This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft File: Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft (raw, json) Hash identifier: B99UHhwOo70oKJTtFFW+WEPj2G525oPOs7Sm1cDPA1Y= Subject key identifier: AB:7D:6F:D2:11:E4:B1:CF:26:C7:3D:7C:C1:BD:99:E8:22:1B:F6:CC Authority key identifier: 23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE Certificate issuer: /CN=231e28359c180ea6c488a98ca3af77b5bb793dee Certificate serial: 019B4437581DF5A1270FA1CD1C0F9179010D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 04:00:36 +0000 Manifest this update: Mon 22 Dec 2025 04:00:36 +0000 Manifest next update: Tue 23 Dec 2025 04:00:36 +0000 Files and hashes: 1: 1--lfY911D4o-n0x13kTzxgPAa1c.roa (hash: 7jYLrsmco67v6YLtE1rUNiJwEOZGyK+AZuLqYtKHcu0=) 2: 1-PLlhObhI2KvU31PH_oGB4eDG5U.roa (hash: h2JQLRGR8RDG0rSKaLT0jUCHodG0PW/TX0LlgI0i4Qc=) 3: Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl (hash: mx3bJTlPw2sZfiVyvXps8bcbeE0f+6+f4mnVICTY9A4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:58:1d:f5:a1:27:0f:a1:cd:1c:0f:91:79:01:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=231e28359c180ea6c488a98ca3af77b5bb793dee Validity Not Before: Dec 22 04:00:36 2025 GMT Not After : Dec 23 04:00:36 2025 GMT Subject: CN=ab7d6fd211e4b1cf26c73d7cc1bd99e8221bf6cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:31:a3:d2:9f:2b:f3:39:3a:0b:19:55:3e: c8:a1:ee:77:ca:fd:6c:63:1e:e3:b0:70:fe:e2:4a: c8:7c:95:a2:02:da:8a:d4:a9:9b:c2:7b:8d:65:c7: 03:0e:0e:0b:f9:67:37:fa:fa:6e:51:f3:de:5a:f0: c6:08:37:e5:67:47:b8:5e:d9:5c:e6:3f:45:fd:3c: ed:fa:d7:d0:8a:9b:af:3d:0e:6c:1b:01:79:89:80: eb:bd:3c:69:00:ab:e5:18:30:fe:ad:80:f6:00:c3: 41:80:25:1f:21:99:04:1f:e5:c2:6f:61:24:07:58: 5d:27:da:6d:f7:18:91:5b:2d:4a:f6:c9:0e:28:30: 20:d1:55:30:07:58:2f:dc:99:f4:70:2a:88:7d:4d: 6d:54:43:d1:b9:c0:1e:90:b7:67:9b:ae:a3:04:05: 2b:12:5b:25:8c:f4:d4:7f:f9:78:1c:97:e0:c5:86: 2d:ab:51:67:70:c9:a5:ab:fe:99:d6:9d:bd:0f:76: 19:35:c7:41:0c:7a:dd:05:40:f1:be:27:1f:1d:0f: 59:0c:ce:0b:56:9f:79:b7:cd:02:41:8d:b9:09:80: 8b:f2:2f:48:3a:70:fd:af:d9:7b:8e:b0:b7:b4:c1: 7d:92:8c:70:72:e3:7a:3b:30:b0:04:aa:2b:16:85: 05:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:6F:D2:11:E4:B1:CF:26:C7:3D:7C:C1:BD:99:E8:22:1B:F6:CC X509v3 Authority Key Identifier: keyid:23:1E:28:35:9C:18:0E:A6:C4:88:A9:8C:A3:AF:77:B5:BB:79:3D:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ix4oNZwYDqbEiKmMo693tbt5Pe4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/9246cb-d46b-4062-987b-5b34bc378436/1/Ix4oNZwYDqbEiKmMo693tbt5Pe4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bc:1c:ac:b4:ca:b4:97:cf:16:9f:e6:8b:a4:4d:88:7a:e8: 15:a1:da:f5:e7:15:89:91:de:45:cd:55:33:98:45:89:80:85: 6b:36:c2:f8:57:a5:85:48:89:11:88:5b:06:6e:f0:dd:22:78: 66:52:48:cb:61:bf:1c:03:af:b7:a8:b9:1d:e1:03:6c:0f:66: 5d:d0:13:45:4d:ab:a6:b3:ae:ba:90:eb:49:54:c9:d6:10:68: 7f:4c:14:4f:c3:cb:39:15:45:55:36:69:08:63:b3:31:bd:fd: c6:0f:11:c5:76:b5:73:26:a9:a5:80:d1:22:84:14:41:2b:83: 96:a3:bd:56:97:08:6a:af:f0:f0:f0:f5:b2:93:9d:33:74:0c: 48:0d:db:2e:13:7d:9c:55:39:c8:dc:00:87:2b:23:0b:63:c1: 9a:4f:48:8d:72:87:91:58:b5:fa:a3:8b:43:17:b9:93:5a:4e: 8f:58:1f:e6:49:11:53:1d:64:17:91:19:4f:19:42:de:1b:67: 4f:06:eb:bb:a6:8c:f5:44:86:30:f1:50:9e:27:fe:b4:01:29: 7f:ad:e4:72:91:4e:0b:f3:7d:34:36:31:e9:e1:38:ca:f7:ba: cb:5f:5a:da:ec:f9:3f:42:bb:03:88:7c:4f:97:bb:c6:c2:e2: f5:50:29:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN1gd9aEnD6HNHA+ReQENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzMWUyODM1OWMxODBlYTZjNDg4YTk4Y2EzYWY3N2I1YmI3 OTNkZWUwHhcNMjUxMjIyMDQwMDM2WhcNMjUxMjIzMDQwMDM2WjAzMTEwLwYDVQQD EyhhYjdkNmZkMjExZTRiMWNmMjZjNzNkN2NjMWJkOTllODIyMWJmNmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RAxo9KfK/M5OgsZVT7Ioe53yv1s Yx7jsHD+4krIfJWiAtqK1KmbwnuNZccDDg4L+Wc3+vpuUfPeWvDGCDflZ0e4Xtlc 5j9F/Tzt+tfQipuvPQ5sGwF5iYDrvTxpAKvlGDD+rYD2AMNBgCUfIZkEH+XCb2Ek B1hdJ9pt9xiRWy1K9skOKDAg0VUwB1gv3Jn0cCqIfU1tVEPRucAekLdnm66jBAUr ElsljPTUf/l4HJfgxYYtq1FncMmlq/6Z1p29D3YZNcdBDHrdBUDxvicfHQ9ZDM4L Vp95t80CQY25CYCL8i9IOnD9r9l7jrC3tMF9koxwcuN6OzCwBKorFoUF6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt9b9IR5LHPJsc9fMG9megiG/bMMB8GA1UdIwQY MBaAFCMeKDWcGA6mxIipjKOvd7W7eT3uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2It NWIzNGJjMzc4NDM2LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS85MjQ2Y2ItZDQ2Yi00MDYyLTk4N2ItNWIzNGJjMzc4NDM2 LzEvSXg0b05ad1lEcWJFaUttTW82OTN0YnQ1UGU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7wcrLTK tJfPFp/mi6RNiHroFaHa9ecViZHeRc1VM5hFiYCFazbC+FelhUiJEYhbBm7w3SJ4 ZlJIy2G/HAOvt6i5HeEDbA9mXdATRU2rprOuupDrSVTJ1hBof0wUT8PLORVFVTZp CGOzMb39xg8RxXa1cyappYDRIoQUQSuDlqO9VpcIaq/w8PD1spOdM3QMSA3bLhN9 nFU5yNwAhysjC2PBmk9IjXKHkVi1+qOLQxe5k1pOj1gf5kkRUx1kF5EZTxlC3htn Twbru6aM9USGMPFQnif+tAEpf63kcpFOC/N9NDYx6eE4yve6y19a2uz5P0K7A4h8 T5e7xsLi9VApIg== -----END CERTIFICATE-----Generated at Mon Dec 22 11:08:15 2025 by rpki-client