This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json) Hash identifier: +uOyNkTNcPD3zncylj+POpLpoRsPPi/nHhHImDubSWE= Subject key identifier: 89:7A:A3:49:B1:4D:27:76:2E:85:B7:2D:30:AF:E6:D6:06:03:54:23 Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Certificate serial: 019B25F63CC4B02F7BC336931E556F47C4E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft Manifest number: 177E Signing time: Tue 16 Dec 2025 07:00:52 +0000 Manifest this update: Tue 16 Dec 2025 07:00:52 +0000 Manifest next update: Wed 17 Dec 2025 07:00:52 +0000 Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: VUZdxobXcgnKJ+VSkFaWH1sDZYTsuUkp+tHRI87PXUg=) 2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=) 3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=) 4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:3c:c4:b0:2f:7b:c3:36:93:1e:55:6f:47:c4:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Validity Not Before: Dec 16 07:00:52 2025 GMT Not After : Dec 17 07:00:52 2025 GMT Subject: CN=897aa349b14d27762e85b72d30afe6d606035423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cd:bb:9e:8d:aa:66:68:9e:70:59:72:38:23: 53:b2:a0:c6:9b:9d:bd:1d:3d:34:95:15:c5:f9:58: c6:96:6a:72:45:87:2c:89:4e:eb:a5:fd:01:48:a6: 8d:fb:d6:29:9e:00:46:56:d1:7a:7b:dd:d4:d0:eb: 43:e8:ae:cd:47:22:29:95:1a:38:8c:65:27:73:dd: 17:15:0c:78:a2:43:ed:7c:ca:95:65:62:28:b6:76: 33:2e:d6:47:7c:22:e8:ef:c7:37:ca:e0:eb:1b:c8: 6f:be:11:f5:60:1e:d6:3b:02:3a:f8:68:cc:6b:77: fb:86:39:72:16:25:e6:b6:17:a9:98:98:e5:0e:c4: d4:78:11:da:82:3a:5e:87:3a:d6:ce:72:f1:ab:e8: 83:a6:99:93:23:f5:74:b1:15:5f:58:60:e9:b4:da: fe:34:6c:ba:3f:77:52:44:6a:f1:94:90:06:91:51: e1:7b:20:35:0e:48:6d:24:81:6b:f4:7d:10:f1:f1: a4:8c:0b:08:15:d9:cb:f0:3f:48:c0:9c:96:72:dc: 4a:11:61:ff:7f:14:f6:47:c7:af:c6:67:0c:fa:a5: 74:09:e9:42:ea:a9:52:81:a5:67:57:19:68:31:d3: bf:df:fe:29:66:4b:18:21:93:43:c0:e4:f9:13:1f: d9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:7A:A3:49:B1:4D:27:76:2E:85:B7:2D:30:AF:E6:D6:06:03:54:23 X509v3 Authority Key Identifier: keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:06:b7:00:f8:e9:4a:c1:d4:32:bb:28:98:88:33:e2:d4:1a: 7b:36:94:7f:3a:e1:46:ac:69:54:68:f9:c8:b7:1b:f5:e7:14: 7a:af:69:2a:89:0c:d7:6b:6c:a1:f1:b1:e0:b2:7d:40:c1:bf: c2:a5:1c:4a:48:63:4d:56:c9:a0:41:82:a8:ce:7c:f7:eb:b5: 82:f9:45:e3:82:26:0a:e9:79:50:e2:2b:3b:8e:6d:d0:e0:99: d4:4c:2b:2f:2d:ac:6f:2a:31:13:3e:a4:2c:16:4f:6b:2e:12: 66:2b:e0:fd:a3:3a:f9:f6:96:ff:9b:f0:35:43:1b:58:21:7a: ce:1b:df:a2:9d:b1:eb:d9:ba:71:be:b7:4f:ea:f9:d4:a9:28: 8d:b7:f0:a1:6c:1c:06:3b:86:9a:2b:22:56:09:9e:8c:d7:4a: 0a:64:db:b1:bc:8e:6d:7f:f3:5f:90:c9:16:b5:18:ec:0e:2c: 91:cd:49:04:69:f1:43:6f:28:d3:3c:79:2a:7a:05:7d:a0:8c: db:71:81:64:4d:7f:e4:3a:6a:5a:64:9b:3f:68:61:ab:4d:21: 8a:eb:e3:a0:bb:75:11:95:9e:11:82:fd:87:b8:92:3f:50:d1: 4b:fb:3b:3b:e7:40:54:86:76:a3:79:a4:4c:29:7f:7a:3c:eb: bb:97:c2:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9jzEsC97wzaTHlVvR8TnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm NDAxMzYwHhcNMjUxMjE2MDcwMDUyWhcNMjUxMjE3MDcwMDUyWjAzMTEwLwYDVQQD Eyg4OTdhYTM0OWIxNGQyNzc2MmU4NWI3MmQzMGFmZTZkNjA2MDM1NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAls27no2qZmiecFlyOCNTsqDGm529 HT00lRXF+VjGlmpyRYcsiU7rpf0BSKaN+9YpngBGVtF6e93U0OtD6K7NRyIplRo4 jGUnc90XFQx4okPtfMqVZWIotnYzLtZHfCLo78c3yuDrG8hvvhH1YB7WOwI6+GjM a3f7hjlyFiXmthepmJjlDsTUeBHagjpehzrWznLxq+iDppmTI/V0sRVfWGDptNr+ NGy6P3dSRGrxlJAGkVHheyA1DkhtJIFr9H0Q8fGkjAsIFdnL8D9IwJyWctxKEWH/ fxT2R8evxmcM+qV0CelC6qlSgaVnVxloMdO/3/4pZksYIZNDwOT5Ex/ZjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl6o0mxTSd2LoW3LTCv5tYGA1QjMB8GA1UdIwQY MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1 LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXQa3APjp SsHUMrsomIgz4tQaezaUfzrhRqxpVGj5yLcb9ecUeq9pKokM12tsofGx4LJ9QMG/ wqUcSkhjTVbJoEGCqM589+u1gvlF44ImCul5UOIrO45t0OCZ1EwrLy2sbyoxEz6k LBZPay4SZivg/aM6+faW/5vwNUMbWCF6zhvfop2x69m6cb63T+r51KkojbfwoWwc BjuGmisiVgmejNdKCmTbsbyObX/zX5DJFrUY7A4skc1JBGnxQ28o0zx5KnoFfaCM 23GBZE1/5DpqWmSbP2hhq00hiuvjoLt1EZWeEYL9h7iSP1DRS/s7O+dAVIZ2o3mk TCl/ejzru5fCgQ== -----END CERTIFICATE-----Generated at Tue Dec 16 11:45:27 2025 by rpki-client