This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft File: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft (raw, json) Hash identifier: 6vai2JOxOsTqVfHzINKQadB7Vivy0BJ6KF8VAFjzLgM= Subject key identifier: D2:F2:41:53:54:83:C4:E6:C8:31:C5:A0:4E:7F:84:7C:40:F0:B1:7C Authority key identifier: A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 Certificate issuer: /CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Certificate serial: 019B1BE0C1D9028571F4DD4EB9106C466A55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 08:01:13 +0000 Manifest this update: Sun 14 Dec 2025 08:01:13 +0000 Manifest next update: Mon 15 Dec 2025 08:01:13 +0000 Files and hashes: 1: ohlIUqQ3eDQtmUwSu9Kl2M35sw8.roa (hash: dhBdHXgrEk65slUOAf0TCN0qQFeQcRa2buvDnBjrTtI=) 2: qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl (hash: 4VdctmE0umPROh0PT/pjkqyQbjeAtzJ4zrdFOwBFyZw=) 3: u2p9YZ_LXa4YZ8T6-whJAsnzXuE.roa (hash: HvG5oZRfAf2DkODgozvYS7e+xqSp2NYm+qp3YwzyYdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:c1:d9:02:85:71:f4:dd:4e:b9:10:6c:46:6a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8153b3d5612234fe260fe60bc7ce028062227a3 Validity Not Before: Dec 14 08:01:13 2025 GMT Not After : Dec 15 08:01:13 2025 GMT Subject: CN=d2f241535483c4e6c831c5a04e7f847c40f0b17c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5c:4f:f1:32:39:4b:3c:33:10:0e:b9:f7:9a: ff:f5:e4:62:59:db:e8:d1:e7:68:3f:cb:ec:4d:65: ed:a8:f0:f8:b7:96:35:cb:7a:93:3f:59:45:28:48: be:41:d1:87:04:bf:7e:ed:e8:04:c2:ea:7c:66:7c: 8d:6a:11:5c:f9:2e:a4:1a:bb:3f:bb:6f:a8:ca:4d: 66:dd:92:e1:5b:77:24:76:9e:fe:92:b5:28:c9:d2: 71:52:e9:d6:6f:9e:17:bb:ae:d8:16:3f:b1:bf:3f: bc:31:77:6e:5d:ed:a2:03:b1:25:72:d0:9f:2b:cf: f3:45:8e:4f:df:fd:d8:79:30:e3:62:d4:52:11:f8: 39:de:2b:6a:5a:a4:d7:46:52:a7:28:19:01:02:19: 31:13:03:07:4c:1f:08:bc:19:35:12:6f:df:48:d1: 65:15:f3:01:13:11:db:20:48:79:ad:bd:53:c9:ba: da:3e:17:15:ab:5d:c8:21:3e:dd:68:5f:31:3f:54: a6:c8:88:58:87:41:eb:3e:51:39:a3:7b:10:9b:48: ff:78:6d:4b:bd:2b:bd:4a:57:e9:ca:38:eb:a9:65: b4:ae:c2:b5:b6:43:6f:ca:70:90:13:71:ad:3d:3d: 7b:99:77:e1:77:3b:a0:54:69:e5:63:21:db:37:db: 9c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F2:41:53:54:83:C4:E6:C8:31:C5:A0:4E:7F:84:7C:40:F0:B1:7C X509v3 Authority Key Identifier: keyid:A8:15:3B:3D:56:12:23:4F:E2:60:FE:60:BC:7C:E0:28:06:22:27:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/d4d8dd-50d8-43c7-9b55-9aa7cd6505e5/1/qBU7PVYSI0_iYP5gvHzgKAYiJ6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:f3:05:23:58:40:ea:aa:98:8b:78:3a:62:3e:bb:67:d9:2e: e3:54:a7:5a:b0:71:74:b5:d3:60:1d:cd:67:90:58:b7:e7:3f: 53:d2:78:f0:6d:77:0a:60:35:5f:f4:10:9b:88:45:4a:ab:6b: db:44:01:6f:41:5a:ae:33:ff:56:c6:94:61:87:fe:d5:37:0c: c3:85:a2:46:fe:b6:af:b4:3f:66:ad:c5:45:af:34:17:fb:0a: 23:8b:d0:da:f5:d7:15:ea:0b:e2:ef:0d:4f:09:b3:d1:57:9e: 53:17:3b:9c:89:b2:a0:e4:39:5f:09:04:19:d2:12:9c:3a:ac: f4:4d:a6:21:07:db:28:7b:10:f4:f2:f1:36:08:21:3f:64:61: e6:0b:23:6b:8a:61:63:e8:4b:4c:e3:3e:a4:75:a8:d7:76:72: 34:4a:ac:94:2a:5c:41:09:83:e8:f3:ed:88:34:7e:b1:cd:e3: 89:22:65:bf:c0:10:e1:c8:a3:bf:bf:f7:58:88:e3:96:d4:63: 7c:7d:8c:f9:cc:7c:15:a6:7f:b2:ff:b9:de:0d:49:4b:87:73: d6:49:00:73:bb:6a:9a:6a:e7:a4:ea:02:76:2c:94:c2:65:f0: 61:3b:0b:cb:2e:27:03:09:19:15:81:1c:f6:8c:01:fc:b9:fe: 2a:a7:f4:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4MHZAoVx9N1OuRBsRmpVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MTUzYjNkNTYxMjIzNGZlMjYwZmU2MGJjN2NlMDI4MDYy MjI3YTMwHhcNMjUxMjE0MDgwMTEzWhcNMjUxMjE1MDgwMTEzWjAzMTEwLwYDVQQD EyhkMmYyNDE1MzU0ODNjNGU2YzgzMWM1YTA0ZTdmODQ3YzQwZjBiMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVxP8TI5SzwzEA6595r/9eRiWdvo 0edoP8vsTWXtqPD4t5Y1y3qTP1lFKEi+QdGHBL9+7egEwup8ZnyNahFc+S6kGrs/ u2+oyk1m3ZLhW3ckdp7+krUoydJxUunWb54Xu67YFj+xvz+8MXduXe2iA7ElctCf K8/zRY5P3/3YeTDjYtRSEfg53itqWqTXRlKnKBkBAhkxEwMHTB8IvBk1Em/fSNFl FfMBExHbIEh5rb1TybraPhcVq13IIT7daF8xP1SmyIhYh0HrPlE5o3sQm0j/eG1L vSu9SlfpyjjrqWW0rsK1tkNvynCQE3GtPT17mXfhdzugVGnlYyHbN9ucuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLyQVNUg8TmyDHFoE5/hHxA8LF8MB8GA1UdIwQY MBaAFKgVOz1WEiNP4mD+YLx84CgGIiejMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUt OWFhN2NkNjUwNWU1LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9kNGQ4ZGQtNTBkOC00M2M3LTliNTUtOWFhN2NkNjUwNWU1 LzEvcUJVN1BWWVNJMF9pWVA1Z3ZIemdLQVlpSjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPMFI1hA 6qqYi3g6Yj67Z9ku41SnWrBxdLXTYB3NZ5BYt+c/U9J48G13CmA1X/QQm4hFSqtr 20QBb0FarjP/VsaUYYf+1TcMw4WiRv62r7Q/Zq3FRa80F/sKI4vQ2vXXFeoL4u8N Twmz0VeeUxc7nImyoOQ5XwkEGdISnDqs9E2mIQfbKHsQ9PLxNgghP2Rh5gsja4ph Y+hLTOM+pHWo13ZyNEqslCpcQQmD6PPtiDR+sc3jiSJlv8AQ4cijv7/3WIjjltRj fH2M+cx8FaZ/sv+53g1JS4dz1kkAc7tqmmrnpOoCdiyUwmXwYTsLyy4nAwkZFYEc 9owB/Ln+Kqf03w== -----END CERTIFICATE-----Generated at Sun Dec 14 11:44:54 2025 by rpki-client