This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json) Hash identifier: 70/9JUlxTFLkA7d1qOssb3dW25UaJxhwR8kDwsBzRB8= Subject key identifier: C2:BE:E9:25:05:C8:55:06:CC:31:E6:7E:A5:C8:8D:4C:D6:18:98:79 Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Certificate serial: 019B443916C2BF37AC00A623196B3D3F28B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft Manifest number: 120E Signing time: Mon 22 Dec 2025 04:02:30 +0000 Manifest this update: Mon 22 Dec 2025 04:02:30 +0000 Manifest next update: Tue 23 Dec 2025 04:02:30 +0000 Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=) 2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: baEFDVLRGwCbhpRvYHmElQhqjhRkQ0rfm6tSib+SM1o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:39:16:c2:bf:37:ac:00:a6:23:19:6b:3d:3f:28:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Validity Not Before: Dec 22 04:02:30 2025 GMT Not After : Dec 23 04:02:30 2025 GMT Subject: CN=c2bee92505c85506cc31e67ea5c88d4cd6189879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:1b:31:ec:9d:25:16:90:38:99:b9:c4:33: e3:b2:a2:be:a3:8b:52:3f:a2:e1:42:64:b1:b0:df: d4:d3:87:21:2c:41:ab:51:73:25:c9:bc:2b:c9:da: 71:b2:da:40:da:7c:52:e6:35:21:62:30:cc:c8:32: a6:7f:ad:91:99:e7:25:69:55:8d:8a:6b:32:d3:b4: 6a:f5:29:ff:c0:66:2d:af:82:ae:55:92:6f:95:ee: 7a:98:9c:60:42:2e:a4:59:4b:1d:97:7e:b3:33:1a: 31:18:6b:e1:3a:06:5d:6a:72:df:1a:82:c6:ff:2b: 53:7a:52:f8:82:1d:60:03:d1:ac:f6:c1:1e:33:a5: 21:5c:27:17:fd:22:32:0c:ec:d2:a8:02:0e:3d:37: 6f:fc:3d:39:f7:cd:7c:e9:28:97:94:9a:f6:c4:87: 51:b1:70:c2:d1:a1:1c:88:ae:40:66:3d:68:c3:16: 08:9b:95:14:54:5d:22:5a:56:71:4e:28:af:b2:20: c1:13:de:19:3b:b3:cc:b5:93:54:b9:59:d6:6e:4d: 4e:33:3c:65:f5:63:3f:ea:2b:c3:f8:93:9c:e4:85: 78:0e:07:6d:72:29:32:41:ec:d4:7d:97:9c:ac:90: f7:05:f2:9a:ee:f4:06:2d:fe:b3:b6:ca:9a:ee:d1: 78:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:BE:E9:25:05:C8:55:06:CC:31:E6:7E:A5:C8:8D:4C:D6:18:98:79 X509v3 Authority Key Identifier: keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:07:09:c3:98:a6:1b:5f:b1:c9:01:dd:79:7d:1c:6f:88:ee: b5:bf:ff:67:67:1c:08:2d:55:ab:e2:56:88:82:45:f1:b9:4b: 21:fe:0c:25:b6:e4:e8:ce:cc:06:af:8a:a8:68:df:51:65:b4: 06:b1:91:87:1b:0f:f6:7b:5d:08:78:08:6c:2e:3f:09:91:85: c7:33:4a:52:67:9f:b2:34:8c:fe:ca:e0:35:1f:bc:74:8a:4d: 6d:46:d3:a5:64:99:a3:94:39:57:43:bb:ac:12:98:a6:d8:b6: 8b:b5:89:b7:0b:58:80:92:00:ae:d0:eb:68:45:5c:fe:87:af: 84:f9:f0:47:b8:13:2b:22:ca:46:89:9f:fa:ed:9c:97:2a:78: 20:31:65:8a:3d:49:64:c9:0d:22:5c:54:7d:a5:df:6e:17:a2: 59:f1:b3:b9:fa:3a:b1:22:e9:c3:2d:81:d7:d2:18:dc:7d:05: 56:d1:59:f3:8f:39:3e:67:82:19:b1:a8:22:9f:25:0e:41:5b: 86:d9:7f:49:aa:21:66:9f:05:38:66:7d:bc:a4:3f:3a:4c:fd: 6f:b9:e9:26:33:b4:15:48:d8:e1:fc:96:3d:fd:68:73:ca:2c: 8b:52:99:05:fc:3a:ba:be:40:e1:c4:1a:ba:5a:65:0a:96:f8: 41:ab:39:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEORbCvzesAKYjGWs9Pyi5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj NWU5NTAwHhcNMjUxMjIyMDQwMjMwWhcNMjUxMjIzMDQwMjMwWjAzMTEwLwYDVQQD EyhjMmJlZTkyNTA1Yzg1NTA2Y2MzMWU2N2VhNWM4OGQ0Y2Q2MTg5ODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB8bMeydJRaQOJm5xDPjsqK+o4tS P6LhQmSxsN/U04chLEGrUXMlybwrydpxstpA2nxS5jUhYjDMyDKmf62RmeclaVWN imsy07Rq9Sn/wGYtr4KuVZJvle56mJxgQi6kWUsdl36zMxoxGGvhOgZdanLfGoLG /ytTelL4gh1gA9Gs9sEeM6UhXCcX/SIyDOzSqAIOPTdv/D0598186SiXlJr2xIdR sXDC0aEciK5AZj1owxYIm5UUVF0iWlZxTiivsiDBE94ZO7PMtZNUuVnWbk1OMzxl 9WM/6ivD+JOc5IV4DgdtcikyQezUfZecrJD3BfKa7vQGLf6ztsqa7tF40QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMK+6SUFyFUGzDHmfqXIjUzWGJh5MB8GA1UdIwQY MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0 LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAcJw5im G1+xyQHdeX0cb4jutb//Z2ccCC1Vq+JWiIJF8blLIf4MJbbk6M7MBq+KqGjfUWW0 BrGRhxsP9ntdCHgIbC4/CZGFxzNKUmefsjSM/srgNR+8dIpNbUbTpWSZo5Q5V0O7 rBKYpti2i7WJtwtYgJIArtDraEVc/oevhPnwR7gTKyLKRomf+u2clyp4IDFlij1J ZMkNIlxUfaXfbheiWfGzufo6sSLpwy2B19IY3H0FVtFZ8485PmeCGbGoIp8lDkFb htl/SaohZp8FOGZ9vKQ/Okz9b7npJjO0FUjY4fyWPf1oc8osi1KZBfw6ur5A4cQa ulplCpb4Qas5Zg== -----END CERTIFICATE-----Generated at Mon Dec 22 09:46:05 2025 by rpki-client