This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json) Hash identifier: HrBlps2kAnaT7qIftGJTF40uPMC6jc9z4IN2NgTiua8= Subject key identifier: D3:CC:D2:5F:9B:4A:78:3F:CA:93:D6:D3:97:B8:82:82:A4:87:55:A4 Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Certificate serial: 019B3E6D9F500EE243CA98F9ECD5E58EDC19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 01:02:10 +0000 Manifest this update: Sun 21 Dec 2025 01:02:10 +0000 Manifest next update: Mon 22 Dec 2025 01:02:10 +0000 Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=) 2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=) 3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: Lci7ez697glO678fDZ0TJq+puQINRcTxAETMyrxZNCw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:9f:50:0e:e2:43:ca:98:f9:ec:d5:e5:8e:dc:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Validity Not Before: Dec 21 01:02:10 2025 GMT Not After : Dec 22 01:02:10 2025 GMT Subject: CN=d3ccd25f9b4a783fca93d6d397b88282a48755a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:df:80:f7:f2:31:8a:50:a4:54:f3:02:11:1f: dc:aa:10:8c:3d:89:0c:29:a9:5f:33:6d:39:8d:5d: 0c:5a:16:2f:af:bc:60:bd:33:41:1d:5b:fb:85:c1: 44:6d:2c:79:7c:27:60:92:c8:c5:ae:d1:65:70:7c: 7a:e3:44:30:af:c5:18:cf:e9:d8:64:69:7a:29:18: 04:d5:b2:19:d9:7b:08:32:70:bd:d5:6d:04:83:78: f2:f2:cf:d1:a7:c3:c5:81:ff:3a:c9:dd:5f:2a:44: 55:e8:31:63:fb:fe:90:20:d6:d9:46:18:5a:ff:9d: 91:b7:97:cf:7d:11:ee:5d:4b:0a:ed:bc:ae:a4:75: 77:bd:e0:e4:cb:56:cc:7b:84:1b:e8:2f:11:2f:cd: 86:e1:42:2c:90:c3:be:f0:7c:27:63:fa:2c:ec:9a: 9d:39:82:12:cb:c6:81:f1:05:e1:2d:03:a1:50:04: 3b:71:17:76:4a:21:eb:e7:02:a1:ab:38:cc:aa:40: 99:dc:45:d0:60:a6:49:15:34:84:4f:4b:82:87:d2: 3b:86:35:55:41:d9:64:e0:c6:c7:1b:e1:aa:b5:3c: 37:41:cc:c9:7e:55:ef:ec:16:48:44:c1:9a:b0:96: 31:8c:45:d1:47:de:c4:7c:55:2e:38:29:de:b8:5d: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:CC:D2:5F:9B:4A:78:3F:CA:93:D6:D3:97:B8:82:82:A4:87:55:A4 X509v3 Authority Key Identifier: keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b8:84:29:af:07:85:2e:e7:5c:f2:5f:54:2b:70:23:5c:40: 59:67:b1:17:f3:c0:2e:60:9b:f4:53:c8:c8:84:30:61:a3:01: c7:69:65:28:89:5f:5e:90:52:29:14:89:a0:3d:f4:ff:11:72: e5:e6:67:56:7e:d8:f7:41:d9:bf:5b:64:01:66:e4:52:d8:6a: b3:7d:8d:fc:b6:27:96:6b:bb:53:29:11:24:f0:18:46:00:ff: aa:ad:f6:44:8a:c9:a7:a3:23:fb:d7:cb:b0:1d:4a:ff:b2:f0: 80:3d:6d:47:4e:81:14:0e:b9:90:06:b3:7a:10:0a:94:24:a7: 4c:9c:e1:da:3d:2f:e2:5d:06:e6:89:c7:58:94:0f:f2:cd:3e: 3d:1d:0d:5f:d5:ff:21:a8:16:97:47:1e:a6:35:3d:bd:64:33: cd:b3:98:47:c0:b8:c1:e5:9b:82:e1:a3:07:96:54:f6:d2:57: 76:5a:c0:88:7e:e2:7c:24:42:f7:05:d5:c0:2d:22:7c:5a:51: cc:5f:03:14:98:aa:73:55:0b:dd:4b:96:d2:d5:78:4e:f8:b0: fc:f7:7d:2d:94:d3:cd:dd:45:85:1c:cf:d2:f7:3c:25:d7:40: 1b:b7:cb:9e:b5:48:4f:f9:b8:71:eb:cf:4a:06:09:c0:b4:62: 4e:58:f4:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bZ9QDuJDypj57NXljtwZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1 MmUyNTEwHhcNMjUxMjIxMDEwMjEwWhcNMjUxMjIyMDEwMjEwWjAzMTEwLwYDVQQD EyhkM2NjZDI1ZjliNGE3ODNmY2E5M2Q2ZDM5N2I4ODI4MmE0ODc1NWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvd+A9/IxilCkVPMCER/cqhCMPYkM KalfM205jV0MWhYvr7xgvTNBHVv7hcFEbSx5fCdgksjFrtFlcHx640Qwr8UYz+nY ZGl6KRgE1bIZ2XsIMnC91W0Eg3jy8s/Rp8PFgf86yd1fKkRV6DFj+/6QINbZRhha /52Rt5fPfRHuXUsK7byupHV3veDky1bMe4Qb6C8RL82G4UIskMO+8HwnY/os7Jqd OYISy8aB8QXhLQOhUAQ7cRd2SiHr5wKhqzjMqkCZ3EXQYKZJFTSET0uCh9I7hjVV Qdlk4MbHG+GqtTw3QczJflXv7BZIRMGasJYxjEXRR97EfFUuOCneuF3v6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPM0l+bSng/ypPW05e4goKkh1WkMB8GA1UdIwQY MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKLiEKa8H hS7nXPJfVCtwI1xAWWexF/PALmCb9FPIyIQwYaMBx2llKIlfXpBSKRSJoD30/xFy 5eZnVn7Y90HZv1tkAWbkUthqs32N/LYnlmu7UykRJPAYRgD/qq32RIrJp6Mj+9fL sB1K/7LwgD1tR06BFA65kAazehAKlCSnTJzh2j0v4l0G5onHWJQP8s0+PR0NX9X/ IagWl0cepjU9vWQzzbOYR8C4weWbguGjB5ZU9tJXdlrAiH7ifCRC9wXVwC0ifFpR zF8DFJiqc1UL3UuW0tV4Tviw/Pd9LZTTzd1FhRzP0vc8JddAG7fLnrVIT/m4cevP SgYJwLRiTlj0jA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:25:43 2025 by rpki-client