This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft File: PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft (raw, json) Hash identifier: dHNJJ7BwkT/o5QbdlCkk/ORBbKQKSnuyqp0GwkWu+s8= Subject key identifier: 56:F5:C3:F0:A4:12:CB:BD:8C:6C:22:0C:71:AF:26:CA:D7:44:85:35 Authority key identifier: 3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D Certificate issuer: /CN=3c177b528043a85953fc250f991d9d8020e2810d Certificate serial: 019B36B2B5DF5306E30997212327B9FAF523 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft Manifest number: 178F Signing time: Fri 19 Dec 2025 13:00:40 +0000 Manifest this update: Fri 19 Dec 2025 13:00:40 +0000 Manifest next update: Sat 20 Dec 2025 13:00:40 +0000 Files and hashes: 1: 97b_DOZexsMsbNq0jd1_KnrCkGw.roa (hash: Zsql+k4AO5wopmLFKXiIANICmsUjbHpn09FeXgUdFls=) 2: PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl (hash: tdi8j2nV3G0lIpDaWF5I32xmHrZTYUbz91sSzLnZdBE=) 3: vFJBXwiLiT0SV6hpYm9T1KH_3Sw.roa (hash: iZ/rALDyZJ1JAyWAtw5uSLsZV8Z+UzVJnNgd7eGfu2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b2:b5:df:53:06:e3:09:97:21:23:27:b9:fa:f5:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c177b528043a85953fc250f991d9d8020e2810d Validity Not Before: Dec 19 13:00:40 2025 GMT Not After : Dec 20 13:00:40 2025 GMT Subject: CN=56f5c3f0a412cbbd8c6c220c71af26cad7448535 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b1:61:ba:96:d6:33:47:f7:2e:6e:6e:33:99: ed:34:25:8c:fb:0e:4c:5d:18:cb:b4:38:55:4f:83: e3:74:07:2c:5e:c6:38:90:87:7d:d1:cf:09:43:01: ab:7e:73:13:7a:a0:43:e3:4a:8c:17:80:8b:17:1d: b1:0b:7d:32:2c:41:91:64:36:ce:12:0b:26:a0:4c: fe:ef:7c:36:f2:fb:4b:8d:7f:33:84:2b:d2:1e:fe: 74:46:77:df:68:5c:51:3b:87:d1:f4:50:a8:9f:a2: c7:d7:31:12:29:e3:b8:58:2b:11:41:b1:90:56:5d: d4:32:04:4f:68:9c:a0:cd:02:79:1c:42:f5:9d:0c: 6b:9a:ad:5a:bd:32:7b:19:31:a7:60:21:bd:fd:e5: 13:b0:7f:56:e3:e8:bf:a0:3f:91:28:28:2a:a9:59: b7:df:6e:03:3f:d9:07:8b:c3:20:21:4e:28:9d:a7: 96:76:96:4d:20:60:a4:66:87:5f:74:bb:fc:35:2e: ba:db:6b:b9:19:03:f5:2c:cb:a9:a5:bd:66:01:a2: c1:33:8c:a8:9a:c4:bb:20:1b:18:51:60:8a:b0:25: 24:e8:ce:c2:17:7c:13:16:89:5f:e0:1d:70:7d:7b: 16:be:e9:d9:8a:a6:c9:ed:58:b2:6b:66:c9:aa:64: 41:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F5:C3:F0:A4:12:CB:BD:8C:6C:22:0C:71:AF:26:CA:D7:44:85:35 X509v3 Authority Key Identifier: keyid:3C:17:7B:52:80:43:A8:59:53:FC:25:0F:99:1D:9D:80:20:E2:81:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PBd7UoBDqFlT_CUPmR2dgCDigQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5ed525-3f37-4c70-a2ec-a4151b5e2fcf/1/PBd7UoBDqFlT_CUPmR2dgCDigQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:95:5c:a5:16:0c:2a:d1:86:83:66:a6:a3:d8:03:d3:71:81: 8c:70:f1:b8:c5:cf:7b:d9:32:2a:a2:a6:16:0b:2f:b1:62:b5: 27:ae:79:cd:d0:fe:8a:97:9d:cd:33:e3:89:3d:94:7a:41:9e: 8a:86:f1:19:02:23:8c:15:a3:a2:2e:26:e7:b3:79:ba:1d:b4: 62:a8:ee:8b:aa:26:1a:19:34:c3:0f:3b:f6:4e:79:55:f5:d7: 84:0b:34:cd:36:ae:23:66:39:2c:fe:13:c2:92:0b:8c:13:53: aa:56:8e:b8:00:41:48:3f:25:89:c4:e3:77:ab:9c:66:de:ea: 8f:f6:db:06:18:c2:15:d7:15:59:24:0d:a5:93:34:99:73:3d: fc:65:94:b4:bb:22:16:56:05:b5:1d:ce:f9:9e:9b:8c:31:8b: 7b:c5:7f:6d:c5:08:dc:c4:fa:ed:1b:f0:8e:09:5a:9d:df:f7: dd:e8:19:6e:7b:80:65:e1:fe:c6:63:59:07:62:d5:65:d1:59: 3c:02:c1:b9:3b:63:14:03:39:18:70:af:45:3b:ee:27:2e:fe: 44:33:b8:07:c0:8a:36:44:af:65:61:67:ee:b0:37:fe:86:89: f4:01:fb:84:eb:5c:13:79:ba:72:f7:66:d1:ef:b6:f7:ff:bf: 7b:11:04:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2srXfUwbjCZchIye5+vUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjMTc3YjUyODA0M2E4NTk1M2ZjMjUwZjk5MWQ5ZDgwMjBl MjgxMGQwHhcNMjUxMjE5MTMwMDQwWhcNMjUxMjIwMTMwMDQwWjAzMTEwLwYDVQQD Eyg1NmY1YzNmMGE0MTJjYmJkOGM2YzIyMGM3MWFmMjZjYWQ3NDQ4NTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7FhupbWM0f3Lm5uM5ntNCWM+w5M XRjLtDhVT4PjdAcsXsY4kId90c8JQwGrfnMTeqBD40qMF4CLFx2xC30yLEGRZDbO EgsmoEz+73w28vtLjX8zhCvSHv50RnffaFxRO4fR9FCon6LH1zESKeO4WCsRQbGQ Vl3UMgRPaJygzQJ5HEL1nQxrmq1avTJ7GTGnYCG9/eUTsH9W4+i/oD+RKCgqqVm3 324DP9kHi8MgIU4onaeWdpZNIGCkZodfdLv8NS6622u5GQP1LMuppb1mAaLBM4yo msS7IBsYUWCKsCUk6M7CF3wTFolf4B1wfXsWvunZiqbJ7Viya2bJqmRB+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb1w/CkEsu9jGwiDHGvJsrXRIU1MB8GA1UdIwQY MBaAFDwXe1KAQ6hZU/wlD5kdnYAg4oENMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMt YTQxNTFiNWUyZmNmLzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC81ZWQ1MjUtM2YzNy00YzcwLWEyZWMtYTQxNTFiNWUyZmNm LzEvUEJkN1VvQkRxRmxUX0NVUG1SMmRnQ0RpZ1EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpVcpRYM KtGGg2amo9gD03GBjHDxuMXPe9kyKqKmFgsvsWK1J655zdD+ipedzTPjiT2UekGe iobxGQIjjBWjoi4m57N5uh20Yqjui6omGhk0ww879k55VfXXhAs0zTauI2Y5LP4T wpILjBNTqlaOuABBSD8licTjd6ucZt7qj/bbBhjCFdcVWSQNpZM0mXM9/GWUtLsi FlYFtR3O+Z6bjDGLe8V/bcUI3MT67Rvwjgland/33egZbnuAZeH+xmNZB2LVZdFZ PALBuTtjFAM5GHCvRTvuJy7+RDO4B8CKNkSvZWFn7rA3/oaJ9AH7hOtcE3m6cvdm 0e+29/+/exEE7Q== -----END CERTIFICATE-----Generated at Fri Dec 19 18:32:48 2025 by rpki-client