This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft File: R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json) Hash identifier: 13Gn6IZkPgioiSJmbeGmtR0d+VGp2JJyH9zrYfwJ3cM= Subject key identifier: 4E:23:AA:35:09:6F:4E:29:2A:10:79:D6:92:FF:84:49:C0:23:CE:17 Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Certificate serial: 019B3D90AA7A59D99494B745A9565D874569 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft Manifest number: 179C Signing time: Sat 20 Dec 2025 21:00:49 +0000 Manifest this update: Sat 20 Dec 2025 21:00:49 +0000 Manifest next update: Sun 21 Dec 2025 21:00:49 +0000 Files and hashes: 1: 95vGqOrfq-A06Cg8RsHNae6rv14.roa (hash: M+Iqf7FteINIZ68Ce/QsvfRQOwsa3vBIFGqQoKfMdTY=) 2: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: zdCfiR24dtQKCdkBMPp+fA+C5C7nUxG4cGDOr6P2MKQ=) 3: YI4k3ENYRJqaDSUhSenx1oLWDr4.roa (hash: /gA7fz8Cy1YxK69gPpp37L8R7jjMwoMYWidH5G4YDU4=) 4: j5UDDhxpTv4ushx1mWgWUG65pLw.roa (hash: /0/V6H+X8Ix/QnnafguyBKn8HfbnAIhcS2Wv2jx5XnY=) 5: j8PaDOqMy9bnUnm61uhmKRQqO40.roa (hash: az4KYeOww26kcXer0MbYBu03FnI/TiStTGp2SRSz2UQ=) 6: jT6NkmL7YzecSayVxKLBX2lYFl0.roa (hash: pN4nTNkxgnBnRMvOcO7lpmhLow3FyCajR2fUpr6WK+o=) 7: shVxNeuAvqU2EZg6AvUFKFXrrss.roa (hash: swqDkI/VzYd3AR5PZIZqpbPJTNwO2OZsMXyq7SU+z6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:aa:7a:59:d9:94:94:b7:45:a9:56:5d:87:45:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c Validity Not Before: Dec 20 21:00:49 2025 GMT Not After : Dec 21 21:00:49 2025 GMT Subject: CN=4e23aa35096f4e292a1079d692ff8449c023ce17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d4:99:2a:13:cc:37:4a:ec:99:4c:e5:28:d3: 92:ae:4b:00:a3:47:71:16:8a:c1:20:a0:6a:75:df: d9:3a:ec:e5:94:f6:5a:42:fa:07:34:96:71:0c:27: 33:95:a8:2e:85:49:e2:13:8d:c9:f8:06:4f:e6:d8: 36:c6:2e:29:d9:01:21:d4:54:df:61:0a:fc:4a:eb: ab:6b:a7:42:d6:7a:a0:c7:59:58:20:d6:1f:c6:95: 79:d3:95:e2:bf:37:af:ce:7d:2a:f1:24:dd:25:d7: d3:5a:02:3b:77:23:8c:d6:df:ce:98:9d:13:ad:be: 9b:81:24:f6:19:d1:d4:5c:65:12:7a:1f:68:84:d4: cf:b9:71:01:9f:48:b7:76:c8:d5:51:fa:34:80:8b: e9:c2:9e:6e:2c:cc:83:d5:0b:f8:6d:ff:8e:ad:5f: fd:57:71:44:93:b3:3f:82:47:49:fe:39:6c:ca:4f: 27:03:9c:d9:25:32:01:49:d6:75:6c:e0:4b:8f:46: 6d:b3:4f:03:3e:bd:d3:4f:ec:42:d1:9a:09:0d:8e: 64:d5:bc:17:ce:bd:de:f2:b4:e5:d5:6e:8c:2d:0c: ce:ce:f6:db:dd:bc:3e:d7:67:aa:44:8e:08:64:1c: fc:df:bf:f1:38:e7:ed:7c:36:b3:f8:2d:1a:5a:54: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:23:AA:35:09:6F:4E:29:2A:10:79:D6:92:FF:84:49:C0:23:CE:17 X509v3 Authority Key Identifier: keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:30:2c:c3:d8:8e:c1:66:e8:89:c6:b3:cb:07:a9:d3:bc:7e: 78:65:7e:a6:5f:84:e2:20:46:d3:44:fd:eb:0c:e4:d0:2d:7f: 2b:3e:52:56:5e:4a:3e:95:c7:49:01:ed:ee:e9:f8:b1:dd:b4: 43:2b:4a:64:6a:9b:31:09:fb:c7:14:ea:81:54:23:fc:b2:5d: 73:8a:dc:8f:7f:ca:55:8f:d3:1b:29:59:24:9d:bd:20:34:12: 58:f5:b2:c7:a5:ea:c9:bb:69:d7:e5:c8:33:32:cd:24:f2:1f: 61:05:43:ab:da:c8:32:2c:2d:c3:b2:9c:50:1e:73:b8:5c:8f: b7:c4:78:cc:24:32:d0:18:49:dd:34:74:f0:17:1f:4c:f7:7f: d5:30:ec:8f:e9:b1:29:03:d6:99:db:10:83:15:43:4b:52:1d: 77:d2:32:b0:aa:c8:a1:4e:99:b5:90:98:c0:f7:59:4b:1b:c5: 8b:60:1d:3f:d4:f9:a1:7b:c6:0c:97:ab:44:34:9e:be:70:17: 43:9f:10:96:2c:d7:e4:ba:af:2a:4b:6d:9f:db:e9:e6:52:59: e8:6f:cb:1e:31:9b:20:c4:09:b4:20:bd:eb:e8:0f:f5:62:2a: e3:8d:d8:bb:f3:41:6b:d7:a9:26:9b:46:8f:ca:04:57:47:be: 89:db:9b:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kKp6WdmUlLdFqVZdh0VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl ZDhjMWMwHhcNMjUxMjIwMjEwMDQ5WhcNMjUxMjIxMjEwMDQ5WjAzMTEwLwYDVQQD Eyg0ZTIzYWEzNTA5NmY0ZTI5MmExMDc5ZDY5MmZmODQ0OWMwMjNjZTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9SZKhPMN0rsmUzlKNOSrksAo0dx ForBIKBqdd/ZOuzllPZaQvoHNJZxDCczlaguhUniE43J+AZP5tg2xi4p2QEh1FTf YQr8Suura6dC1nqgx1lYINYfxpV505Xivzevzn0q8STdJdfTWgI7dyOM1t/OmJ0T rb6bgST2GdHUXGUSeh9ohNTPuXEBn0i3dsjVUfo0gIvpwp5uLMyD1Qv4bf+OrV/9 V3FEk7M/gkdJ/jlsyk8nA5zZJTIBSdZ1bOBLj0Zts08DPr3TT+xC0ZoJDY5k1bwX zr3e8rTl1W6MLQzOzvbb3bw+12eqRI4IZBz837/xOOftfDaz+C0aWlTDTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4jqjUJb04pKhB51pL/hEnAI84XMB8GA1UdIwQY MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt YmQ5MGEzZjA2ZTE2LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2 LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAATAsw9iO wWboicazywep07x+eGV+pl+E4iBG00T96wzk0C1/Kz5SVl5KPpXHSQHt7un4sd20 QytKZGqbMQn7xxTqgVQj/LJdc4rcj3/KVY/TGylZJJ29IDQSWPWyx6Xqybtp1+XI MzLNJPIfYQVDq9rIMiwtw7KcUB5zuFyPt8R4zCQy0BhJ3TR08BcfTPd/1TDsj+mx KQPWmdsQgxVDS1Idd9IysKrIoU6ZtZCYwPdZSxvFi2AdP9T5oXvGDJerRDSevnAX Q58QlizX5LqvKkttn9vp5lJZ6G/LHjGbIMQJtCC96+gP9WIq443Yu/NBa9epJptG j8oEV0e+idubjQ== -----END CERTIFICATE-----Generated at Sun Dec 21 02:59:32 2025 by rpki-client