This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json) Hash identifier: XjWsg1LMYqYGu6/HlinMwIn0QCySqt7sFzq+Tuf9uAA= Subject key identifier: A6:D3:86:69:B8:8C:41:5E:06:2D:10:01:D2:8C:DF:36:42:48:B7:4A Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c Certificate serial: 019B2740AB89D5B4B184A488083598005F93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 13:01:48 +0000 Manifest this update: Tue 16 Dec 2025 13:01:48 +0000 Manifest next update: Wed 17 Dec 2025 13:01:48 +0000 Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=) 2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: NNfvlagkyvQ6FgWosQJrPRSn/zVnFm9XX56CtQH6C2k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 13:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:40:ab:89:d5:b4:b1:84:a4:88:08:35:98:00:5f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c Validity Not Before: Dec 16 13:01:48 2025 GMT Not After : Dec 17 13:01:48 2025 GMT Subject: CN=a6d38669b88c415e062d1001d28cdf364248b74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:1d:a8:72:41:94:da:79:94:15:f2:f6:cf: e5:e4:b9:53:79:df:3e:2f:5d:15:2f:b4:73:fa:e5: ee:79:40:93:b8:5f:5c:84:7c:00:6e:72:c5:b4:24: 84:cd:c4:27:8c:06:bb:e4:c1:d0:09:ab:d7:8c:a0: 3e:a4:cc:cf:be:bb:2a:ec:a2:b3:98:ea:99:2c:f8: 6d:df:c1:0b:5e:05:4b:9c:04:36:3c:c5:ca:68:2f: 94:5d:36:d3:c0:70:b1:e3:bb:86:0d:9c:41:52:09: 0f:05:02:74:23:b0:a5:31:81:82:be:fc:cd:2b:e0: c9:62:6f:42:f8:3b:5a:19:07:65:88:3b:43:04:0b: ea:e0:ca:d7:eb:00:2c:4b:86:46:29:03:85:71:60: af:94:1c:c3:aa:1c:cd:62:2a:d4:39:ce:63:8e:e7: c2:d1:7a:27:86:2a:97:f2:5d:b8:e6:51:36:d5:49: 3d:ea:72:67:6e:37:dd:42:b0:38:04:68:4e:5f:98: 0b:7b:fb:95:fd:93:a8:a5:0d:11:24:6c:7a:36:19: 36:ee:1c:28:af:28:44:40:8e:74:f1:c6:c8:1a:d8: 79:86:9a:ff:c0:65:f6:db:b6:54:38:e5:89:38:6d: d7:72:bd:84:95:41:43:2e:6b:ad:41:c7:ae:ba:5f: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D3:86:69:B8:8C:41:5E:06:2D:10:01:D2:8C:DF:36:42:48:B7:4A X509v3 Authority Key Identifier: keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c2:46:60:de:13:7b:0b:20:40:b9:1b:57:9b:23:be:fe:df: 0c:5c:08:d1:32:d1:46:4b:31:d1:cc:1e:83:26:4c:83:1f:da: d2:54:0c:f8:2a:d2:e2:ae:a0:7e:42:58:a4:fa:aa:c5:97:78: 0f:47:15:6b:de:cf:d1:37:a1:07:f5:99:88:8b:d5:46:4d:23: e0:66:0c:b5:61:1b:7b:62:d4:67:f6:c2:f7:70:8e:20:a4:ce: ac:8d:ff:2f:87:ae:64:55:f6:4c:89:1d:ef:02:6e:f7:6a:63: 3e:31:c2:b9:16:e2:c0:2d:a6:0a:7d:99:ea:2e:8b:5d:55:8e: 1d:ad:31:74:45:8b:4e:4a:33:33:c4:dd:70:3d:49:70:68:89: 5b:78:be:b2:c7:ea:92:40:3c:46:bc:ea:32:23:b1:49:b1:83: 65:96:cb:21:c5:2c:d2:c9:14:5f:ca:7e:87:f4:ff:e4:63:58: e7:05:98:27:99:8e:bb:fd:ff:c3:0c:82:18:56:02:74:6d:60: cd:5b:1d:74:c2:bd:ef:25:64:56:a6:39:3d:da:12:62:3a:31: 66:38:f6:c6:ab:bc:25:a1:7e:db:fc:6f:fb:e1:75:4b:70:98: 3c:28:b7:51:de:d4:76:44:4d:08:a6:bb:c3:46:87:bc:ea:b3: 34:db:33:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsnQKuJ1bSxhKSICDWYAF+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMDU0MDM2ZGFkMzJkMTdhOGM5MTZkYzJkZmJiM2NlOGEz NjQ1MmMwHhcNMjUxMjE2MTMwMTQ4WhcNMjUxMjE3MTMwMTQ4WjAzMTEwLwYDVQQD EyhhNmQzODY2OWI4OGM0MTVlMDYyZDEwMDFkMjhjZGYzNjQyNDhiNzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfEdqHJBlNp5lBXy9s/l5LlTed8+ L10VL7Rz+uXueUCTuF9chHwAbnLFtCSEzcQnjAa75MHQCavXjKA+pMzPvrsq7KKz mOqZLPht38ELXgVLnAQ2PMXKaC+UXTbTwHCx47uGDZxBUgkPBQJ0I7ClMYGCvvzN K+DJYm9C+DtaGQdliDtDBAvq4MrX6wAsS4ZGKQOFcWCvlBzDqhzNYirUOc5jjufC 0XonhiqX8l245lE21Uk96nJnbjfdQrA4BGhOX5gLe/uV/ZOopQ0RJGx6Nhk27hwo ryhEQI508cbIGth5hpr/wGX227ZUOOWJOG3Xcr2ElUFDLmutQceuul9/4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKbThmm4jEFeBi0QAdKM3zZCSLdKMB8GA1UdIwQY MBaAFK0FQDba0y0XqMkW3C37s86KNkUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0Yjgt OGUxNTE0Y2NhYTRhLzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0YjgtOGUxNTE0Y2NhYTRh LzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMJGYN4T ewsgQLkbV5sjvv7fDFwI0TLRRksx0cwegyZMgx/a0lQM+CrS4q6gfkJYpPqqxZd4 D0cVa97P0TehB/WZiIvVRk0j4GYMtWEbe2LUZ/bC93COIKTOrI3/L4euZFX2TIkd 7wJu92pjPjHCuRbiwC2mCn2Z6i6LXVWOHa0xdEWLTkozM8TdcD1JcGiJW3i+ssfq kkA8RrzqMiOxSbGDZZbLIcUs0skUX8p+h/T/5GNY5wWYJ5mOu/3/wwyCGFYCdG1g zVsddMK97yVkVqY5PdoSYjoxZjj2xqu8JaF+2/xv++F1S3CYPCi3Ud7UdkRNCKa7 w0aHvOqzNNszpw== -----END CERTIFICATE-----Generated at Tue Dec 16 23:13:53 2025 by rpki-client