This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft File: LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft (raw, json) Hash identifier: 6wOHQPU+58RoCKZOj3igDgFLYPZeeJ+TteoDqqAzSFY= Subject key identifier: 39:BB:B5:81:51:D8:18:CA:41:31:6A:63:01:7B:BA:C6:F9:48:BA:86 Authority key identifier: 2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A Certificate issuer: /CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Certificate serial: 019B2B8A65FB82F8F77C7BBAB66ADEAAC9AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 09:00:48 +0000 Manifest this update: Wed 17 Dec 2025 09:00:48 +0000 Manifest next update: Thu 18 Dec 2025 09:00:48 +0000 Files and hashes: 1: FUkNFEnF7Th3No4GN_vT32jewGY.roa (hash: a4XKf2Wp7JcOKKqdi0b7VmL2nF24kxJQuD9cefRStAE=) 2: LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl (hash: V02A7/nOpUgo2ZwfhzoKintMXSYVrHH2SAWIjLXmpp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:65:fb:82:f8:f7:7c:7b:ba:b6:6a:de:aa:c9:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2de1203acd9b07a11ea37e82f6c241ff8402975a Validity Not Before: Dec 17 09:00:48 2025 GMT Not After : Dec 18 09:00:48 2025 GMT Subject: CN=39bbb58151d818ca41316a63017bbac6f948ba86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:89:8c:bc:1a:8a:4e:d4:e7:16:08:58:c2:a3: 07:78:09:1e:28:b2:4c:2d:fb:9e:4b:61:f3:17:e1: d8:3e:bf:92:52:b8:d0:91:bb:a1:53:ce:ae:57:ab: b4:80:c8:07:94:5c:53:9a:4f:59:a8:a2:ec:0d:ec: 62:e3:1a:3d:15:c6:a8:d0:f3:4e:e1:0e:f3:cd:1a: d2:12:90:83:d5:f1:9f:94:12:2d:b6:f2:a1:6d:67: 52:f7:e4:4c:18:3b:e8:d1:6d:c7:ff:07:1d:55:b7: e2:f7:ca:86:e8:34:27:27:db:16:62:56:61:61:96: f9:4f:bb:9f:05:b0:c0:a4:79:7e:6d:e3:bd:a3:f9: 2a:45:c5:0c:44:4f:1f:af:f2:f4:04:b5:b4:06:9c: 98:72:57:ba:ed:df:3f:d8:93:e1:49:6a:05:db:bb: 75:9c:a4:02:f6:ea:1a:87:ac:90:28:ee:19:c9:fb: d3:81:08:56:3d:d5:97:fa:e9:9b:2f:88:1b:df:26: 7c:48:54:a1:84:fd:e3:36:25:db:88:74:77:bd:84: a0:83:68:bd:9e:61:30:a7:ba:8b:f9:88:6f:4e:d5: d2:f2:06:db:ad:95:4e:a1:2a:94:51:a3:46:91:fb: 0d:78:92:4c:dc:fa:71:52:61:da:f4:75:5d:71:cc: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:BB:B5:81:51:D8:18:CA:41:31:6A:63:01:7B:BA:C6:F9:48:BA:86 X509v3 Authority Key Identifier: keyid:2D:E1:20:3A:CD:9B:07:A1:1E:A3:7E:82:F6:C2:41:FF:84:02:97:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LeEgOs2bB6Eeo36C9sJB_4QCl1o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c1ae8d-c2cb-4fe5-9a1c-f28cd2764904/1/LeEgOs2bB6Eeo36C9sJB_4QCl1o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:7f:a4:94:7d:0b:01:97:85:52:91:9f:d7:e9:6e:85:9d:90: 53:35:08:0a:3f:7e:c1:d8:8b:f6:93:f8:32:2d:84:dc:ac:f1: 1a:60:07:de:3d:0c:84:82:95:cb:76:36:36:bc:96:a5:e4:3a: c4:8d:8e:93:62:e7:57:da:08:5b:20:30:e1:e5:27:1a:17:83: 60:79:c5:a5:a1:3b:6c:59:2d:7d:77:34:c4:b0:cc:42:bb:d3: d6:59:20:fb:01:c9:03:c1:e0:c3:92:04:04:f7:cf:23:83:a5: ca:71:5d:0a:ce:11:a6:b9:e0:99:e3:da:1a:8b:d7:a8:36:95: 29:05:d4:73:3d:b0:9b:1d:f1:44:3f:ec:22:4e:90:ef:ec:6a: 9a:29:84:3b:e4:21:95:ac:d8:de:e7:72:4d:a3:98:c1:25:a5: 74:c5:fb:70:10:e4:93:a6:47:2e:22:10:9b:3d:e7:6c:65:9c: 39:44:b5:21:81:37:e8:29:8c:7e:73:00:d4:22:fe:2e:93:ee: f2:15:fc:38:54:b2:99:b7:8d:8c:f5:91:2c:b4:2c:d1:34:a5: 1c:77:d2:f6:70:47:cb:db:a9:9c:dd:60:a1:9a:4a:c0:15:94: 91:56:26:41:45:f9:fb:47:a4:d0:d0:8f:52:5c:f8:08:e8:2d: 66:1d:70:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrimX7gvj3fHu6tmreqsmsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkZTEyMDNhY2Q5YjA3YTExZWEzN2U4MmY2YzI0MWZmODQw Mjk3NWEwHhcNMjUxMjE3MDkwMDQ4WhcNMjUxMjE4MDkwMDQ4WjAzMTEwLwYDVQQD EygzOWJiYjU4MTUxZDgxOGNhNDEzMTZhNjMwMTdiYmFjNmY5NDhiYTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYmMvBqKTtTnFghYwqMHeAkeKLJM LfueS2HzF+HYPr+SUrjQkbuhU86uV6u0gMgHlFxTmk9ZqKLsDexi4xo9Fcao0PNO 4Q7zzRrSEpCD1fGflBIttvKhbWdS9+RMGDvo0W3H/wcdVbfi98qG6DQnJ9sWYlZh YZb5T7ufBbDApHl+beO9o/kqRcUMRE8fr/L0BLW0BpyYcle67d8/2JPhSWoF27t1 nKQC9uoah6yQKO4ZyfvTgQhWPdWX+umbL4gb3yZ8SFShhP3jNiXbiHR3vYSgg2i9 nmEwp7qL+YhvTtXS8gbbrZVOoSqUUaNGkfsNeJJM3PpxUmHa9HVdccx/DwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDm7tYFR2BjKQTFqYwF7usb5SLqGMB8GA1UdIwQY MBaAFC3hIDrNmwehHqN+gvbCQf+EApdaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMt ZjI4Y2QyNzY0OTA0LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9jMWFlOGQtYzJjYi00ZmU1LTlhMWMtZjI4Y2QyNzY0OTA0 LzEvTGVFZ09zMmJCNkVlbzM2QzlzSkJfNFFDbDFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANn+klH0L AZeFUpGf1+luhZ2QUzUICj9+wdiL9pP4Mi2E3KzxGmAH3j0MhIKVy3Y2NryWpeQ6 xI2Ok2LnV9oIWyAw4eUnGheDYHnFpaE7bFktfXc0xLDMQrvT1lkg+wHJA8Hgw5IE BPfPI4OlynFdCs4RprngmePaGovXqDaVKQXUcz2wmx3xRD/sIk6Q7+xqmimEO+Qh lazY3udyTaOYwSWldMX7cBDkk6ZHLiIQmz3nbGWcOUS1IYE36CmMfnMA1CL+LpPu 8hX8OFSymbeNjPWRLLQs0TSlHHfS9nBHy9upnN1goZpKwBWUkVYmQUX5+0ek0NCP Ulz4COgtZh1w5Q== -----END CERTIFICATE-----Generated at Wed Dec 17 18:34:00 2025 by rpki-client