This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json) Hash identifier: zYKJsecMVIYXJZrXFRNk72LzlOUxBPOnomfYUB7Ro9s= Subject key identifier: F5:E1:C9:4C:ED:A1:85:F3:68:F7:51:A2:1E:66:34:8A:92:4C:FF:67 Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC Certificate issuer: /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Certificate serial: 019B65E84E16A7CC07B8F1C47A497003F65F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft Manifest number: 0432 Signing time: Sun 28 Dec 2025 17:01:21 +0000 Manifest this update: Sun 28 Dec 2025 17:01:21 +0000 Manifest next update: Mon 29 Dec 2025 17:01:21 +0000 Files and hashes: 1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=) 2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: +Polmeg/lWz2syBXOPqKLDVTxiWUKR2PWUN3SF4J1aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 17:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:e8:4e:16:a7:cc:07:b8:f1:c4:7a:49:70:03:f6:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Validity Not Before: Dec 28 17:01:21 2025 GMT Not After : Dec 29 17:01:21 2025 GMT Subject: CN=f5e1c94ceda185f368f751a21e66348a924cff67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:97:9d:32:32:61:e2:e5:03:6d:af:68:a3:0b: 8f:fa:72:e4:b9:af:92:d0:ba:22:05:2c:aa:c5:4e: 7d:81:db:ef:b1:14:46:95:45:24:70:1b:7c:c4:40: f1:91:e3:b3:56:0d:fa:02:10:0d:ca:d2:dd:d1:40: 2b:c5:d4:26:70:05:b9:7d:22:4f:97:c6:bf:a2:c7: c1:3d:1a:bc:1a:d4:66:48:7e:58:14:60:f5:35:85: 6c:fe:cf:0a:4a:e6:6c:4b:9a:71:28:e8:d5:cd:1c: 2b:19:ea:f4:ba:3a:9f:32:f4:83:10:4f:06:54:08: 6b:ad:7a:ed:45:0f:93:47:10:0d:74:35:6b:4e:a1: ba:45:fc:b0:08:63:b6:9c:68:be:d2:17:f4:56:ac: 9b:5e:66:4f:44:2a:02:50:07:db:99:c8:31:31:36: 18:19:11:20:f5:a5:32:56:e0:b6:4f:e6:f7:31:11: 85:bd:9b:5b:1d:37:9c:ef:75:90:c1:92:11:a3:1f: 41:f8:8e:88:d1:0b:b4:1e:e6:33:88:32:80:52:7c: c6:4b:34:f8:0a:7a:35:b0:dc:e1:fb:73:66:9c:86: 12:1b:69:b2:f6:8a:0d:0e:89:28:2d:48:a2:a8:01: d1:7f:1d:90:35:1d:1b:7d:73:23:d2:d3:bc:4f:70: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E1:C9:4C:ED:A1:85:F3:68:F7:51:A2:1E:66:34:8A:92:4C:FF:67 X509v3 Authority Key Identifier: keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:cc:29:ba:5b:1d:26:40:b7:f0:4c:ad:0c:65:c8:12:ee:ea: 68:93:57:ba:21:96:c5:fd:f3:48:4d:8a:30:3c:a4:a0:b7:78: c2:56:46:21:f4:96:84:0c:a7:9e:c2:a3:44:20:1e:0d:93:b2: 52:e4:dd:37:76:ed:01:8a:c4:ac:b8:d9:03:f0:9b:0b:72:f5: d6:cf:25:7d:dc:c5:bc:21:54:66:51:61:e7:83:28:dc:5b:f0: f6:e1:78:72:65:7a:4a:eb:7d:b3:cb:9c:a8:09:e3:c6:a8:c9: f6:47:e5:f4:ab:72:52:c3:eb:47:e6:9a:03:49:09:9a:80:aa: 4e:d3:e6:b1:42:fd:be:2b:a2:04:08:a6:30:9e:87:ed:2d:9f: b1:80:65:62:16:d6:bb:97:ec:8e:ca:0b:19:66:59:3e:92:97: ae:75:3e:b0:1a:4a:8e:b6:da:80:fa:6d:fd:56:b7:b8:0d:cd: 44:52:b3:d1:20:ca:f4:65:77:ad:19:3b:e7:00:de:30:d4:1b: 81:e3:96:2d:53:5c:78:ee:a2:d4:87:99:20:75:99:49:99:c6: dd:92:c5:f0:cf:91:d0:3a:64:1f:a2:84:23:35:07:cb:fa:ae: 2c:16:a5:0f:e7:8d:a8:0c:95:d1:f1:bc:99:b2:c6:d4:66:a6: 72:42:d3:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtl6E4Wp8wHuPHEeklwA/ZfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDBiYjU1ODJlNzRkNjFlOTBjODAyODNiYTliOThiYTY1 Y2QyZGMwHhcNMjUxMjI4MTcwMTIxWhcNMjUxMjI5MTcwMTIxWjAzMTEwLwYDVQQD EyhmNWUxYzk0Y2VkYTE4NWYzNjhmNzUxYTIxZTY2MzQ4YTkyNGNmZjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6JedMjJh4uUDba9oowuP+nLkua+S 0LoiBSyqxU59gdvvsRRGlUUkcBt8xEDxkeOzVg36AhANytLd0UArxdQmcAW5fSJP l8a/osfBPRq8GtRmSH5YFGD1NYVs/s8KSuZsS5pxKOjVzRwrGer0ujqfMvSDEE8G VAhrrXrtRQ+TRxANdDVrTqG6RfywCGO2nGi+0hf0VqybXmZPRCoCUAfbmcgxMTYY GREg9aUyVuC2T+b3MRGFvZtbHTec73WQwZIRox9B+I6I0Qu0HuYziDKAUnzGSzT4 Cno1sNzh+3NmnIYSG2my9ooNDokoLUiiqAHRfx2QNR0bfXMj0tO8T3BRPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXhyUztoYXzaPdRoh5mNIqSTP9nMB8GA1UdIwQY MBaAFHUAu1WC501h6QyAKDupuYumXNLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgt YmIzZDQ5MzBlNDU5LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgtYmIzZDQ5MzBlNDU5 LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANcwpulsd JkC38EytDGXIEu7qaJNXuiGWxf3zSE2KMDykoLd4wlZGIfSWhAynnsKjRCAeDZOy UuTdN3btAYrErLjZA/CbC3L11s8lfdzFvCFUZlFh54Mo3Fvw9uF4cmV6Sut9s8uc qAnjxqjJ9kfl9KtyUsPrR+aaA0kJmoCqTtPmsUL9viuiBAimMJ6H7S2fsYBlYhbW u5fsjsoLGWZZPpKXrnU+sBpKjrbagPpt/Va3uA3NRFKz0SDK9GV3rRk75wDeMNQb geOWLVNceO6i1IeZIHWZSZnG3ZLF8M+R0DpkH6KEIzUHy/quLBalD+eNqAyV0fG8 mbLG1GamckLTyw== -----END CERTIFICATE-----Generated at Sun Dec 28 23:23:30 2025 by rpki-client