This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json) Hash identifier: 5SKkQjn8qQS0dpzU1/ah8idQnWWJwc3luLCGVE5YRrY= Subject key identifier: 05:03:7E:E6:D9:AE:57:E6:0A:C3:3B:55:2C:83:AA:72:36:C5:02:52 Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019B5BD2AF168D60EDE8DFBC3747277508A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft Manifest number: 179B Signing time: Fri 26 Dec 2025 18:01:32 +0000 Manifest this update: Fri 26 Dec 2025 18:01:32 +0000 Manifest next update: Sat 27 Dec 2025 18:01:32 +0000 Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: tZL2m2Gf1z9/QOttlq1xl08bOKepht3PbwXgD1hpQvw=) 2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=) 3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 15:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d2:af:16:8d:60:ed:e8:df:bc:37:47:27:75:08:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Dec 26 18:01:32 2025 GMT Not After : Dec 27 18:01:32 2025 GMT Subject: CN=05037ee6d9ae57e60ac33b552c83aa7236c50252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cf:1b:61:3d:ae:28:4c:76:59:2a:1c:5d:e5: 8c:c1:1e:4a:52:ee:17:df:fa:8a:db:d4:38:ed:a3: 75:7c:05:63:cb:15:bf:e5:11:e8:1b:98:22:b8:99: b7:1c:b2:c6:b8:81:17:ac:de:34:17:0b:ba:1a:e4: 34:6f:cb:d6:78:6f:72:b7:de:96:7c:e7:ed:a2:74: 33:15:22:60:60:ae:55:88:ac:0e:d4:0c:d2:1d:00: f1:d1:97:0f:71:16:92:c1:93:e2:f8:20:b6:78:17: f9:8f:f5:55:01:91:d6:a8:99:17:c0:d3:a0:68:6e: 9b:e2:b6:64:bf:46:b0:7c:e2:2d:90:15:fb:2c:6c: ed:f6:05:27:76:c0:41:78:91:9c:7c:1c:97:61:ee: e5:6e:e6:ce:4b:eb:3b:5a:4e:95:2d:4f:c3:68:9e: d6:ef:97:9c:5e:82:56:b2:d3:ce:86:fe:6b:67:72: 57:85:ad:0f:79:1b:67:8d:31:13:dc:e6:c9:dd:d5: cb:3b:55:cf:8c:85:11:31:08:cf:8e:ad:30:ac:91: 72:70:39:15:17:b3:09:00:36:38:ed:f6:dc:81:f0: 5b:ed:c4:2b:17:f6:f7:f8:21:03:4e:81:70:86:50: fc:5a:fe:17:d4:a4:02:7f:7f:89:08:89:a5:af:21: 94:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:03:7E:E6:D9:AE:57:E6:0A:C3:3B:55:2C:83:AA:72:36:C5:02:52 X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:3a:75:3d:c4:44:1e:67:ec:29:95:90:c0:2a:e1:c1:f8:44: d1:f3:27:77:fc:56:4e:55:96:b3:f0:63:9d:1d:1c:cb:ca:5d: c1:77:f3:09:49:f4:7e:0d:78:92:80:c1:85:4e:70:bf:5c:74: f6:6a:81:c2:3b:5c:46:1c:f3:dd:ac:ea:f1:fe:55:cf:82:af: 67:29:ef:0e:2b:98:9b:a8:48:ae:20:e0:28:c4:8f:26:e7:00: 27:fe:97:2c:27:c4:44:c8:2d:4d:5a:d0:9f:c4:03:cc:b7:2d: f1:4d:16:53:2f:85:dc:d0:54:8b:55:16:4b:44:73:9b:18:35: 00:0e:35:87:20:7c:17:3f:c6:b0:57:ab:b0:cd:09:f8:a5:d1: 41:39:1f:0f:4c:30:7a:06:4f:7e:f4:19:25:5b:7d:07:cf:49: ed:9f:bd:a6:9d:f3:e5:c8:69:b1:0b:29:b7:62:27:a0:3e:ea: d2:b7:fd:65:bf:b6:27:6d:77:bd:03:07:31:2c:15:7b:d4:05: ff:8e:e8:b2:f5:fa:f0:e0:c5:24:0f:e7:70:f3:d8:f0:19:ca: 5f:a7:6d:bd:46:70:8e:32:cb:77:f3:e2:a7:40:50:96:82:b6: 6e:ab:b1:09:78:a1:da:95:b3:6d:09:a7:1c:35:40:41:9a:31: f8:95:c5:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0q8WjWDt6N+8N0cndQinMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjUxMjI2MTgwMTMyWhcNMjUxMjI3MTgwMTMyWjAzMTEwLwYDVQQD EygwNTAzN2VlNmQ5YWU1N2U2MGFjMzNiNTUyYzgzYWE3MjM2YzUwMjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM8bYT2uKEx2WSocXeWMwR5KUu4X 3/qK29Q47aN1fAVjyxW/5RHoG5giuJm3HLLGuIEXrN40Fwu6GuQ0b8vWeG9yt96W fOftonQzFSJgYK5ViKwO1AzSHQDx0ZcPcRaSwZPi+CC2eBf5j/VVAZHWqJkXwNOg aG6b4rZkv0awfOItkBX7LGzt9gUndsBBeJGcfByXYe7lbubOS+s7Wk6VLU/DaJ7W 75ecXoJWstPOhv5rZ3JXha0PeRtnjTET3ObJ3dXLO1XPjIURMQjPjq0wrJFycDkV F7MJADY47fbcgfBb7cQrF/b3+CEDToFwhlD8Wv4X1KQCf3+JCImlryGU7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUDfubZrlfmCsM7VSyDqnI2xQJSMB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzp1PcRE HmfsKZWQwCrhwfhE0fMnd/xWTlWWs/BjnR0cy8pdwXfzCUn0fg14koDBhU5wv1x0 9mqBwjtcRhzz3azq8f5Vz4KvZynvDiuYm6hIriDgKMSPJucAJ/6XLCfERMgtTVrQ n8QDzLct8U0WUy+F3NBUi1UWS0Rzmxg1AA41hyB8Fz/GsFersM0J+KXRQTkfD0ww egZPfvQZJVt9B89J7Z+9pp3z5chpsQspt2InoD7q0rf9Zb+2J213vQMHMSwVe9QF /47osvX68ODFJA/ncPPY8BnKX6dtvUZwjjLLd/Pip0BQloK2bquxCXih2pWzbQmn HDVAQZox+JXF3Q== -----END CERTIFICATE-----Generated at Sat Dec 27 00:43:39 2025 by rpki-client