This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft File: Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft (raw, json) Hash identifier: 2oFubR/mrWt8zhDojcZrMO+FFHnmPqo7sJyTHL63+ts= Subject key identifier: 3E:82:6D:61:0C:51:A6:92:96:E9:6E:DE:26:0A:0C:FA:58:92:17:86 Authority key identifier: 42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 Certificate issuer: /CN=428df99824ce67b0cb5f87fc46599e13adea5702 Certificate serial: 019B3CEC690864E24822DA7BE20A8BD7DA26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft Manifest number: 178C Signing time: Sat 20 Dec 2025 18:01:24 +0000 Manifest this update: Sat 20 Dec 2025 18:01:24 +0000 Manifest next update: Sun 21 Dec 2025 18:01:24 +0000 Files and hashes: 1: 1-tobmuArgsO1CcS37ElbRPB4oI0.roa (hash: eoz/B2g3BVZDkFcVrm+jT5e/XqpAm/AHcMzK9BR9JlQ=) 2: Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl (hash: ZBHfmr+0RunfPoJ0XCpqVdBcgTNwuNLisR/ZtCDyn8k=) 3: dysGc3dUC19B4xYH14h547-J3bU.roa (hash: xZJSB931nK/0DYsJmXQtw/2T7yJN+gcQPJ/Rr8Mu1dg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:69:08:64:e2:48:22:da:7b:e2:0a:8b:d7:da:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428df99824ce67b0cb5f87fc46599e13adea5702 Validity Not Before: Dec 20 18:01:24 2025 GMT Not After : Dec 21 18:01:24 2025 GMT Subject: CN=3e826d610c51a69296e96ede260a0cfa58921786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0b:5b:b1:25:e4:de:5d:7a:d5:3c:b3:e1:08: 7f:2b:29:e1:71:21:8c:09:2d:4a:e6:0f:3c:c3:db: e9:db:ea:60:41:dc:67:a5:f3:49:6a:d7:ee:a1:6f: 93:60:d6:b5:f7:f1:17:e4:5e:13:74:1a:73:5a:a5: c3:a4:6f:6c:19:d7:c9:e1:a5:61:8d:82:5f:98:94: bf:3d:e1:d2:cc:bb:36:bb:d4:a4:18:56:1e:a9:6d: f0:8c:82:e6:5b:5a:fa:43:06:a5:32:5e:c3:a6:af: 7a:0a:87:75:9a:6c:16:d6:c1:3e:2c:a3:1f:9e:0e: 8b:19:de:f7:3f:0c:7f:bf:b2:07:f2:4a:77:eb:71: ce:c9:6f:56:f9:f7:29:d6:12:29:c8:d0:12:fe:83: fe:44:64:eb:75:98:8d:4e:d2:29:b1:0a:6b:0a:bb: 6e:85:3f:19:a2:f2:4e:fc:e7:80:77:05:5c:44:57: 28:25:c1:ba:6b:fb:f8:c5:81:60:a1:97:bb:a8:d4: 2f:d9:08:b8:d1:a0:a5:7c:55:83:c0:e2:db:6b:10: a3:d2:72:84:ef:d9:9b:15:da:d8:7d:ae:82:e9:c4: 1d:98:41:84:ab:d6:d4:38:03:b1:49:16:9d:e3:a0: ec:99:9e:f1:1c:ef:df:b6:97:ce:0d:9b:16:b5:e2: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:82:6D:61:0C:51:A6:92:96:E9:6E:DE:26:0A:0C:FA:58:92:17:86 X509v3 Authority Key Identifier: keyid:42:8D:F9:98:24:CE:67:B0:CB:5F:87:FC:46:59:9E:13:AD:EA:57:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo35mCTOZ7DLX4f8RlmeE63qVwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/802b35-673c-4756-9761-f2274965c095/1/Qo35mCTOZ7DLX4f8RlmeE63qVwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:c1:9e:f6:b5:97:b9:e0:2c:b6:ee:04:61:0c:8e:db:e6:9f: e0:87:a0:60:55:89:2d:5c:09:80:3e:08:83:12:df:a6:16:d7: a1:cb:54:98:b1:51:2b:05:04:6c:18:be:e7:e1:87:d5:c9:2b: 36:ac:df:bb:6b:66:5f:f6:aa:a6:2e:c9:ab:93:cc:61:9c:f5: 96:4d:2c:b6:98:15:f6:3a:2d:4a:d7:80:0f:18:f7:ac:40:49: 2b:54:04:eb:40:9f:4a:11:10:f5:4d:1f:0e:05:64:5f:76:f6: ce:24:1c:25:65:76:30:4b:dc:d8:03:8f:2f:66:df:d7:78:ab: 13:bc:e1:23:c1:8b:5c:7a:5a:43:30:50:b1:ae:9f:da:48:1c: 56:a6:29:12:33:28:74:c4:4c:18:9b:e9:6b:74:12:08:e0:fb: 6a:37:bb:ba:9c:b1:0b:8b:d0:a3:5b:06:8f:3c:9a:8d:01:42: 1a:54:10:dc:42:a4:28:16:dc:a1:c5:41:29:3c:2e:d5:81:35: 4e:a2:a1:55:55:0b:3a:91:82:f7:b0:68:04:15:69:e6:ae:6a: 89:e7:68:36:b1:20:6d:f6:ca:20:53:b8:a4:ae:3a:ed:37:19: f6:88:80:6c:01:52:fb:35:93:ee:51:23:27:24:b6:a8:31:0d: d8:59:66:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87GkIZOJIItp74gqL19omMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGRmOTk4MjRjZTY3YjBjYjVmODdmYzQ2NTk5ZTEzYWRl YTU3MDIwHhcNMjUxMjIwMTgwMTI0WhcNMjUxMjIxMTgwMTI0WjAzMTEwLwYDVQQD EygzZTgyNmQ2MTBjNTFhNjkyOTZlOTZlZGUyNjBhMGNmYTU4OTIxNzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAtbsSXk3l161Tyz4Qh/KynhcSGM CS1K5g88w9vp2+pgQdxnpfNJatfuoW+TYNa19/EX5F4TdBpzWqXDpG9sGdfJ4aVh jYJfmJS/PeHSzLs2u9SkGFYeqW3wjILmW1r6QwalMl7Dpq96Cod1mmwW1sE+LKMf ng6LGd73Pwx/v7IH8kp363HOyW9W+fcp1hIpyNAS/oP+RGTrdZiNTtIpsQprCrtu hT8ZovJO/OeAdwVcRFcoJcG6a/v4xYFgoZe7qNQv2Qi40aClfFWDwOLbaxCj0nKE 79mbFdrYfa6C6cQdmEGEq9bUOAOxSRad46DsmZ7xHO/ftpfODZsWteKR7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6CbWEMUaaSlulu3iYKDPpYkheGMB8GA1UdIwQY MBaAFEKN+Zgkzmewy1+H/EZZnhOt6lcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEt ZjIyNzQ5NjVjMDk1LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi84MDJiMzUtNjczYy00NzU2LTk3NjEtZjIyNzQ5NjVjMDk1 LzEvUW8zNW1DVE9aN0RMWDRmOFJsbWVFNjNxVndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt8Ge9rWX ueAstu4EYQyO2+af4IegYFWJLVwJgD4IgxLfphbXoctUmLFRKwUEbBi+5+GH1ckr Nqzfu2tmX/aqpi7Jq5PMYZz1lk0stpgV9jotSteADxj3rEBJK1QE60CfShEQ9U0f DgVkX3b2ziQcJWV2MEvc2AOPL2bf13irE7zhI8GLXHpaQzBQsa6f2kgcVqYpEjMo dMRMGJvpa3QSCOD7aje7upyxC4vQo1sGjzyajQFCGlQQ3EKkKBbcocVBKTwu1YE1 TqKhVVULOpGC97BoBBVp5q5qiedoNrEgbfbKIFO4pK467TcZ9oiAbAFS+zWT7lEj JyS2qDEN2FlmMw== -----END CERTIFICATE-----Generated at Sat Dec 20 20:53:39 2025 by rpki-client