This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft File: j3iWOzxPLdGHwgQ33x19nBaMq4E.mft (raw, json) Hash identifier: DkftXJ6vDOgkNCMwTQqnYFQ2ZGHoBBz9pWpNKQX1qyQ= Subject key identifier: 49:54:54:3A:27:E1:BB:7F:25:5D:CD:23:06:AC:78:B0:9B:6D:88:87 Authority key identifier: 8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 Certificate issuer: /CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Certificate serial: 019B3E6D83A2B7680BE536818D2D57CEB446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft Manifest number: 179C Signing time: Sun 21 Dec 2025 01:02:03 +0000 Manifest this update: Sun 21 Dec 2025 01:02:03 +0000 Manifest next update: Mon 22 Dec 2025 01:02:03 +0000 Files and hashes: 1: 1gqy8jv-V_H7oweUasDl-ECUQ1I.roa (hash: w7kEB0Eg8qOWOT1pz0wZhRGBM4Y+whIgLQrg7qaGMxo=) 2: EHlGqb04iAIbXB5rqXIY0OnBfmY.roa (hash: 81m7h3zrGqKLifk2aQp93enuHjOZTif5bviOShjKwd0=) 3: JwRfQe1RRMFqmouHM8GDCbBv0qg.roa (hash: HeOaGIUlAHS+jA2tQ0PvTXar52BfbpysaRlaXP3EMw8=) 4: OrMUAZWeOYOcLPd3g5LwbkMUXk8.roa (hash: gKkiytrZ0hzX5R/Kg8dR7Gdhl0r2rLxr0t9FK+F8kjA=) 5: j3iWOzxPLdGHwgQ33x19nBaMq4E.crl (hash: 0ZWzc45aj+0qCGVGriF+WiP8jJl2R7njHysneIRBoLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:83:a2:b7:68:0b:e5:36:81:8d:2d:57:ce:b4:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f78963b3c4f2dd187c20437df1d7d9c168cab81 Validity Not Before: Dec 21 01:02:03 2025 GMT Not After : Dec 22 01:02:03 2025 GMT Subject: CN=4954543a27e1bb7f255dcd2306ac78b09b6d8887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:dd:a1:f8:8c:3d:92:fe:e8:46:8c:a8:9d:7e: 12:49:ce:ea:0b:b9:2a:34:12:2a:02:0b:e9:4a:41: 6d:e8:b4:5a:df:7c:60:79:28:27:12:d7:99:ad:bb: ed:3b:bb:80:e4:eb:17:90:a8:c4:72:fa:c4:1a:d8: cc:9f:f4:fb:96:eb:32:8e:cc:de:7e:b5:c6:50:49: cf:08:de:2a:23:04:36:ee:64:e7:fb:67:da:39:09: b4:f3:e0:71:e1:7d:e4:b5:56:bb:48:bb:fb:d7:84: 70:03:78:4b:52:dd:1d:d2:37:e0:1f:55:55:19:45: 15:3c:4c:1d:26:d9:59:c4:9b:df:2a:ff:ae:39:45: 4f:5d:b6:35:d5:1e:1d:ee:8c:37:67:d1:44:e5:f6: a6:c9:00:bd:f8:a0:2b:15:55:66:b7:54:80:23:db: b0:83:d3:a6:ec:c5:de:38:5e:0b:c9:72:b9:40:73: 74:2a:ef:87:cb:b6:96:61:b6:44:9d:6b:d8:c9:fb: 36:65:0d:ae:54:4f:e6:cf:86:87:6a:e0:d7:1f:08: 4e:d6:92:f4:ca:97:64:0b:b7:53:c1:4d:ba:5b:55: 61:f1:51:32:ea:01:00:d7:fd:c0:f2:0a:41:87:2f: 74:a2:6d:a8:91:99:20:52:51:ca:5c:fe:c0:a2:05: 11:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:54:3A:27:E1:BB:7F:25:5D:CD:23:06:AC:78:B0:9B:6D:88:87 X509v3 Authority Key Identifier: keyid:8F:78:96:3B:3C:4F:2D:D1:87:C2:04:37:DF:1D:7D:9C:16:8C:AB:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3iWOzxPLdGHwgQ33x19nBaMq4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dbfca1-2b94-4d0b-9dd8-1ef9f2319522/1/j3iWOzxPLdGHwgQ33x19nBaMq4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:52:14:87:0f:49:67:14:08:e6:be:3a:18:e6:aa:c4:39:47: 9d:45:61:61:97:d9:8b:c1:1e:fc:74:44:90:e4:0e:2d:34:2e: 3c:25:fd:62:9d:92:e3:01:c4:55:3f:49:5d:52:3c:7d:3e:e7: 5f:10:26:6d:f5:a2:3e:ab:97:10:cf:a2:8c:71:ff:12:72:53: fb:c0:be:e9:30:80:b5:8d:2f:f9:d0:ee:e6:52:1e:48:46:6f: 7c:d7:59:8e:58:a7:9b:6d:d3:57:28:d6:f4:12:7f:43:e2:47: 92:6a:e4:cf:d3:27:32:41:33:9a:f7:c8:72:74:8e:ee:44:5a: 54:5f:1f:c6:1f:c7:63:49:0d:ed:f5:1c:54:f4:f3:66:08:d5: 26:e0:55:c5:0a:d3:7f:5b:76:88:47:83:5c:b7:b4:0b:0a:91: fc:56:4a:48:82:d9:fd:c7:2e:ab:58:15:60:b2:ad:f0:86:42: 46:74:0e:77:58:03:98:a3:71:2a:60:d0:bd:9e:ac:7e:9c:47: 22:e6:0c:9c:8c:60:f6:20:54:0b:a5:ef:73:25:8a:7c:e5:d0: 95:b4:95:3d:3e:3f:7c:e0:4e:16:d1:9a:6b:63:61:ce:79:54: 80:e3:c8:06:c9:37:2a:75:67:8b:f5:48:da:1c:14:ad:23:36: 24:14:3a:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bYOit2gL5TaBjS1XzrRGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmNzg5NjNiM2M0ZjJkZDE4N2MyMDQzN2RmMWQ3ZDljMTY4 Y2FiODEwHhcNMjUxMjIxMDEwMjAzWhcNMjUxMjIyMDEwMjAzWjAzMTEwLwYDVQQD Eyg0OTU0NTQzYTI3ZTFiYjdmMjU1ZGNkMjMwNmFjNzhiMDliNmQ4ODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt92h+Iw9kv7oRoyonX4SSc7qC7kq NBIqAgvpSkFt6LRa33xgeSgnEteZrbvtO7uA5OsXkKjEcvrEGtjMn/T7lusyjsze frXGUEnPCN4qIwQ27mTn+2faOQm08+Bx4X3ktVa7SLv714RwA3hLUt0d0jfgH1VV GUUVPEwdJtlZxJvfKv+uOUVPXbY11R4d7ow3Z9FE5famyQC9+KArFVVmt1SAI9uw g9Om7MXeOF4LyXK5QHN0Ku+Hy7aWYbZEnWvYyfs2ZQ2uVE/mz4aHauDXHwhO1pL0 ypdkC7dTwU26W1Vh8VEy6gEA1/3A8gpBhy90om2okZkgUlHKXP7AogUR1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElUVDon4bt/JV3NIwaseLCbbYiHMB8GA1UdIwQY MBaAFI94ljs8Ty3Rh8IEN98dfZwWjKuBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgt MWVmOWYyMzE5NTIyLzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9kYmZjYTEtMmI5NC00ZDBiLTlkZDgtMWVmOWYyMzE5NTIy LzEvajNpV096eFBMZEdId2dRMzN4MTluQmFNcTRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlIUhw9J ZxQI5r46GOaqxDlHnUVhYZfZi8Ee/HREkOQOLTQuPCX9Yp2S4wHEVT9JXVI8fT7n XxAmbfWiPquXEM+ijHH/EnJT+8C+6TCAtY0v+dDu5lIeSEZvfNdZjlinm23TVyjW 9BJ/Q+JHkmrkz9MnMkEzmvfIcnSO7kRaVF8fxh/HY0kN7fUcVPTzZgjVJuBVxQrT f1t2iEeDXLe0CwqR/FZKSILZ/ccuq1gVYLKt8IZCRnQOd1gDmKNxKmDQvZ6sfpxH IuYMnIxg9iBUC6XvcyWKfOXQlbSVPT4/fOBOFtGaa2NhznlUgOPIBsk3KnVni/VI 2hwUrSM2JBQ6sg== -----END CERTIFICATE-----Generated at Sun Dec 21 08:58:04 2025 by rpki-client