This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json) Hash identifier: VrmRGCoeorvOUSuswPVPmMG94PEUo6cN+0OSKWPO4qI= Subject key identifier: 29:28:2E:2E:51:2B:A7:AD:10:64:F2:76:A5:3A:5A:E2:C1:F0:44:B0 Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019B3F7EE66CB8896D2A2B0460E4FFFBA534 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 06:00:39 +0000 Manifest this update: Sun 21 Dec 2025 06:00:39 +0000 Manifest next update: Mon 22 Dec 2025 06:00:39 +0000 Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=) 2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=) 3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: RRz3gF6X0sQewH8BpAiMQu527oBiHn0dfLGEfmDo/xA=) 4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:7e:e6:6c:b8:89:6d:2a:2b:04:60:e4:ff:fb:a5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Dec 21 06:00:39 2025 GMT Not After : Dec 22 06:00:39 2025 GMT Subject: CN=29282e2e512ba7ad1064f276a53a5ae2c1f044b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cf:25:74:dc:e9:6a:e4:11:01:4f:0e:93:54: 50:f1:19:0b:70:61:4c:e0:54:a1:e4:f8:83:e2:ea: 29:ed:ab:4b:54:23:91:c9:e2:43:9e:d0:bc:eb:38: db:58:4f:0e:ac:49:3c:bf:f3:08:2b:c6:a8:eb:af: ee:d8:15:0d:b5:29:84:78:20:3c:7e:01:e5:45:cb: f6:13:cb:52:19:b0:a5:26:9f:a2:a8:cb:2b:32:7d: 7a:be:99:46:3c:0e:eb:89:00:22:6d:e6:7d:87:f8: 58:79:fe:d0:d7:3b:3e:9c:5c:0b:6c:15:9f:2c:e2: 56:e5:d5:26:dd:0e:5f:14:d4:28:3a:1f:e5:90:43: 24:0e:b6:3b:f2:e7:e1:ee:b6:3d:4b:b0:85:6b:b2: 57:dc:59:17:12:26:90:3e:6b:69:77:fd:67:61:b9: 37:34:a9:ca:80:65:4e:64:00:37:e2:fe:c1:51:96: 4b:8c:7f:0f:76:5e:c2:52:d1:c7:68:33:c8:d2:56: 88:6e:bc:03:95:56:90:60:40:3c:dc:2f:ea:4d:49: c0:a4:76:06:ec:14:d5:a3:0c:8f:99:86:47:f7:75: 9a:33:97:af:c6:b8:6e:a5:49:dd:1d:fc:e6:34:c3: 2e:0a:d5:86:64:8f:20:e5:e2:e3:d6:45:1d:79:69: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:28:2E:2E:51:2B:A7:AD:10:64:F2:76:A5:3A:5A:E2:C1:F0:44:B0 X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:6c:be:27:88:f2:15:da:be:68:c1:8a:b3:0e:92:6d:6a:67: a8:5c:a5:c4:93:62:5a:18:60:e3:7a:5a:00:c6:5c:a0:ef:70: 5c:24:fa:d8:80:f7:23:d5:12:78:cc:f0:19:b9:ab:ca:0b:54: fa:28:04:47:55:19:00:fd:75:31:34:8e:7a:d9:1f:7b:75:bc: e4:1b:46:28:a0:0b:f5:55:7b:f1:ba:c5:d9:d8:5c:ad:3d:58: 53:39:aa:ab:fd:55:0f:b6:8c:f1:8d:a3:c9:78:60:aa:48:ff: ca:55:87:05:e1:6b:04:38:83:05:cd:a1:5e:73:04:ed:e3:41: f4:a8:9f:12:e0:51:59:db:6f:62:a9:d6:97:e3:fe:cc:5f:e6: 15:dc:0f:34:c7:bc:d5:82:50:ef:22:28:f9:3a:b3:a1:58:cd: 9e:97:e0:c3:ce:22:46:28:27:5b:80:03:40:0b:80:0c:93:bb: 2c:14:90:3a:82:3a:c2:6b:5f:fe:27:6d:81:7e:a9:0c:c6:73: e5:16:9a:df:dd:e0:8b:c7:46:4d:a3:a1:36:6e:73:7e:15:f5: 5e:f7:71:ad:98:48:ce:42:92:6b:3a:21:b6:a7:ed:68:bd:a0: 96:08:c9:76:ca:82:dd:58:ea:db:99:82:55:e2:6e:ea:02:22: 49:88:d3:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/fuZsuIltKisEYOT/+6U0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjUxMjIxMDYwMDM5WhcNMjUxMjIyMDYwMDM5WjAzMTEwLwYDVQQD EygyOTI4MmUyZTUxMmJhN2FkMTA2NGYyNzZhNTNhNWFlMmMxZjA0NGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsc8ldNzpauQRAU8Ok1RQ8RkLcGFM 4FSh5PiD4uop7atLVCORyeJDntC86zjbWE8OrEk8v/MIK8ao66/u2BUNtSmEeCA8 fgHlRcv2E8tSGbClJp+iqMsrMn16vplGPA7riQAibeZ9h/hYef7Q1zs+nFwLbBWf LOJW5dUm3Q5fFNQoOh/lkEMkDrY78ufh7rY9S7CFa7JX3FkXEiaQPmtpd/1nYbk3 NKnKgGVOZAA34v7BUZZLjH8Pdl7CUtHHaDPI0laIbrwDlVaQYEA83C/qTUnApHYG 7BTVowyPmYZH93WaM5evxrhupUndHfzmNMMuCtWGZI8g5eLj1kUdeWnKfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkoLi5RK6etEGTydqU6WuLB8ESwMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGy+J4jy Fdq+aMGKsw6SbWpnqFylxJNiWhhg43paAMZcoO9wXCT62ID3I9USeMzwGbmrygtU +igER1UZAP11MTSOetkfe3W85BtGKKAL9VV78brF2dhcrT1YUzmqq/1VD7aM8Y2j yXhgqkj/ylWHBeFrBDiDBc2hXnME7eNB9KifEuBRWdtvYqnWl+P+zF/mFdwPNMe8 1YJQ7yIo+TqzoVjNnpfgw84iRignW4ADQAuADJO7LBSQOoI6wmtf/idtgX6pDMZz 5Raa393gi8dGTaOhNm5zfhX1XvdxrZhIzkKSazohtqftaL2glgjJdsqC3Vjq25mC VeJu6gIiSYjTeA== -----END CERTIFICATE-----Generated at Sun Dec 21 07:25:02 2025 by rpki-client