This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft File: d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft (raw, json) Hash identifier: r3+FB7W8cUQ7UM8wkw5kFY7yhXtEq0o6JrkdSEoC2vg= Subject key identifier: 2A:41:A1:DB:D3:26:68:E7:58:B7:87:C7:28:F6:F6:B5:00:3F:21:86 Authority key identifier: 77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D Certificate issuer: /CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Certificate serial: 019B2BC1BAC79F23463C10D811B396E1B2CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 10:01:15 +0000 Manifest this update: Wed 17 Dec 2025 10:01:15 +0000 Manifest next update: Thu 18 Dec 2025 10:01:15 +0000 Files and hashes: 1: 9RiEw_mWI329p00ygK6PV3zCib8.roa (hash: 76xZV8riwU1FZRHFqIOaKnZ1x4iN7Apxati5A/6/dRc=) 2: d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl (hash: ZJ8mKvBVhh6roGW52AqjFLgQCog7uf0KKf5V4i2qhjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:ba:c7:9f:23:46:3c:10:d8:11:b3:96:e1:b2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=778a2f36602c76fa7297b4e59f58dda0d501ea0d Validity Not Before: Dec 17 10:01:15 2025 GMT Not After : Dec 18 10:01:15 2025 GMT Subject: CN=2a41a1dbd32668e758b787c728f6f6b5003f2186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:16:d6:10:25:f3:43:2e:e5:1d:ef:dc:1a: ad:c5:79:f7:18:02:13:e9:6e:58:89:1d:cf:5d:5f: 5a:4d:d1:f0:9d:ef:37:16:25:1f:54:1f:99:71:0f: f7:0e:63:9a:32:a2:e8:71:27:7c:aa:ba:ab:90:02: bf:25:3e:c7:9f:04:b1:d9:08:68:41:46:05:de:4c: 25:1e:b3:bc:8c:60:d5:9f:75:16:40:3c:86:85:49: 86:f0:54:b3:7c:99:20:d9:3a:68:ef:e1:4e:ec:1f: 8b:39:5e:0b:93:9c:95:e9:1b:83:06:53:a5:ce:25: 8e:73:f9:73:e5:97:18:00:55:34:be:73:c2:da:f1: 5d:a2:0a:eb:83:1e:f3:df:b4:ff:a1:34:c0:71:9c: 81:cc:17:e7:eb:a8:f7:ec:ab:64:94:70:fa:04:a8: 6e:fb:13:dd:17:6c:08:52:6b:cc:0d:64:89:a2:b9: ed:37:e0:68:01:2d:43:8b:fe:82:3b:30:12:ef:6a: de:3d:b1:37:cb:f4:e6:de:e1:9d:b7:16:c8:f3:7d: cf:8f:a8:93:70:71:f6:a8:e4:42:e8:86:7b:d8:c6: 2f:8a:a6:f8:c1:a8:57:c4:f3:ce:ca:05:05:50:66: 11:a4:8f:14:89:3b:65:2b:f6:1c:e7:a8:94:3a:2f: e8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:A1:DB:D3:26:68:E7:58:B7:87:C7:28:F6:F6:B5:00:3F:21:86 X509v3 Authority Key Identifier: keyid:77:8A:2F:36:60:2C:76:FA:72:97:B4:E5:9F:58:DD:A0:D5:01:EA:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4ovNmAsdvpyl7Tln1jdoNUB6g0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bede90-939b-492c-b0c8-73bbd02cbd37/1/d4ovNmAsdvpyl7Tln1jdoNUB6g0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b4:fd:31:88:3b:c5:71:67:b7:e0:90:7c:17:f5:d8:29:5a: 35:1d:f9:68:6b:62:36:7d:dc:39:07:09:8b:fc:a1:3b:ba:09: 91:61:15:8d:ce:a7:bf:ee:10:69:af:54:dd:c9:a7:bd:80:61: 68:08:bd:37:80:da:98:2f:58:f9:e8:e0:5b:de:48:de:30:33: 14:7d:92:cd:6c:d7:cb:36:00:16:55:b2:62:5d:cb:3a:90:bb: 90:b1:ee:cc:10:cc:76:f5:ba:f3:28:00:63:94:f3:7f:4f:d6: 89:8e:c5:87:fe:70:4c:49:49:aa:80:17:65:87:34:0d:c8:7f: bf:79:a3:1f:c0:bd:46:95:63:a5:19:3b:b4:cb:d0:9e:d3:cd: ba:a6:59:6a:6f:ea:f7:12:17:68:8e:b8:7c:1c:13:4c:f6:fe: db:71:62:2b:5a:2f:7c:2d:72:25:ed:bf:96:3c:9e:3b:3c:05: f7:92:c8:bb:b2:e4:4b:1f:e3:bc:29:3b:fe:9d:4b:49:f0:e8: a5:29:01:d1:3a:c1:66:e8:08:89:f2:4d:22:86:df:c3:0b:09: 88:5b:30:4c:a7:60:5c:a8:d1:21:dd:ac:c4:91:7c:d5:10:97: 1d:b6:e7:03:40:1e:88:e9:7b:38:b4:fb:87:9b:94:be:65:d4: a9:df:55:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwbrHnyNGPBDYEbOW4bLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3OGEyZjM2NjAyYzc2ZmE3Mjk3YjRlNTlmNThkZGEwZDUw MWVhMGQwHhcNMjUxMjE3MTAwMTE1WhcNMjUxMjE4MTAwMTE1WjAzMTEwLwYDVQQD EygyYTQxYTFkYmQzMjY2OGU3NThiNzg3YzcyOGY2ZjZiNTAwM2YyMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4IW1hAl80Mu5R3v3BqtxXn3GAIT 6W5YiR3PXV9aTdHwne83FiUfVB+ZcQ/3DmOaMqLocSd8qrqrkAK/JT7HnwSx2Qho QUYF3kwlHrO8jGDVn3UWQDyGhUmG8FSzfJkg2Tpo7+FO7B+LOV4Lk5yV6RuDBlOl ziWOc/lz5ZcYAFU0vnPC2vFdogrrgx7z37T/oTTAcZyBzBfn66j37KtklHD6BKhu +xPdF2wIUmvMDWSJorntN+BoAS1Di/6COzAS72rePbE3y/Tm3uGdtxbI833Pj6iT cHH2qORC6IZ72MYviqb4wahXxPPOygUFUGYRpI8UiTtlK/Yc56iUOi/oNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpBodvTJmjnWLeHxyj29rUAPyGGMB8GA1UdIwQY MBaAFHeKLzZgLHb6cpe05Z9Y3aDVAeoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgt NzNiYmQwMmNiZDM3LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9iZWRlOTAtOTM5Yi00OTJjLWIwYzgtNzNiYmQwMmNiZDM3 LzEvZDRvdk5tQXNkdnB5bDdUbG4xamRvTlVCNmcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrT9MYg7 xXFnt+CQfBf12ClaNR35aGtiNn3cOQcJi/yhO7oJkWEVjc6nv+4Qaa9U3cmnvYBh aAi9N4DamC9Y+ejgW95I3jAzFH2SzWzXyzYAFlWyYl3LOpC7kLHuzBDMdvW68ygA Y5Tzf0/WiY7Fh/5wTElJqoAXZYc0Dch/v3mjH8C9RpVjpRk7tMvQntPNuqZZam/q 9xIXaI64fBwTTPb+23FiK1ovfC1yJe2/ljyeOzwF95LIu7LkSx/jvCk7/p1LSfDo pSkB0TrBZugIifJNIobfwwsJiFswTKdgXKjRId2sxJF81RCXHbbnA0AeiOl7OLT7 h5uUvmXUqd9VaQ== -----END CERTIFICATE-----Generated at Wed Dec 17 19:21:29 2025 by rpki-client