This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft File: qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft (raw, json) Hash identifier: dBPJM9o84xf+Rk+ajK0Q/5Vz3OmV65au2xCqNccSsLk= Subject key identifier: 57:DC:B5:21:5E:89:F3:13:F5:79:E7:EC:34:3F:FB:D3:A6:64:F4:B9 Authority key identifier: AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 Certificate issuer: /CN=aa8551e851e69db165c6c632af45f21715512939 Certificate serial: 019B4BBA3FC62304D3B43EE55A61E0DA7CFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft Manifest number: 155F Signing time: Tue 23 Dec 2025 15:00:55 +0000 Manifest this update: Tue 23 Dec 2025 15:00:55 +0000 Manifest next update: Wed 24 Dec 2025 15:00:55 +0000 Files and hashes: 1: 1-3qrdz_tzhFoK7Ucjl6tCL0s2OM.roa (hash: kxTjIhZmXXDDNlqbd3Q2+gkjPCT2RJ+wWhOvQVmko/I=) 2: CvzVIxPE_Xl1M87JmAYQt0uyDD8.roa (hash: 2wAD/UrmgnStcRFk04oSlNoJEw3MlH57DosRki5ZylE=) 3: qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl (hash: wljAI8MkHYe4pw2CfHTaINlluqOJ/AMO0BrJK9uO2tQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4b:ba:3f:c6:23:04:d3:b4:3e:e5:5a:61:e0:da:7c:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa8551e851e69db165c6c632af45f21715512939 Validity Not Before: Dec 23 15:00:55 2025 GMT Not After : Dec 24 15:00:55 2025 GMT Subject: CN=57dcb5215e89f313f579e7ec343ffbd3a664f4b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c1:82:1d:36:6f:d5:c9:4b:fc:a2:27:b4:55: 7a:1d:36:d8:51:46:fd:ba:6d:31:58:5b:88:ec:29: 23:32:3a:b4:42:9e:71:43:b3:4d:3b:84:ec:76:c1: 9d:59:ef:54:be:bc:61:f0:db:a9:7c:09:d4:5c:a3: f0:ed:f4:0c:1f:bc:6a:36:99:13:ab:25:a8:23:47: d2:ee:b0:91:12:0a:7d:12:9a:d1:f5:33:3e:63:e8: 5a:97:95:45:9d:2c:09:48:1b:57:c6:17:67:d9:2b: 83:a7:1d:99:b6:c2:cd:e9:3f:bc:30:07:43:c9:42: 42:8d:2f:d5:17:5a:cf:51:a7:80:61:79:c8:25:2b: ad:67:51:35:7f:2b:35:b7:e8:99:38:a5:f9:57:ca: 55:f9:9c:40:1a:c2:4a:18:80:4a:03:62:ff:01:65: 45:71:7e:cd:03:d1:5c:a6:c8:57:0b:b2:67:e3:85: cd:68:90:62:01:19:82:3a:2e:9d:aa:a9:eb:f7:33: 68:1f:ea:29:37:82:2e:b3:ca:f0:de:49:d3:79:3f: 56:2d:db:c8:6f:cc:14:16:a9:f5:fe:e1:62:69:14: 52:01:a2:08:54:c8:b9:fc:08:98:dd:d0:a3:36:86: 91:d0:09:1b:60:bb:05:37:a2:5c:55:9d:09:66:f7: 84:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:DC:B5:21:5E:89:F3:13:F5:79:E7:EC:34:3F:FB:D3:A6:64:F4:B9 X509v3 Authority Key Identifier: keyid:AA:85:51:E8:51:E6:9D:B1:65:C6:C6:32:AF:45:F2:17:15:51:29:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoVR6FHmnbFlxsYyr0XyFxVRKTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/de9615-0bc0-4e5e-8318-fb1d992de001/1/qoVR6FHmnbFlxsYyr0XyFxVRKTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:05:c9:a6:9e:aa:51:62:04:5e:cb:c3:60:e8:c9:00:38:27: 4e:a3:4f:82:0c:a9:5a:92:0d:ef:6c:e3:d1:14:26:70:ad:05: d7:e8:87:88:1b:75:75:c0:43:53:34:fb:c5:fa:7a:03:99:aa: d5:d6:c2:92:f5:51:a7:30:e1:99:40:65:67:cb:89:4b:1c:53: ea:02:d1:e5:6c:95:3d:ac:7a:b5:b8:49:c8:1f:76:44:4e:fe: a2:0c:c9:0d:39:38:b1:4f:12:c7:76:d9:db:b9:0f:9a:c0:47: c8:64:0c:e5:09:d9:3c:d4:5f:91:2d:75:cd:b3:12:5c:97:25: 61:c0:f1:50:b7:c2:7d:e4:f2:46:09:a1:80:41:88:e7:c6:47: bd:53:61:1c:3e:a1:c8:31:86:c1:c8:b8:f6:ce:ad:a4:45:f6: 50:e1:f2:7f:c8:d7:42:d4:30:a4:f6:15:27:55:85:8d:98:40: d2:19:ce:90:5b:14:8a:2e:cb:9b:8e:4e:9a:d5:da:e0:d4:be: 40:42:50:69:ed:31:d8:d4:80:9c:0f:99:d4:92:f2:5d:95:9c: d5:2b:ab:26:78:11:66:55:0d:e0:9b:f3:7f:69:c8:cf:6d:d7: bb:d6:d8:39:6b:34:2d:0b:47:c2:39:1c:89:5f:bb:1d:46:91: 14:01:59:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtLuj/GIwTTtD7lWmHg2nz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhODU1MWU4NTFlNjlkYjE2NWM2YzYzMmFmNDVmMjE3MTU1 MTI5MzkwHhcNMjUxMjIzMTUwMDU1WhcNMjUxMjI0MTUwMDU1WjAzMTEwLwYDVQQD Eyg1N2RjYjUyMTVlODlmMzEzZjU3OWU3ZWMzNDNmZmJkM2E2NjRmNGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MGCHTZv1clL/KIntFV6HTbYUUb9 um0xWFuI7CkjMjq0Qp5xQ7NNO4TsdsGdWe9Uvrxh8NupfAnUXKPw7fQMH7xqNpkT qyWoI0fS7rCREgp9EprR9TM+Y+hal5VFnSwJSBtXxhdn2SuDpx2ZtsLN6T+8MAdD yUJCjS/VF1rPUaeAYXnIJSutZ1E1fys1t+iZOKX5V8pV+ZxAGsJKGIBKA2L/AWVF cX7NA9FcpshXC7Jn44XNaJBiARmCOi6dqqnr9zNoH+opN4Ius8rw3knTeT9WLdvI b8wUFqn1/uFiaRRSAaIIVMi5/AiY3dCjNoaR0AkbYLsFN6JcVZ0JZveEEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfctSFeifMT9Xnn7DQ/+9OmZPS5MB8GA1UdIwQY MBaAFKqFUehR5p2xZcbGMq9F8hcVUSk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgt ZmIxZDk5MmRlMDAxLzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9kZTk2MTUtMGJjMC00ZTVlLTgzMTgtZmIxZDk5MmRlMDAx LzEvcW9WUjZGSG1uYkZseHNZeXIwWHlGeFZSS1RrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAXJpp6q UWIEXsvDYOjJADgnTqNPggypWpIN72zj0RQmcK0F1+iHiBt1dcBDUzT7xfp6A5mq 1dbCkvVRpzDhmUBlZ8uJSxxT6gLR5WyVPax6tbhJyB92RE7+ogzJDTk4sU8Sx3bZ 27kPmsBHyGQM5QnZPNRfkS11zbMSXJclYcDxULfCfeTyRgmhgEGI58ZHvVNhHD6h yDGGwci49s6tpEX2UOHyf8jXQtQwpPYVJ1WFjZhA0hnOkFsUii7Lm45OmtXa4NS+ QEJQae0x2NSAnA+Z1JLyXZWc1SurJngRZlUN4Jvzf2nIz23Xu9bYOWs0LQtHwjkc iV+7HUaRFAFZbw== -----END CERTIFICATE-----Generated at Tue Dec 23 20:34:18 2025 by rpki-client