This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json) Hash identifier: tjh9Az/gJ86Blkp0DVL7JkhBa9JFpYxIZ9Y25NQ8o7o= Subject key identifier: 81:44:C5:61:DD:E2:93:93:16:22:6D:95:F1:11:7F:8F:9E:DD:7B:43 Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52 Certificate serial: 019B3EA38C61828F706B773C26A84F29A794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 02:01:04 +0000 Manifest this update: Sun 21 Dec 2025 02:01:04 +0000 Manifest next update: Mon 22 Dec 2025 02:01:04 +0000 Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=) 2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=) 3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: 895P4rEZAhu5Ibr9+OOlIni4EA+KeQe89S1NQ9DxSEw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:a3:8c:61:82:8f:70:6b:77:3c:26:a8:4f:29:a7:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52 Validity Not Before: Dec 21 02:01:04 2025 GMT Not After : Dec 22 02:01:04 2025 GMT Subject: CN=8144c561dde2939316226d95f1117f8f9edd7b43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:99:c4:a3:5c:5c:97:a1:99:df:90:24:a9:64: a0:d2:2c:85:1d:dd:9c:c1:a1:cb:47:c3:da:bd:c2: a3:28:b4:3d:3f:5f:ca:a9:ab:46:8c:f0:c2:d8:c0: 5a:bb:7f:d8:58:05:6d:47:d1:10:72:09:d2:fd:84: af:fe:29:4d:9a:7c:43:be:90:a2:a7:e4:ab:1e:21: 25:21:79:b1:96:87:d9:bd:92:dd:32:54:01:51:8d: fe:d8:29:90:28:95:a5:ce:a6:4d:c9:80:06:84:ab: b9:66:85:64:5e:88:fa:d0:27:17:ae:37:39:33:64: 22:c3:c2:99:9d:4b:cc:95:19:2c:4e:0a:07:6a:3b: a7:74:2d:54:83:f0:77:ae:f3:6d:ed:25:fe:9b:89: 78:d9:7a:4e:4c:77:ed:b2:ec:a2:41:d6:f4:0f:4e: fd:cd:5f:69:09:9c:76:5e:cb:68:4e:11:73:90:e7: 9a:b9:82:11:88:8e:99:d8:c2:b6:69:46:15:2d:29: 42:64:f3:e4:21:2c:41:d0:00:02:29:8f:36:37:db: 69:e0:ff:d7:7b:45:c6:15:85:cd:86:87:3e:8d:da: 65:de:a5:a5:d7:1b:d3:27:8d:51:71:5a:fa:ce:85: e8:d2:dd:30:53:60:fd:66:3e:d1:e6:f3:8b:29:1a: c1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:44:C5:61:DD:E2:93:93:16:22:6D:95:F1:11:7F:8F:9E:DD:7B:43 X509v3 Authority Key Identifier: keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:10:1e:f4:60:a7:0b:2c:eb:02:12:96:78:e3:50:13:b5:17: 23:94:94:f7:52:c1:f6:a6:51:a1:cf:ae:3f:35:2e:c4:36:d8: d2:d5:22:57:f0:95:15:e4:66:86:61:8d:3c:3a:b6:21:24:78: 18:b6:2d:74:1f:4a:55:86:96:8e:2d:c7:c1:5e:5b:af:b8:e6: 64:d4:3e:ce:97:3d:21:6e:3f:07:34:7f:f0:44:e4:cc:5c:8d: 64:2d:e7:06:ec:00:cd:f5:a6:18:b4:9a:e2:8f:71:cb:fe:50: a8:a6:ef:ac:c6:ff:55:39:83:dd:41:a8:3c:48:39:70:a3:34: 4b:9d:3c:55:92:1b:60:30:85:26:36:d4:98:d7:d6:da:c8:28: 73:94:e3:ba:50:aa:81:ab:7c:01:4a:0e:68:99:1e:57:5c:b4: 2c:73:89:12:62:e2:4e:b4:b0:22:32:c8:f2:a1:72:a1:c3:ce: e3:0a:b7:1d:be:a2:5b:6c:35:44:18:1d:a1:12:70:da:eb:f4: 34:7f:13:18:c7:72:41:1e:45:f1:c7:6c:1e:57:ab:3b:6c:da: 38:0a:27:78:d2:9b:14:05:45:07:15:82:be:99:06:78:be:8d: 07:cd:7f:81:22:50:ee:5f:92:3f:c0:f7:1e:fc:ac:a9:d3:bb: 7f:70:50:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+o4xhgo9wa3c8JqhPKaeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmUyNTY1NjVlMWMyN2M0YjI2NTYwMTkwZTk5NzgyODZh ODJiNTIwHhcNMjUxMjIxMDIwMTA0WhcNMjUxMjIyMDIwMTA0WjAzMTEwLwYDVQQD Eyg4MTQ0YzU2MWRkZTI5MzkzMTYyMjZkOTVmMTExN2Y4ZjllZGQ3YjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJnEo1xcl6GZ35AkqWSg0iyFHd2c waHLR8PavcKjKLQ9P1/KqatGjPDC2MBau3/YWAVtR9EQcgnS/YSv/ilNmnxDvpCi p+SrHiElIXmxlofZvZLdMlQBUY3+2CmQKJWlzqZNyYAGhKu5ZoVkXoj60CcXrjc5 M2Qiw8KZnUvMlRksTgoHajundC1Ug/B3rvNt7SX+m4l42XpOTHftsuyiQdb0D079 zV9pCZx2XstoThFzkOeauYIRiI6Z2MK2aUYVLSlCZPPkISxB0AACKY82N9tp4P/X e0XGFYXNhoc+jdpl3qWl1xvTJ41RcVr6zoXo0t0wU2D9Zj7R5vOLKRrBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFExWHd4pOTFiJtlfERf4+e3XtDMB8GA1UdIwQY MBaAFP++JWVl4cJ8SyZWAZDpl4KGqCtSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUt YjFmYzIwODNjOTA2LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yN2M5MjgtMDJmZS00MDUyLTlkNjUtYjFmYzIwODNjOTA2 LzEvXzc0bFpXWGh3bnhMSmxZQmtPbVhnb2FvSzFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhAe9GCn CyzrAhKWeONQE7UXI5SU91LB9qZRoc+uPzUuxDbY0tUiV/CVFeRmhmGNPDq2ISR4 GLYtdB9KVYaWji3HwV5br7jmZNQ+zpc9IW4/BzR/8ETkzFyNZC3nBuwAzfWmGLSa 4o9xy/5QqKbvrMb/VTmD3UGoPEg5cKM0S508VZIbYDCFJjbUmNfW2sgoc5TjulCq gat8AUoOaJkeV1y0LHOJEmLiTrSwIjLI8qFyocPO4wq3Hb6iW2w1RBgdoRJw2uv0 NH8TGMdyQR5F8cdsHlerO2zaOAoneNKbFAVFBxWCvpkGeL6NB81/gSJQ7l+SP8D3 HvysqdO7f3BQZg== -----END CERTIFICATE-----Generated at Sun Dec 21 06:53:37 2025 by rpki-client