This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft File: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft (raw, json) Hash identifier: WD50VdvXmnVNSEjU1E2Ska2Y4gc2YfZS34g3ugYW3mk= Subject key identifier: C3:8E:CB:49:F3:AF:7A:C6:AC:C3:C0:F0:16:73:AB:7D:64:59:0F:65 Authority key identifier: D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F Certificate issuer: /CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Certificate serial: 019B40C927D3DAE38B010CC66228E3FC3C72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft Manifest number: 178C Signing time: Sun 21 Dec 2025 12:01:23 +0000 Manifest this update: Sun 21 Dec 2025 12:01:23 +0000 Manifest next update: Mon 22 Dec 2025 12:01:23 +0000 Files and hashes: 1: 0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl (hash: O6fzwqpSCkOTrHvmOMNNITq+xOkXUDUG9JL6YH2EwpI=) 2: TWeGvhRSmnN9ba3aLN_PX9mER2s.roa (hash: 6BkkLF5ZMW9w4BTie7IiuTOLhKMimv1AW7aDs2REbaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c9:27:d3:da:e3:8b:01:0c:c6:62:28:e3:fc:3c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1c15f0aec0e336662de9f6371521ce25e8de10f Validity Not Before: Dec 21 12:01:23 2025 GMT Not After : Dec 22 12:01:23 2025 GMT Subject: CN=c38ecb49f3af7ac6acc3c0f01673ab7d64590f65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3d:96:83:48:b0:61:7d:45:fb:b9:f1:9b:1c: 38:ea:5e:de:4e:1b:56:c2:86:13:44:47:7a:2a:67: 56:28:a5:f5:62:51:06:48:c8:f3:1e:be:91:36:e2: 42:0d:1d:4f:9b:fe:77:98:d8:0c:62:a0:3e:7e:89: 5f:f3:54:b2:bb:cd:a4:a7:56:88:4c:b7:04:4a:8f: fe:6b:70:48:68:37:60:c1:98:9c:1f:ff:e3:36:dd: 6c:2c:98:a6:51:1e:ef:f4:5b:40:bc:c5:c2:89:a9: 15:88:60:2c:9d:94:f3:42:f7:08:f3:46:ec:d6:ee: a7:c1:d0:bf:d8:2e:fe:56:d9:e8:5c:79:97:7f:41: 78:d4:8a:fb:a8:50:45:96:27:6c:fa:f8:22:73:bb: da:d5:26:69:9a:11:ad:33:d9:bc:ad:a7:0a:19:bc: ac:33:ed:12:b1:e4:7a:4b:cb:59:8d:92:83:d9:2e: 0d:1e:30:f9:f9:4e:df:6a:5f:e3:31:ba:35:a7:c6: f0:62:34:33:37:d3:c5:2c:32:fd:69:1f:58:5a:6a: bd:08:cd:04:c0:b9:94:f8:08:2f:ac:2c:92:e9:a8: 67:a3:fc:f4:69:06:03:a8:73:fb:75:ef:ba:89:72: f1:cd:92:05:35:07:63:bf:27:6e:64:c0:26:1b:a3: 4d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:8E:CB:49:F3:AF:7A:C6:AC:C3:C0:F0:16:73:AB:7D:64:59:0F:65 X509v3 Authority Key Identifier: keyid:D1:C1:5F:0A:EC:0E:33:66:62:DE:9F:63:71:52:1C:E2:5E:8D:E1:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/cd231b-ff1e-4b93-a5b7-85d634c5bd50/1/0cFfCuwOM2Zi3p9jcVIc4l6N4Q8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:06:f0:12:1b:91:be:3b:e6:b3:10:b3:35:6b:f8:87:34:4f: c9:84:7f:12:56:9e:5c:ff:07:b3:24:c0:8e:dc:43:e4:64:b2: f3:bc:ea:e6:06:8a:2c:ca:52:8d:cc:55:67:c4:70:47:43:ed: e7:a5:92:1b:8d:75:25:c2:68:99:96:96:79:d8:85:dc:2a:a1: ab:54:42:e5:3b:d7:26:f9:f6:af:23:b0:e9:7d:84:01:45:70: f7:42:1f:44:6a:c2:b1:38:43:22:0b:f5:95:f4:c9:d0:67:50: 96:42:84:3e:23:94:00:1f:8c:d5:b0:97:f3:3d:1a:5b:8a:68: 3f:d9:51:98:4e:34:90:2f:d0:7b:13:25:b2:b9:ef:e2:cf:95: fa:56:f2:04:a1:26:93:33:6a:a5:02:ae:38:86:fe:45:8a:fd: ac:29:3d:57:4f:b0:7e:aa:7d:cc:75:44:28:69:23:c6:2a:f9: b0:3a:9b:8a:ba:9d:c5:cc:79:97:d6:f4:44:0e:87:e0:1c:45: 1d:a5:bf:ca:89:be:0c:f9:b8:7a:04:82:4b:ab:26:5d:99:9c: 58:87:0f:be:da:dc:a9:de:cb:19:04:b2:e8:f9:3b:54:5c:a2: bf:16:c6:b5:98:64:83:27:89:ac:2c:12:16:ec:9f:dd:49:05: d1:5f:b7:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAySfT2uOLAQzGYijj/DxyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxYzE1ZjBhZWMwZTMzNjY2MmRlOWY2MzcxNTIxY2UyNWU4 ZGUxMGYwHhcNMjUxMjIxMTIwMTIzWhcNMjUxMjIyMTIwMTIzWjAzMTEwLwYDVQQD EyhjMzhlY2I0OWYzYWY3YWM2YWNjM2MwZjAxNjczYWI3ZDY0NTkwZjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D2Wg0iwYX1F+7nxmxw46l7eThtW woYTREd6KmdWKKX1YlEGSMjzHr6RNuJCDR1Pm/53mNgMYqA+folf81Syu82kp1aI TLcESo/+a3BIaDdgwZicH//jNt1sLJimUR7v9FtAvMXCiakViGAsnZTzQvcI80bs 1u6nwdC/2C7+VtnoXHmXf0F41Ir7qFBFlids+vgic7va1SZpmhGtM9m8racKGbys M+0SseR6S8tZjZKD2S4NHjD5+U7fal/jMbo1p8bwYjQzN9PFLDL9aR9YWmq9CM0E wLmU+AgvrCyS6ahno/z0aQYDqHP7de+6iXLxzZIFNQdjvyduZMAmG6NN7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMOOy0nzr3rGrMPA8BZzq31kWQ9lMB8GA1UdIwQY MBaAFNHBXwrsDjNmYt6fY3FSHOJejeEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1Yjct ODVkNjM0YzViZDUwLzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jZDIzMWItZmYxZS00YjkzLWE1YjctODVkNjM0YzViZDUw LzEvMGNGZkN1d09NMlppM3A5amNWSWM0bDZONFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAbwEhuR vjvmsxCzNWv4hzRPyYR/ElaeXP8HsyTAjtxD5GSy87zq5gaKLMpSjcxVZ8RwR0Pt 56WSG411JcJomZaWediF3Cqhq1RC5TvXJvn2ryOw6X2EAUVw90IfRGrCsThDIgv1 lfTJ0GdQlkKEPiOUAB+M1bCX8z0aW4poP9lRmE40kC/QexMlsrnv4s+V+lbyBKEm kzNqpQKuOIb+RYr9rCk9V0+wfqp9zHVEKGkjxir5sDqbirqdxcx5l9b0RA6H4BxF HaW/yom+DPm4egSCS6smXZmcWIcPvtrcqd7LGQSy6Pk7VFyivxbGtZhkgyeJrCwS Fuyf3UkF0V+3Hw== -----END CERTIFICATE-----Generated at Sun Dec 21 15:25:39 2025 by rpki-client