This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft File: qagVvnVH64cOtfZB0w_mljdByOA.mft (raw, json) Hash identifier: kR2vzjsm9W4PssorQBSJz9zYw+s3FZnEpsQkXbvSvGM= Subject key identifier: 4D:6B:F5:A4:33:35:B4:F0:F9:E7:D3:5A:DD:F3:61:C0:CD:23:EE:36 Authority key identifier: A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 Certificate issuer: /CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Certificate serial: 019B4C28298D191BB2D749F121A39B1CF127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft Manifest number: 178F Signing time: Tue 23 Dec 2025 17:00:59 +0000 Manifest this update: Tue 23 Dec 2025 17:00:59 +0000 Manifest next update: Wed 24 Dec 2025 17:00:59 +0000 Files and hashes: 1: 2q99xK6_Y55DJ8twtidPEpKbMLI.roa (hash: 6B+AlnTFnPjLyFTrr9nsccgH4b2Zg0KTuMdqT3nd8bQ=) 2: CpAGaYd2l8fGo8vqA9rEzSn2JUw.roa (hash: PZfZ1+zaF0Gne48BiqHvjg73fyl9yH1GS45Ddth2ZI4=) 3: qagVvnVH64cOtfZB0w_mljdByOA.crl (hash: QPM2ocH4BFL2c4dqlXq+WVf/1e42q+SKKJUBk7xXzko=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:46:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4c:28:29:8d:19:1b:b2:d7:49:f1:21:a3:9b:1c:f1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9a815be7547eb870eb5f641d30fe6963741c8e0 Validity Not Before: Dec 23 17:00:59 2025 GMT Not After : Dec 24 17:00:59 2025 GMT Subject: CN=4d6bf5a43335b4f0f9e7d35addf361c0cd23ee36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1c:d6:fa:ed:c9:35:52:ee:ad:10:95:75:f0: 05:67:88:be:74:ed:07:b2:77:9a:87:87:75:e8:17: 92:35:64:84:fc:ef:23:ef:25:02:e8:97:a6:50:2d: 16:4a:67:e1:a5:5f:ae:34:38:4d:cb:61:fe:c7:cc: 29:98:15:18:5f:8e:e4:db:98:df:97:48:23:4b:17: b4:21:60:5b:71:dc:a3:26:75:9c:ff:d6:de:4e:5f: 67:ba:4d:2f:11:c3:6b:db:b7:45:65:87:15:9f:4f: 14:9e:a8:18:cd:25:b5:76:ba:61:37:1d:ad:78:8a: 15:df:18:70:51:85:36:5c:3d:f6:a2:85:63:1b:f0: 8f:ea:ae:3b:c4:00:35:df:4c:25:e4:e0:d3:5c:fd: 61:56:1e:a8:18:47:2a:28:e7:f8:98:4f:48:fb:73: 6e:76:f2:0e:94:9d:21:02:09:fa:2c:e8:4c:aa:9a: eb:28:a5:13:6f:84:05:ec:71:b1:d1:5a:3b:f5:03: 2d:54:6b:21:f8:e9:80:cd:d3:21:a4:cf:ab:19:86: 74:61:27:9c:d4:f7:43:9e:c0:92:46:6e:05:71:4b: e7:ea:26:37:70:03:f6:e8:c5:bf:9a:04:c7:67:d3: a7:52:f7:6d:b6:c2:ad:49:3b:fb:c3:60:33:df:c2: 5a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6B:F5:A4:33:35:B4:F0:F9:E7:D3:5A:DD:F3:61:C0:CD:23:EE:36 X509v3 Authority Key Identifier: keyid:A9:A8:15:BE:75:47:EB:87:0E:B5:F6:41:D3:0F:E6:96:37:41:C8:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qagVvnVH64cOtfZB0w_mljdByOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fe3f3e-e187-4a12-aa9a-243c5f4e2e40/1/qagVvnVH64cOtfZB0w_mljdByOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:f2:6f:c9:37:cf:1c:a6:a6:df:64:e8:b8:7b:23:a3:c3:93: b7:15:67:ce:a1:1f:b4:83:44:61:1f:b3:83:9a:b3:34:a6:d7: bc:40:5a:97:eb:d0:ff:22:b0:90:3a:c6:2c:6c:51:20:6a:c3: 40:d5:1c:34:49:db:ef:a7:2b:15:2c:77:e4:fc:a1:f3:61:c9: 1c:fe:9d:78:3d:5d:23:67:3d:12:ea:b8:70:1d:54:73:2c:29: d9:e8:5a:8c:ca:f5:6b:46:72:c5:6a:9e:9c:23:33:5d:ad:2a: d1:0f:76:b8:fb:b2:9e:57:be:63:62:37:c3:b5:7c:ad:b4:36: 73:c1:35:5a:6a:35:ec:9f:9f:f8:7e:db:9b:46:7a:0d:82:53: d1:c9:34:aa:d1:35:3e:c3:28:ea:b4:66:30:a3:51:d0:e0:12: c4:5f:70:b0:d3:58:95:7a:c1:9d:e3:8f:0b:d5:bc:b5:3c:f4: 2c:ee:f1:00:d6:19:a4:4a:88:ec:5b:bf:85:39:2a:55:47:0d: bb:13:7d:65:cb:6c:43:69:fb:63:12:6e:e5:0a:c3:a8:6b:92: c7:ea:cb:3f:d6:e3:cf:1c:fa:d5:cb:45:fa:a2:b5:e0:c1:4b: 88:2a:9a:fc:fb:c7:47:18:88:d9:d9:ac:f9:d1:b8:a0:65:0d: ab:99:47:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtMKCmNGRuy10nxIaObHPEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5YTgxNWJlNzU0N2ViODcwZWI1ZjY0MWQzMGZlNjk2Mzc0 MWM4ZTAwHhcNMjUxMjIzMTcwMDU5WhcNMjUxMjI0MTcwMDU5WjAzMTEwLwYDVQQD Eyg0ZDZiZjVhNDMzMzViNGYwZjllN2QzNWFkZGYzNjFjMGNkMjNlZTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxzW+u3JNVLurRCVdfAFZ4i+dO0H sneah4d16BeSNWSE/O8j7yUC6JemUC0WSmfhpV+uNDhNy2H+x8wpmBUYX47k25jf l0gjSxe0IWBbcdyjJnWc/9beTl9nuk0vEcNr27dFZYcVn08UnqgYzSW1drphNx2t eIoV3xhwUYU2XD32ooVjG/CP6q47xAA130wl5ODTXP1hVh6oGEcqKOf4mE9I+3Nu dvIOlJ0hAgn6LOhMqprrKKUTb4QF7HGx0Vo79QMtVGsh+OmAzdMhpM+rGYZ0YSec 1PdDnsCSRm4FcUvn6iY3cAP26MW/mgTHZ9OnUvdttsKtSTv7w2Az38JaPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1r9aQzNbTw+efTWt3zYcDNI+42MB8GA1UdIwQY MBaAFKmoFb51R+uHDrX2QdMP5pY3QcjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEt MjQzYzVmNGUyZTQwLzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZTNmM2UtZTE4Ny00YTEyLWFhOWEtMjQzYzVmNGUyZTQw LzEvcWFnVnZuVkg2NGNPdGZaQjB3X21samRCeU9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvPJvyTfP HKam32TouHsjo8OTtxVnzqEftINEYR+zg5qzNKbXvEBal+vQ/yKwkDrGLGxRIGrD QNUcNEnb76crFSx35Pyh82HJHP6deD1dI2c9Euq4cB1Ucywp2ehajMr1a0ZyxWqe nCMzXa0q0Q92uPuynle+Y2I3w7V8rbQ2c8E1Wmo17J+f+H7bm0Z6DYJT0ck0qtE1 PsMo6rRmMKNR0OASxF9wsNNYlXrBneOPC9W8tTz0LO7xANYZpEqI7Fu/hTkqVUcN uxN9ZctsQ2n7YxJu5QrDqGuSx+rLP9bjzxz61ctF+qK14MFLiCqa/PvHRxiI2dms +dG4oGUNq5lHEA== -----END CERTIFICATE-----Generated at Wed Dec 24 00:30:09 2025 by rpki-client