This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft File: 0voqcAA4gNdWFhKjwKEmAs41QaQ.mft (raw, json) Hash identifier: fs3QPBjkCw2nIOqbHwFEgqa5tFfiGHSJuuZGMzc8+yQ= Subject key identifier: 51:E1:22:65:63:72:8A:B3:B9:48:9D:11:1A:B3:D0:0F:5D:40:E5:32 Authority key identifier: D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 Certificate issuer: /CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Certificate serial: 019B1FF3DCD28EE19660FACC4F9C4F491683 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft Manifest number: 177C Signing time: Mon 15 Dec 2025 03:00:33 +0000 Manifest this update: Mon 15 Dec 2025 03:00:33 +0000 Manifest next update: Tue 16 Dec 2025 03:00:33 +0000 Files and hashes: 1: 0voqcAA4gNdWFhKjwKEmAs41QaQ.crl (hash: 5qqZPcw52j1i91jRvrlM2a/dskhNuy3PCYvTca3I/Eo=) 2: LRASGK8bnjRh3Rbn6PQN7XK5vQs.roa (hash: y9RCkFYDGvkx4ChSuu0Pj7rsJUtgKx4KvbaPWMrtBdc=) 3: Ol6cakySox8hAM1UTPadAKzEir0.roa (hash: lTSqqQlvMmfJ0PFsajUlICgmTmejaL+5zgVSVupMTUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:f3:dc:d2:8e:e1:96:60:fa:cc:4f:9c:4f:49:16:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2fa2a70003880d7561612a3c0a12602ce3541a4 Validity Not Before: Dec 15 03:00:33 2025 GMT Not After : Dec 16 03:00:33 2025 GMT Subject: CN=51e1226563728ab3b9489d111ab3d00f5d40e532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d9:72:0f:17:d1:42:ff:b5:d5:84:8e:84:68: 8d:65:d2:ab:c7:ac:49:09:16:39:7a:11:87:db:2d: 1b:a0:44:51:a8:91:ab:4c:83:60:f5:01:a3:a1:b4: 6f:8b:14:3a:d8:ea:5a:13:a3:09:c1:5b:f0:20:ef: ea:d4:5c:b5:40:64:74:04:6e:ad:7f:ac:52:52:0c: e3:b7:5d:bb:6e:09:75:4e:da:36:2d:70:fc:11:ef: 67:53:29:73:45:42:c2:aa:f4:25:d5:96:dc:7d:6f: 76:9c:e5:79:f1:01:24:d0:8a:8d:cc:4f:da:d8:b5: ea:14:2d:cf:66:f0:70:f2:23:84:5c:b1:db:1d:d2: c1:90:5e:98:d2:7a:c8:c2:9d:a8:4a:c7:18:29:c0: c9:4c:47:8d:0f:97:2d:88:03:a2:39:19:32:29:9d: 49:0d:c7:84:88:e3:c1:59:93:da:a0:e4:be:62:4a: 7e:c0:e9:c9:f6:47:b4:41:9f:50:b5:86:8f:d8:ec: 44:d7:bb:84:54:4f:bc:91:0d:a1:2b:39:fd:59:c0: 7a:bd:71:db:a1:fe:7d:74:e5:10:d6:2f:fa:0d:e5: 8d:1c:63:41:b7:de:45:87:85:24:b1:2f:8f:af:9a: a2:73:f9:74:84:d1:87:95:50:9e:41:bf:1e:37:42: 58:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:22:65:63:72:8A:B3:B9:48:9D:11:1A:B3:D0:0F:5D:40:E5:32 X509v3 Authority Key Identifier: keyid:D2:FA:2A:70:00:38:80:D7:56:16:12:A3:C0:A1:26:02:CE:35:41:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0voqcAA4gNdWFhKjwKEmAs41QaQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b207d1-8b7b-4e27-8370-a796501e77a1/1/0voqcAA4gNdWFhKjwKEmAs41QaQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6f:d7:4c:31:2f:86:3d:f8:9a:83:9c:f4:cb:ee:97:30:ef: 1c:69:87:68:37:20:be:36:85:df:65:c8:36:b2:01:7f:46:5e: 98:0e:ba:dc:23:59:fe:2a:4d:fa:6e:5e:46:3a:e9:4c:1b:97: 97:81:59:8e:91:8d:81:3b:dc:8d:5d:75:60:8c:1b:01:78:39: 04:42:ae:f6:91:86:84:57:16:ed:d3:02:47:db:2d:3e:8c:e5: 0d:3e:9d:b1:b8:c0:a5:0b:2d:94:3d:41:2b:55:f5:fa:f0:07: fd:20:18:fb:05:e8:20:1a:14:f5:fc:0e:47:5b:ca:4b:e7:c9: 58:78:6b:43:07:a4:69:f8:f2:86:81:fb:12:fb:fc:be:21:5c: 3d:83:9b:7c:32:1d:fb:0b:59:c6:2c:cc:4e:6d:1c:7b:78:08: 62:d5:77:58:23:06:0b:e5:37:f4:22:fd:66:9c:d1:68:2e:1c: cc:f2:9a:ad:fa:39:3a:ea:93:05:4e:4f:6d:35:56:50:b4:0a: 14:7e:3c:bb:35:8a:4c:d9:c8:e9:ac:6b:61:4d:86:13:c3:ed: c0:72:71:b7:fa:70:b8:d1:5b:c3:f6:34:8e:25:46:77:d9:e1: 6a:6c:ab:8b:40:68:f0:71:2b:21:b7:e4:99:28:92:46:26:e4: 8e:99:7d:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsf89zSjuGWYPrMT5xPSRaDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyZmEyYTcwMDAzODgwZDc1NjE2MTJhM2MwYTEyNjAyY2Uz NTQxYTQwHhcNMjUxMjE1MDMwMDMzWhcNMjUxMjE2MDMwMDMzWjAzMTEwLwYDVQQD Eyg1MWUxMjI2NTYzNzI4YWIzYjk0ODlkMTExYWIzZDAwZjVkNDBlNTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69lyDxfRQv+11YSOhGiNZdKrx6xJ CRY5ehGH2y0boERRqJGrTINg9QGjobRvixQ62OpaE6MJwVvwIO/q1Fy1QGR0BG6t f6xSUgzjt127bgl1Tto2LXD8Ee9nUylzRULCqvQl1ZbcfW92nOV58QEk0IqNzE/a 2LXqFC3PZvBw8iOEXLHbHdLBkF6Y0nrIwp2oSscYKcDJTEeND5ctiAOiORkyKZ1J DceEiOPBWZPaoOS+Ykp+wOnJ9ke0QZ9QtYaP2OxE17uEVE+8kQ2hKzn9WcB6vXHb of59dOUQ1i/6DeWNHGNBt95Fh4UksS+Pr5qic/l0hNGHlVCeQb8eN0JYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFHhImVjcoqzuUidERqz0A9dQOUyMB8GA1UdIwQY MBaAFNL6KnAAOIDXVhYSo8ChJgLONUGkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAt YTc5NjUwMWU3N2ExLzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9iMjA3ZDEtOGI3Yi00ZTI3LTgzNzAtYTc5NjUwMWU3N2Ex LzEvMHZvcWNBQTRnTmRXRmhLandLRW1BczQxUWFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJm/XTDEv hj34moOc9MvulzDvHGmHaDcgvjaF32XINrIBf0ZemA663CNZ/ipN+m5eRjrpTBuX l4FZjpGNgTvcjV11YIwbAXg5BEKu9pGGhFcW7dMCR9stPozlDT6dsbjApQstlD1B K1X1+vAH/SAY+wXoIBoU9fwOR1vKS+fJWHhrQwekafjyhoH7Evv8viFcPYObfDId +wtZxizMTm0ce3gIYtV3WCMGC+U39CL9ZpzRaC4czPKarfo5OuqTBU5PbTVWULQK FH48uzWKTNnI6axrYU2GE8PtwHJxt/pwuNFbw/Y0jiVGd9nhamyri0Bo8HErIbfk mSiSRibkjpl9Ow== -----END CERTIFICATE-----Generated at Mon Dec 15 08:22:24 2025 by rpki-client