This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json) Hash identifier: ow/qtiHjzIVkvEorHAjTq3zVuPqB+3LYiUwu+gOYZP4= Subject key identifier: 6B:D5:91:C5:D0:33:B3:4F:CD:AF:37:04:5C:86:E2:DD:7E:9B:DC:D2 Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Certificate serial: 019B5976E59C2D07AEB1DEF645B0F491EF1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 07:02:02 +0000 Manifest this update: Fri 26 Dec 2025 07:02:02 +0000 Manifest next update: Sat 27 Dec 2025 07:02:02 +0000 Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: 5wGjJTf85HjQS4KYdzzqjv9C/LVTDi0MpDX271UKSSI=) 2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=) 3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 07:02:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:76:e5:9c:2d:07:ae:b1:de:f6:45:b0:f4:91:ef:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Validity Not Before: Dec 26 07:02:02 2025 GMT Not After : Dec 27 07:02:02 2025 GMT Subject: CN=6bd591c5d033b34fcdaf37045c86e2dd7e9bdcd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f0:ae:29:b0:ed:61:cd:fd:ce:3c:4f:9c:eb: a9:a3:4a:ad:0d:cc:ef:a4:f6:02:2a:6e:12:d8:6e: a7:3a:29:1b:86:59:88:11:ea:52:cc:5b:7d:48:34: fd:7c:cd:07:22:9e:33:84:ba:0a:08:e1:47:6c:37: dd:48:c6:37:0e:15:b6:21:d2:6f:f7:e1:d1:f8:e0: a0:01:74:a3:7d:e6:2f:ed:00:fa:e8:7b:41:cc:bf: 27:1d:27:01:b2:48:40:3f:65:ec:54:51:18:40:8b: 09:a8:1b:9f:97:6a:05:0d:c1:5a:f2:4c:65:57:88: f3:d0:6a:2f:dd:be:29:19:84:d7:07:59:4e:d8:9a: 57:2b:73:71:28:db:62:3b:a7:18:40:40:31:ac:26: 6f:d9:bb:e2:f6:7b:5d:df:9c:b7:3c:d2:6b:9f:2c: a8:a2:be:1a:11:e0:ef:4e:68:3c:77:23:a6:f1:94: ba:fb:bd:34:eb:2e:87:3c:c4:12:61:07:05:a5:32: cc:c7:ad:78:17:89:d7:ab:0f:cb:39:b7:44:ed:f1: ed:e4:02:e1:3a:ce:ad:b3:8a:05:7b:21:b7:61:3f: c9:04:e1:88:89:48:2a:6a:74:96:51:49:53:d2:12: ad:c0:43:c8:2a:4b:68:3c:7a:da:7c:73:7a:07:c9: 92:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D5:91:C5:D0:33:B3:4F:CD:AF:37:04:5C:86:E2:DD:7E:9B:DC:D2 X509v3 Authority Key Identifier: keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:58:64:9c:8f:fb:ac:e8:62:2f:b6:b0:71:44:e4:ed:e2:94: 9c:cc:b0:07:67:64:1f:1b:1b:36:4a:04:c3:b2:05:b1:81:d3: 49:11:f4:51:ae:d5:be:df:ef:74:15:54:14:67:7a:82:0f:4c: bf:91:2a:d7:89:a7:33:86:5b:ac:e0:84:f5:15:57:be:7b:9f: 76:91:2c:50:2c:98:7d:be:26:14:65:9a:fd:0b:10:7b:11:5e: ec:4e:98:d4:bf:60:1d:88:8f:ed:97:26:52:b0:ff:e9:0a:f6: 1e:a5:4b:bf:55:61:1d:b1:3d:b6:a2:f8:0d:78:c5:bb:1b:eb: f8:e1:78:a5:8a:64:29:00:bc:9e:1d:b5:cc:f4:99:ca:af:c1: 81:e7:19:1e:d2:80:07:a1:25:62:3c:27:54:f5:9e:ef:50:4e: d1:9d:9a:24:68:ec:b5:ea:7f:81:3f:2b:29:7b:dc:fb:98:f1: 6f:a4:3e:e4:36:1f:90:eb:b0:48:8a:2e:eb:20:dc:51:30:f3: 95:83:bf:c0:d4:1e:97:05:13:68:2b:44:d3:24:79:52:9e:16: 09:9e:02:c7:7a:fe:39:fe:df:4c:2f:8b:73:1d:7b:28:23:db: 29:b5:54:7d:33:31:6d:74:f4:f2:a2:5f:5a:14:cd:f3:35:2d: 75:c6:6c:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZduWcLQeusd72RbD0ke8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMGQ1YjMwYjQ2YzdiOTdiMmRiYzQ1ODljZWEzNjIyYWQ3 NTYxNTYwHhcNMjUxMjI2MDcwMjAyWhcNMjUxMjI3MDcwMjAyWjAzMTEwLwYDVQQD Eyg2YmQ1OTFjNWQwMzNiMzRmY2RhZjM3MDQ1Yzg2ZTJkZDdlOWJkY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfCuKbDtYc39zjxPnOupo0qtDczv pPYCKm4S2G6nOikbhlmIEepSzFt9SDT9fM0HIp4zhLoKCOFHbDfdSMY3DhW2IdJv 9+HR+OCgAXSjfeYv7QD66HtBzL8nHScBskhAP2XsVFEYQIsJqBufl2oFDcFa8kxl V4jz0Gov3b4pGYTXB1lO2JpXK3NxKNtiO6cYQEAxrCZv2bvi9ntd35y3PNJrnyyo or4aEeDvTmg8dyOm8ZS6+7006y6HPMQSYQcFpTLMx614F4nXqw/LObdE7fHt5ALh Os6ts4oFeyG3YT/JBOGIiUgqanSWUUlT0hKtwEPIKktoPHrafHN6B8mS2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvVkcXQM7NPza83BFyG4t1+m9zSMB8GA1UdIwQY MBaAFNENWzC0bHuXstvEWJzqNiKtdWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUt M2U0MGQwMTc0MGIyLzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUtM2U0MGQwMTc0MGIy LzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUlhknI/7 rOhiL7awcUTk7eKUnMywB2dkHxsbNkoEw7IFsYHTSRH0Ua7Vvt/vdBVUFGd6gg9M v5Eq14mnM4ZbrOCE9RVXvnufdpEsUCyYfb4mFGWa/QsQexFe7E6Y1L9gHYiP7Zcm UrD/6Qr2HqVLv1VhHbE9tqL4DXjFuxvr+OF4pYpkKQC8nh21zPSZyq/BgecZHtKA B6ElYjwnVPWe71BO0Z2aJGjstep/gT8rKXvc+5jxb6Q+5DYfkOuwSIou6yDcUTDz lYO/wNQelwUTaCtE0yR5Up4WCZ4Cx3r+Of7fTC+Lcx17KCPbKbVUfTMxbXT08qJf WhTN8zUtdcZsOQ== -----END CERTIFICATE-----Generated at Fri Dec 26 16:05:50 2025 by rpki-client