This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json) Hash identifier: ajnmw/DTIbWVtEWnS1fGcTQZwSGKAb/I7lduQ/clT0c= Subject key identifier: 18:FA:F0:8E:0F:7A:B9:22:A6:4B:0E:6E:57:EC:7B:37:8E:0B:B6:38 Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Certificate serial: 019B3A8FE80261D1B30787CC083978920E39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 07:01:08 +0000 Manifest this update: Sat 20 Dec 2025 07:01:08 +0000 Manifest next update: Sun 21 Dec 2025 07:01:08 +0000 Files and hashes: 1: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=) 2: EEXNCtF9Q-r-jdLQHtiMKb2lX_k.roa (hash: sPo+QlStQLftRhFxrU43bCn4hciRtjvqBLkRQ+qUaq4=) 3: FCOMXnULUVL5uVnX_zvOHcdHJYc.roa (hash: 4uixJ9jDs2SwFvLmk4CIP+prYWqzHVN0aIW9iOFGL0s=) 4: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: NWxUNVis0Oabeij/ARGCZ/Lxsj3XVwkjr7AbGXn30mg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:e8:02:61:d1:b3:07:87:cc:08:39:78:92:0e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b Validity Not Before: Dec 20 07:01:08 2025 GMT Not After : Dec 21 07:01:08 2025 GMT Subject: CN=18faf08e0f7ab922a64b0e6e57ec7b378e0bb638 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:99:f6:d2:88:ba:ac:c1:22:13:0d:e6:fb:f0: 15:06:a9:59:ec:91:bb:ea:7b:bc:d5:96:20:c5:6d: bd:34:b6:55:51:ea:a7:65:6d:23:0c:29:5f:43:67: 2c:9f:d8:84:47:65:9c:6a:d8:4b:50:d9:f0:20:05: 1d:e1:30:25:28:c9:92:7c:d7:4f:a0:93:1c:b3:37: 58:81:60:7d:19:4d:48:71:ab:a3:d7:b7:d3:17:31: 1a:4b:d8:7c:0e:1b:29:a5:e8:7c:1e:c6:74:22:c9: 1a:b3:fd:9c:25:21:d7:09:64:cb:b0:52:a5:eb:28: 82:6c:9d:04:1e:87:c0:18:aa:b1:f5:24:f9:cb:7e: c0:76:a1:d0:20:89:79:2c:ee:6e:06:49:51:68:7f: a4:a7:95:7f:5a:ff:e0:07:87:9d:87:63:95:17:d7: d1:a7:a1:20:89:a5:d8:94:0b:b2:b9:ae:ec:ad:fe: 02:db:e9:18:86:84:1c:f9:c0:1b:17:e1:e0:b5:c7: ca:e7:af:55:11:83:9f:ca:fd:42:49:ea:a4:ee:8e: 00:e6:20:7e:6b:61:41:d5:1a:8f:3d:83:6c:52:56: eb:25:71:47:75:37:79:70:aa:e6:81:db:c1:76:e2: e0:4d:f0:a9:c2:8c:7b:e0:d4:87:e5:1d:5b:ed:66: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:F0:8E:0F:7A:B9:22:A6:4B:0E:6E:57:EC:7B:37:8E:0B:B6:38 X509v3 Authority Key Identifier: keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:84:b0:40:d2:7e:ed:40:89:42:63:31:16:0a:91:82:71: 84:38:7b:70:a1:c3:45:92:99:3b:ee:40:fc:d6:ef:21:35:73: ad:40:63:22:7a:ab:8c:4e:0c:19:29:d6:4b:9d:b7:9c:67:94: b5:47:fb:b2:60:40:ee:c3:f5:60:99:3f:5c:5f:68:0c:ec:a4: e5:e9:3f:0a:18:ae:e9:d9:0c:c5:52:1a:d0:64:a8:a4:39:05: 6f:1d:4d:64:5b:65:ea:f2:8f:08:f5:3a:ae:c7:7d:8a:09:b3: c4:eb:fa:cb:06:d9:46:69:94:47:e7:1d:8e:1f:d7:9d:20:6b: 9e:a3:d1:fc:f1:2a:f5:cd:36:f8:47:4d:1e:12:ee:4d:95:34: cc:bf:43:35:c9:4e:8d:5f:03:1a:b2:3a:43:22:49:31:75:07: a3:1e:45:95:60:ee:9f:13:6a:01:ae:bd:8b:80:5d:e8:a4:b9: 69:0f:7f:83:f7:59:4a:52:4f:93:7b:fe:6c:53:2f:59:9b:9c: 13:52:e6:e7:d1:bf:c3:8b:ed:5f:e1:54:f0:27:5b:6a:5e:7d: 7b:83:3a:df:a1:d1:1d:9d:f6:a8:50:7d:51:c0:7f:90:a4:ab: c5:8c:e2:bc:9c:23:83:ae:bc:80:b1:2b:26:d4:fd:7d:dc:28: 40:51:e1:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j+gCYdGzB4fMCDl4kg45MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YWY0Yjc2MzEyNjgwZTlkNDBhMjNiM2NhMmYxOWFiZjJm NmM3M2IwHhcNMjUxMjIwMDcwMTA4WhcNMjUxMjIxMDcwMTA4WjAzMTEwLwYDVQQD EygxOGZhZjA4ZTBmN2FiOTIyYTY0YjBlNmU1N2VjN2IzNzhlMGJiNjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZn20oi6rMEiEw3m+/AVBqlZ7JG7 6nu81ZYgxW29NLZVUeqnZW0jDClfQ2csn9iER2WcathLUNnwIAUd4TAlKMmSfNdP oJMcszdYgWB9GU1Icauj17fTFzEaS9h8Dhsppeh8HsZ0Iskas/2cJSHXCWTLsFKl 6yiCbJ0EHofAGKqx9ST5y37AdqHQIIl5LO5uBklRaH+kp5V/Wv/gB4edh2OVF9fR p6EgiaXYlAuyua7srf4C2+kYhoQc+cAbF+HgtcfK569VEYOfyv1CSeqk7o4A5iB+ a2FB1RqPPYNsUlbrJXFHdTd5cKrmgdvBduLgTfCpwox74NSH5R1b7WYJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBj68I4PerkipksOblfsezeOC7Y4MB8GA1UdIwQY MBaAFESvS3YxJoDp1Aojs8ovGavy9sc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEt NWVhOGY1M2FiNDkxLzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82ODVhYTEtZWYyMi00OGE1LWI3MGEtNWVhOGY1M2FiNDkx LzEvUks5TGRqRW1nT25VQ2lPenlpOFpxX0wyeHpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXM2EsEDS fu1AiUJjMRYKkYJxhDh7cKHDRZKZO+5A/NbvITVzrUBjInqrjE4MGSnWS523nGeU tUf7smBA7sP1YJk/XF9oDOyk5ek/Chiu6dkMxVIa0GSopDkFbx1NZFtl6vKPCPU6 rsd9igmzxOv6ywbZRmmUR+cdjh/XnSBrnqPR/PEq9c02+EdNHhLuTZU0zL9DNclO jV8DGrI6QyJJMXUHox5FlWDunxNqAa69i4Bd6KS5aQ9/g/dZSlJPk3v+bFMvWZuc E1Lm59G/w4vtX+FU8Cdbal59e4M636HRHZ32qFB9UcB/kKSrxYzivJwjg668gLEr JtT9fdwoQFHhEw== -----END CERTIFICATE-----Generated at Sat Dec 20 17:05:45 2025 by rpki-client