This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft File: 0qAx8Tnc7S9zIZczVPRqrJcvraw.mft (raw, json) Hash identifier: tTqx2jrG0oBeZHxiyHbASI1QZP1DwCTDhiKiGat1Ueo= Subject key identifier: FA:3F:BE:EF:28:ED:9D:26:7E:29:56:27:9B:BB:A0:6A:E3:2D:47:AA Authority key identifier: D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC Certificate issuer: /CN=d2a031f139dced2f7321973354f46aac972fadac Certificate serial: 019B5AF6B114406C00E46F5DD6E51D59665D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft Manifest number: 10 Signing time: Fri 26 Dec 2025 14:01:15 +0000 Manifest this update: Fri 26 Dec 2025 14:01:15 +0000 Manifest next update: Sat 27 Dec 2025 14:01:15 +0000 Files and hashes: 1: 0qAx8Tnc7S9zIZczVPRqrJcvraw.crl (hash: UQCU66HBwO2ZGeX23rl74O/MtLD+0M/Ge349K6WcA1M=) 2: EejkQ51oukNPA2gCZSHwTegZCLM.asa (hash: o2rwBSp35pMIkTt6ukXZd+rxWHo29FeFm2MZ0AHdb8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:f6:b1:14:40:6c:00:e4:6f:5d:d6:e5:1d:59:66:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a031f139dced2f7321973354f46aac972fadac Validity Not Before: Dec 26 14:01:15 2025 GMT Not After : Dec 27 14:01:15 2025 GMT Subject: CN=fa3fbeef28ed9d267e2956279bbba06ae32d47aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:97:3e:2f:77:55:07:67:a7:dc:0b:dc:57:05: 9a:83:44:ec:33:f7:24:9f:f2:e5:11:ad:2a:57:17: 5a:ed:1e:77:98:c3:0f:c3:a4:35:f7:32:f5:7f:86: 63:6f:00:96:92:26:1e:07:c4:ba:e5:89:a0:a6:ad: 0b:61:13:65:09:08:ee:5f:75:a5:e3:a5:25:bc:5a: 70:90:08:87:8c:77:36:32:9b:74:f0:fa:c8:2f:cd: 45:52:b1:db:f9:57:dd:51:b1:d5:85:9e:3a:81:e6: db:59:3f:73:2e:ea:cd:1a:98:50:80:16:41:35:f0: 66:eb:8b:64:6f:28:d3:61:af:23:f9:21:34:48:f5: 23:47:fe:54:91:29:56:f7:a5:9b:37:9a:02:67:9c: 9a:72:6e:cb:91:20:b0:56:40:28:c3:ef:96:ab:56: 8b:c2:fe:47:99:d0:f2:89:14:7d:ae:d3:44:43:4d: e6:0a:33:bb:e8:13:96:4e:fd:60:a6:95:56:b4:71: 1b:7e:ec:16:61:fb:65:d8:b2:5a:0c:9b:db:1a:1f: dd:b6:fd:e7:0e:4d:41:db:3c:91:74:39:77:a7:a8: 43:9e:ad:86:7f:1b:69:c3:c9:a9:29:4e:cb:74:68: f0:40:8c:a4:c9:c2:77:90:4f:a8:14:d6:9f:b4:26: a7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:3F:BE:EF:28:ED:9D:26:7E:29:56:27:9B:BB:A0:6A:E3:2D:47:AA X509v3 Authority Key Identifier: keyid:D2:A0:31:F1:39:DC:ED:2F:73:21:97:33:54:F4:6A:AC:97:2F:AD:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qAx8Tnc7S9zIZczVPRqrJcvraw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/b451f3-4ccb-4a08-ab78-62740725f71a/1/0qAx8Tnc7S9zIZczVPRqrJcvraw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:e1:06:6a:c6:b7:b5:c0:25:74:f8:0a:c6:04:36:86:c8:01: 1e:d5:fe:02:e3:92:b1:18:b2:df:39:b7:e5:a8:d4:92:0f:18: c7:ff:aa:84:ee:09:65:8a:93:fb:dc:9f:0b:9a:f9:fa:19:a6: d8:3d:ee:c1:86:b5:58:e1:55:39:5d:98:08:08:6d:af:46:0f: 10:2b:64:46:d7:46:ab:c1:3f:fc:9c:fb:a7:62:16:57:fa:23: cd:66:cc:ad:39:a2:f8:8e:99:99:f7:27:1d:26:2a:0c:55:66: c6:41:7b:05:54:f7:81:f7:86:3f:84:5f:74:03:9e:8f:a6:45: 91:a7:69:7d:1b:bb:d3:2d:11:a4:e9:11:b3:0f:72:3b:85:23: a9:18:5e:2a:35:47:2c:3c:45:1b:eb:8e:0e:a7:b8:9e:5d:be: 89:23:a3:b3:9e:6b:0b:cf:23:69:48:ae:97:bb:f6:9f:17:c4: fb:bc:9d:4f:b2:05:25:89:d5:b2:10:24:d3:a3:fa:76:28:12: 9e:91:15:09:1c:a4:de:76:0d:c5:e2:5d:67:9d:d8:10:10:e1: bc:04:bf:fd:46:0b:fd:06:12:23:b2:21:01:2b:a2:a6:09:10: 20:46:64:59:c3:65:c2:ba:9d:86:42:e5:ba:61:76:8c:c5:47: 69:cd:20:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZta9rEUQGwA5G9d1uUdWWZdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTAzMWYxMzlkY2VkMmY3MzIxOTczMzU0ZjQ2YWFjOTcy ZmFkYWMwHhcNMjUxMjI2MTQwMTE1WhcNMjUxMjI3MTQwMTE1WjAzMTEwLwYDVQQD EyhmYTNmYmVlZjI4ZWQ5ZDI2N2UyOTU2Mjc5YmJiYTA2YWUzMmQ0N2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJc+L3dVB2en3AvcVwWag0TsM/ck n/LlEa0qVxda7R53mMMPw6Q19zL1f4ZjbwCWkiYeB8S65Ymgpq0LYRNlCQjuX3Wl 46UlvFpwkAiHjHc2Mpt08PrIL81FUrHb+VfdUbHVhZ46gebbWT9zLurNGphQgBZB NfBm64tkbyjTYa8j+SE0SPUjR/5UkSlW96WbN5oCZ5yacm7LkSCwVkAow++Wq1aL wv5HmdDyiRR9rtNEQ03mCjO76BOWTv1gppVWtHEbfuwWYftl2LJaDJvbGh/dtv3n Dk1B2zyRdDl3p6hDnq2Gfxtpw8mpKU7LdGjwQIykycJ3kE+oFNaftCanPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPo/vu8o7Z0mfilWJ5u7oGrjLUeqMB8GA1UdIwQY MBaAFNKgMfE53O0vcyGXM1T0aqyXL62sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgt NjI3NDA3MjVmNzFhLzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9iNDUxZjMtNGNjYi00YTA4LWFiNzgtNjI3NDA3MjVmNzFh LzEvMHFBeDhUbmM3Uzl6SVpjelZQUnFySmN2cmF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAeEGasa3 tcAldPgKxgQ2hsgBHtX+AuOSsRiy3zm35ajUkg8Yx/+qhO4JZYqT+9yfC5r5+hmm 2D3uwYa1WOFVOV2YCAhtr0YPECtkRtdGq8E//Jz7p2IWV/ojzWbMrTmi+I6Zmfcn HSYqDFVmxkF7BVT3gfeGP4RfdAOej6ZFkadpfRu70y0RpOkRsw9yO4UjqRheKjVH LDxFG+uODqe4nl2+iSOjs55rC88jaUiul7v2nxfE+7ydT7IFJYnVshAk06P6digS npEVCRyk3nYNxeJdZ53YEBDhvAS//UYL/QYSI7IhASuipgkQIEZkWcNlwrqdhkLl umF2jMVHac0g9g== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:16 2025 by rpki-client