This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json) Hash identifier: wdLspUaTP4X/XA/MeQSxJvj1Oaof0I/ZDcp4LD7UJm4= Subject key identifier: DF:C6:14:27:91:4E:4A:09:AE:EF:65:2A:13:1A:8E:C5:5E:55:AA:78 Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019B3CEBEEA5C2A1B54632B81DD940A6318E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: QcS8hbdjN9ATDcjs4q9xu62E97Z/k/L0qyVLC75xS1A=) 2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=) 3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ee:a5:c2:a1:b5:46:32:b8:1d:d9:40:a6:31:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=dfc61427914e4a09aeef652a131a8ec55e55aa78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:0f:bf:01:84:0b:04:9c:d6:7f:c0:d8:26: 13:da:5c:00:a5:a9:2b:b9:a1:6d:b4:73:6b:9d:b1: aa:c0:80:01:96:88:d1:3f:fd:f9:1d:52:e9:a2:29: 5d:2f:33:dd:10:4b:0e:fc:01:52:2e:17:c7:b6:4c: c8:37:77:d0:90:da:a2:4f:69:0c:23:cc:ae:55:a5: 21:03:63:08:f9:4a:03:c3:92:54:e0:0e:f3:09:c1: 0e:e6:23:d7:36:e9:e8:e5:e8:1c:33:80:27:a8:3c: b6:28:69:d4:df:ca:99:b0:b9:48:da:46:25:c3:46: 1a:a4:18:2a:f3:f9:09:df:a0:70:e2:34:37:ff:d5: 7c:49:cd:fa:34:66:3f:73:7e:ff:ad:9a:11:a3:72: 7f:ab:8b:fd:60:07:04:10:ac:24:91:7d:68:39:da: 90:8d:8c:f4:47:56:ab:c6:ce:4a:87:ef:e2:07:6c: 6f:af:22:65:63:4f:3e:dd:71:c2:c7:93:6e:c8:48: 44:2d:02:94:0e:d9:9b:d1:9d:b4:13:63:6f:3c:af: 47:43:18:44:05:79:78:18:c2:28:d9:51:0c:9d:8b: 2e:40:2c:52:a1:cf:0a:98:4f:07:07:fe:0f:c9:78: ef:be:97:45:a5:7d:e9:58:10:24:12:1f:6d:9a:59: 1f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:C6:14:27:91:4E:4A:09:AE:EF:65:2A:13:1A:8E:C5:5E:55:AA:78 X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:5d:c0:2b:7b:f6:63:fb:3e:37:2c:cd:af:c1:72:aa:33:b6: 9f:17:35:49:3c:51:27:12:3c:e9:aa:b3:c3:c7:48:c1:eb:d0: 34:65:ce:28:6c:54:6a:36:68:4c:2d:c5:f8:18:10:96:88:10: 4f:e9:31:33:a6:fc:7f:1f:5e:6d:bc:dd:85:e7:fb:39:cf:ca: d2:1b:b6:55:06:e0:69:5a:fc:fb:e2:fa:92:9d:28:c8:cd:a4: 14:cf:17:f8:ef:ac:86:84:60:69:38:67:b0:83:6a:a1:83:7b: 5c:16:b3:99:45:9c:f1:fe:19:68:4c:f4:ea:44:47:15:c9:64: 4b:50:70:5e:36:61:4b:7c:63:0c:b3:d9:a7:59:8b:45:57:e3: d5:f3:5c:29:a7:cf:a7:4f:0e:12:e7:cb:2c:b0:7b:3a:cf:17: 8f:25:8a:eb:2c:95:33:60:e4:82:12:0b:04:f1:09:f6:53:f1: b4:0a:14:0e:03:66:24:8e:dd:18:36:35:bf:2b:84:bc:0e:44: f3:cd:b4:e4:28:c3:a2:e4:d2:7b:37:dd:d5:01:a6:e9:2b:eb: 63:21:ff:72:99:f7:6d:89:f7:77:39:74:0e:c6:8a:d6:d9:f2: 4a:5e:9e:5d:e1:1c:d7:f5:e9:23:dd:ed:10:7d:fc:f8:9c:2d: 2e:7f:6f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+6lwqG1RjK4HdlApjGOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD EyhkZmM2MTQyNzkxNGU0YTA5YWVlZjY1MmExMzFhOGVjNTVlNTVhYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMIPvwGECwSc1n/A2CYT2lwApakr uaFttHNrnbGqwIABlojRP/35HVLpoildLzPdEEsO/AFSLhfHtkzIN3fQkNqiT2kM I8yuVaUhA2MI+UoDw5JU4A7zCcEO5iPXNuno5egcM4AnqDy2KGnU38qZsLlI2kYl w0YapBgq8/kJ36Bw4jQ3/9V8Sc36NGY/c37/rZoRo3J/q4v9YAcEEKwkkX1oOdqQ jYz0R1arxs5Kh+/iB2xvryJlY08+3XHCx5NuyEhELQKUDtmb0Z20E2NvPK9HQxhE BXl4GMIo2VEMnYsuQCxSoc8KmE8HB/4PyXjvvpdFpX3pWBAkEh9tmlkfcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN/GFCeRTkoJru9lKhMajsVeVap4MB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqF3AK3v2 Y/s+NyzNr8FyqjO2nxc1STxRJxI86aqzw8dIwevQNGXOKGxUajZoTC3F+BgQlogQ T+kxM6b8fx9ebbzdhef7Oc/K0hu2VQbgaVr8++L6kp0oyM2kFM8X+O+shoRgaThn sINqoYN7XBazmUWc8f4ZaEz06kRHFclkS1BwXjZhS3xjDLPZp1mLRVfj1fNcKafP p08OEufLLLB7Os8XjyWK6yyVM2DkghILBPEJ9lPxtAoUDgNmJI7dGDY1vyuEvA5E 88205CjDouTSezfd1QGm6SvrYyH/cpn3bYn3dzl0DsaK1tnySl6eXeEc1/XpI93t EH38+JwtLn9vcA== -----END CERTIFICATE-----Generated at Sun Dec 21 03:26:01 2025 by rpki-client