This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json) Hash identifier: cRxJ2nbtulxTm56+c5ZQvDEWJjSiDJhvajVSYjgyJZM= Subject key identifier: A5:AA:5D:AF:2E:EB:DB:EE:98:24:D5:6C:7A:E8:26:6D:DB:8C:C3:64 Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Certificate serial: 019B36B33B4A819DB36C3FC8D8DCEF7DED6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft Manifest number: 1207 Signing time: Fri 19 Dec 2025 13:01:14 +0000 Manifest this update: Fri 19 Dec 2025 13:01:14 +0000 Manifest next update: Sat 20 Dec 2025 13:01:14 +0000 Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=) 2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: oC2kgHGeqGyNvBY8Pu4rxC32/pxuaD40BbNJiZHkk+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:b3:3b:4a:81:9d:b3:6c:3f:c8:d8:dc:ef:7d:ed:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Validity Not Before: Dec 19 13:01:14 2025 GMT Not After : Dec 20 13:01:14 2025 GMT Subject: CN=a5aa5daf2eebdbee9824d56c7ae8266ddb8cc364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:df:1c:a6:c9:e6:dc:38:af:0b:0f:ea:59:8e: 99:e7:f3:ea:bb:dd:25:1c:06:08:78:20:99:48:68: dd:f9:71:af:ff:34:00:00:27:92:c2:7e:e2:93:d9: ca:31:42:e0:a5:ae:1a:9f:ce:82:5b:a3:4c:bc:53: 7c:83:ec:94:6a:39:d2:8a:4d:bb:0f:21:3e:7f:5c: 92:c8:d8:37:04:bc:6b:43:5f:73:37:71:c1:26:05: 78:ce:8d:46:cb:5a:5e:4c:17:2f:f7:60:89:73:41: 31:17:b2:b2:49:db:22:26:0e:ee:99:a1:30:26:56: 88:df:1f:ff:8f:85:23:9d:c7:ac:fe:12:0d:60:71: b8:fe:f3:4b:6f:ad:05:ba:5a:93:94:d3:a1:ce:7d: 00:da:72:04:f4:e5:62:24:a3:5b:58:79:b8:0d:77: 6b:c0:01:c5:27:fc:0b:59:27:1e:99:d3:ef:27:62: 9c:19:bc:e2:26:86:86:91:1f:63:12:89:a1:15:6a: d1:b7:40:bb:ef:1b:a7:dc:92:6b:e2:a1:8c:7b:7a: ac:ad:ca:08:c0:4b:db:51:b5:6f:e9:ab:9a:74:b4: b7:63:d7:06:f1:a9:10:ee:78:f3:6d:c0:6e:f3:89: fd:05:1f:bb:0c:90:0b:0b:f3:32:25:58:83:3b:b1: f2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:5D:AF:2E:EB:DB:EE:98:24:D5:6C:7A:E8:26:6D:DB:8C:C3:64 X509v3 Authority Key Identifier: keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f2:38:9e:7f:57:13:8d:8c:48:4e:0e:68:e6:a2:7b:26:d7: 39:b0:e5:4b:cf:a6:73:f0:55:6a:5f:dc:eb:59:a2:8f:ce:7d: a0:f7:dd:66:85:6b:d6:7e:af:2f:6d:fb:54:41:c2:f5:a5:57: 2a:80:6b:5f:f4:d1:d5:5e:01:4c:40:61:b4:75:49:f7:5d:c8: 6b:dd:00:09:c4:b2:92:b6:a5:c1:17:45:fc:c6:5f:48:d9:12: a0:b2:fc:13:00:1b:aa:d2:6c:8d:ac:71:54:85:20:98:97:bd: 55:75:92:70:15:9b:c4:ce:49:99:1d:51:58:7c:1e:1b:85:79: de:13:9e:07:06:ee:21:53:3f:eb:e1:90:f1:76:46:09:cb:d6: 48:a7:39:2c:2b:5b:cd:2e:35:47:ff:26:7e:72:24:3c:0a:3c: c5:75:92:f5:f2:1f:26:32:4b:3d:f8:e2:ed:53:24:44:e2:84: ef:e7:1b:64:55:1a:14:88:21:94:a9:58:b8:21:8b:29:97:d6: 70:c6:56:e4:fc:ae:f4:84:8b:f3:71:67:b4:ed:3f:39:d9:b8: 8a:d8:b7:15:60:fb:0b:b0:87:3f:f9:ce:05:e7:78:c7:96:9d: 4f:82:25:3e:08:8e:52:d0:7d:43:b7:50:3a:24:f7:a4:22:61: 20:5e:15:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs2sztKgZ2zbD/I2Nzvfe1qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj NWU5NTAwHhcNMjUxMjE5MTMwMTE0WhcNMjUxMjIwMTMwMTE0WjAzMTEwLwYDVQQD EyhhNWFhNWRhZjJlZWJkYmVlOTgyNGQ1NmM3YWU4MjY2ZGRiOGNjMzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlt8cpsnm3DivCw/qWY6Z5/Pqu90l HAYIeCCZSGjd+XGv/zQAACeSwn7ik9nKMULgpa4an86CW6NMvFN8g+yUajnSik27 DyE+f1ySyNg3BLxrQ19zN3HBJgV4zo1Gy1peTBcv92CJc0ExF7KySdsiJg7umaEw JlaI3x//j4Ujnces/hINYHG4/vNLb60FulqTlNOhzn0A2nIE9OViJKNbWHm4DXdr wAHFJ/wLWScemdPvJ2KcGbziJoaGkR9jEomhFWrRt0C77xun3JJr4qGMe3qsrcoI wEvbUbVv6auadLS3Y9cG8akQ7njzbcBu84n9BR+7DJALC/MyJViDO7HyuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWqXa8u69vumCTVbHroJm3bjMNkMB8GA1UdIwQY MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0 LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvI4nn9X E42MSE4OaOaieybXObDlS8+mc/BVal/c61mij859oPfdZoVr1n6vL237VEHC9aVX KoBrX/TR1V4BTEBhtHVJ913Ia90ACcSykralwRdF/MZfSNkSoLL8EwAbqtJsjaxx VIUgmJe9VXWScBWbxM5JmR1RWHweG4V53hOeBwbuIVM/6+GQ8XZGCcvWSKc5LCtb zS41R/8mfnIkPAo8xXWS9fIfJjJLPfji7VMkROKE7+cbZFUaFIghlKlYuCGLKZfW cMZW5Pyu9ISL83FntO0/Odm4iti3FWD7C7CHP/nOBed4x5adT4IlPgiOUtB9Q7dQ OiT3pCJhIF4Vhg== -----END CERTIFICATE-----Generated at Fri Dec 19 20:29:22 2025 by rpki-client