This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json) Hash identifier: 9fRjG70aeS4i23CaRx03SbrfB8i3iPcL+kSfY3TJR2g= Subject key identifier: 04:6E:BC:E1:1C:9D:0B:8E:CF:29:61:D5:1F:9F:8B:BE:1B:EE:95:7F Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Certificate serial: 019B40C8F72590ED102815FC368400402AA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft Manifest number: 0C3D Signing time: Sun 21 Dec 2025 12:01:10 +0000 Manifest this update: Sun 21 Dec 2025 12:01:10 +0000 Manifest next update: Mon 22 Dec 2025 12:01:10 +0000 Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=) 2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: DYtOp4Xh1LkZihMuQYV52O+BqxknC5R3exeiVO46em4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 12:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:c8:f7:25:90:ed:10:28:15:fc:36:84:00:40:2a:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Validity Not Before: Dec 21 12:01:10 2025 GMT Not After : Dec 22 12:01:10 2025 GMT Subject: CN=046ebce11c9d0b8ecf2961d51f9f8bbe1bee957f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d2:3b:3e:90:18:99:5d:f8:fc:23:5d:a1:3c: 06:bb:6d:86:51:57:24:67:85:20:de:0b:4d:26:7f: 1f:99:4a:fd:b1:e3:dc:eb:84:d4:11:42:8f:e3:2f: 79:b3:ee:f8:8f:c6:0e:c6:69:d0:44:a2:50:f5:d4: 30:5b:ae:2f:4e:53:1e:d2:e1:34:bf:dc:e6:82:7a: 1a:e8:c6:6d:a3:14:1f:1e:19:50:f9:50:c2:f9:06: ab:31:32:bb:28:87:1c:3c:2b:99:63:40:fa:01:ac: 7b:86:db:33:c6:86:1c:4e:64:5a:2a:94:a3:99:0b: 31:1e:79:1c:b4:de:c7:a6:87:4c:07:31:1b:00:de: 63:49:cf:c9:d9:3a:9f:03:43:6b:a2:dd:c8:0f:45: a2:4f:91:f5:b8:2d:ab:52:b1:fe:5e:4d:e2:8a:8b: ed:41:4d:d4:82:01:ff:d5:12:e7:be:10:65:6b:b5: 62:df:28:31:8a:b4:e7:a1:f4:5c:a7:29:36:3c:f5: e1:ea:ce:a8:1c:ed:18:1f:df:48:bf:31:20:fe:cf: 9a:de:de:13:10:4c:f0:54:36:8c:a6:30:c8:a5:d0: 6d:64:31:78:8f:17:58:d8:c4:42:4f:9b:71:50:d1: 03:04:10:ac:51:1f:98:ed:9d:4c:1c:52:d6:41:d7: 4c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6E:BC:E1:1C:9D:0B:8E:CF:29:61:D5:1F:9F:8B:BE:1B:EE:95:7F X509v3 Authority Key Identifier: keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:34:e4:64:6b:82:1d:54:92:46:12:84:4c:d7:f1:45:09:99: 75:e0:e1:68:cb:f4:95:2a:c5:21:fe:73:e5:99:f8:8a:a6:19: c9:0b:82:af:eb:4f:b8:31:bf:01:1f:73:4e:81:7e:36:5f:ab: 3a:4b:8b:34:4e:a4:d2:35:01:5c:85:88:2c:c7:85:68:ec:69: 66:c7:78:7d:e2:a6:22:6c:26:42:d4:ba:8b:8e:1b:e9:36:b6: f2:50:26:c4:22:65:30:44:9b:e4:c5:94:9c:01:4a:90:71:0a: 50:93:e6:e9:fa:b3:04:37:34:4d:d8:bb:b6:24:25:09:61:27: fb:aa:b0:fd:b6:f0:fb:d8:04:5a:f2:ce:39:03:46:03:f6:b1: 2a:58:c1:74:a2:e5:d6:5c:ec:00:1a:ca:45:36:a7:98:f1:da: d2:a3:9f:39:19:24:7a:f6:3f:41:47:63:34:1c:08:27:e3:40: e8:68:02:18:ae:ff:cf:ee:3c:aa:de:22:0b:d9:5b:4f:dc:97: 82:5c:4c:d7:45:8a:0a:8d:76:67:ce:c0:8f:87:d8:24:25:f8: f2:09:96:b1:88:21:21:1e:fb:b7:08:64:aa:46:78:a1:8d:f1: eb:3c:ee:3a:d7:8b:dc:8c:02:5b:71:3d:95:43:75:03:c8:5c: c5:ab:93:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAyPclkO0QKBX8NoQAQCqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDNiMWRkNDEwMDcwYWQ2MmU0YTJmYzY2YTEzYjRlYjYx MzY4ZjQwHhcNMjUxMjIxMTIwMTEwWhcNMjUxMjIyMTIwMTEwWjAzMTEwLwYDVQQD EygwNDZlYmNlMTFjOWQwYjhlY2YyOTYxZDUxZjlmOGJiZTFiZWU5NTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09I7PpAYmV34/CNdoTwGu22GUVck Z4Ug3gtNJn8fmUr9sePc64TUEUKP4y95s+74j8YOxmnQRKJQ9dQwW64vTlMe0uE0 v9zmgnoa6MZtoxQfHhlQ+VDC+QarMTK7KIccPCuZY0D6Aax7htszxoYcTmRaKpSj mQsxHnkctN7HpodMBzEbAN5jSc/J2TqfA0Nrot3ID0WiT5H1uC2rUrH+Xk3iiovt QU3UggH/1RLnvhBla7Vi3ygxirTnofRcpyk2PPXh6s6oHO0YH99IvzEg/s+a3t4T EEzwVDaMpjDIpdBtZDF4jxdY2MRCT5txUNEDBBCsUR+Y7Z1MHFLWQddM+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARuvOEcnQuOzylh1R+fi74b7pV/MB8GA1UdIwQY MBaAFKUDsd1BAHCtYuSi/GahO062E2j0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjct MDEzNWQ5MTI4ZTg2LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjctMDEzNWQ5MTI4ZTg2 LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvDTkZGuC HVSSRhKETNfxRQmZdeDhaMv0lSrFIf5z5Zn4iqYZyQuCr+tPuDG/AR9zToF+Nl+r OkuLNE6k0jUBXIWILMeFaOxpZsd4feKmImwmQtS6i44b6Ta28lAmxCJlMESb5MWU nAFKkHEKUJPm6fqzBDc0Tdi7tiQlCWEn+6qw/bbw+9gEWvLOOQNGA/axKljBdKLl 1lzsABrKRTanmPHa0qOfORkkevY/QUdjNBwIJ+NA6GgCGK7/z+48qt4iC9lbT9yX glxM10WKCo12Z87Aj4fYJCX48gmWsYghIR77twhkqkZ4oY3x6zzuOteL3IwCW3E9 lUN1A8hcxauTaQ== -----END CERTIFICATE-----Generated at Sun Dec 21 20:35:45 2025 by rpki-client