This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json) Hash identifier: HpM65RQdvQlhFgOtlWgD39pUR+wavpNSxV3BzbBv9T8= Subject key identifier: 58:03:DA:F6:0C:30:85:60:8A:38:6D:3D:CD:0B:FD:4C:9E:8A:FA:2D Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Certificate serial: 019B37FC6D612A0899A7A47FE592C2DA9A97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 19:00:48 +0000 Manifest this update: Fri 19 Dec 2025 19:00:48 +0000 Manifest next update: Sat 20 Dec 2025 19:00:48 +0000 Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=) 2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=) 3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: v1atWo/TYYQYMuKK8N7zjmrnRbrIa7leYa7liLHkC9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 19:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:fc:6d:61:2a:08:99:a7:a4:7f:e5:92:c2:da:9a:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe Validity Not Before: Dec 19 19:00:48 2025 GMT Not After : Dec 20 19:00:48 2025 GMT Subject: CN=5803daf60c3085608a386d3dcd0bfd4c9e8afa2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:68:a7:7f:3e:1e:31:c2:02:99:f1:ba:17: e4:5c:c2:76:d4:15:78:e2:e3:c3:a4:a5:2e:43:5f: dc:c3:8b:43:9c:18:36:85:fa:03:72:16:06:b5:9b: 47:c4:82:94:85:9f:50:eb:e6:a0:84:10:60:e9:87: 62:d2:62:e4:05:cd:7c:78:fc:ef:04:ab:a3:10:68: 1e:9f:7b:10:f3:ba:27:cd:1e:27:f2:ee:de:3d:0b: 9b:e2:1e:e6:61:55:c1:29:5e:b7:22:b3:b6:8a:e3: 49:a3:dc:79:99:68:37:fa:ac:e5:06:05:b2:88:35: 0a:ef:a6:d4:f7:2f:0c:1b:3d:97:81:99:44:cd:48: b2:df:0b:23:3e:ea:cd:49:20:98:ec:08:65:42:a7: 03:23:da:11:b8:48:85:02:b4:24:78:12:76:e5:5e: b8:2b:54:4c:05:a5:7e:dc:f3:68:76:b4:63:4d:b8: c6:bf:64:9b:05:f5:83:ad:ae:3a:e3:d2:27:03:6f: fa:b8:2f:61:ae:b2:b5:a5:f7:2d:fd:29:4f:1a:b9: 20:81:5a:28:7b:eb:29:50:9b:c4:1a:c2:65:47:86: 07:69:b7:8d:a6:09:57:29:85:7e:86:32:21:b9:63: 47:de:1c:01:2c:b9:ed:3e:0e:90:50:a3:14:bc:18: b7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:03:DA:F6:0C:30:85:60:8A:38:6D:3D:CD:0B:FD:4C:9E:8A:FA:2D X509v3 Authority Key Identifier: keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:32:2f:81:73:5f:01:dd:6a:f8:a2:4f:80:90:ca:d1:72:59: 4f:bc:f8:e4:f8:08:0d:b0:e0:2a:78:ac:ce:d2:01:dc:83:ac: 99:d9:17:f2:07:86:9b:87:c2:8c:a8:b6:01:7b:b2:fc:93:58: 8a:e8:99:c5:08:89:9e:42:46:d1:1c:ef:e1:f7:53:60:4a:a1: 07:37:32:c8:61:a7:b8:1a:6d:05:9a:46:12:62:e2:11:8b:06: d7:09:cd:bc:a9:58:63:3b:ee:30:cd:45:16:7d:c6:2b:ae:e4: 72:7a:8d:4d:ea:ce:1f:62:55:ec:26:7b:c4:3a:67:1f:79:52: 82:df:52:3f:b3:fa:f8:63:9e:8d:3c:7a:e0:a3:81:53:e6:a4: b9:c8:30:46:30:b6:fe:44:57:f5:d0:75:96:5f:e3:e4:57:9d: fd:97:10:4d:c1:60:92:58:dd:f0:a0:9d:02:22:ff:b9:50:e6: 76:cc:21:88:33:17:60:a4:a8:98:79:7f:75:e6:51:4c:72:d1: 6c:cd:2e:32:1c:3f:a6:b8:cc:b8:8b:c3:5d:fa:68:41:04:1b: 05:fe:fe:cc:22:88:98:89:35:fa:8e:d6:79:94:11:8b:ff:dc: 2b:23:23:65:6f:06:12:7c:43:82:4e:5c:31:c0:e8:e1:c2:7d: 0d:21:12:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3/G1hKgiZp6R/5ZLC2pqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz ZWRlZmUwHhcNMjUxMjE5MTkwMDQ4WhcNMjUxMjIwMTkwMDQ4WjAzMTEwLwYDVQQD Eyg1ODAzZGFmNjBjMzA4NTYwOGEzODZkM2RjZDBiZmQ0YzllOGFmYTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNdop38+HjHCApnxuhfkXMJ21BV4 4uPDpKUuQ1/cw4tDnBg2hfoDchYGtZtHxIKUhZ9Q6+aghBBg6Ydi0mLkBc18ePzv BKujEGgen3sQ87onzR4n8u7ePQub4h7mYVXBKV63IrO2iuNJo9x5mWg3+qzlBgWy iDUK76bU9y8MGz2XgZlEzUiy3wsjPurNSSCY7AhlQqcDI9oRuEiFArQkeBJ25V64 K1RMBaV+3PNodrRjTbjGv2SbBfWDra4649InA2/6uC9hrrK1pfct/SlPGrkggVoo e+spUJvEGsJlR4YHabeNpglXKYV+hjIhuWNH3hwBLLntPg6QUKMUvBi3uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFgD2vYMMIVgijhtPc0L/UyeivotMB8GA1UdIwQY MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjIvgXNf Ad1q+KJPgJDK0XJZT7z45PgIDbDgKnisztIB3IOsmdkX8geGm4fCjKi2AXuy/JNY iuiZxQiJnkJG0Rzv4fdTYEqhBzcyyGGnuBptBZpGEmLiEYsG1wnNvKlYYzvuMM1F Fn3GK67kcnqNTerOH2JV7CZ7xDpnH3lSgt9SP7P6+GOejTx64KOBU+akucgwRjC2 /kRX9dB1ll/j5Fed/ZcQTcFgkljd8KCdAiL/uVDmdswhiDMXYKSomHl/deZRTHLR bM0uMhw/prjMuIvDXfpoQQQbBf7+zCKImIk1+o7WeZQRi//cKyMjZW8GEnxDgk5c McDo4cJ9DSESBw== -----END CERTIFICATE-----Generated at Sat Dec 20 04:26:20 2025 by rpki-client