This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft File: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json) Hash identifier: q7RCWh41W21eG4F3WoW3euwj6bn4nfKMaPaCirVGiGo= Subject key identifier: F7:D5:2C:FA:51:85:07:AC:76:E7:8D:DD:73:79:14:FA:A6:D1:8A:33 Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 Certificate issuer: /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Certificate serial: 019B4625FD0BBB1434B162DA0DEC078F3C8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft Manifest number: 178D Signing time: Mon 22 Dec 2025 13:00:53 +0000 Manifest this update: Mon 22 Dec 2025 13:00:53 +0000 Manifest next update: Tue 23 Dec 2025 13:00:53 +0000 Files and hashes: 1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: +EcjArknSgPdy0dUoXKmacgl52R2iB/0qJm5x4Nc1kM=) 2: lsGbzxHmmLCraaV9m6GpjO-iIBA.roa (hash: Z6I8DbUnNuqgSWO6SRPbYw4EfdxPDhEpV2EFYvnSy8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:25:fd:0b:bb:14:34:b1:62:da:0d:ec:07:8f:3c:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756 Validity Not Before: Dec 22 13:00:53 2025 GMT Not After : Dec 23 13:00:53 2025 GMT Subject: CN=f7d52cfa518507ac76e78ddd737914faa6d18a33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ab:b3:07:dd:e6:7b:e6:f9:3a:e0:12:d0:ef: ca:10:75:71:0e:15:d6:06:02:ef:75:a5:11:08:d7: e3:6d:03:78:48:f4:75:f2:51:db:8e:ef:e3:21:96: 1d:73:70:fb:20:21:f0:91:54:6e:09:25:b4:af:0e: f1:19:58:c8:bf:34:88:91:8b:7a:2a:76:e8:86:75: 64:a3:99:49:fd:e0:12:14:39:8e:8a:af:6f:db:98: b4:36:0c:99:a4:e6:06:fe:97:9f:7e:00:62:55:fa: 3d:2c:03:ef:c6:cf:b4:b4:47:67:db:46:db:08:59: ad:41:5f:49:41:18:c5:3c:b1:c4:4d:ac:c2:c1:b0: f0:90:76:ed:ad:e8:e9:65:09:15:3a:c6:f8:35:2e: 53:9e:45:f6:ad:64:e4:88:fd:94:5b:ee:9c:c4:5d: c0:21:64:1f:1a:0b:73:be:14:e5:51:d9:a9:a4:cb: 86:42:ec:6e:b3:68:81:97:e5:69:74:95:99:11:6c: 4e:e8:9c:2f:de:26:1e:65:97:a2:b5:10:e0:95:9b: 34:9b:b4:ae:71:78:5c:10:c7:63:19:43:11:73:f9: 27:20:4f:42:46:50:57:71:d9:b8:9f:94:4e:cd:18: 6c:79:15:e0:89:fd:ee:10:fd:da:4d:bd:54:b6:94: 99:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:2C:FA:51:85:07:AC:76:E7:8D:DD:73:79:14:FA:A6:D1:8A:33 X509v3 Authority Key Identifier: keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:47:fc:f3:d9:8c:97:13:be:9c:47:7d:05:85:bc:ce:5c:1d: 47:b5:ea:53:b8:d4:13:24:0c:86:75:d9:59:8f:ac:e7:87:77: ac:b0:45:79:68:e3:c9:ed:98:70:c5:d4:be:73:c4:79:42:84: 9c:e7:71:8f:25:9d:11:52:16:98:76:d9:44:51:44:e2:8f:f5: e9:e0:7b:ca:15:28:31:4e:54:32:11:fc:ea:e6:45:11:9a:16: 5f:30:bd:05:a9:df:c4:2e:31:3d:04:24:c5:70:89:75:03:7f: 33:21:de:7f:74:5a:e8:e6:75:64:a1:03:3a:43:85:5d:c3:55: f2:d7:b1:1d:87:27:f3:df:57:9c:8a:00:09:f5:b9:c0:36:ca: 7b:5b:10:36:9d:3a:26:bb:f1:e0:b9:7d:b4:21:8c:93:7c:47: fd:7e:13:a5:f1:92:0a:c9:45:12:3c:e9:0d:4e:58:df:3e:bd: dc:4b:8b:24:fc:b0:a4:32:92:4b:db:b4:14:29:3e:d4:e2:da: 0d:d6:c4:71:b3:4a:f0:e6:54:4b:b3:23:4a:d8:ee:85:75:c0: 0e:fb:60:19:52:4f:3a:fa:e5:1c:f3:2c:9b:69:0b:61:4d:de: 07:c7:fd:92:f7:26:3a:59:3c:e2:f7:8a:a2:75:ec:7f:ea:11: 49:1d:fc:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJf0LuxQ0sWLaDewHjzyOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy ZWE3NTYwHhcNMjUxMjIyMTMwMDUzWhcNMjUxMjIzMTMwMDUzWjAzMTEwLwYDVQQD EyhmN2Q1MmNmYTUxODUwN2FjNzZlNzhkZGQ3Mzc5MTRmYWE2ZDE4YTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2quzB93me+b5OuAS0O/KEHVxDhXW BgLvdaURCNfjbQN4SPR18lHbju/jIZYdc3D7ICHwkVRuCSW0rw7xGVjIvzSIkYt6 KnbohnVko5lJ/eASFDmOiq9v25i0NgyZpOYG/peffgBiVfo9LAPvxs+0tEdn20bb CFmtQV9JQRjFPLHETazCwbDwkHbtrejpZQkVOsb4NS5TnkX2rWTkiP2UW+6cxF3A IWQfGgtzvhTlUdmppMuGQuxus2iBl+VpdJWZEWxO6Jwv3iYeZZeitRDglZs0m7Su cXhcEMdjGUMRc/knIE9CRlBXcdm4n5ROzRhseRXgif3uEP3aTb1UtpSZqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfVLPpRhQesdueN3XN5FPqm0YozMB8GA1UdIwQY MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEf889mM lxO+nEd9BYW8zlwdR7XqU7jUEyQMhnXZWY+s54d3rLBFeWjjye2YcMXUvnPEeUKE nOdxjyWdEVIWmHbZRFFE4o/16eB7yhUoMU5UMhH86uZFEZoWXzC9BanfxC4xPQQk xXCJdQN/MyHef3Ra6OZ1ZKEDOkOFXcNV8texHYcn899XnIoACfW5wDbKe1sQNp06 Jrvx4Ll9tCGMk3xH/X4TpfGSCslFEjzpDU5Y3z693EuLJPywpDKSS9u0FCk+1OLa DdbEcbNK8OZUS7MjStjuhXXADvtgGVJPOvrlHPMsm2kLYU3eB8f9kvcmOlk84veK onXsf+oRSR38Pg== -----END CERTIFICATE-----Generated at Mon Dec 22 20:44:46 2025 by rpki-client