This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft File: q22oNLMssSxL2uM_Zy80jZg_MXY.mft (raw, json) Hash identifier: Me+mxl6XLdjXPiq0U7XlLREKqrk6YBrKLzllT0TBaPw= Subject key identifier: 1D:78:1F:BE:FB:50:5D:DF:A0:DB:49:B5:6C:3A:9F:A1:3F:29:04:58 Authority key identifier: AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76 Certificate issuer: /CN=ab6da834b32cb12c4bdae33f672f348d983f3176 Certificate serial: 019B522A3F2AF7F8E1C9A5862390B3596BCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft Manifest number: 0FFB Signing time: Wed 24 Dec 2025 21:00:58 +0000 Manifest this update: Wed 24 Dec 2025 21:00:58 +0000 Manifest next update: Thu 25 Dec 2025 21:00:58 +0000 Files and hashes: 1: evpxyC_xQr6-9_i5vhF3SSD60QY.roa (hash: F+Lkz2iLknBGekmgWZevszL+qAh6hnFUDMady9RqMNg=) 2: q22oNLMssSxL2uM_Zy80jZg_MXY.crl (hash: e2Z4WeXreT4nzT8kVwnlhIOzNmBkS8I+ogCPUULH7Dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 18:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:2a:3f:2a:f7:f8:e1:c9:a5:86:23:90:b3:59:6b:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab6da834b32cb12c4bdae33f672f348d983f3176 Validity Not Before: Dec 24 21:00:58 2025 GMT Not After : Dec 25 21:00:58 2025 GMT Subject: CN=1d781fbefb505ddfa0db49b56c3a9fa13f290458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d7:43:31:d8:d4:5f:32:5b:c7:b5:65:a3:cf: f5:4c:f3:b6:29:0d:dd:f2:18:38:9a:74:fe:33:7b: d0:a0:b6:24:73:00:0d:c1:f1:fe:9d:2d:2b:4d:db: a4:6d:15:69:a2:8d:48:83:e2:29:83:62:42:73:1e: 15:9a:d0:7a:8a:c3:93:07:2b:a7:02:eb:ce:6a:7a: e0:9d:f5:ae:03:3f:0d:80:66:b6:68:b2:53:e6:10: 65:eb:7e:f3:b9:89:83:42:65:b7:ca:05:bb:5a:ca: 44:35:7b:b9:a3:4d:ba:fa:dc:00:5b:c0:7b:5b:4b: 9c:a1:f9:4a:fe:07:a4:5b:85:9b:b8:9c:bd:6f:08: cf:40:ac:22:09:38:b0:ce:53:28:95:75:ec:57:30: e7:4e:b5:3b:17:c8:24:b7:c1:94:41:91:8f:8f:cc: 88:a9:55:b8:8a:05:f2:f8:b1:f3:01:c9:4d:15:0e: 84:fc:a5:38:ed:1c:3a:09:e7:bf:e8:66:48:1b:94: 61:02:0f:4c:b9:ac:ee:86:fc:55:e8:79:84:09:8b: 66:98:51:8d:8a:9e:d6:d7:02:a1:41:a3:95:e5:6b: b5:e4:e6:91:da:07:46:f6:5a:b7:9e:2b:47:ec:14: c2:14:58:8b:6d:d6:ca:25:b7:b0:c2:ef:be:ed:dd: a1:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:78:1F:BE:FB:50:5D:DF:A0:DB:49:B5:6C:3A:9F:A1:3F:29:04:58 X509v3 Authority Key Identifier: keyid:AB:6D:A8:34:B3:2C:B1:2C:4B:DA:E3:3F:67:2F:34:8D:98:3F:31:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q22oNLMssSxL2uM_Zy80jZg_MXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ec7a7-0abc-4ff9-9958-5867ca77897e/1/q22oNLMssSxL2uM_Zy80jZg_MXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:cf:7b:7c:f8:c0:e3:c3:fe:ab:40:8d:2f:ba:e1:4d:50:62: e7:38:b3:2e:4c:9b:67:30:5a:fc:68:da:82:b6:6b:c8:10:61: b5:28:f6:eb:cf:89:fa:0a:5e:f2:a3:c7:6b:34:33:11:2f:b5: fa:60:27:23:2c:7c:b0:e0:48:83:33:ad:22:43:68:69:60:9b: 48:cd:d0:40:d3:37:2e:b1:e5:5c:2e:40:8e:14:0d:7a:5f:f0: 1d:29:09:80:90:93:68:fe:ee:4a:cc:b7:96:34:e8:8f:de:ad: 2b:34:08:ce:0c:83:ab:c6:38:7b:a2:7f:7c:6d:32:a8:b7:92: 35:5e:f9:37:85:a3:9c:97:df:c5:e5:0d:3d:a2:53:14:da:f8: c5:0f:21:05:17:a2:31:79:2e:d7:5c:50:94:d3:c3:c1:16:d1: 2b:09:77:a3:cc:d9:ab:0d:8c:8a:01:01:38:60:b6:ea:d8:0f: 1b:c1:c8:d8:c4:3c:7e:df:c1:57:5a:83:c0:ed:3b:74:35:e8: bb:89:84:f4:5a:12:37:6a:1f:52:b8:6a:d3:a8:2c:a3:cf:60: 64:14:b8:0b:81:39:1f:9a:3c:f8:51:f3:90:96:89:18:f7:14: ba:b0:66:72:36:06:09:10:be:29:b8:06:21:39:0d:86:59:d3: d7:69:e0:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSKj8q9/jhyaWGI5CzWWvLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNmRhODM0YjMyY2IxMmM0YmRhZTMzZjY3MmYzNDhkOTgz ZjMxNzYwHhcNMjUxMjI0MjEwMDU4WhcNMjUxMjI1MjEwMDU4WjAzMTEwLwYDVQQD EygxZDc4MWZiZWZiNTA1ZGRmYTBkYjQ5YjU2YzNhOWZhMTNmMjkwNDU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9dDMdjUXzJbx7Vlo8/1TPO2KQ3d 8hg4mnT+M3vQoLYkcwANwfH+nS0rTdukbRVpoo1Ig+Ipg2JCcx4VmtB6isOTByun AuvOanrgnfWuAz8NgGa2aLJT5hBl637zuYmDQmW3ygW7WspENXu5o026+twAW8B7 W0ucoflK/gekW4WbuJy9bwjPQKwiCTiwzlMolXXsVzDnTrU7F8gkt8GUQZGPj8yI qVW4igXy+LHzAclNFQ6E/KU47Rw6Cee/6GZIG5RhAg9MuazuhvxV6HmECYtmmFGN ip7W1wKhQaOV5Wu15OaR2gdG9lq3nitH7BTCFFiLbdbKJbewwu++7d2hLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB14H777UF3foNtJtWw6n6E/KQRYMB8GA1UdIwQY MBaAFKttqDSzLLEsS9rjP2cvNI2YPzF2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgt NTg2N2NhNzc4OTdlLzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy8wZWM3YTctMGFiYy00ZmY5LTk5NTgtNTg2N2NhNzc4OTdl LzEvcTIyb05MTXNzU3hMMnVNX1p5ODBqWmdfTVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMs97fPjA 48P+q0CNL7rhTVBi5zizLkybZzBa/GjagrZryBBhtSj268+J+gpe8qPHazQzES+1 +mAnIyx8sOBIgzOtIkNoaWCbSM3QQNM3LrHlXC5AjhQNel/wHSkJgJCTaP7uSsy3 ljToj96tKzQIzgyDq8Y4e6J/fG0yqLeSNV75N4WjnJffxeUNPaJTFNr4xQ8hBRei MXku11xQlNPDwRbRKwl3o8zZqw2MigEBOGC26tgPG8HI2MQ8ft/BV1qDwO07dDXo u4mE9FoSN2ofUrhq06gso89gZBS4C4E5H5o8+FHzkJaJGPcUurBmcjYGCRC+KbgG ITkNhlnT12ngxg== -----END CERTIFICATE-----Generated at Thu Dec 25 03:26:07 2025 by rpki-client