This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft File: mQqAlo5MlgPKKxPdHRRlll2PPb8.mft (raw, json) Hash identifier: 0JktZ/J1pJ3FcKSWJl+C+NU9YGRxA8n3R9J3CrSj4sI= Subject key identifier: F1:06:57:B9:42:A5:15:C2:C4:DC:7D:CA:C3:3B:6F:FA:10:E2:36:D0 Authority key identifier: 99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF Certificate issuer: /CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf Certificate serial: 019B74ED6C491DEAAF883551F0CCC7054919 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft Manifest number: 17A6 Signing time: Wed 31 Dec 2025 15:01:15 +0000 Manifest this update: Wed 31 Dec 2025 15:01:15 +0000 Manifest next update: Thu 01 Jan 2026 15:01:15 +0000 Files and hashes: 1: Hcqbxc0FBGXnzzN6vZTEDk24h2s.roa (hash: 17n/7XCLJpAu2o2kBzK/5NmH6Sp4FBInaBa6mT4JmYc=) 2: W1ibYg0ozN5f0hkwbRX6gypQu6o.roa (hash: Q9hgjCdv4TipN26ttaTBJrYXDexn3QBOgW7gbPj7Hi8=) 3: mQqAlo5MlgPKKxPdHRRlll2PPb8.crl (hash: d8ZMEXiJ5BjU1tDm1afhWG6PcNpwXa4KxmkjVCtqweo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Jan 2026 15:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:74:ed:6c:49:1d:ea:af:88:35:51:f0:cc:c7:05:49:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=990a80968e4c9603ca2b13dd1d1465965d8f3dbf Validity Not Before: Dec 31 15:01:15 2025 GMT Not After : Jan 1 15:01:15 2026 GMT Subject: CN=f10657b942a515c2c4dc7dcac33b6ffa10e236d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:54:47:43:c3:ba:59:d4:2e:87:ee:6e:71:6b: 8b:48:c1:67:7b:ea:e9:34:b9:9a:7a:43:8e:f1:5b: cd:1e:b9:95:92:2a:e3:02:6b:75:33:ba:49:1d:30: 55:85:08:19:52:ba:77:99:6a:f9:2b:7d:77:87:40: 15:68:f6:fe:f0:5b:29:8f:ea:fa:ec:8b:14:79:b5: db:42:1f:31:f6:07:e7:f5:ae:67:f1:19:3d:a7:ad: 49:f2:0f:5f:e5:14:69:c6:6c:73:9a:bb:5a:0d:20: ad:21:38:02:d8:39:f5:ef:d7:3a:0f:0f:33:7c:de: 06:9d:fe:59:7d:16:fc:9a:9f:d4:cd:72:b5:dd:9e: 79:d1:4a:05:f9:67:90:f8:27:43:9a:9b:2d:f4:db: 0c:51:be:c4:ca:16:6e:45:1f:6a:ab:8d:70:40:bd: f8:b4:2d:55:6e:c3:f4:31:aa:1a:a2:4f:13:9f:e8: 83:82:63:c5:9a:b4:da:8e:00:52:fb:11:5c:99:cc: 11:d9:a3:d2:02:fc:d0:ec:a1:30:1e:06:0d:db:21: 1f:7e:1d:ff:dd:48:d1:5c:b2:70:4f:42:4d:28:b0: 41:fd:aa:9f:3d:30:26:bf:56:05:f4:10:cb:dc:60: 0e:1a:eb:91:8a:5f:8a:59:b1:3a:21:3d:5f:a8:7f: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:06:57:B9:42:A5:15:C2:C4:DC:7D:CA:C3:3B:6F:FA:10:E2:36:D0 X509v3 Authority Key Identifier: keyid:99:0A:80:96:8E:4C:96:03:CA:2B:13:DD:1D:14:65:96:5D:8F:3D:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQqAlo5MlgPKKxPdHRRlll2PPb8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/61a0a9-c466-469c-afbe-8fed50909770/1/mQqAlo5MlgPKKxPdHRRlll2PPb8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9f:6e:4e:8e:b2:0e:a2:61:82:77:eb:50:aa:d3:d2:83:3c: 62:75:3e:a1:ad:f0:f6:b7:37:a9:4b:1a:8d:4f:65:58:bf:88: cd:d7:ac:0b:25:29:a6:94:c8:98:cb:c1:79:1b:25:98:5b:f8: fa:46:47:76:fa:a6:2b:c4:5e:73:86:e4:bf:ab:07:2d:83:f6: cf:96:20:58:ec:05:6c:44:bf:aa:84:06:e9:43:a7:85:d0:b4: fe:3e:b5:0d:d5:b9:44:a3:d0:89:3e:c9:b1:c2:fe:b0:ef:a5: 85:0b:11:dc:20:89:6a:04:23:15:27:da:ca:3b:c9:df:99:02: 75:28:26:10:99:25:4c:b4:b5:42:5f:31:3f:00:65:79:e2:20: df:c0:e7:94:f6:ee:42:6a:18:40:b7:17:e7:f3:5a:9f:cc:07: 61:51:d1:5d:a8:15:97:54:98:27:5f:52:43:f6:b4:5e:c8:52: 05:a3:27:40:28:5a:89:8a:49:78:4c:60:8a:6d:6e:99:46:eb: 9d:7e:36:ae:32:b4:4a:27:3f:03:82:7a:aa:8b:63:63:0d:5c: f9:c9:68:8a:2a:b6:5f:df:cb:f9:2e:86:f4:91:56:f3:28:55: 92:85:93:74:ba:4e:4c:22:92:d7:99:2c:b5:24:03:67:12:d5: cb:05:ae:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt07WxJHeqviDVR8MzHBUkZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MGE4MDk2OGU0Yzk2MDNjYTJiMTNkZDFkMTQ2NTk2NWQ4 ZjNkYmYwHhcNMjUxMjMxMTUwMTE1WhcNMjYwMTAxMTUwMTE1WjAzMTEwLwYDVQQD EyhmMTA2NTdiOTQyYTUxNWMyYzRkYzdkY2FjMzNiNmZmYTEwZTIzNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllRHQ8O6WdQuh+5ucWuLSMFne+rp NLmaekOO8VvNHrmVkirjAmt1M7pJHTBVhQgZUrp3mWr5K313h0AVaPb+8Fspj+r6 7IsUebXbQh8x9gfn9a5n8Rk9p61J8g9f5RRpxmxzmrtaDSCtITgC2Dn179c6Dw8z fN4Gnf5ZfRb8mp/UzXK13Z550UoF+WeQ+CdDmpst9NsMUb7EyhZuRR9qq41wQL34 tC1VbsP0Maoaok8Tn+iDgmPFmrTajgBS+xFcmcwR2aPSAvzQ7KEwHgYN2yEffh3/ 3UjRXLJwT0JNKLBB/aqfPTAmv1YF9BDL3GAOGuuRil+KWbE6IT1fqH+o6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEGV7lCpRXCxNx9ysM7b/oQ4jbQMB8GA1UdIwQY MBaAFJkKgJaOTJYDyisT3R0UZZZdjz2/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUt OGZlZDUwOTA5NzcwLzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82MWEwYTktYzQ2Ni00NjljLWFmYmUtOGZlZDUwOTA5Nzcw LzEvbVFxQWxvNU1sZ1BLS3hQZEhSUmxsbDJQUGI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFp9uTo6y DqJhgnfrUKrT0oM8YnU+oa3w9rc3qUsajU9lWL+IzdesCyUpppTImMvBeRslmFv4 +kZHdvqmK8Rec4bkv6sHLYP2z5YgWOwFbES/qoQG6UOnhdC0/j61DdW5RKPQiT7J scL+sO+lhQsR3CCJagQjFSfayjvJ35kCdSgmEJklTLS1Ql8xPwBleeIg38DnlPbu QmoYQLcX5/Nan8wHYVHRXagVl1SYJ19SQ/a0XshSBaMnQChaiYpJeExgim1umUbr nX42rjK0Sic/A4J6qotjYw1c+cloiiq2X9/L+S6G9JFW8yhVkoWTdLpOTCKS15ks tSQDZxLVywWuqA== -----END CERTIFICATE-----Generated at Wed Dec 31 21:08:25 2025 by rpki-client