This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft File: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft (raw, json) Hash identifier: pPygcZYVMuuF01thT9UAycL0/MPkGUk5UKrMKpcSz1I= Subject key identifier: 35:4C:54:C8:7D:33:EE:8D:7F:FF:B6:47:2B:D8:52:5D:5C:99:DD:72 Authority key identifier: 42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C Certificate issuer: /CN=428e828829846f63465a37447ece3a746a48dd6c Certificate serial: 019B266473700C869CC742E4C81F1D4B83B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 09:01:15 +0000 Manifest this update: Tue 16 Dec 2025 09:01:15 +0000 Manifest next update: Wed 17 Dec 2025 09:01:15 +0000 Files and hashes: 1: Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl (hash: Yga0R6l/yjQ7JntflIbPYpRtnWGWzZUdCGZ+7cpMUPo=) 2: _k0OxqJ8CNa2nq6tzt4bUNoG6Sg.roa (hash: TBT+FD53tM1tzuAflJ2lZOj8tykRjtKXY5Xc3IXyQAc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:73:70:0c:86:9c:c7:42:e4:c8:1f:1d:4b:83:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=428e828829846f63465a37447ece3a746a48dd6c Validity Not Before: Dec 16 09:01:15 2025 GMT Not After : Dec 17 09:01:15 2025 GMT Subject: CN=354c54c87d33ee8d7fffb6472bd8525d5c99dd72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:ee:5c:08:e1:c0:96:80:3a:73:d4:56:95:ef: 5d:1e:9a:8e:1e:99:67:71:fa:74:44:83:9e:d2:d5: 38:cc:79:66:18:b8:c6:3c:8f:b9:62:8f:98:c1:4b: 95:a3:9a:4b:52:80:70:0d:4e:98:68:5e:e9:cf:72: 11:70:73:98:98:c7:ea:5b:f7:f4:16:3a:8e:7c:f7: 60:2e:8b:9d:d2:f1:cd:2b:5b:64:a2:16:81:02:48: 2e:61:2f:f0:4b:98:c0:8f:30:b8:81:31:a1:b2:cb: a7:3e:4a:b5:77:e6:c4:ab:87:5d:20:e6:e0:71:0f: bf:28:44:3f:40:d6:6e:fa:e6:17:e1:17:4a:bf:ac: 1d:3a:46:4e:b9:e5:60:b4:cd:c2:e5:b0:bf:a1:9a: d3:62:a8:5b:56:2a:13:92:4e:0d:14:63:bc:f8:18: 7d:03:e4:1b:29:ea:ad:b2:36:04:cb:7b:ac:e0:cf: ed:71:be:4a:a6:76:6d:7a:ad:61:31:f6:dc:af:04: d1:8d:61:8e:57:0f:1f:2d:05:94:53:45:ce:c2:6c: 91:1b:50:87:59:70:e8:e3:00:9f:ca:8f:3c:e3:0a: 48:66:99:57:29:d9:20:03:fe:07:a0:80:be:2a:e3: d4:76:d0:98:6c:b6:ff:8e:09:8f:b9:b5:5d:07:06: 2b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4C:54:C8:7D:33:EE:8D:7F:FF:B6:47:2B:D8:52:5D:5C:99:DD:72 X509v3 Authority Key Identifier: keyid:42:8E:82:88:29:84:6F:63:46:5A:37:44:7E:CE:3A:74:6A:48:DD:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c5bb63-30bf-48c8-a433-a2f67f2bf950/1/Qo6CiCmEb2NGWjdEfs46dGpI3Ww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5a:69:05:de:a8:7b:ec:74:61:6e:41:14:85:4f:fc:57:d0: 29:ce:76:83:44:2a:5c:f2:49:5d:66:c4:54:c8:ab:6f:e2:20: 8f:d4:a9:ab:22:a5:74:8f:fd:d3:bc:76:50:d5:84:1e:73:7f: 7b:00:e1:c4:27:02:50:49:03:04:3f:9c:15:ca:93:30:40:51: 76:12:fc:2a:58:7c:4b:04:d9:1d:9c:7c:d5:79:f9:de:49:63: 4a:50:e8:74:6d:29:d3:aa:8a:c5:60:aa:b9:a9:d2:27:2a:22: 73:fe:16:9b:99:2f:31:0d:98:d1:8f:8c:e6:bd:7f:24:38:b9: ce:c9:29:50:58:55:5b:75:03:3d:14:e9:0b:4b:44:e9:c5:fe: 41:47:1b:12:d5:48:de:18:60:f2:ef:bc:68:03:fb:e4:72:d0: 87:2e:28:a7:4c:59:c1:83:7d:26:b6:ca:56:ff:4c:43:45:eb: eb:8d:4a:36:8d:c9:4f:2f:ca:02:bc:29:c5:3f:f9:05:0b:9e: 9b:34:a6:a3:6c:7b:92:cc:3a:a0:fb:19:e6:ad:81:ea:f8:96: 6f:ce:9d:0c:86:cc:af:0b:0e:72:4b:24:57:8f:52:9c:9a:d7: 9d:cb:9a:c5:a7:2d:46:19:f9:cf:0a:3f:6a:0b:97:9f:14:27: d9:72:d6:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZHNwDIacx0LkyB8dS4O0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyOGU4Mjg4Mjk4NDZmNjM0NjVhMzc0NDdlY2UzYTc0NmE0 OGRkNmMwHhcNMjUxMjE2MDkwMTE1WhcNMjUxMjE3MDkwMTE1WjAzMTEwLwYDVQQD EygzNTRjNTRjODdkMzNlZThkN2ZmZmI2NDcyYmQ4NTI1ZDVjOTlkZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3O5cCOHAloA6c9RWle9dHpqOHpln cfp0RIOe0tU4zHlmGLjGPI+5Yo+YwUuVo5pLUoBwDU6YaF7pz3IRcHOYmMfqW/f0 FjqOfPdgLoud0vHNK1tkohaBAkguYS/wS5jAjzC4gTGhssunPkq1d+bEq4ddIObg cQ+/KEQ/QNZu+uYX4RdKv6wdOkZOueVgtM3C5bC/oZrTYqhbVioTkk4NFGO8+Bh9 A+QbKeqtsjYEy3us4M/tcb5KpnZteq1hMfbcrwTRjWGOVw8fLQWUU0XOwmyRG1CH WXDo4wCfyo884wpIZplXKdkgA/4HoIC+KuPUdtCYbLb/jgmPubVdBwYrwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVMVMh9M+6Nf/+2RyvYUl1cmd1yMB8GA1UdIwQY MBaAFEKOgogphG9jRlo3RH7OOnRqSN1sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMt YTJmNjdmMmJmOTUwLzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9jNWJiNjMtMzBiZi00OGM4LWE0MzMtYTJmNjdmMmJmOTUw LzEvUW82Q2lDbUViMk5HV2pkRWZzNDZkR3BJM1d3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1ppBd6o e+x0YW5BFIVP/FfQKc52g0QqXPJJXWbEVMirb+Igj9SpqyKldI/907x2UNWEHnN/ ewDhxCcCUEkDBD+cFcqTMEBRdhL8Klh8SwTZHZx81Xn53kljSlDodG0p06qKxWCq uanSJyoic/4Wm5kvMQ2Y0Y+M5r1/JDi5zskpUFhVW3UDPRTpC0tE6cX+QUcbEtVI 3hhg8u+8aAP75HLQhy4op0xZwYN9JrbKVv9MQ0Xr641KNo3JTy/KArwpxT/5BQue mzSmo2x7ksw6oPsZ5q2B6viWb86dDIbMrwsOckskV49SnJrXncuaxactRhn5zwo/ aguXnxQn2XLWqQ== -----END CERTIFICATE-----Generated at Tue Dec 16 12:47:53 2025 by rpki-client