This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json) Hash identifier: +flNJUBTDNLGDdkTswPkVxQRLdYlqFz0nx1rYECaBZM= Subject key identifier: DF:A0:51:0C:FE:99:4D:27:F9:A3:98:70:09:39:96:E9:8E:8C:C3:B5 Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Certificate serial: 019B4627814DD6F60786194FB1EF1D655F99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft Manifest number: 178C Signing time: Mon 22 Dec 2025 13:02:32 +0000 Manifest this update: Mon 22 Dec 2025 13:02:32 +0000 Manifest next update: Tue 23 Dec 2025 13:02:32 +0000 Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: oqvABVqgp3KUoYSEWsVzH4Op/h7yqrsDcbSrl0iaIAg=) 2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=) 3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:81:4d:d6:f6:07:86:19:4f:b1:ef:1d:65:5f:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Validity Not Before: Dec 22 13:02:32 2025 GMT Not After : Dec 23 13:02:32 2025 GMT Subject: CN=dfa0510cfe994d27f9a39870093996e98e8cc3b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:d5:7c:0d:71:ec:11:c3:84:aa:c8:d8:c6: 7d:0e:19:95:d1:50:68:8e:e7:a0:ae:28:cb:79:1d: 5a:99:d1:46:8e:45:27:62:37:ce:05:19:5b:35:ac: 9e:8d:7d:85:4e:57:51:94:74:cd:41:32:67:5d:7c: fd:91:d6:19:2a:ce:9c:fd:02:55:62:ca:ed:4c:a5: 88:90:56:b2:32:fc:d8:76:e2:ce:2d:81:cd:52:92: 1d:a5:35:0d:5f:8d:e0:7b:1b:e0:fb:47:d7:dc:4d: d8:3a:64:33:2b:b4:6c:85:48:b5:06:fe:90:90:12: 69:8a:a7:59:9a:2b:58:6e:76:ec:0c:d4:bf:72:7a: ac:29:86:3f:97:7c:85:37:98:73:ad:5f:77:b5:b9: 9f:1b:06:9c:f9:c6:14:4f:62:0e:d5:9e:bb:c7:a0: ef:75:bc:aa:04:61:b5:84:38:e0:c2:dc:cd:3d:a1: 72:cb:eb:79:d3:ce:0d:01:34:b4:61:2b:f9:3c:1b: 26:61:ab:ca:10:87:50:cd:c0:d0:f9:ce:ed:e1:f7: 95:60:13:93:97:e0:cc:1d:92:f7:b4:f6:2e:b4:57: 85:8b:96:b2:cf:5f:48:b5:f8:8c:58:9a:ba:4f:56: 6a:fd:f0:35:ff:1e:ee:12:d8:af:42:4a:b7:df:bd: 2a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:A0:51:0C:FE:99:4D:27:F9:A3:98:70:09:39:96:E9:8E:8C:C3:B5 X509v3 Authority Key Identifier: keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:9a:f4:7a:6e:e0:11:b7:5f:c0:5a:34:a6:55:e9:f9:ec:98: ae:94:78:cd:46:86:73:d9:4b:d5:5e:7c:1b:4c:7a:90:2c:1a: a3:ef:96:42:da:d8:fc:ce:f7:05:82:b5:93:87:89:c5:6b:42: a0:1d:1d:64:c4:36:14:c2:dc:49:59:55:de:a9:0f:3b:22:71: 82:37:11:6b:b8:bb:79:49:92:74:4c:1d:72:77:2b:01:45:8d: 47:19:1a:dc:6c:d4:05:05:eb:75:4a:1a:21:6f:2e:c7:21:22: 0d:27:32:87:a8:b6:ba:77:b8:9b:2e:5d:a2:bb:03:f3:17:90: f2:3c:bc:6f:06:b9:02:3e:2f:c5:0f:91:07:90:92:88:fe:e1: 9e:34:a4:6d:c2:ac:a7:88:90:5d:9c:9c:ea:af:38:6d:68:fd: 5d:d1:5e:ff:15:ca:47:dd:66:ef:31:ae:9a:1a:73:b5:52:2f: 08:73:bb:7e:bb:cc:6a:ce:52:70:c4:86:e5:ea:ee:b9:fc:8b: 14:31:bf:91:9b:6a:8b:c4:03:6d:f5:44:f4:f6:78:e3:96:91: 0f:d5:dd:f7:b6:23:2d:9d:ea:6b:3a:7f:96:17:54:24:c4:0b: b0:59:7f:91:b2:d4:ee:fc:00:20:09:70:95:bd:e6:9a:5c:a7: fe:59:fc:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ4FN1vYHhhlPse8dZV+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMGQ1YjMwYjQ2YzdiOTdiMmRiYzQ1ODljZWEzNjIyYWQ3 NTYxNTYwHhcNMjUxMjIyMTMwMjMyWhcNMjUxMjIzMTMwMjMyWjAzMTEwLwYDVQQD EyhkZmEwNTEwY2ZlOTk0ZDI3ZjlhMzk4NzAwOTM5OTZlOThlOGNjM2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyorVfA1x7BHDhKrI2MZ9DhmV0VBo juegrijLeR1amdFGjkUnYjfOBRlbNayejX2FTldRlHTNQTJnXXz9kdYZKs6c/QJV YsrtTKWIkFayMvzYduLOLYHNUpIdpTUNX43gexvg+0fX3E3YOmQzK7RshUi1Bv6Q kBJpiqdZmitYbnbsDNS/cnqsKYY/l3yFN5hzrV93tbmfGwac+cYUT2IO1Z67x6Dv dbyqBGG1hDjgwtzNPaFyy+t5084NATS0YSv5PBsmYavKEIdQzcDQ+c7t4feVYBOT l+DMHZL3tPYutFeFi5ayz19ItfiMWJq6T1Zq/fA1/x7uEtivQkq3370q+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN+gUQz+mU0n+aOYcAk5lumOjMO1MB8GA1UdIwQY MBaAFNENWzC0bHuXstvEWJzqNiKtdWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUt M2U0MGQwMTc0MGIyLzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUtM2U0MGQwMTc0MGIy LzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiJr0em7g EbdfwFo0plXp+eyYrpR4zUaGc9lL1V58G0x6kCwao++WQtrY/M73BYK1k4eJxWtC oB0dZMQ2FMLcSVlV3qkPOyJxgjcRa7i7eUmSdEwdcncrAUWNRxka3GzUBQXrdUoa IW8uxyEiDScyh6i2une4my5dorsD8xeQ8jy8bwa5Aj4vxQ+RB5CSiP7hnjSkbcKs p4iQXZyc6q84bWj9XdFe/xXKR91m7zGumhpztVIvCHO7frvMas5ScMSG5eruufyL FDG/kZtqi8QDbfVE9PZ445aRD9Xd97YjLZ3qazp/lhdUJMQLsFl/kbLU7vwAIAlw lb3mmlyn/ln8Vw== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:31 2025 by rpki-client