This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: 1+Vt9+kaH4FTGS7XsKkGaunG8iCW5jLCR4vO6zjfzqA= Subject key identifier: E6:3F:C6:17:97:A9:BE:9C:3A:55:B2:24:5B:F0:5B:9D:1A:ED:12:EB Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019B3DC7DDB547F2BB9E9BAD3B5831E4E54F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0CC0 Signing time: Sat 20 Dec 2025 22:01:07 +0000 Manifest this update: Sat 20 Dec 2025 22:01:07 +0000 Manifest next update: Sun 21 Dec 2025 22:01:07 +0000 Files and hashes: 1: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 2: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 3: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 4: IjTxYypUMPd9vNvxDH7e63Vss-s.roa (hash: ddL2vaX8z2K9wMCm5nW5FRiHC0CRdW6lG+EEvQKzKbw=) 5: KPlaq01Tm_7ZQDcSXoByiFXkYP4.roa (hash: pqcUxo+09w1rwwb/a+Pv1KMDwz7jBVowX0NYd3fbC7s=) 6: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 7: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 8: T2MgSfJhA--awsv_yLzhSgCTR5o.roa (hash: WyuHaMn+gG0jVz0dGyAqt02pX4u9yt+Uj+QT07hTOKI=) 9: UY_6W8Weiu8wfSraZN42RZZCh9E.roa (hash: v6nlIIdPdLR7D5BuTrHHAZdgu5wLraNYTQd+Byp51pA=) 10: bpthfOzMCHmNWPoyMwo5XIQPCUQ.roa (hash: VtftbkCJkVOtxURtiBDwhwZ/TrioGRiRetZ47whwsMM=) 11: c-jYtKSfa4VIV0dc7SVHGi1wpDM.roa (hash: AvwD63bIF1X5ZQR5fhuIKgABQi3TuCqXO/815QhlfiQ=) 12: lnoSZUl-KAxHgvChTMMkabDVOZE.roa (hash: MW0GEHPEt15f0rFl2wirejWxs1Jn9X63PZPwnku/3cI=) 13: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 14: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: H4dXjRCdhuQD+mRKghkKnpc9yzJR6Kc9hscDoHjoXRU=) 15: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 16: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:dd:b5:47:f2:bb:9e:9b:ad:3b:58:31:e4:e5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Dec 20 22:01:07 2025 GMT Not After : Dec 21 22:01:07 2025 GMT Subject: CN=e63fc61797a9be9c3a55b2245bf05b9d1aed12eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:da:c7:32:f7:17:9c:da:a0:e2:84:0a:7d:ef: 44:5c:66:c1:56:f5:86:be:78:38:fc:86:32:ac:64: f6:f0:af:a8:fe:e3:ad:59:d7:af:94:ed:eb:60:d8: 38:99:b8:98:1d:6d:f9:be:f9:90:65:30:ba:c7:67: e4:d7:05:bc:ec:ea:1f:c2:01:48:6a:84:6d:c1:3b: db:82:28:fb:ec:ae:94:87:eb:bd:c5:65:1a:be:7b: 0a:59:d3:ee:f1:80:e7:66:74:6e:22:36:16:3e:29: 16:5f:7c:eb:10:0f:3a:5b:3c:8a:75:25:57:53:df: da:a2:b3:b5:48:e8:0c:ed:7f:e5:e1:cf:ed:a5:8f: 48:19:3b:92:fd:20:22:68:8f:8b:d6:d1:0b:0d:31: 81:68:21:5f:36:68:e1:9a:56:16:0f:69:38:cd:3d: 7d:69:ef:be:63:fd:5c:65:e6:e5:d6:32:c7:a7:35: e7:c7:3a:71:e8:6b:3d:96:3c:cf:55:e0:ff:e6:54: 12:d9:4f:97:21:64:94:b9:5f:ba:1a:2f:25:9a:b2: b8:98:61:17:fb:9b:0e:1b:00:01:fd:a9:60:9b:39: fe:d4:30:4b:1e:b8:61:a6:7f:e2:9c:f6:e9:bc:87: 09:f0:74:c1:4e:ef:7d:0a:06:37:4b:cb:27:15:cc: e9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3F:C6:17:97:A9:BE:9C:3A:55:B2:24:5B:F0:5B:9D:1A:ED:12:EB X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:2e:52:82:67:31:a3:08:f2:08:3b:57:0f:5b:f8:06:39:eb: dc:e0:68:59:33:c7:d8:2e:b9:d0:65:49:d7:dd:eb:2c:21:d3: f2:fb:42:6f:a9:95:3a:c1:36:fa:6e:15:5e:5f:7d:07:ba:90: e2:c7:94:37:57:90:46:f6:f6:77:b2:ea:f3:78:f7:67:27:bb: 4c:84:27:44:de:e5:1e:7f:fa:b6:b5:35:58:64:b3:cc:83:49: 8f:67:93:36:df:b2:0a:77:32:11:64:50:25:5a:37:2d:99:4f: f5:71:a2:eb:b8:e0:52:a7:78:4d:5e:15:83:8e:81:c8:73:31: d0:1f:c9:6e:78:5d:1a:57:3e:60:5d:50:e8:49:17:ec:f1:88: a3:22:72:2f:70:2f:71:ec:0d:35:cb:54:15:8b:f3:83:d3:8d: 37:6c:db:34:d5:29:dd:21:5b:e0:b4:60:87:cf:e0:ec:dc:88: 43:93:d9:67:2b:90:25:1b:ea:28:65:37:00:de:cb:bd:bd:8f: 83:72:1f:a9:f3:74:e2:d0:16:8c:07:5d:dd:8b:73:4e:e8:38: e1:e0:69:55:b1:09:fd:62:ef:01:54:ec:60:ce:19:c3:79:40: 43:4a:72:23:de:f5:d8:65:11:15:4c:c0:2c:a7:86:37:a1:80: 28:78:1a:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x921R/K7nputO1gx5OVPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjUxMjIwMjIwMTA3WhcNMjUxMjIxMjIwMTA3WjAzMTEwLwYDVQQD EyhlNjNmYzYxNzk3YTliZTljM2E1NWIyMjQ1YmYwNWI5ZDFhZWQxMmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtrHMvcXnNqg4oQKfe9EXGbBVvWG vng4/IYyrGT28K+o/uOtWdevlO3rYNg4mbiYHW35vvmQZTC6x2fk1wW87OofwgFI aoRtwTvbgij77K6Uh+u9xWUavnsKWdPu8YDnZnRuIjYWPikWX3zrEA86WzyKdSVX U9/aorO1SOgM7X/l4c/tpY9IGTuS/SAiaI+L1tELDTGBaCFfNmjhmlYWD2k4zT19 ae++Y/1cZebl1jLHpzXnxzpx6Gs9ljzPVeD/5lQS2U+XIWSUuV+6Gi8lmrK4mGEX +5sOGwAB/algmzn+1DBLHrhhpn/inPbpvIcJ8HTBTu99CgY3S8snFczp/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOY/xheXqb6cOlWyJFvwW50a7RLrMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJS5Sgmcx owjyCDtXD1v4Bjnr3OBoWTPH2C650GVJ193rLCHT8vtCb6mVOsE2+m4VXl99B7qQ 4seUN1eQRvb2d7Lq83j3Zye7TIQnRN7lHn/6trU1WGSzzINJj2eTNt+yCncyEWRQ JVo3LZlP9XGi67jgUqd4TV4Vg46ByHMx0B/JbnhdGlc+YF1Q6EkX7PGIoyJyL3Av cewNNctUFYvzg9ONN2zbNNUp3SFb4LRgh8/g7NyIQ5PZZyuQJRvqKGU3AN7Lvb2P g3IfqfN04tAWjAdd3YtzTug44eBpVbEJ/WLvAVTsYM4Zw3lAQ0pyI9712GURFUzA LKeGN6GAKHgawg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:19:09 2025 by rpki-client