This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft File: 0QENo1diQjJM77LIHBM5psDjtAM.mft (raw, json) Hash identifier: +qba51W/wWUqIkVzZyGov2cOFONEJVjTJa7tXZ7FQ5s= Subject key identifier: 4E:59:1A:A0:37:8D:FD:96:2E:97:EE:8C:C5:8A:AB:D3:EB:85:B2:0B Authority key identifier: D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 Certificate issuer: /CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Certificate serial: 019B3AFDC4AAC1FC51A591376D5FC5AA0A81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft Manifest number: 178B Signing time: Sat 20 Dec 2025 09:01:07 +0000 Manifest this update: Sat 20 Dec 2025 09:01:07 +0000 Manifest next update: Sun 21 Dec 2025 09:01:07 +0000 Files and hashes: 1: 0QENo1diQjJM77LIHBM5psDjtAM.crl (hash: TYvLRd1Iew2uIx7Qm5BL+s+nGkkT9NSbQixfkNQ8NRI=) 2: axw8eTRN4luwNfUppGZPJDLFRnk.roa (hash: 941/E7Pt0vnLLqpxlWNVKlBSpW2P0hox/ZuN05lIlOE=) 3: qL1excp8Az_0o7x1vHRMJ6uUBq8.roa (hash: etXW7FKK/vCX8HY/wRSJVfpHZyWVeKG9hX8M0M6D1Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:fd:c4:aa:c1:fc:51:a5:91:37:6d:5f:c5:aa:0a:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1010da3576242324cefb2c81c1339a6c0e3b403 Validity Not Before: Dec 20 09:01:07 2025 GMT Not After : Dec 21 09:01:07 2025 GMT Subject: CN=4e591aa0378dfd962e97ee8cc58aabd3eb85b20b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5b:91:7c:b0:90:cc:55:fe:5b:77:8e:21:f6: 0f:c6:24:34:7c:6a:ec:48:ef:8a:d3:6b:95:73:98: 4b:27:bb:31:68:c4:06:00:23:1d:86:d6:10:99:27: fe:bf:b3:a4:d5:77:d3:55:d0:d0:7e:03:f1:a5:1b: 02:1b:34:86:a1:75:a6:b1:ea:6c:73:fd:49:88:7b: 30:c1:61:17:9b:51:7a:fd:d5:f2:f0:48:df:ee:a3: 1e:b9:4a:ff:7f:95:6d:6f:b8:0a:fa:38:f2:20:67: d6:f4:e8:14:45:ea:84:ee:d4:5e:f1:a3:db:84:11: 55:55:5f:fb:42:37:93:e2:50:ff:c0:f4:c3:3d:b6: df:43:f4:97:37:45:9d:13:28:a6:5d:b0:88:59:65: 1b:2b:c4:58:f9:2c:a9:00:ce:63:63:2e:e1:90:24: 1f:68:b4:99:97:79:9c:5a:70:e6:ba:8c:e1:03:e8: 98:35:99:59:c2:fa:bf:f8:59:2b:c6:7d:22:dd:d5: bb:60:42:0e:8a:2f:6b:b2:3c:cd:ff:f3:cc:ee:98: 67:f3:86:e8:7c:07:df:7e:f1:a5:4c:72:b8:fd:4d: e4:8d:a8:6c:ee:d5:76:4a:90:2b:a1:1f:f3:3f:42: b2:7f:c1:bd:55:5a:b9:b1:51:f6:a1:d9:69:af:69: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:59:1A:A0:37:8D:FD:96:2E:97:EE:8C:C5:8A:AB:D3:EB:85:B2:0B X509v3 Authority Key Identifier: keyid:D1:01:0D:A3:57:62:42:32:4C:EF:B2:C8:1C:13:39:A6:C0:E3:B4:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0QENo1diQjJM77LIHBM5psDjtAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/577b11-7009-486c-9010-a70412fbc832/1/0QENo1diQjJM77LIHBM5psDjtAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1e:5e:cd:f0:51:1f:9f:ba:d5:cc:16:19:73:14:f6:20:33: 19:18:c7:88:46:86:49:28:08:83:9d:c0:19:15:bc:bd:3b:01: 10:37:be:80:2b:94:17:91:51:99:e6:77:db:3c:8b:a0:7b:76: 4b:cb:05:c5:c3:b6:07:01:b3:2b:e5:be:57:ff:3b:bf:20:b9: b3:5c:be:2c:f5:24:c9:92:61:95:bd:14:04:26:6d:9d:b4:16: b7:c5:d9:87:86:90:bc:3b:e1:17:c4:f2:b0:04:9d:eb:ae:65: fa:44:c2:08:06:01:2a:c3:c4:50:af:55:ca:b6:9b:e9:56:4c: 36:f8:ce:62:31:b5:df:76:fe:07:df:63:68:65:c9:ab:6c:b4: 7f:cc:6a:e8:79:6d:15:eb:02:f3:9f:d0:af:86:7f:75:68:ca: d7:32:65:7b:0c:b2:32:1e:27:82:02:53:a8:18:1e:08:5b:6b: a3:00:bd:75:ae:30:76:1b:c0:22:fd:0f:75:55:62:55:b2:f1: cd:40:9c:df:4c:f8:a3:6d:63:07:db:9b:33:62:a0:96:fe:3b: 28:e1:c9:54:8e:e3:42:3b:4b:1e:ca:65:b3:09:93:b3:41:66: 4c:a5:f2:f8:4f:8a:d8:d6:9f:28:e3:3c:a5:02:2e:d8:e6:f8: b6:e4:a9:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6/cSqwfxRpZE3bV/FqgqBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMDEwZGEzNTc2MjQyMzI0Y2VmYjJjODFjMTMzOWE2YzBl M2I0MDMwHhcNMjUxMjIwMDkwMTA3WhcNMjUxMjIxMDkwMTA3WjAzMTEwLwYDVQQD Eyg0ZTU5MWFhMDM3OGRmZDk2MmU5N2VlOGNjNThhYWJkM2ViODViMjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtluRfLCQzFX+W3eOIfYPxiQ0fGrs SO+K02uVc5hLJ7sxaMQGACMdhtYQmSf+v7Ok1XfTVdDQfgPxpRsCGzSGoXWmseps c/1JiHswwWEXm1F6/dXy8Ejf7qMeuUr/f5Vtb7gK+jjyIGfW9OgUReqE7tRe8aPb hBFVVV/7QjeT4lD/wPTDPbbfQ/SXN0WdEyimXbCIWWUbK8RY+SypAM5jYy7hkCQf aLSZl3mcWnDmuozhA+iYNZlZwvq/+Fkrxn0i3dW7YEIOii9rsjzN//PM7phn84bo fAfffvGlTHK4/U3kjahs7tV2SpAroR/zP0Kyf8G9VVq5sVH2odlpr2kcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5ZGqA3jf2WLpfujMWKq9PrhbILMB8GA1UdIwQY MBaAFNEBDaNXYkIyTO+yyBwTOabA47QDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAt YTcwNDEyZmJjODMyLzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi81NzdiMTEtNzAwOS00ODZjLTkwMTAtYTcwNDEyZmJjODMy LzEvMFFFTm8xZGlRakpNNzdMSUhCTTVwc0RqdEFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGR5ezfBR H5+61cwWGXMU9iAzGRjHiEaGSSgIg53AGRW8vTsBEDe+gCuUF5FRmeZ32zyLoHt2 S8sFxcO2BwGzK+W+V/87vyC5s1y+LPUkyZJhlb0UBCZtnbQWt8XZh4aQvDvhF8Ty sASd665l+kTCCAYBKsPEUK9Vyrab6VZMNvjOYjG133b+B99jaGXJq2y0f8xq6Hlt FesC85/Qr4Z/dWjK1zJlewyyMh4nggJTqBgeCFtrowC9da4wdhvAIv0PdVViVbLx zUCc30z4o21jB9ubM2Kglv47KOHJVI7jQjtLHsplswmTs0FmTKXy+E+K2NafKOM8 pQIu2Ob4tuSprg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:52:16 2025 by rpki-client