This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json) Hash identifier: //hZ/SNkcJz0TTp8+YDvyzqWApfNdyYuu1E/NhSGDYE= Subject key identifier: 24:F6:72:85:BE:FA:0F:72:EC:AD:BF:03:B5:8B:6F:81:83:08:0A:80 Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Certificate serial: 019B3EDA59549FE16D73461AD0FEFC115856 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft Manifest number: 178B Signing time: Sun 21 Dec 2025 03:00:55 +0000 Manifest this update: Sun 21 Dec 2025 03:00:55 +0000 Manifest next update: Mon 22 Dec 2025 03:00:55 +0000 Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: g7RY9K4w1MOfxBx3fOHmHjYjuP8feZG2jIF6oVsyIts=) 2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:59:54:9f:e1:6d:73:46:1a:d0:fe:fc:11:58:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Validity Not Before: Dec 21 03:00:55 2025 GMT Not After : Dec 22 03:00:55 2025 GMT Subject: CN=24f67285befa0f72ecadbf03b58b6f8183080a80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7c:8e:a6:63:70:2b:75:98:74:42:d0:57:bf: cc:d1:9e:cf:08:2d:c3:06:eb:6b:7e:9f:68:b4:c8: d8:ab:d0:61:c3:b2:ba:58:16:4c:b0:25:c5:7f:b3: 42:5b:59:b3:5d:2b:0f:45:0f:18:f2:da:8e:f7:e4: d6:d2:2d:6a:e4:54:56:e8:d2:e2:9e:b3:08:c6:29: 7d:1a:2f:bb:a2:b2:fb:19:c8:ba:07:10:55:0e:f4: 55:a1:61:e6:17:ac:80:ea:75:6e:bd:bc:16:4c:98: be:24:1d:29:84:55:4e:1f:74:2d:84:5d:e3:b9:a4: 0b:a3:3b:af:45:ff:2e:5b:23:3c:de:d8:53:63:39: a9:3d:49:c6:44:fd:ac:84:2b:27:0e:d9:88:6f:a5: 14:73:7c:e0:a2:e4:a2:4e:cb:8e:af:d3:4f:90:62: c5:cc:d8:5e:0c:22:86:b8:2c:3d:62:9e:9b:92:c3: c3:25:3c:01:29:f1:9b:41:65:c5:48:7a:65:79:75: a3:21:ed:63:b7:ee:94:37:6e:e6:9d:b6:03:8b:fc: c7:d8:69:0c:16:2d:58:55:8c:c7:f2:0b:f0:11:93: bb:52:ba:de:53:7e:7f:63:98:57:c3:b3:34:2f:b0: 6f:95:31:6d:43:40:3d:7c:6b:f7:14:4c:73:c3:ea: 45:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F6:72:85:BE:FA:0F:72:EC:AD:BF:03:B5:8B:6F:81:83:08:0A:80 X509v3 Authority Key Identifier: keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:92:71:d7:d7:da:f9:0f:ac:37:78:53:e7:a3:82:e7:b3:81: a1:62:6d:6f:eb:80:1c:4d:da:d5:91:21:2c:9e:65:54:7d:5e: 3c:29:27:59:a1:60:30:bc:b4:96:07:33:f7:18:2d:85:0d:3b: 09:b6:12:e0:2c:80:a3:bd:4c:f2:ce:ef:54:78:78:66:fd:1c: c5:44:2a:fc:16:36:ea:d8:49:64:a1:ca:95:29:0e:3d:66:7a: 62:7d:0a:0c:cd:0f:a2:6f:b7:34:20:51:15:c2:71:41:34:d8: 7c:dd:d5:0c:0f:1d:ef:49:a8:aa:40:12:ee:a1:c5:9c:b2:96: 5e:aa:fc:27:56:b1:80:bf:7b:24:49:77:94:9d:dc:3d:34:65: c8:e0:e9:ba:10:62:b2:62:1a:ee:5c:39:c6:67:29:a6:69:9f: 94:ae:05:6f:9d:aa:3e:35:66:3c:ae:61:e0:66:cc:27:77:81: 0f:67:e0:e6:2d:12:87:dc:8f:18:ad:e5:02:ec:99:b5:c7:c2: 84:8b:a9:15:e8:07:d4:c1:ae:8a:3f:a9:56:ab:0d:56:9d:45: 9d:f1:06:3d:13:52:f5:25:80:82:85:e1:af:9d:26:f0:84:0e: f6:dc:f4:ed:b5:f1:32:d4:db:74:62:eb:77:1d:d0:ba:87:3b: 95:6f:2f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2llUn+Ftc0Ya0P78EVhWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1 YWM0ZDQwHhcNMjUxMjIxMDMwMDU1WhcNMjUxMjIyMDMwMDU1WjAzMTEwLwYDVQQD EygyNGY2NzI4NWJlZmEwZjcyZWNhZGJmMDNiNThiNmY4MTgzMDgwYTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnyOpmNwK3WYdELQV7/M0Z7PCC3D Butrfp9otMjYq9Bhw7K6WBZMsCXFf7NCW1mzXSsPRQ8Y8tqO9+TW0i1q5FRW6NLi nrMIxil9Gi+7orL7Gci6BxBVDvRVoWHmF6yA6nVuvbwWTJi+JB0phFVOH3QthF3j uaQLozuvRf8uWyM83thTYzmpPUnGRP2shCsnDtmIb6UUc3zgouSiTsuOr9NPkGLF zNheDCKGuCw9Yp6bksPDJTwBKfGbQWXFSHpleXWjIe1jt+6UN27mnbYDi/zH2GkM Fi1YVYzH8gvwEZO7UrreU35/Y5hXw7M0L7BvlTFtQ0A9fGv3FExzw+pFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCT2coW++g9y7K2/A7WLb4GDCAqAMB8GA1UdIwQY MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt ZWY3ZjU2ODQyNTQ2LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2 LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpJx19fa +Q+sN3hT56OC57OBoWJtb+uAHE3a1ZEhLJ5lVH1ePCknWaFgMLy0lgcz9xgthQ07 CbYS4CyAo71M8s7vVHh4Zv0cxUQq/BY26thJZKHKlSkOPWZ6Yn0KDM0Pom+3NCBR FcJxQTTYfN3VDA8d70moqkAS7qHFnLKWXqr8J1axgL97JEl3lJ3cPTRlyODpuhBi smIa7lw5xmcppmmflK4Fb52qPjVmPK5h4GbMJ3eBD2fg5i0Sh9yPGK3lAuyZtcfC hIupFegH1MGuij+pVqsNVp1FnfEGPRNS9SWAgoXhr50m8IQO9tz07bXxMtTbdGLr dx3Quoc7lW8vmg== -----END CERTIFICATE-----Generated at Sun Dec 21 10:21:08 2025 by rpki-client