws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 04:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2a:78:70:19:53:5f:62:ed:91:ce:bb:1f:1f:33:21:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98097c2bb062b5c2992391a4ed1ee4f4fa3779cb Validity Not Before: Dec 17 04:01:34 2025 GMT Not After : Dec 18 04:01:34 2025 GMT Subject: CN=0214db3c9ac87b55cf61a327bb5f355da12c2c41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d3:4a:6d:c4:74:64:76:b8:9f:ae:b1:e8:16: 31:a5:1f:bd:53:2b:db:f7:f9:3d:b1:bb:6e:b3:2a: f9:3a:cf:4d:0b:7a:1c:12:40:b6:5f:b7:15:79:3b: 03:ff:1c:61:5b:cf:89:00:6e:44:2a:fe:79:0c:37: f8:55:bc:57:97:58:2c:aa:13:d1:a3:9d:d3:cd:d7: c5:4d:88:76:82:0e:6c:e8:73:f9:ff:cc:fc:31:41: 53:77:6f:cd:a8:b0:bc:5a:03:af:9a:01:bc:e9:69: f5:ac:8e:c5:7c:77:8a:c6:51:a2:60:62:6f:fb:ea: ab:07:fd:55:29:66:8a:68:09:b6:ae:03:42:17:fe: e3:8f:63:80:87:5b:99:29:7b:e6:cd:d8:03:a5:9d: 32:43:82:a0:9c:03:fe:c2:f9:c8:50:51:94:bf:43: 96:55:ab:a7:be:e0:38:8b:24:0e:21:f3:52:fa:9d: 8b:12:1f:57:5f:14:91:64:b7:1e:d4:2c:94:e1:a2: 88:73:06:a1:ae:ce:f5:5a:90:50:10:90:ac:fa:4b: df:53:3b:f6:19:db:58:11:58:61:4b:de:cb:14:d6: d8:68:73:ce:a2:d8:b3:2e:df:89:f4:df:dd:b6:76: b9:a6:d1:3d:9d:27:ed:bd:ea:e8:08:b9:aa:db:6e: 7d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:DB:3C:9A:C8:7B:55:CF:61:A3:27:BB:5F:35:5D:A1:2C:2C:41 X509v3 Authority Key Identifier: keyid:98:09:7C:2B:B0:62:B5:C2:99:23:91:A4:ED:1E:E4:F4:FA:37:79:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAl8K7BitcKZI5Gk7R7k9Po3ecs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/17a69d-b7f7-4ba1-b7ee-98bc254c23e5/1/mAl8K7BitcKZI5Gk7R7k9Po3ecs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:98:00:07:74:68:b2:a4:21:23:a9:fd:ec:ce:65:99:3d:18: c9:ab:fe:54:a5:74:bf:0d:b4:74:6b:29:20:b6:df:48:6b:c0: 75:92:17:d6:97:42:4f:aa:e9:4a:06:3a:7a:e6:5d:b9:c3:0c: d2:59:9a:f1:6e:44:cc:80:1e:c4:25:2d:dd:7d:b7:10:0d:ce: 3b:7a:41:9d:71:a6:2e:d6:77:80:30:7b:a5:a5:f0:7c:2e:3b: 30:82:d0:a6:29:bd:b7:94:d9:18:61:39:34:77:b2:29:bf:cc: d9:05:c2:d3:59:0f:a4:23:91:e3:3b:3d:e6:0a:d7:bb:60:62: 3c:ce:60:7a:70:08:b7:aa:3c:28:d9:4c:21:64:72:09:13:2c: b2:d3:66:fd:f0:dd:44:a1:15:89:f7:18:64:3b:55:76:e3:d9: 00:1d:c4:d9:26:65:f8:46:66:3d:58:5a:55:24:60:48:1a:5c: f5:c5:46:a1:15:3d:bd:c5:e2:46:e9:b5:a4:30:9e:bb:95:f0: ea:26:e4:ad:d5:ff:14:9c:8d:0c:cb:be:30:f2:25:d6:eb:9d: 49:36:f4:0c:88:89:87:ca:c6:d2:0c:c3:c1:3e:3a:8c:b3:3e: e5:00:1c:9b:3b:3d:ef:f6:d4:7b:a1:03:2f:d1:1d:77:1c:a3: cb:88:57:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsqeHAZU19i7ZHOux8fMyFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MDk3YzJiYjA2MmI1YzI5OTIzOTFhNGVkMWVlNGY0ZmEz Nzc5Y2IwHhcNMjUxMjE3MDQwMTM0WhcNMjUxMjE4MDQwMTM0WjAzMTEwLwYDVQQD EygwMjE0ZGIzYzlhYzg3YjU1Y2Y2MWEzMjdiYjVmMzU1ZGExMmMyYzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNNKbcR0ZHa4n66x6BYxpR+9Uyvb 9/k9sbtusyr5Os9NC3ocEkC2X7cVeTsD/xxhW8+JAG5EKv55DDf4VbxXl1gsqhPR o53TzdfFTYh2gg5s6HP5/8z8MUFTd2/NqLC8WgOvmgG86Wn1rI7FfHeKxlGiYGJv ++qrB/1VKWaKaAm2rgNCF/7jj2OAh1uZKXvmzdgDpZ0yQ4KgnAP+wvnIUFGUv0OW VaunvuA4iyQOIfNS+p2LEh9XXxSRZLce1CyU4aKIcwahrs71WpBQEJCs+kvfUzv2 GdtYEVhhS97LFNbYaHPOotizLt+J9N/dtna5ptE9nSftveroCLmq2259KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAIU2zyayHtVz2GjJ7tfNV2hLCxBMB8GA1UdIwQY MBaAFJgJfCuwYrXCmSORpO0e5PT6N3nLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUt OThiYzI1NGMyM2U1LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xN2E2OWQtYjdmNy00YmExLWI3ZWUtOThiYzI1NGMyM2U1 LzEvbUFsOEs3Qml0Y0taSTVHazdSN2s5UG8zZWNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJgAB3Ro sqQhI6n97M5lmT0Yyav+VKV0vw20dGspILbfSGvAdZIX1pdCT6rpSgY6euZducMM 0lma8W5EzIAexCUt3X23EA3OO3pBnXGmLtZ3gDB7paXwfC47MILQpim9t5TZGGE5 NHeyKb/M2QXC01kPpCOR4zs95grXu2BiPM5genAIt6o8KNlMIWRyCRMsstNm/fDd RKEVifcYZDtVduPZAB3E2SZl+EZmPVhaVSRgSBpc9cVGoRU9vcXiRum1pDCeu5Xw 6ibkrdX/FJyNDMu+MPIl1uudSTb0DIiJh8rG0gzDwT46jLM+5QAcmzs97/bUe6ED L9Eddxyjy4hXBg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:25:17 2025 by rpki-client