This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json) Hash identifier: afDpdVp0Oe0nO4lnSbJvD6Y0YshymvYRV6L06A5itUY= Subject key identifier: DC:70:15:76:5A:B6:E6:D4:BD:25:E3:11:6D:BE:41:19:B2:7E:2A:E0 Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Certificate serial: 019B5A88BA19B7EE70468A5383ACBEF06026 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft Manifest number: 179A Signing time: Fri 26 Dec 2025 12:01:08 +0000 Manifest this update: Fri 26 Dec 2025 12:01:08 +0000 Manifest next update: Sat 27 Dec 2025 12:01:08 +0000 Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: nMy81Vs4oYa1e3zDAKlOqqabXWM59K1qJEMpGyCwtzc=) 2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:ba:19:b7:ee:70:46:8a:53:83:ac:be:f0:60:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c Validity Not Before: Dec 26 12:01:08 2025 GMT Not After : Dec 27 12:01:08 2025 GMT Subject: CN=dc7015765ab6e6d4bd25e3116dbe4119b27e2ae0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:04:5f:51:e4:a3:f4:0e:d2:40:0c:f6:98:d0: 1f:1d:66:2c:47:ab:58:39:6b:60:3e:0b:90:cf:a0: b0:02:0f:b3:3f:de:07:d6:cc:cb:ac:30:19:ac:5a: 1f:75:35:f1:80:bf:6e:dd:f6:1c:40:22:78:57:4b: a5:c5:17:d0:6f:90:7d:2d:cc:bd:6f:f4:50:3a:cb: 22:e3:a7:a9:a0:6b:76:3b:8c:5e:74:99:09:4d:a9: dc:90:82:73:c5:dd:18:91:49:f2:bb:cd:77:5c:b7: ed:3b:02:c0:d6:96:c4:13:f3:93:a1:a6:34:68:77: e6:bb:6e:dc:3b:7c:b7:44:8e:e6:fb:fb:b9:19:e4: 79:fb:9b:4b:da:13:ed:4b:e1:91:54:e6:a5:ac:e6: 89:60:40:d4:6f:05:e1:0a:00:74:47:2e:c6:82:d9: 12:44:70:42:89:1e:ee:ed:92:07:73:59:fb:82:d3: 81:f4:c6:45:34:92:d5:2d:b3:41:9e:91:9d:74:d9: 4e:ae:88:cf:2f:65:14:0a:1b:08:8e:15:2f:eb:a7: 54:ca:27:34:6a:41:79:fd:a1:d5:c0:f7:a8:91:8d: 2a:b5:2b:1e:6b:b0:0a:87:03:20:00:47:f3:2d:c0: 18:d7:b1:37:9f:e3:36:f7:03:2a:11:5a:af:3b:c8: fe:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:70:15:76:5A:B6:E6:D4:BD:25:E3:11:6D:BE:41:19:B2:7E:2A:E0 X509v3 Authority Key Identifier: keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8a:78:30:d2:4f:d2:65:20:50:15:74:8f:ff:95:3f:c3:78: 9d:f9:69:0b:bd:00:4b:04:c4:69:aa:97:6d:a6:54:5b:9f:3c: 62:c8:bf:1f:38:34:99:81:c4:d6:ac:bc:56:0b:31:9d:90:79: 7f:6b:a4:8a:15:6f:a5:ad:0a:7b:9e:8f:53:aa:d5:64:9f:1d: 45:54:90:21:a9:d7:c5:32:1c:14:6b:1b:0f:64:f7:69:a5:e0: 77:0c:55:a2:b1:62:a6:0d:48:1e:4c:03:63:b6:98:61:f2:2b: 6f:2f:b0:63:da:c2:59:00:ae:7e:10:2a:a4:41:4a:da:1f:d6: 37:26:86:1b:86:2b:99:12:23:8a:2d:92:5f:4e:2f:7a:24:6c: fb:41:51:b9:23:fb:05:76:db:a5:32:f9:3f:18:6a:94:93:de: c3:89:3b:7e:29:dd:6b:55:58:04:d9:c3:15:ee:e5:72:30:6d: 03:c4:b3:a7:eb:76:f7:69:7f:92:c1:7a:0f:43:f6:4b:17:a3: 60:46:59:87:c2:f0:ce:fa:41:f2:03:11:e5:5b:3b:0b:6f:c3: 22:7f:a0:25:9b:89:5b:cc:e5:57:7e:ad:d4:d4:42:0b:94:ff: c1:93:7b:d5:fa:11:43:4a:04:ce:9c:b0:a9:e3:12:f9:40:3a: 92:61:12:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiLoZt+5wRopTg6y+8GAmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4ZWY2MWJkYzAzNGZiNTYzOGJjZjE5ZTA3ZWMyMWQ5MDAx OWQ0MmMwHhcNMjUxMjI2MTIwMTA4WhcNMjUxMjI3MTIwMTA4WjAzMTEwLwYDVQQD EyhkYzcwMTU3NjVhYjZlNmQ0YmQyNWUzMTE2ZGJlNDExOWIyN2UyYWUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgRfUeSj9A7SQAz2mNAfHWYsR6tY OWtgPguQz6CwAg+zP94H1szLrDAZrFofdTXxgL9u3fYcQCJ4V0ulxRfQb5B9Lcy9 b/RQOssi46epoGt2O4xedJkJTanckIJzxd0YkUnyu813XLftOwLA1pbEE/OToaY0 aHfmu27cO3y3RI7m+/u5GeR5+5tL2hPtS+GRVOalrOaJYEDUbwXhCgB0Ry7GgtkS RHBCiR7u7ZIHc1n7gtOB9MZFNJLVLbNBnpGddNlOrojPL2UUChsIjhUv66dUyic0 akF5/aHVwPeokY0qtSsea7AKhwMgAEfzLcAY17E3n+M29wMqEVqvO8j+PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxwFXZatubUvSXjEW2+QRmyfirgMB8GA1UdIwQY MBaAFKjvYb3ANPtWOLzxngfsIdkAGdQsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYt MWY0OWJjN2ZkM2JkLzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8zMDAxNjUtMjVjNi00MDFiLTljYmYtMWY0OWJjN2ZkM2Jk LzEvcU85aHZjQTAtMVk0dlBHZUItd2gyUUFaMUN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG4p4MNJP 0mUgUBV0j/+VP8N4nflpC70ASwTEaaqXbaZUW588Ysi/Hzg0mYHE1qy8VgsxnZB5 f2ukihVvpa0Ke56PU6rVZJ8dRVSQIanXxTIcFGsbD2T3aaXgdwxVorFipg1IHkwD Y7aYYfIrby+wY9rCWQCufhAqpEFK2h/WNyaGG4YrmRIjii2SX04veiRs+0FRuSP7 BXbbpTL5PxhqlJPew4k7finda1VYBNnDFe7lcjBtA8Szp+t292l/ksF6D0P2Sxej YEZZh8LwzvpB8gMR5Vs7C2/DIn+gJZuJW8zlV36t1NRCC5T/wZN71foRQ0oEzpyw qeMS+UA6kmESBw== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:45 2025 by rpki-client