This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: wfiaAEhjAqZoZK2+BV2mnbUlD+F4VJDYLoVoKBCuKW8= Subject key identifier: EE:A2:83:49:92:32:41:74:15:94:07:E4:2B:D6:75:0F:82:48:36:4E Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B38339D2D32E633B2F3895D005DEE382F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 17CF Signing time: Fri 19 Dec 2025 20:01:05 +0000 Manifest this update: Fri 19 Dec 2025 20:01:05 +0000 Manifest next update: Sat 20 Dec 2025 20:01:05 +0000 Files and hashes: 1: 0ztpdIPZKD6tLdnP79sm1hMOXpI.roa (hash: V+undJDS0h8d8CYJ+c34sHP0OtxUuBa8a+o8Uohmb0E=) 2: 1oM3GP4XRi0mqDBcN0k0C4RTdHY.roa (hash: Eqko1gSCAK/Ec5hGsjBzpPB0Hmmto77uxcqKM6nkuos=) 3: 3PPf4Y_qIxC7RLvddn7XhPdaKJc.roa (hash: OFq30+iv/yFFA0xKQ9BO17H+DIvPQ0bkiTx0cNerIAg=) 4: 5s050sybnU_qDLTadTW4Cbc1oa4.roa (hash: ul22+y65UhFi/PV4KsevDJSKijOmKuUMMb7YcjmOBq0=) 5: AkuNATViTFoUsLRTBmxq5TZta1U.roa (hash: +ALe8BR6dBzO5s8AWGnd/n4M4kjwqZrGPKmd2bf8aB0=) 6: D-_QiVeAYymMyrqyEwwxZVlJ77w.roa (hash: pLHDIfQfn00HxVAd67SY9GUFCYPJH9fT0t4z495xhcU=) 7: I49sO32imbdn9nfJ0l-il2Ef_jY.roa (hash: k2Ksa8ZIkYwAdo7qnIBXutPiCFJfdjd5EjsrD8efaro=) 8: JWGGkRuJCVyXIJf7U_Tllx9GvLo.roa (hash: q2mwtM0pyYItD49ctwOqLjVJYv5g0mJ64QH0B7oRSCM=) 9: SHESx2HqUfWZxboQ6jP2hImYKmU.roa (hash: OlCdziBdwRc0FY5ejIFVQ8Nt867ISEKKLNxKfPnLzFA=) 10: TevPA31zpqIvq6GeQSDxtNa30UQ.roa (hash: 2nDbpMbvjKPaiiXiHqb4sCzw1FXoCOAaM9XlGLGbhC8=) 11: U2a4Mi5anG6MoVx-kSkOlCHuZ9U.roa (hash: WzVg8UcZ00h0mbpXiGBDaneFB3IZyzn0LFRbQNJ9OXc=) 12: bXqGrtPxlanCwZBmfe1rRANABDc.roa (hash: t5k+i+kB+7zSE8mRV1cP/4Uq7WgvCEro2Yq0+7QQVJA=) 13: bicuo27VbekDKZ2baxGyIAeBOBw.roa (hash: SWEpCpnN+xzcUkxLs6Bt4xTFqOqzIoS1IpAm8o8Z7uw=) 14: cbX3FwOgi9rS1ENe_k5BLCxVdg4.roa (hash: 35j9cePlwM12en+EIoj2uwLnq2TReRAiO2SX/9vwgDk=) 15: icTWsoKn_xk3KExZZn417x-Qv84.roa (hash: o9OMiruJYKHV5Ad+C6iuA4/zkZ1aBjsbg8MEUFVbq0o=) 16: nwRRU278nZ-OoZkxunLEdDGvAcI.roa (hash: XtojZB9yoPUFiPBHYDNCJYd8iy1TyLCfmu2Ry8BmvwU=) 17: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: b6S5ggfqYyMv/PUmSfIyBQQ+4Ch3VJUlhV7SoWL/yn8=) 18: ya7mSjgbQNkjSkwREdHvHfCPb0I.roa (hash: qGz6FzpRmDdb9Ho0LXX5sUlrsbd9atIt02hL0IbJ65M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 17:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:9d:2d:32:e6:33:b2:f3:89:5d:00:5d:ee:38:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Dec 19 20:01:05 2025 GMT Not After : Dec 20 20:01:05 2025 GMT Subject: CN=eea2834992324174159407e42bd6750f8248364e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d2:34:b5:75:02:a8:c1:55:8e:84:53:b8:5e: a3:6b:73:85:50:aa:c2:64:85:e5:e3:d0:d5:44:b9: b2:fb:32:9c:cb:3c:c9:7c:17:b8:f2:93:a0:bf:7e: 00:78:22:38:7d:cf:38:b6:c0:bc:31:39:94:d9:eb: 88:94:82:70:90:7a:8e:54:6a:28:e3:0a:5a:74:61: 7c:40:d0:ce:d4:71:9e:c4:3c:c6:65:3f:8c:ae:2d: 05:c0:41:97:1a:00:93:87:3e:fe:84:de:cf:91:1f: e2:10:99:0d:04:8b:a5:e5:0e:5e:e3:95:75:af:5a: 97:12:80:43:18:4e:34:de:e8:c2:91:c5:0d:e1:1d: c6:45:b3:44:bd:93:31:20:4e:f1:6b:8d:27:49:6c: f1:40:6b:a5:ef:30:33:85:bd:68:75:24:61:c1:74: 17:15:a7:ca:e3:51:37:40:06:b0:4f:d8:fd:ac:29: 01:50:cb:42:d6:56:87:08:68:6e:cc:e9:18:03:4a: c8:ea:3e:a4:33:c1:ed:6c:29:20:27:51:2e:99:8c: a1:0e:40:25:21:03:70:93:5b:1e:85:f0:74:d1:51: c5:5f:c2:4a:a6:3c:47:17:21:9c:7d:a9:4c:bf:bc: aa:ac:5c:27:62:5e:5d:4d:68:10:57:20:f7:f6:b8: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:A2:83:49:92:32:41:74:15:94:07:E4:2B:D6:75:0F:82:48:36:4E X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e3:f9:5f:57:c6:42:9e:65:19:e1:b4:b4:02:bd:92:33:1c: 99:22:3b:d6:2e:28:9d:02:da:2f:71:9c:ee:53:de:7d:59:1e: ae:99:ee:f5:74:dd:dc:36:fe:a2:8d:49:b9:2f:c3:2c:9d:0e: 08:f3:54:c9:df:65:30:f5:49:4f:e7:74:74:2b:67:bb:6b:c7: 6b:72:b7:b9:dd:37:30:f1:fc:6b:66:56:ed:13:28:85:18:bb: 87:50:84:5d:be:6e:b2:80:43:30:45:0f:e1:24:0f:9c:90:5f: 15:a2:b2:a2:f4:13:c1:13:39:e9:97:a4:bc:54:01:f1:de:b8: c7:34:1a:fd:a2:32:62:fe:12:31:88:f3:45:42:a4:d2:40:29: f4:81:2e:f9:78:f3:77:03:40:70:17:c6:8b:10:37:4e:33:a1: 73:b2:5e:90:f3:d6:b3:a8:7d:07:54:98:0c:8b:b1:72:71:1e: 45:2f:e6:7c:c4:7c:81:c4:27:e7:18:29:db:04:c9:72:9f:46: 38:8e:72:ce:27:95:ea:f4:b5:70:1b:6d:2e:c0:fa:a0:ed:cf: 4f:1a:dc:87:a2:a1:93:7d:9d:5a:e5:d0:82:92:8d:84:e2:c8: 64:fd:04:3e:3c:db:a4:9a:9b:e5:bf:02:fe:19:35:63:89:fc: dd:8a:c5:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M50tMuYzsvOJXQBd7jgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjUxMjE5MjAwMTA1WhcNMjUxMjIwMjAwMTA1WjAzMTEwLwYDVQQD EyhlZWEyODM0OTkyMzI0MTc0MTU5NDA3ZTQyYmQ2NzUwZjgyNDgzNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNI0tXUCqMFVjoRTuF6ja3OFUKrC ZIXl49DVRLmy+zKcyzzJfBe48pOgv34AeCI4fc84tsC8MTmU2euIlIJwkHqOVGoo 4wpadGF8QNDO1HGexDzGZT+Mri0FwEGXGgCThz7+hN7PkR/iEJkNBIul5Q5e45V1 r1qXEoBDGE403ujCkcUN4R3GRbNEvZMxIE7xa40nSWzxQGul7zAzhb1odSRhwXQX FafK41E3QAawT9j9rCkBUMtC1laHCGhuzOkYA0rI6j6kM8HtbCkgJ1EumYyhDkAl IQNwk1sehfB00VHFX8JKpjxHFyGcfalMv7yqrFwnYl5dTWgQVyD39rj+aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO6ig0mSMkF0FZQH5CvWdQ+CSDZOMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmuP5X1fG Qp5lGeG0tAK9kjMcmSI71i4onQLaL3Gc7lPefVkerpnu9XTd3Db+oo1JuS/DLJ0O CPNUyd9lMPVJT+d0dCtnu2vHa3K3ud03MPH8a2ZW7RMohRi7h1CEXb5usoBDMEUP 4SQPnJBfFaKyovQTwRM56ZekvFQB8d64xzQa/aIyYv4SMYjzRUKk0kAp9IEu+Xjz dwNAcBfGixA3TjOhc7JekPPWs6h9B1SYDIuxcnEeRS/mfMR8gcQn5xgp2wTJcp9G OI5yzieV6vS1cBttLsD6oO3PTxrch6Khk32dWuXQgpKNhOLIZP0EPjzbpJqb5b8C /hk1Y4n83YrFLg== -----END CERTIFICATE-----Generated at Sat Dec 20 03:12:26 2025 by rpki-client