This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json) Hash identifier: MEsoa4JxJYEhTwvXvZcf1FZysM7G/klNoKJMpkj1K/o= Subject key identifier: 6D:DE:9E:F9:B3:29:1B:8F:1A:0A:B5:7F:EF:86:E6:45:B0:83:0D:A4 Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Certificate serial: 019B3C7FD284B465635094B2E6FC91CBAC32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft Manifest number: 171A Signing time: Sat 20 Dec 2025 16:02:48 +0000 Manifest this update: Sat 20 Dec 2025 16:02:48 +0000 Manifest next update: Sun 21 Dec 2025 16:02:48 +0000 Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=) 2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: kA9NHcUX2ytDps/Bj+NLCd3wC5F8+SwEr+XtdAWKNwk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:d2:84:b4:65:63:50:94:b2:e6:fc:91:cb:ac:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Validity Not Before: Dec 20 16:02:48 2025 GMT Not After : Dec 21 16:02:48 2025 GMT Subject: CN=6dde9ef9b3291b8f1a0ab57fef86e645b0830da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:b3:45:81:fa:49:45:f0:91:d5:ee:4b:06: 6a:e2:b3:0e:05:25:4e:7c:97:78:3e:67:df:88:7b: 73:08:7d:5b:0d:3f:6f:d2:6e:dd:c8:8e:07:51:f7: 7b:7d:bc:39:d2:80:5e:63:47:fe:e0:c0:24:40:7d: f4:f7:8f:be:bb:26:f2:e6:7d:30:a5:b8:c8:af:05: 42:a2:d7:53:8e:4e:81:f2:31:32:e2:c4:fd:a6:28: 43:51:f1:3b:d1:6b:87:5a:62:44:1f:2c:ca:67:35: b0:1f:fa:6e:87:24:92:4d:76:60:b9:61:e3:2a:74: 83:17:82:29:fa:d5:43:0b:d7:48:19:b2:15:73:29: 1b:bb:d5:1c:9e:8b:1e:d3:2d:78:f0:1a:a8:80:8f: 1a:81:bd:25:7b:f1:63:e3:fc:06:60:96:2c:7e:d4: 8c:3c:05:c5:4c:0f:4b:16:ae:43:a0:2c:65:63:16: 86:9a:d7:71:39:ea:c9:26:12:50:da:28:0e:a1:57: 9a:f8:44:72:f1:84:c8:34:47:66:34:05:01:fb:0c: 14:76:ae:f6:b5:cd:92:df:dd:28:fc:90:4c:0c:6f: 04:01:7d:45:53:58:15:ec:66:3e:24:0a:78:b2:23: a7:1f:17:c4:ce:1e:52:19:d7:8c:2f:e7:fa:48:1c: ce:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:DE:9E:F9:B3:29:1B:8F:1A:0A:B5:7F:EF:86:E6:45:B0:83:0D:A4 X509v3 Authority Key Identifier: keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:81:30:24:77:93:7e:43:a9:c9:1e:b9:07:1c:6d:dd:13:52: 2f:37:0b:95:c4:98:e7:9f:13:49:af:14:9c:23:89:2a:cb:6e: 7a:81:f9:70:ab:34:d3:81:38:f6:b9:f6:d3:be:dd:74:b3:98: 0a:8f:79:f2:8c:31:83:c0:7e:af:09:f0:dd:9e:ed:8e:6e:44: 5b:ea:bb:e3:df:15:d2:29:3a:51:44:8e:82:4e:1c:00:49:83: e0:ae:4c:6b:b4:11:72:4d:a6:23:1a:ae:f2:df:cb:e4:19:90: d7:9e:4e:e6:ed:67:7f:38:70:3f:00:e7:83:6e:9d:70:f2:33: 2b:96:73:9a:af:bd:ac:63:17:55:76:02:60:cf:ac:5c:54:85: ae:4d:7b:f4:fb:4b:5d:26:62:a1:21:6c:57:3d:be:63:91:d7: cb:71:ad:30:5e:48:7e:68:6d:b7:98:82:70:80:c4:88:55:28: 0e:f5:69:c0:93:3d:86:d5:fb:ee:1c:65:46:18:9b:ed:75:e0: 06:d1:2c:1c:2b:be:2a:30:4f:5f:29:c7:b0:96:cd:d5:92:55: da:c0:76:e1:90:dd:b4:82:76:b3:c9:e4:77:4b:4d:5e:c3:fb: 74:94:13:46:01:70:cb:48:65:23:39:98:5b:e6:46:72:fa:b1: 8d:fc:4c:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f9KEtGVjUJSy5vyRy6wyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw YzMyYTQwHhcNMjUxMjIwMTYwMjQ4WhcNMjUxMjIxMTYwMjQ4WjAzMTEwLwYDVQQD Eyg2ZGRlOWVmOWIzMjkxYjhmMWEwYWI1N2ZlZjg2ZTY0NWIwODMwZGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwizRYH6SUXwkdXuSwZq4rMOBSVO fJd4PmffiHtzCH1bDT9v0m7dyI4HUfd7fbw50oBeY0f+4MAkQH3094++uyby5n0w pbjIrwVCotdTjk6B8jEy4sT9pihDUfE70WuHWmJEHyzKZzWwH/puhySSTXZguWHj KnSDF4Ip+tVDC9dIGbIVcykbu9Ucnose0y148BqogI8agb0le/Fj4/wGYJYsftSM PAXFTA9LFq5DoCxlYxaGmtdxOerJJhJQ2igOoVea+ERy8YTINEdmNAUB+wwUdq72 tc2S390o/JBMDG8EAX1FU1gV7GY+JAp4siOnHxfEzh5SGdeML+f6SBzOmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3envmzKRuPGgq1f++G5kWwgw2kMB8GA1UdIwQY MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVIEwJHeT fkOpyR65Bxxt3RNSLzcLlcSY558TSa8UnCOJKstueoH5cKs004E49rn2077ddLOY Co958owxg8B+rwnw3Z7tjm5EW+q7498V0ik6UUSOgk4cAEmD4K5Ma7QRck2mIxqu 8t/L5BmQ155O5u1nfzhwPwDng26dcPIzK5Zzmq+9rGMXVXYCYM+sXFSFrk179PtL XSZioSFsVz2+Y5HXy3GtMF5Ifmhtt5iCcIDEiFUoDvVpwJM9htX77hxlRhib7XXg BtEsHCu+KjBPXynHsJbN1ZJV2sB24ZDdtIJ2s8nkd0tNXsP7dJQTRgFwy0hlIzmY W+ZGcvqxjfxMuA== -----END CERTIFICATE-----Generated at Sun Dec 21 00:26:16 2025 by rpki-client