This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft File: p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft (raw, json) Hash identifier: M99GXgTkg19LhhjiKoZfIg6V1HHMMOYYhe/+WSgysg4= Subject key identifier: C5:FC:CA:E5:98:B4:44:EE:29:17:EF:19:08:1D:0B:05:37:1C:C5:A5 Authority key identifier: A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 Certificate issuer: /CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Certificate serial: 019AF12DE4B570FAC0638A1C9103B8BF5686 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft Manifest number: 177D Signing time: Sat 06 Dec 2025 01:01:47 +0000 Manifest this update: Sat 06 Dec 2025 01:01:47 +0000 Manifest next update: Sun 07 Dec 2025 01:01:47 +0000 Files and hashes: 1: QT7D6zXAVoUxNK5Dz_Sr3Ysp0jY.roa (hash: NxSCkfWg+RxkMBPwT+VShHgw3RROnFUgM7kWEk11WTI=) 2: bc0mGww2GImeLw53tIRJtqt1goo.asa (hash: sLme9hQtgnCHpEldpCRLHVOEKrZFO2bAZpniqL80jV4=) 3: gNf2ckToizf6XVvgLFeoeRuDPfI.roa (hash: D3sagyRWQjDQ/TQC9ZmZFlVmVb+dHfqJMXegNJ1UJHE=) 4: lP2nAEJiIiUcsQzexOuSk_UchK4.roa (hash: ywPg2m21nr7CfXnwcup4+15l/gRpGCe4Z8rmju+1Lcg=) 5: p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl (hash: OdvzLAP6jM8uFnJvNoPGJXAyQFgyHRWg/bwlr0LxmqE=) 6: qK4AAnwuTwRwNOb2CLLZs8W9VuI.roa (hash: cqQ7l3QbvSMEr2phGWC5VDW+4MerE13RpRcZdGJsAvw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:e4:b5:70:fa:c0:63:8a:1c:91:03:b8:bf:56:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76dd9dad75877f7d28d14e08dc55b1330bd13b7 Validity Not Before: Dec 6 01:01:47 2025 GMT Not After : Dec 7 01:01:47 2025 GMT Subject: CN=c5fccae598b444ee2917ef19081d0b05371cc5a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:a7:6b:92:63:c2:7e:b6:51:91:d8:0e:f2: d7:5d:bc:16:22:04:ab:79:0f:6d:55:a5:02:99:4f: 78:4d:ac:48:e7:d6:4f:7a:a7:75:71:01:2b:7f:8f: a5:06:a4:ae:75:37:bf:17:3c:3b:d9:16:58:19:58: a5:46:5c:5e:80:c7:0b:b2:f4:ce:31:b1:48:68:7c: 45:29:43:6c:ed:9b:d3:0b:3a:d9:0f:cb:e5:30:7d: 60:9d:6e:10:84:b9:4f:15:c5:6d:cd:c1:fa:6a:54: 03:17:41:2b:49:2c:5f:1c:20:7a:d5:74:bd:ae:a8: 92:1b:f9:09:ec:b9:e8:06:47:ce:c5:37:6d:1c:70: c0:66:72:de:47:7a:b0:c7:5a:21:37:a4:6e:ed:40: 28:8b:59:a2:c6:ab:4c:c9:3e:45:dd:31:4e:37:cd: 2c:61:7e:e8:41:3d:72:f0:6f:9a:31:75:fd:4e:7e: 27:be:23:a1:19:ca:e6:c2:f8:11:87:ba:dd:ff:a4: 01:13:09:e8:6d:73:a0:68:a5:d2:15:7a:34:2e:d6: f5:43:1c:cc:06:9e:45:50:d5:ff:70:91:5c:28:a7: f5:fc:ba:19:a5:e0:c4:fc:40:be:66:83:4a:dc:f2: c7:45:93:17:0a:0f:63:24:80:bf:a6:e6:d7:8d:0e: cb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:FC:CA:E5:98:B4:44:EE:29:17:EF:19:08:1D:0B:05:37:1C:C5:A5 X509v3 Authority Key Identifier: keyid:A7:6D:D9:DA:D7:58:77:F7:D2:8D:14:E0:8D:C5:5B:13:30:BD:13:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p23Z2tdYd_fSjRTgjcVbEzC9E7c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d00889-e5ca-4090-a6a4-2ac6ff75beb0/1/p23Z2tdYd_fSjRTgjcVbEzC9E7c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:8e:11:9b:6b:5e:1d:d0:ac:d1:50:26:2a:4c:06:58:2e:88: c5:dd:fe:94:d2:31:f4:ff:bb:9d:ed:41:24:18:a6:6e:77:cd: b1:17:93:84:71:29:e7:84:d4:19:f9:56:a3:9d:78:7b:14:be: 3e:db:a8:de:96:eb:a3:83:83:45:26:58:95:6d:f2:22:43:eb: a3:6d:92:d0:38:46:8e:2e:a2:8e:cf:68:a6:81:ea:14:fa:a2: d4:b6:62:3a:2f:e6:72:95:c9:93:14:bf:47:52:9e:ea:72:4a: 73:3b:ce:2e:89:4d:5d:49:d3:f7:5b:86:61:4d:39:a1:f0:57: cc:a6:b1:c8:f9:03:03:eb:f4:e5:76:c5:c4:b6:85:2f:82:60: 38:ee:8e:02:4e:21:db:5d:44:6b:38:5c:65:34:35:ac:2b:83: 2f:d9:bf:53:e4:7e:71:9e:41:4d:35:d4:e8:5b:e2:6c:88:f9: fa:7d:4b:0d:31:bd:bc:0c:2d:38:4f:1a:2d:29:de:16:d4:c1: d5:ed:6b:70:6a:28:51:9a:66:ae:60:58:90:8b:44:b5:4b:47: 18:e6:21:a7:14:61:e2:31:9b:92:df:6f:42:fb:17:e9:a7:79: 1b:7b:49:d9:af:65:31:c8:9c:f2:0e:74:a0:50:1d:fb:08:f4: d4:2f:79:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLeS1cPrAY4ockQO4v1aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmRkOWRhZDc1ODc3ZjdkMjhkMTRlMDhkYzU1YjEzMzBi ZDEzYjcwHhcNMjUxMjA2MDEwMTQ3WhcNMjUxMjA3MDEwMTQ3WjAzMTEwLwYDVQQD EyhjNWZjY2FlNTk4YjQ0NGVlMjkxN2VmMTkwODFkMGIwNTM3MWNjNWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Sna5Jjwn62UZHYDvLXXbwWIgSr eQ9tVaUCmU94TaxI59ZPeqd1cQErf4+lBqSudTe/Fzw72RZYGVilRlxegMcLsvTO MbFIaHxFKUNs7ZvTCzrZD8vlMH1gnW4QhLlPFcVtzcH6alQDF0ErSSxfHCB61XS9 rqiSG/kJ7LnoBkfOxTdtHHDAZnLeR3qwx1ohN6Ru7UAoi1mixqtMyT5F3TFON80s YX7oQT1y8G+aMXX9Tn4nviOhGcrmwvgRh7rd/6QBEwnobXOgaKXSFXo0Ltb1QxzM Bp5FUNX/cJFcKKf1/LoZpeDE/EC+ZoNK3PLHRZMXCg9jJIC/pubXjQ7L5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMX8yuWYtETuKRfvGQgdCwU3HMWlMB8GA1UdIwQY MBaAFKdt2drXWHf30o0U4I3FWxMwvRO3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQt MmFjNmZmNzViZWIwLzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kMDA4ODktZTVjYS00MDkwLWE2YTQtMmFjNmZmNzViZWIw LzEvcDIzWjJ0ZFlkX2ZTalJUZ2pjVmJFekM5RTdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVo4Rm2te HdCs0VAmKkwGWC6Ixd3+lNIx9P+7ne1BJBimbnfNsReThHEp54TUGflWo514exS+ Ptuo3pbro4ODRSZYlW3yIkPro22S0DhGji6ijs9opoHqFPqi1LZiOi/mcpXJkxS/ R1Ke6nJKczvOLolNXUnT91uGYU05ofBXzKaxyPkDA+v05XbFxLaFL4JgOO6OAk4h 211EazhcZTQ1rCuDL9m/U+R+cZ5BTTXU6FvibIj5+n1LDTG9vAwtOE8aLSneFtTB 1e1rcGooUZpmrmBYkItEtUtHGOYhpxRh4jGbkt9vQvsX6ad5G3tJ2a9lMcic8g50 oFAd+wj01C951g== -----END CERTIFICATE-----Generated at Sat Dec 6 04:59:20 2025 by rpki-client