This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json) Hash identifier: 9vD7Q8Fg/Maepi1aGwgOw7xZezPY5VbpxKQB8QazWq8= Subject key identifier: D1:EE:5B:B5:22:68:96:F8:7B:FA:08:6B:99:D2:4A:02:65:4F:75:97 Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC Certificate issuer: /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Certificate serial: 019B3D5A3DE9D0EFE0C9087D1DD491F78F9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft Manifest number: 041D Signing time: Sat 20 Dec 2025 20:01:22 +0000 Manifest this update: Sat 20 Dec 2025 20:01:22 +0000 Manifest next update: Sun 21 Dec 2025 20:01:22 +0000 Files and hashes: 1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=) 2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: 6Tunqogn36eiRYtlSA1Dz0N0NKyuJrywnH/8xP7Xs0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:5a:3d:e9:d0:ef:e0:c9:08:7d:1d:d4:91:f7:8f:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Validity Not Before: Dec 20 20:01:22 2025 GMT Not After : Dec 21 20:01:22 2025 GMT Subject: CN=d1ee5bb5226896f87bfa086b99d24a02654f7597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:88:6d:3a:31:ca:c2:95:d6:9a:92:65:07:91: 5a:05:c3:67:97:1b:58:a1:7a:00:7f:a1:f8:33:89: bc:58:b2:96:65:e6:dc:cf:25:3b:9b:c3:b4:66:6d: f9:66:60:2d:df:96:b4:0a:02:64:eb:85:9f:dd:0b: f8:9b:e7:b2:74:38:3e:8c:48:e5:84:96:29:0c:18: c5:6b:c6:ab:54:6f:9f:67:d7:ae:e3:71:25:90:70: 41:14:4d:b2:6e:1a:ea:5e:28:6c:dd:69:18:0c:80: 46:b2:86:5c:85:4d:63:34:d4:f9:1b:bd:95:13:2f: 62:37:43:fe:7d:6b:5f:6c:5d:67:07:69:d9:a3:9a: c7:03:fd:91:80:8a:1f:c0:00:83:1f:94:d0:d2:31: 1a:df:52:a3:e8:f2:11:13:14:92:0d:e8:00:47:90: 17:a4:d6:8d:75:d6:2f:ed:40:43:d4:64:4a:69:43: ba:e3:31:c7:1f:4e:d4:dd:31:df:36:c4:52:7a:1c: a0:dd:5c:30:b7:3a:9e:af:d1:20:27:a2:0b:65:35: 60:5e:c0:53:d2:a0:d2:b3:58:7c:33:c5:ac:4f:5d: c8:e9:3f:ea:8f:cb:34:05:2b:99:0e:f9:38:86:2d: cd:31:e9:76:7b:04:84:87:74:0a:f5:fe:a3:80:4e: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:EE:5B:B5:22:68:96:F8:7B:FA:08:6B:99:D2:4A:02:65:4F:75:97 X509v3 Authority Key Identifier: keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:a0:87:4e:c9:d2:6c:e5:b9:1b:fa:d1:f5:d7:94:21:39:6f: 07:47:3e:5a:9a:fd:a1:d0:2b:61:ea:75:36:c6:26:8f:be:62: ba:46:0c:32:ae:24:4a:db:1b:dc:e0:40:de:01:df:ea:6a:1b: a1:0f:80:ad:3f:2b:e1:71:0f:9c:fd:70:23:f7:3a:58:4b:36: 4b:5f:5d:80:f8:76:c0:e4:d3:d7:9b:a9:0e:42:75:e0:ce:23: f8:5b:53:4d:52:45:89:a0:6b:ef:29:f5:58:99:1f:4b:ea:b6: 9b:dc:3b:ec:6f:98:0a:01:7f:0f:3a:c4:2f:a2:74:84:e1:09: 73:bb:bf:e8:dc:f0:19:50:c7:5d:68:09:84:29:de:57:47:ad: 5a:6d:d6:85:1e:1e:e2:22:32:eb:ee:1d:74:2a:13:42:b4:45: c1:f5:a6:25:eb:c5:b5:f7:78:18:7b:2c:1a:7d:d5:e1:fa:23: 13:54:f9:6c:a6:c8:19:3e:ed:c9:d0:7b:89:ef:dd:79:82:5a: 18:0d:89:db:72:7e:36:44:1f:94:68:77:81:41:f6:5d:c6:11: 9f:74:7d:0a:6b:18:d7:03:8f:d9:55:99:ce:bd:85:a6:57:fc: 6f:33:59:2f:d5:47:59:b2:4b:8b:d4:76:7d:6b:b0:4f:35:6b: 93:0b:17:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wj3p0O/gyQh9HdSR94+bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDBiYjU1ODJlNzRkNjFlOTBjODAyODNiYTliOThiYTY1 Y2QyZGMwHhcNMjUxMjIwMjAwMTIyWhcNMjUxMjIxMjAwMTIyWjAzMTEwLwYDVQQD EyhkMWVlNWJiNTIyNjg5NmY4N2JmYTA4NmI5OWQyNGEwMjY1NGY3NTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYhtOjHKwpXWmpJlB5FaBcNnlxtY oXoAf6H4M4m8WLKWZebczyU7m8O0Zm35ZmAt35a0CgJk64Wf3Qv4m+eydDg+jEjl hJYpDBjFa8arVG+fZ9eu43ElkHBBFE2ybhrqXihs3WkYDIBGsoZchU1jNNT5G72V Ey9iN0P+fWtfbF1nB2nZo5rHA/2RgIofwACDH5TQ0jEa31Kj6PIRExSSDegAR5AX pNaNddYv7UBD1GRKaUO64zHHH07U3THfNsRSehyg3Vwwtzqer9EgJ6ILZTVgXsBT 0qDSs1h8M8WsT13I6T/qj8s0BSuZDvk4hi3NMel2ewSEh3QK9f6jgE5cbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHuW7UiaJb4e/oIa5nSSgJlT3WXMB8GA1UdIwQY MBaAFHUAu1WC501h6QyAKDupuYumXNLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgt YmIzZDQ5MzBlNDU5LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgtYmIzZDQ5MzBlNDU5 LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0KCHTsnS bOW5G/rR9deUITlvB0c+Wpr9odArYep1NsYmj75iukYMMq4kStsb3OBA3gHf6mob oQ+ArT8r4XEPnP1wI/c6WEs2S19dgPh2wOTT15upDkJ14M4j+FtTTVJFiaBr7yn1 WJkfS+q2m9w77G+YCgF/DzrEL6J0hOEJc7u/6NzwGVDHXWgJhCneV0etWm3WhR4e 4iIy6+4ddCoTQrRFwfWmJevFtfd4GHssGn3V4fojE1T5bKbIGT7tydB7ie/deYJa GA2J23J+NkQflGh3gUH2XcYRn3R9CmsY1wOP2VWZzr2Fplf8bzNZL9VHWbJLi9R2 fWuwTzVrkwsXLg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:31:35 2025 by rpki-client