This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft File: R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft (raw, json) Hash identifier: +XhNIYvRr8+MvR+eUhuA6+s9PsfdxQiL+enPpGUrmn8= Subject key identifier: 96:60:23:D1:70:C8:04:80:F8:BB:35:91:D2:58:9A:41:2E:D7:B7:74 Authority key identifier: 47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 Certificate issuer: /CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Certificate serial: 019B608A4C460B7337C354CBC5C2DBFE7AC8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft Manifest number: 179C Signing time: Sat 27 Dec 2025 16:00:34 +0000 Manifest this update: Sat 27 Dec 2025 16:00:34 +0000 Manifest next update: Sun 28 Dec 2025 16:00:34 +0000 Files and hashes: 1: 3SOTukwSWrR1Nu1I7c8QHUHDj5Q.roa (hash: 4YWkgAQs57y3jWp09RgMoPwSBLEZe+2Hmh3qEftE0D8=) 2: R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl (hash: FKz4DNTzvKyGMjUPzOKyGDruHe0AGLIIegc/z5sX4PQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Dec 2025 15:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:60:8a:4c:46:0b:73:37:c3:54:cb:c5:c2:db:fe:7a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=478d24898d1cf52d23f9561dc6ac0f1363e6c760 Validity Not Before: Dec 27 16:00:34 2025 GMT Not After : Dec 28 16:00:34 2025 GMT Subject: CN=966023d170c80480f8bb3591d2589a412ed7b774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:72:20:b2:68:77:03:08:4c:bf:ca:64:c6:08: fa:20:6b:35:dc:f8:91:a5:b2:12:7a:d6:60:c6:53: e6:aa:82:a6:5e:65:40:36:1a:11:7d:67:7f:70:9b: 63:10:31:11:bb:78:de:93:f4:8d:0d:89:65:fa:0f: 53:26:ed:91:d0:40:24:1f:0b:d7:82:3a:46:21:52: 54:97:dc:ef:8f:8b:76:fc:e3:f2:3b:b1:72:f8:ff: 01:f4:ce:e3:9f:99:1c:17:5e:13:9c:45:1c:26:bd: c1:2a:dd:77:ac:49:d2:fb:02:70:b4:87:18:e4:3c: e8:e6:ec:fc:ef:59:48:06:3f:27:36:7e:b0:98:71: 51:2e:ff:5f:24:ab:5b:ac:92:f1:67:a5:87:ed:e7: c5:93:c4:84:c2:b0:9d:c3:d6:c5:2f:cb:b0:e8:a4: 40:dc:e5:50:bc:d6:43:21:37:53:b0:89:22:5a:08: ba:db:07:1e:58:d6:95:57:e8:21:a3:e9:23:0d:80: 4c:93:c9:d1:39:af:59:e5:df:ee:85:08:43:6b:e0: 1b:7b:a0:de:3f:bd:9e:bf:fc:99:a4:9b:7f:19:65: 2f:c0:b1:eb:6d:21:85:d0:bd:69:2f:55:4e:08:0b: fa:29:e8:a7:05:f2:88:fe:8d:8f:0c:d5:43:eb:22: f7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:60:23:D1:70:C8:04:80:F8:BB:35:91:D2:58:9A:41:2E:D7:B7:74 X509v3 Authority Key Identifier: keyid:47:8D:24:89:8D:1C:F5:2D:23:F9:56:1D:C6:AC:0F:13:63:E6:C7:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R40kiY0c9S0j-VYdxqwPE2Pmx2A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/6cb72d-45a7-4490-9c59-93ead35a12ca/1/R40kiY0c9S0j-VYdxqwPE2Pmx2A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:7f:43:c3:38:e3:83:79:b2:b9:4d:a2:60:49:80:17:69:e9: 2e:bd:7e:07:b7:ce:e6:33:f7:5b:d9:90:25:ba:f4:ce:d7:00: ca:3e:da:2c:72:1c:17:8b:3b:9b:64:93:34:63:71:09:86:c4: 9b:64:04:47:bd:01:bb:0a:b6:67:d4:13:5b:8f:cc:96:ce:30: 8e:1e:19:84:d6:76:67:97:92:cb:15:48:c4:28:01:45:39:93: bf:71:60:c7:8b:ec:34:00:d2:bf:cb:6c:09:af:a6:11:63:c2: 3d:5b:30:25:b4:0c:e7:5c:1c:e6:b1:2a:58:f5:20:79:46:3a: 25:7d:a0:c9:43:2a:b7:22:bf:69:ec:38:bb:e3:e1:4b:c2:0b: c3:32:9b:90:8a:1a:81:64:8b:03:65:84:66:e4:b1:f9:6c:44: 22:3b:e4:91:3c:14:d8:ce:dc:bc:b2:70:e8:ff:f0:1b:19:43: 6d:4d:39:74:16:66:b1:f2:08:11:5d:12:7b:e0:76:3f:50:81: fa:f2:74:c8:ca:d5:e0:92:82:2b:18:ee:b3:5e:a4:bb:cd:35: 2f:2f:5a:f2:66:f1:8e:61:8a:34:7b:2a:8c:13:e1:83:7c:88: 64:4d:07:92:7a:fe:ca:e8:dc:20:ac:8c:bc:d9:34:b3:e8:39: 41:d9:2b:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtgikxGC3M3w1TLxcLb/nrIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3OGQyNDg5OGQxY2Y1MmQyM2Y5NTYxZGM2YWMwZjEzNjNl NmM3NjAwHhcNMjUxMjI3MTYwMDM0WhcNMjUxMjI4MTYwMDM0WjAzMTEwLwYDVQQD Eyg5NjYwMjNkMTcwYzgwNDgwZjhiYjM1OTFkMjU4OWE0MTJlZDdiNzc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXIgsmh3AwhMv8pkxgj6IGs13PiR pbISetZgxlPmqoKmXmVANhoRfWd/cJtjEDERu3jek/SNDYll+g9TJu2R0EAkHwvX gjpGIVJUl9zvj4t2/OPyO7Fy+P8B9M7jn5kcF14TnEUcJr3BKt13rEnS+wJwtIcY 5Dzo5uz871lIBj8nNn6wmHFRLv9fJKtbrJLxZ6WH7efFk8SEwrCdw9bFL8uw6KRA 3OVQvNZDITdTsIkiWgi62wceWNaVV+gho+kjDYBMk8nROa9Z5d/uhQhDa+Abe6De P72ev/yZpJt/GWUvwLHrbSGF0L1pL1VOCAv6KeinBfKI/o2PDNVD6yL3FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZgI9FwyASA+Ls1kdJYmkEu17d0MB8GA1UdIwQY MBaAFEeNJImNHPUtI/lWHcasDxNj5sdgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTkt OTNlYWQzNWExMmNhLzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy82Y2I3MmQtNDVhNy00NDkwLTljNTktOTNlYWQzNWExMmNh LzEvUjQwa2lZMGM5UzBqLVZZZHhxd1BFMlBteDJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYH9Dwzjj g3myuU2iYEmAF2npLr1+B7fO5jP3W9mQJbr0ztcAyj7aLHIcF4s7m2STNGNxCYbE m2QER70Buwq2Z9QTW4/Mls4wjh4ZhNZ2Z5eSyxVIxCgBRTmTv3Fgx4vsNADSv8ts Ca+mEWPCPVswJbQM51wc5rEqWPUgeUY6JX2gyUMqtyK/aew4u+PhS8ILwzKbkIoa gWSLA2WEZuSx+WxEIjvkkTwU2M7cvLJw6P/wGxlDbU05dBZmsfIIEV0Se+B2P1CB +vJ0yMrV4JKCKxjus16ku801Ly9a8mbxjmGKNHsqjBPhg3yIZE0Hknr+yujcIKyM vNk0s+g5QdkrsA== -----END CERTIFICATE-----Generated at Sat Dec 27 21:03:29 2025 by rpki-client