This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft File: Cc0hirzfZueVAKuRPNIc8G5AXU4.mft (raw, json) Hash identifier: 0qTZibpd4OaihfWP0D5ZCeQAK7la5D/koH6G+lrxYV0= Subject key identifier: 4F:5A:44:F9:7C:E7:F2:09:ED:BB:78:6F:04:CD:98:74:35:C2:E3:2A Authority key identifier: 09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E Certificate issuer: /CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Certificate serial: 019B3C46C9DC9A6EB01A8E7CF73EF1F8BAAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 15:00:30 +0000 Manifest this update: Sat 20 Dec 2025 15:00:30 +0000 Manifest next update: Sun 21 Dec 2025 15:00:30 +0000 Files and hashes: 1: 0xDZgWnts24csgnMxUD8LWhBHU4.roa (hash: Y8cjviLWLv7KyuSufCFJinPdimRipqIY80BDPZZpv3c=) 2: 2zlKOvbAvQZnhSVaWjsOOlM3Xzg.roa (hash: BfYATa29KVeAb0l3w0wWL4QpEZML5G/JVPVE014fS6c=) 3: Cc0hirzfZueVAKuRPNIc8G5AXU4.crl (hash: 8u4itYcVafTogLFnAMB8Z+McJmWBL/Tt0sshuzT9754=) 4: U_CJPYiKsC4pTY0SsfSjtBrH8dE.roa (hash: AQXnBaIOWVXqlXh1gif0C/a7bntYjy34IbEEU6kS/30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:46:c9:dc:9a:6e:b0:1a:8e:7c:f7:3e:f1:f8:ba:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09cd218abcdf66e79500ab913cd21cf06e405d4e Validity Not Before: Dec 20 15:00:30 2025 GMT Not After : Dec 21 15:00:30 2025 GMT Subject: CN=4f5a44f97ce7f209edbb786f04cd987435c2e32a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3f:fb:ba:cb:a8:88:27:b1:18:c4:85:9e:3d: 1c:e2:76:ae:82:21:8d:bf:f4:0e:92:5a:8a:67:a0: 44:88:5a:87:c0:13:4c:a1:46:38:1d:49:26:df:0e: 56:23:e7:a6:b7:f6:31:45:b4:12:b0:28:09:f4:35: d6:ce:51:38:37:b3:07:b7:13:a9:11:2c:38:ee:c9: 21:d9:f4:60:53:52:cd:e1:7a:df:aa:77:8a:4c:66: 19:d4:1f:52:04:0f:89:99:54:c7:e4:ce:08:13:1a: f8:87:c1:b4:9b:5e:04:a9:bd:3a:40:1a:59:e5:73: 1e:b0:dc:28:f6:56:93:55:6e:65:31:9d:a2:61:7f: ee:e9:cd:9a:da:ba:96:da:3a:68:e0:cd:41:84:5e: 4f:d6:6c:cd:a0:fe:08:03:3f:3a:6a:95:09:23:da: ae:45:58:63:26:a1:12:14:77:b6:e3:28:8d:f1:f4: 80:79:1c:aa:c1:46:43:da:53:5b:2a:dd:9b:24:b9: 32:7c:87:f0:97:71:f3:60:b5:cd:1a:0c:da:23:31: a2:96:6e:25:35:a1:2d:4b:50:0b:45:36:69:a5:44: 9b:ca:ad:9e:16:e9:c8:67:17:11:e0:b8:19:d6:ea: 0b:b8:4b:9a:0c:64:75:6b:c0:06:85:c2:c8:e2:6e: be:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:5A:44:F9:7C:E7:F2:09:ED:BB:78:6F:04:CD:98:74:35:C2:E3:2A X509v3 Authority Key Identifier: keyid:09:CD:21:8A:BC:DF:66:E7:95:00:AB:91:3C:D2:1C:F0:6E:40:5D:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cc0hirzfZueVAKuRPNIc8G5AXU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77fe48-d1f1-449a-807d-4c19ec5b57ca/1/Cc0hirzfZueVAKuRPNIc8G5AXU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1b:fb:9c:32:b0:9a:f5:8a:f3:eb:34:60:f7:17:15:64:aa: 54:59:60:c5:83:96:97:c0:74:b4:da:0a:51:03:53:40:95:1a: 6e:f5:0d:d7:c9:54:4b:a5:77:b6:d8:54:d1:6c:37:cc:d5:14: 6f:a9:e9:85:14:8d:03:ac:09:ab:0e:31:d6:30:52:ac:12:0d: 72:a7:33:79:9a:76:d5:a7:f3:52:b8:75:55:e8:ea:6c:e8:ad: 33:f1:e3:ed:f9:bd:fe:70:75:ae:73:4d:3a:ba:94:91:23:9b: a4:7a:ff:11:3a:7a:e2:a5:54:d1:54:58:a9:84:1b:6f:ea:03: bf:b6:25:56:ab:19:00:0e:d3:f7:03:f0:da:bc:c9:ba:6b:d7: c9:9f:a8:19:e8:09:bd:9b:a5:0d:0a:28:8d:5e:d4:ee:3d:c8: c1:a1:d3:f3:74:1e:77:37:09:0d:ca:69:b0:09:bd:ee:d6:2e: a1:94:41:dc:fe:20:05:78:4f:4c:e3:10:39:3c:80:ef:ae:6e: c0:4c:11:05:65:28:1c:8e:1e:b8:59:1b:7a:a9:f8:8d:61:83: 65:3a:64:72:aa:dd:55:05:d7:cc:d0:c3:52:aa:c9:4a:23:3b: c7:3e:e2:5b:d7:d4:51:2b:3f:04:60:9d:01:6e:46:4f:91:1e: ba:9e:c8:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8Rsncmm6wGo589z7x+LquMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5Y2QyMThhYmNkZjY2ZTc5NTAwYWI5MTNjZDIxY2YwNmU0 MDVkNGUwHhcNMjUxMjIwMTUwMDMwWhcNMjUxMjIxMTUwMDMwWjAzMTEwLwYDVQQD Eyg0ZjVhNDRmOTdjZTdmMjA5ZWRiYjc4NmYwNGNkOTg3NDM1YzJlMzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD/7usuoiCexGMSFnj0c4naugiGN v/QOklqKZ6BEiFqHwBNMoUY4HUkm3w5WI+emt/YxRbQSsCgJ9DXWzlE4N7MHtxOp ESw47skh2fRgU1LN4XrfqneKTGYZ1B9SBA+JmVTH5M4IExr4h8G0m14Eqb06QBpZ 5XMesNwo9laTVW5lMZ2iYX/u6c2a2rqW2jpo4M1BhF5P1mzNoP4IAz86apUJI9qu RVhjJqESFHe24yiN8fSAeRyqwUZD2lNbKt2bJLkyfIfwl3HzYLXNGgzaIzGilm4l NaEtS1ALRTZppUSbyq2eFunIZxcR4LgZ1uoLuEuaDGR1a8AGhcLI4m6+1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE9aRPl85/IJ7bt4bwTNmHQ1wuMqMB8GA1UdIwQY MBaAFAnNIYq832bnlQCrkTzSHPBuQF1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2Qt NGMxOWVjNWI1N2NhLzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi83N2ZlNDgtZDFmMS00NDlhLTgwN2QtNGMxOWVjNWI1N2Nh LzEvQ2MwaGlyemZadWVWQUt1UlBOSWM4RzVBWFU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAARv7nDKw mvWK8+s0YPcXFWSqVFlgxYOWl8B0tNoKUQNTQJUabvUN18lUS6V3tthU0Ww3zNUU b6nphRSNA6wJqw4x1jBSrBINcqczeZp21afzUrh1VejqbOitM/Hj7fm9/nB1rnNN OrqUkSObpHr/ETp64qVU0VRYqYQbb+oDv7YlVqsZAA7T9wPw2rzJumvXyZ+oGegJ vZulDQoojV7U7j3IwaHT83QedzcJDcppsAm97tYuoZRB3P4gBXhPTOMQOTyA765u wEwRBWUoHI4euFkbeqn4jWGDZTpkcqrdVQXXzNDDUqrJSiM7xz7iW9fUUSs/BGCd AW5GT5Eeup7Irw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:49:07 2025 by rpki-client