This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft File: RUDapMJFpHJfOAQUAra__e0V6ng.mft (raw, json) Hash identifier: MI5rHmTyD0WG3B8vkw7StBE1f5PAM+V0EQoohEsiuhg= Subject key identifier: CE:36:6F:5A:AF:8A:D6:43:3F:04:A1:DA:50:FB:A5:DE:3D:FF:69:E8 Authority key identifier: 45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78 Certificate issuer: /CN=4540daa4c245a4725f38041402b6bffded15ea78 Certificate serial: 019B3BA251655779B7FA62CF8B72D7479446 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft Manifest number: 178F Signing time: Sat 20 Dec 2025 12:00:51 +0000 Manifest this update: Sat 20 Dec 2025 12:00:51 +0000 Manifest next update: Sun 21 Dec 2025 12:00:51 +0000 Files and hashes: 1: IzvcnFv9kw0TqyCe74ubve86Q-E.roa (hash: 78DgscXfEbwSYX7qdA0JtGlNdmCzdWY7H1HTizuXeoc=) 2: RUDapMJFpHJfOAQUAra__e0V6ng.crl (hash: vO4xt5KiCMFcDnGIafOFrKXRb+mxNxGGRB4ouCU5/0s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:51:65:57:79:b7:fa:62:cf:8b:72:d7:47:94:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4540daa4c245a4725f38041402b6bffded15ea78 Validity Not Before: Dec 20 12:00:51 2025 GMT Not After : Dec 21 12:00:51 2025 GMT Subject: CN=ce366f5aaf8ad6433f04a1da50fba5de3dff69e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3a:d3:3e:15:e8:e9:14:8b:5a:6c:d2:03:8f: b5:f3:98:d4:9d:a3:81:41:28:22:9c:d4:90:ce:48: b2:7f:76:d2:23:60:9d:5a:73:ea:27:f9:d2:73:c3: 1b:d6:6a:a0:30:b1:9e:e2:c7:1f:9d:9c:29:90:8b: 08:1b:c4:d7:93:08:31:6d:ed:4b:f5:1a:5c:89:d1: 3f:fc:7d:15:65:54:d5:a2:b2:3b:5a:48:d3:a8:40: 42:14:84:af:b8:19:7b:6c:04:ce:9c:b1:37:6c:4d: 3d:0d:e0:73:bc:82:a2:90:0a:45:09:cb:21:ae:65: df:01:7d:76:60:be:da:e9:46:e1:ba:9f:62:1f:9b: d7:03:be:aa:dd:55:52:7c:f7:c5:05:6a:66:b2:23: 13:0f:43:93:b9:e5:58:0f:fd:18:4f:d6:9d:89:50: e3:7c:f3:6e:9f:ee:06:9a:c7:4f:bb:28:96:9d:6e: 6c:2b:b4:1e:d3:ee:bb:a3:a3:6c:0c:a2:63:83:e9: 34:86:5e:a2:7e:af:26:22:59:33:f6:41:d2:e0:34: 59:b2:08:36:79:d0:36:00:4d:af:f6:8c:77:94:d3: e5:2a:b3:ba:52:4f:89:ac:4d:85:19:ac:36:f4:33: bf:fd:5b:68:d0:dc:63:d1:4a:cb:ae:9e:49:8e:01: 30:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:36:6F:5A:AF:8A:D6:43:3F:04:A1:DA:50:FB:A5:DE:3D:FF:69:E8 X509v3 Authority Key Identifier: keyid:45:40:DA:A4:C2:45:A4:72:5F:38:04:14:02:B6:BF:FD:ED:15:EA:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RUDapMJFpHJfOAQUAra__e0V6ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/c0ba6f-df6f-4148-8fca-d25aaa804145/1/RUDapMJFpHJfOAQUAra__e0V6ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:24:7f:bf:5d:1f:f4:19:20:23:07:1e:44:71:fe:7e:47:ad: e8:57:05:c5:b0:14:34:35:ac:9f:3e:74:dc:88:02:b0:95:8d: 8c:6c:96:f4:e6:f2:30:a0:b2:21:7b:d7:79:41:9d:72:5c:6b: e2:d1:f3:b9:3f:be:a5:a1:4a:91:42:99:29:c1:86:13:b8:1c: 18:77:dc:19:5b:1f:66:c8:12:7e:4b:b9:9d:09:d1:5b:7e:7f: 66:cb:4a:78:25:4b:32:f0:23:11:a8:67:71:1c:6b:32:a2:69: bd:ee:ff:91:d7:8a:fc:fc:db:96:16:8b:ca:04:66:34:43:7e: 0a:f6:d5:a9:9a:97:3a:26:05:05:27:e3:44:e9:5c:d1:dc:ec: c3:15:ff:f5:de:aa:da:41:83:66:0f:69:7e:1b:37:84:61:45: c0:d0:ab:d1:86:33:f5:90:fa:6f:3c:67:31:3f:19:67:3f:d7: f7:db:1a:c0:48:ba:8f:bd:a5:cd:03:e4:98:6c:60:41:1f:6c: 78:ba:aa:26:5f:60:c6:e3:6c:f5:b2:4d:2f:f5:2d:b5:c4:d4: b1:9f:0f:50:3f:a7:f5:98:d9:4c:8b:7c:88:af:d0:59:b0:08: 1f:78:85:a3:39:ab:6f:34:f8:8b:76:51:ee:72:e3:fe:9f:8b: 06:b1:c7:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7olFlV3m3+mLPi3LXR5RGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NDBkYWE0YzI0NWE0NzI1ZjM4MDQxNDAyYjZiZmZkZWQx NWVhNzgwHhcNMjUxMjIwMTIwMDUxWhcNMjUxMjIxMTIwMDUxWjAzMTEwLwYDVQQD EyhjZTM2NmY1YWFmOGFkNjQzM2YwNGExZGE1MGZiYTVkZTNkZmY2OWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTrTPhXo6RSLWmzSA4+185jUnaOB QSginNSQzkiyf3bSI2CdWnPqJ/nSc8Mb1mqgMLGe4scfnZwpkIsIG8TXkwgxbe1L 9RpcidE//H0VZVTVorI7WkjTqEBCFISvuBl7bATOnLE3bE09DeBzvIKikApFCcsh rmXfAX12YL7a6Ubhup9iH5vXA76q3VVSfPfFBWpmsiMTD0OTueVYD/0YT9adiVDj fPNun+4GmsdPuyiWnW5sK7Qe0+67o6NsDKJjg+k0hl6ifq8mIlkz9kHS4DRZsgg2 edA2AE2v9ox3lNPlKrO6Uk+JrE2FGaw29DO//Vto0Nxj0UrLrp5JjgEwkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM42b1qvitZDPwSh2lD7pd49/2noMB8GA1UdIwQY MBaAFEVA2qTCRaRyXzgEFAK2v/3tFep4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2Et ZDI1YWFhODA0MTQ1LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jMGJhNmYtZGY2Zi00MTQ4LThmY2EtZDI1YWFhODA0MTQ1 LzEvUlVEYXBNSkZwSEpmT0FRVUFyYV9fZTBWNm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdSR/v10f 9BkgIwceRHH+fket6FcFxbAUNDWsnz503IgCsJWNjGyW9ObyMKCyIXvXeUGdclxr 4tHzuT++paFKkUKZKcGGE7gcGHfcGVsfZsgSfku5nQnRW35/ZstKeCVLMvAjEahn cRxrMqJpve7/kdeK/PzblhaLygRmNEN+CvbVqZqXOiYFBSfjROlc0dzswxX/9d6q 2kGDZg9pfhs3hGFFwNCr0YYz9ZD6bzxnMT8ZZz/X99sawEi6j72lzQPkmGxgQR9s eLqqJl9gxuNs9bJNL/UttcTUsZ8PUD+n9ZjZTIt8iK/QWbAIH3iFozmrbzT4i3ZR 7nLj/p+LBrHHlA== -----END CERTIFICATE-----Generated at Sat Dec 20 19:09:33 2025 by rpki-client