This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json) Hash identifier: LA3k9x2IxD4AdiiQUu0RF2SQQfzIX82oz8XA4WK1gms= Subject key identifier: A4:1F:E1:F4:D4:39:CB:61:A0:E5:4D:BB:13:2B:1B:1C:45:DE:51:5A Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Certificate serial: 019B5CE49911079ECEB55F75E7F0FA20A7C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft Manifest number: 156B Signing time: Fri 26 Dec 2025 23:00:43 +0000 Manifest this update: Fri 26 Dec 2025 23:00:43 +0000 Manifest next update: Sat 27 Dec 2025 23:00:43 +0000 Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: 213PbVNC06EzqymfyibHV+CcgsLcfyYLTGuLP8LpxaY=) 2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5c:e4:99:11:07:9e:ce:b5:5f:75:e7:f0:fa:20:a7:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Validity Not Before: Dec 26 23:00:43 2025 GMT Not After : Dec 27 23:00:43 2025 GMT Subject: CN=a41fe1f4d439cb61a0e54dbb132b1b1c45de515a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:15:f4:0f:c0:80:65:58:da:29:b4:b7:a2:c6: 58:8f:4c:c3:68:25:f3:9a:aa:c4:40:e0:82:e4:48: e2:c3:bc:ca:f6:3d:b4:96:60:ab:61:a4:8d:ae:71: 8e:54:3c:a3:69:59:d9:e6:c3:21:00:51:00:32:fa: 8f:1e:84:77:8e:8b:31:c5:fe:ce:34:13:31:22:7e: 1b:f9:e4:75:97:7b:b2:db:b0:99:5c:64:26:f4:77: 2f:75:74:fb:48:e5:9d:12:c8:67:76:cb:6c:4b:bf: f0:65:32:59:40:31:35:a8:71:87:7c:d1:ef:4d:78: bb:ce:20:67:c8:5a:9e:20:69:9e:5a:72:a8:38:26: 91:f3:31:78:2b:0d:84:55:39:03:42:44:2f:17:43: 30:32:ae:00:15:29:8d:5e:72:3a:fe:67:e1:da:54: d5:ec:9e:64:3b:d8:81:17:98:d2:6c:4c:0f:ba:12: 60:9a:79:6f:44:e4:19:86:18:e4:3a:20:68:53:c7: af:1c:67:a1:45:c1:a0:1f:e1:64:bd:65:cb:c2:4a: bf:8e:cd:61:7e:54:99:8b:93:5a:c7:d6:8a:1e:2a: d6:cf:c4:b2:49:21:56:dd:80:6e:15:fc:47:fd:27: 12:3a:11:24:c5:96:a2:fb:25:17:63:d2:79:c7:f2: 11:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:1F:E1:F4:D4:39:CB:61:A0:E5:4D:BB:13:2B:1B:1C:45:DE:51:5A X509v3 Authority Key Identifier: keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:a7:04:26:bb:ac:97:35:a2:7b:7a:5b:87:00:84:a9:65:06: 7a:54:d3:7e:0f:11:98:43:ec:31:0c:dc:59:e0:28:ea:89:1f: c6:c8:81:a9:54:8e:fa:e6:c6:9b:df:fc:5a:07:2c:b2:eb:ef: 38:7f:eb:10:e9:14:26:0f:59:ca:0c:13:b9:e9:8b:ad:c4:44: a8:a6:cc:10:97:5a:14:97:04:4c:14:1e:e8:8d:f1:e9:9a:76: 30:6f:4e:4c:85:54:9b:bb:7c:cb:1e:92:78:e9:e8:66:73:ba: 28:65:6f:2e:fc:7a:fd:57:c1:4b:60:95:7a:fb:21:5d:d5:79: f7:46:fe:9e:c1:34:5d:fe:c9:ef:7f:75:76:14:75:62:c9:92: 8e:ab:52:7f:96:9e:82:e6:79:ed:35:44:e9:0b:17:da:2b:c6: 9b:95:e3:16:06:3e:e5:1c:d5:37:ed:1c:90:c0:7e:36:d5:f2: 8c:c3:1d:28:c2:74:cd:ed:45:38:b2:68:b9:93:f1:c6:1a:8a: c1:24:67:55:7f:c1:a5:f8:5e:eb:b9:69:18:41:ef:9a:38:70: fe:ba:30:9a:c4:2f:20:6b:e3:07:cf:87:5b:1b:7e:2f:b9:64: 56:5f:c8:d0:b8:35:a7:23:31:67:47:fb:32:15:8d:7e:25:9f: 49:8a:44:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtc5JkRB57OtV915/D6IKfJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk MjFjNzAwHhcNMjUxMjI2MjMwMDQzWhcNMjUxMjI3MjMwMDQzWjAzMTEwLwYDVQQD EyhhNDFmZTFmNGQ0MzljYjYxYTBlNTRkYmIxMzJiMWIxYzQ1ZGU1MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxX0D8CAZVjaKbS3osZYj0zDaCXz mqrEQOCC5Ejiw7zK9j20lmCrYaSNrnGOVDyjaVnZ5sMhAFEAMvqPHoR3josxxf7O NBMxIn4b+eR1l3uy27CZXGQm9HcvdXT7SOWdEshndstsS7/wZTJZQDE1qHGHfNHv TXi7ziBnyFqeIGmeWnKoOCaR8zF4Kw2EVTkDQkQvF0MwMq4AFSmNXnI6/mfh2lTV 7J5kO9iBF5jSbEwPuhJgmnlvROQZhhjkOiBoU8evHGehRcGgH+FkvWXLwkq/js1h flSZi5Nax9aKHirWz8SySSFW3YBuFfxH/ScSOhEkxZai+yUXY9J5x/IRswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQf4fTUOcthoOVNuxMrGxxF3lFaMB8GA1UdIwQY MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3 LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEKcEJrus lzWie3pbhwCEqWUGelTTfg8RmEPsMQzcWeAo6okfxsiBqVSO+ubGm9/8Wgcssuvv OH/rEOkUJg9ZygwTuemLrcREqKbMEJdaFJcETBQe6I3x6Zp2MG9OTIVUm7t8yx6S eOnoZnO6KGVvLvx6/VfBS2CVevshXdV590b+nsE0Xf7J7391dhR1YsmSjqtSf5ae guZ57TVE6QsX2ivGm5XjFgY+5RzVN+0ckMB+NtXyjMMdKMJ0ze1FOLJouZPxxhqK wSRnVX/Bpfhe67lpGEHvmjhw/rowmsQvIGvjB8+HWxt+L7lkVl/I0Lg1pyMxZ0f7 MhWNfiWfSYpEJA== -----END CERTIFICATE-----Generated at Sat Dec 27 05:39:34 2025 by rpki-client