This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json) Hash identifier: BJJQgLZK47NOKZQpl2w4MVIMQH/1SrdHtnbm55Yiot4= Subject key identifier: 8E:D6:2B:B8:4B:4F:8D:37:43:1A:90:E0:5E:C4:A2:5E:70:40:1F:2A Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Certificate serial: 019B3D23032033B2088D3C95701942249C96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 19:01:03 +0000 Manifest this update: Sat 20 Dec 2025 19:01:03 +0000 Manifest next update: Sun 21 Dec 2025 19:01:03 +0000 Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 61eY5Xmwi3gt0jGOI4lSBE2W4IHkT6KPGW27cyJnvy8=) 2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=) 3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=) 4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:03:20:33:b2:08:8d:3c:95:70:19:42:24:9c:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Validity Not Before: Dec 20 19:01:03 2025 GMT Not After : Dec 21 19:01:03 2025 GMT Subject: CN=8ed62bb84b4f8d37431a90e05ec4a25e70401f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:b4:53:00:6f:52:01:92:f8:c3:cd:5a:91:d1: b2:dc:52:19:0c:f9:27:c3:41:e1:d7:1e:73:3b:2b: 52:0b:c0:55:a6:5c:19:5b:57:98:28:43:18:30:3e: 13:fd:60:46:a9:65:95:76:78:b8:aa:18:c8:a5:19: 7b:f5:4d:f2:9d:57:fb:bd:f0:d1:79:db:83:fe:62: ec:12:0e:5d:86:fd:f6:a6:0b:2a:a2:09:65:4a:f8: 37:dc:a3:ea:2a:10:51:b8:ed:f3:6f:e8:7a:d0:13: f8:7c:f0:42:95:b4:b7:e2:ae:d7:c3:df:67:fa:aa: 9a:6d:62:16:f2:1e:e6:32:ab:f7:ef:12:ce:49:7c: 69:4f:82:d9:18:c6:12:01:a9:b8:eb:c1:ce:e7:31: a6:77:89:0b:5e:50:de:47:8a:12:50:25:5c:83:65: 6d:8c:3c:85:87:63:b8:19:e7:df:95:1a:5a:1d:5f: fe:22:49:f6:14:f3:14:ec:b6:0c:8f:1d:fe:de:7e: 42:09:56:37:47:98:f9:6d:f0:60:60:c3:23:c1:40: 14:61:4b:82:9e:b6:6a:94:ec:e9:73:a6:ff:39:d8: 8b:a8:ee:6d:56:35:9d:f8:92:9a:53:2a:91:09:15: 49:eb:d2:84:0c:4c:02:f8:5f:3f:54:a2:a5:74:82: 18:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:D6:2B:B8:4B:4F:8D:37:43:1A:90:E0:5E:C4:A2:5E:70:40:1F:2A X509v3 Authority Key Identifier: keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:67:a7:94:87:dd:d6:6a:0f:a5:31:85:ee:a1:91:d2:00:db: 61:e3:10:3e:74:10:fe:07:5f:e6:85:08:b1:15:b7:e0:88:58: 30:b5:fe:8b:a1:19:cc:72:44:05:56:57:98:09:bb:b7:92:e2: e3:41:23:c7:d3:ce:56:41:6d:94:6c:30:56:15:5c:a2:c2:f3: 6d:1b:89:0f:c5:bb:da:e9:01:4c:ed:c4:f8:00:4c:de:46:cb: 62:a1:f1:51:68:88:50:48:69:b1:d3:6d:33:f6:91:7d:5a:23: 35:2c:23:21:5e:38:39:2b:2c:ee:cc:bc:d0:4a:78:f2:99:29: c7:bf:b9:77:76:d4:87:d8:60:c6:83:10:46:f3:76:0c:76:3d: 7b:91:59:d2:78:c5:b0:ff:e4:93:03:9f:95:d4:70:28:60:9e: 6d:a3:43:40:ec:50:7b:e0:ac:9c:4f:a3:93:80:10:e0:dc:c7: 2f:62:53:59:b5:73:29:f7:7d:6d:08:4b:c4:f1:9b:6f:54:8d: d0:71:f6:12:8a:86:51:93:98:95:8e:c3:99:28:f4:78:d9:1e: 65:da:4c:11:19:71:b9:44:b0:79:00:c8:d5:f8:ee:93:34:6d: 1e:16:bb:a6:3c:9c:9c:3e:42:18:b5:d8:48:87:46:16:95:17: 4d:7c:91:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IwMgM7IIjTyVcBlCJJyWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm NDAxMzYwHhcNMjUxMjIwMTkwMTAzWhcNMjUxMjIxMTkwMTAzWjAzMTEwLwYDVQQD Eyg4ZWQ2MmJiODRiNGY4ZDM3NDMxYTkwZTA1ZWM0YTI1ZTcwNDAxZjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbRTAG9SAZL4w81akdGy3FIZDPkn w0Hh1x5zOytSC8BVplwZW1eYKEMYMD4T/WBGqWWVdni4qhjIpRl79U3ynVf7vfDR eduD/mLsEg5dhv32pgsqogllSvg33KPqKhBRuO3zb+h60BP4fPBClbS34q7Xw99n +qqabWIW8h7mMqv37xLOSXxpT4LZGMYSAam468HO5zGmd4kLXlDeR4oSUCVcg2Vt jDyFh2O4GefflRpaHV/+Ikn2FPMU7LYMjx3+3n5CCVY3R5j5bfBgYMMjwUAUYUuC nrZqlOzpc6b/OdiLqO5tVjWd+JKaUyqRCRVJ69KEDEwC+F8/VKKldIIYuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI7WK7hLT403QxqQ4F7Eol5wQB8qMB8GA1UdIwQY MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1 LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAWenlIfd 1moPpTGF7qGR0gDbYeMQPnQQ/gdf5oUIsRW34IhYMLX+i6EZzHJEBVZXmAm7t5Li 40Ejx9POVkFtlGwwVhVcosLzbRuJD8W72ukBTO3E+ABM3kbLYqHxUWiIUEhpsdNt M/aRfVojNSwjIV44OSss7sy80Ep48pkpx7+5d3bUh9hgxoMQRvN2DHY9e5FZ0njF sP/kkwOfldRwKGCebaNDQOxQe+CsnE+jk4AQ4NzHL2JTWbVzKfd9bQhLxPGbb1SN 0HH2EoqGUZOYlY7DmSj0eNkeZdpMERlxuUSweQDI1fjukzRtHha7pjycnD5CGLXY SIdGFpUXTXyRYQ== -----END CERTIFICATE-----Generated at Sun Dec 21 01:09:37 2025 by rpki-client