This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft File: d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft (raw, json) Hash identifier: IHTsFToFbm4DeStbXxiYxG4IA7O5qW1b9FrofJo2dY0= Subject key identifier: 70:25:D4:7C:8E:5F:0C:BB:41:DD:06:94:0D:E2:DE:A8:2E:2E:77:3F Authority key identifier: 77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 Certificate issuer: /CN=77b020308865c3360dab19f3a5703341864e9f50 Certificate serial: 019B2E54EEC9A62685382F0F6FC8CF90274E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft Manifest number: 178A Signing time: Wed 17 Dec 2025 22:01:16 +0000 Manifest this update: Wed 17 Dec 2025 22:01:16 +0000 Manifest next update: Thu 18 Dec 2025 22:01:16 +0000 Files and hashes: 1: d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl (hash: pELYvOGWhl1TF/GYB8i4cGIb02PzfUUhAdUjEgFzaCs=) 2: y2IPmXUvA-hOkWs492ksc-DWCKQ.roa (hash: qKtRuRd69clPPsqawIh09HUba2GRDePDsao1bLap4SI=) 3: zrX35UZIaDQ7gsBizHdrkf-Nup0.roa (hash: YG/4j+fW6PNSItLJkk/6gbwhIYXjKk9jfgVFuX7jzdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 22:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2e:54:ee:c9:a6:26:85:38:2f:0f:6f:c8:cf:90:27:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77b020308865c3360dab19f3a5703341864e9f50 Validity Not Before: Dec 17 22:01:16 2025 GMT Not After : Dec 18 22:01:16 2025 GMT Subject: CN=7025d47c8e5f0cbb41dd06940de2dea82e2e773f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c7:d5:31:c3:db:bd:83:d5:30:07:15:a2:33: be:a5:21:7a:95:56:d3:47:4b:f5:36:4f:e8:e4:45: 89:dd:3d:4d:7e:52:56:7e:4f:33:32:4e:7e:56:ea: 41:e3:28:7c:d6:00:53:83:6a:b5:fd:3f:aa:7a:ea: ae:c4:26:4c:3a:3b:7d:b7:64:1a:70:1c:25:8a:a5: 00:23:e7:9e:21:a2:c7:6b:9c:d9:54:a0:ae:62:50: bb:78:27:9f:8d:ba:4d:4d:67:11:f6:9b:07:39:64: cc:a3:9e:77:6f:88:72:7c:d8:a5:f3:c7:c1:1f:3a: f2:be:a6:da:45:ca:88:4f:28:be:7c:8b:b2:bb:ca: d9:37:92:14:d4:bc:28:7b:06:1d:41:14:9f:41:db: 67:1b:5f:1f:db:09:ac:01:f5:7d:bd:83:2c:0c:6a: 69:06:34:6f:61:ba:99:6d:16:b9:d1:eb:77:25:af: f2:c8:68:56:79:a9:ae:e3:7f:0b:a2:97:03:9c:70: 57:73:da:e1:16:ff:66:b2:c8:f6:4e:fb:af:f2:c0: 7b:ac:39:08:9f:fe:90:c0:af:30:cd:2a:47:e2:74: c6:52:87:76:54:d4:43:89:9e:9f:a5:5c:f9:a7:24: ee:76:6e:9e:21:98:35:63:d1:86:52:04:a2:0f:e6: aa:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:25:D4:7C:8E:5F:0C:BB:41:DD:06:94:0D:E2:DE:A8:2E:2E:77:3F X509v3 Authority Key Identifier: keyid:77:B0:20:30:88:65:C3:36:0D:AB:19:F3:A5:70:33:41:86:4E:9F:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AgMIhlwzYNqxnzpXAzQYZOn1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d2aab0-8363-4b14-9cc2-c8bb8ea39804/1/d7AgMIhlwzYNqxnzpXAzQYZOn1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:94:56:23:b3:78:c9:ad:f2:ef:47:4a:76:d0:bc:ce:c0:2a: 24:6f:3a:d5:b6:68:e8:d7:31:a9:65:f8:c0:62:09:25:1b:1b: e0:4d:6e:f9:da:e7:1f:08:50:b9:2c:6a:16:3f:f9:e2:2c:6b: 55:4c:c3:74:a6:ad:16:49:b8:2d:88:21:8f:95:69:60:7e:55: 19:8f:65:3f:d1:cb:9a:ef:93:46:e2:c0:1f:cd:5f:b0:5e:9a: 47:21:68:5d:c7:5f:bf:74:75:e4:e5:90:1e:52:71:74:0b:f4: ca:48:e5:74:5a:7c:9f:af:4b:78:4d:03:5e:2b:d4:89:85:cb: ab:bb:8d:05:83:99:2a:91:53:80:e1:67:09:7b:12:bc:4b:04: f4:d0:71:4e:1a:4c:fa:ec:b6:41:f4:67:f1:af:93:25:d3:74: 07:33:62:28:3a:ae:f5:6e:40:6b:94:07:88:0b:ea:d9:f6:61: 21:be:79:cc:fd:8d:a2:47:97:d6:17:4c:02:e3:12:2c:dc:0b: 6a:8a:f1:87:11:36:c8:f7:bd:60:1d:fb:89:3b:18:97:8f:d5: 91:ce:da:a8:84:3c:29:9e:70:0c:08:28:27:34:ac:ab:fa:4a: 58:71:41:91:a9:fa:f8:13:4b:df:26:06:52:19:95:db:45:85: e3:9a:84:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsuVO7JpiaFOC8Pb8jPkCdOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3YjAyMDMwODg2NWMzMzYwZGFiMTlmM2E1NzAzMzQxODY0 ZTlmNTAwHhcNMjUxMjE3MjIwMTE2WhcNMjUxMjE4MjIwMTE2WjAzMTEwLwYDVQQD Eyg3MDI1ZDQ3YzhlNWYwY2JiNDFkZDA2OTQwZGUyZGVhODJlMmU3NzNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMfVMcPbvYPVMAcVojO+pSF6lVbT R0v1Nk/o5EWJ3T1NflJWfk8zMk5+VupB4yh81gBTg2q1/T+qeuquxCZMOjt9t2Qa cBwliqUAI+eeIaLHa5zZVKCuYlC7eCefjbpNTWcR9psHOWTMo553b4hyfNil88fB HzryvqbaRcqITyi+fIuyu8rZN5IU1LwoewYdQRSfQdtnG18f2wmsAfV9vYMsDGpp BjRvYbqZbRa50et3Ja/yyGhWeamu438LopcDnHBXc9rhFv9mssj2Tvuv8sB7rDkI n/6QwK8wzSpH4nTGUod2VNRDiZ6fpVz5pyTudm6eIZg1Y9GGUgSiD+aqCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAl1HyOXwy7Qd0GlA3i3qguLnc/MB8GA1UdIwQY MBaAFHewIDCIZcM2DasZ86VwM0GGTp9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzIt YzhiYjhlYTM5ODA0LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9kMmFhYjAtODM2My00YjE0LTljYzItYzhiYjhlYTM5ODA0 LzEvZDdBZ01JaGx3ellOcXhuenBYQXpRWVpPbjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPpRWI7N4 ya3y70dKdtC8zsAqJG861bZo6NcxqWX4wGIJJRsb4E1u+drnHwhQuSxqFj/54ixr VUzDdKatFkm4LYghj5VpYH5VGY9lP9HLmu+TRuLAH81fsF6aRyFoXcdfv3R15OWQ HlJxdAv0ykjldFp8n69LeE0DXivUiYXLq7uNBYOZKpFTgOFnCXsSvEsE9NBxThpM +uy2QfRn8a+TJdN0BzNiKDqu9W5Aa5QHiAvq2fZhIb55zP2NokeX1hdMAuMSLNwL aorxhxE2yPe9YB37iTsYl4/Vkc7aqIQ8KZ5wDAgoJzSsq/pKWHFBkan6+BNL3yYG UhmV20WF45qE6w== -----END CERTIFICATE-----Generated at Thu Dec 18 07:33:51 2025 by rpki-client