This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json) Hash identifier: sQj87ujqaUu9eWBFP2jhVFLc2uZoK0xKefINOknM1uI= Subject key identifier: D7:12:86:4D:D4:EB:8B:26:42:D9:6F:26:64:92:AA:B4:DE:B2:D5:08 Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Certificate serial: 019B3FECEEA474FDD440A0913E6C431D6DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 08:00:50 +0000 Manifest this update: Sun 21 Dec 2025 08:00:50 +0000 Manifest next update: Mon 22 Dec 2025 08:00:50 +0000 Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=) 2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: 47O3haE4o1j0FfYmHkgvQIsavKY5c8KHcyE5CApZ4kU=) 3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:ec:ee:a4:74:fd:d4:40:a0:91:3e:6c:43:1d:6d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009 Validity Not Before: Dec 21 08:00:50 2025 GMT Not After : Dec 22 08:00:50 2025 GMT Subject: CN=d712864dd4eb8b2642d96f266492aab4deb2d508 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8d:d4:cc:3c:6e:78:7d:09:8a:56:86:98:d3: 9b:a3:8f:af:31:31:bc:c5:8c:27:16:1c:3a:d0:b7: 72:5f:7b:c9:88:59:b9:10:71:f2:e0:30:98:41:9c: 59:92:b7:22:4f:5b:25:a0:ba:b3:5d:42:d6:4e:d5: 65:fb:a0:e3:59:d2:73:34:d1:91:61:ca:32:ad:99: d6:6e:7a:e6:33:e6:ab:17:96:7b:84:51:bd:6f:0d: 26:04:87:f9:1a:ea:04:42:4f:a4:f2:cb:77:2e:c3: 63:0a:23:16:6f:56:31:0d:cb:f5:52:23:a9:b1:22: 36:0f:10:94:99:1e:c3:7e:ab:3f:a6:df:b0:64:de: da:14:60:08:34:42:fe:a2:b6:c3:28:a6:96:35:b0: 1d:1a:7f:45:8c:98:ce:ce:bd:36:4c:b3:10:64:20: 67:08:02:db:01:b8:c9:ab:19:f2:78:61:71:79:d5: e4:75:c0:ee:61:7f:91:bd:4c:5f:ec:77:74:21:d2: 56:62:31:8a:af:ed:37:bc:5e:0f:d6:7e:85:56:2e: 8b:a7:1d:07:c9:a3:d5:5f:72:82:9c:7e:7c:7a:93: 97:f0:03:4a:e2:8b:87:4c:44:99:b7:3e:7c:2b:21: 52:63:0c:1e:59:31:8d:07:44:a3:d5:99:c8:07:42: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:12:86:4D:D4:EB:8B:26:42:D9:6F:26:64:92:AA:B4:DE:B2:D5:08 X509v3 Authority Key Identifier: keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:bc:a5:1c:4d:49:aa:8c:d2:4a:21:47:1c:b9:42:e4:40:79: d2:78:bf:6d:6f:98:c3:28:2b:e3:1d:f2:25:f3:e1:9f:e1:f4: 06:a2:7a:84:d6:ea:d5:07:bb:98:78:21:6a:db:a9:bd:34:91: 00:5c:c7:ca:74:ea:fd:08:6f:c6:30:06:38:96:ee:a3:d2:8a: 86:66:9b:09:5f:c8:21:ee:14:a7:19:04:e0:43:a8:84:0c:79: 55:71:fa:6d:9e:ce:78:8b:bd:b9:d8:5e:fd:7e:9f:aa:a2:22: 89:5b:5b:38:05:d8:21:c6:e2:30:f0:7c:9d:e3:0d:3b:57:94: f0:8f:be:d0:41:44:04:7a:03:e4:1c:cf:3a:a4:61:e9:0f:50: 2a:9f:52:47:03:d8:aa:1b:31:1b:23:2d:d8:e6:bd:48:87:43: c3:9b:77:73:01:9b:67:7f:e3:f9:0c:73:55:cf:7a:e6:f6:af: 94:31:9c:d5:c1:58:5d:20:b3:be:50:e1:40:ee:be:75:84:2c: 34:69:08:c8:7b:69:cc:f2:ba:de:37:5a:39:80:49:5d:11:ed: d5:d2:23:e9:d4:55:38:6c:26:1a:f3:f9:a1:84:1c:92:87:64: cb:d7:cd:91:8d:8e:47:b0:8b:b7:ff:dc:d9:2c:76:a7:48:5a: 98:17:79:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/7O6kdP3UQKCRPmxDHW3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NDk3ZDg0NTNjNWVlM2ViYmIzODhlMWE0N2ExOTVmZjMw ZmUwMDkwHhcNMjUxMjIxMDgwMDUwWhcNMjUxMjIyMDgwMDUwWjAzMTEwLwYDVQQD EyhkNzEyODY0ZGQ0ZWI4YjI2NDJkOTZmMjY2NDkyYWFiNGRlYjJkNTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY3UzDxueH0JilaGmNObo4+vMTG8 xYwnFhw60LdyX3vJiFm5EHHy4DCYQZxZkrciT1sloLqzXULWTtVl+6DjWdJzNNGR YcoyrZnWbnrmM+arF5Z7hFG9bw0mBIf5GuoEQk+k8st3LsNjCiMWb1YxDcv1UiOp sSI2DxCUmR7Dfqs/pt+wZN7aFGAINEL+orbDKKaWNbAdGn9FjJjOzr02TLMQZCBn CALbAbjJqxnyeGFxedXkdcDuYX+RvUxf7Hd0IdJWYjGKr+03vF4P1n6FVi6Lpx0H yaPVX3KCnH58epOX8ANK4ouHTESZtz58KyFSYwweWTGNB0Sj1ZnIB0IWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcShk3U64smQtlvJmSSqrTestUIMB8GA1UdIwQY MBaAFBZJfYRTxe4+u7OI4aR6GV/zD+AJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEt YjIzNGRkNmVkNjM3LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9jOTdmY2YtMWE4ZC00YWM5LWJmZWEtYjIzNGRkNmVkNjM3 LzEvRmtsOWhGUEY3ajY3czRqaHBIb1pYX01QNEFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrylHE1J qozSSiFHHLlC5EB50ni/bW+Ywygr4x3yJfPhn+H0BqJ6hNbq1Qe7mHghatupvTSR AFzHynTq/QhvxjAGOJbuo9KKhmabCV/IIe4UpxkE4EOohAx5VXH6bZ7OeIu9udhe /X6fqqIiiVtbOAXYIcbiMPB8neMNO1eU8I++0EFEBHoD5BzPOqRh6Q9QKp9SRwPY qhsxGyMt2Oa9SIdDw5t3cwGbZ3/j+QxzVc965vavlDGc1cFYXSCzvlDhQO6+dYQs NGkIyHtpzPK63jdaOYBJXRHt1dIj6dRVOGwmGvP5oYQckodky9fNkY2OR7CLt//c 2Sx2p0hamBd56g== -----END CERTIFICATE-----Generated at Sun Dec 21 10:16:18 2025 by rpki-client