This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft File: _qJ-2VhOB8dA_utA17nlfMrF6VA.mft (raw, json) Hash identifier: mRT9O77ywwUWc4ZEK1P9EMNp/LhVFeg48CUb9byB5Mc= Subject key identifier: A9:1F:3B:00:EE:BA:84:98:91:6C:DA:5C:84:1C:43:46:F1:B4:42:7C Authority key identifier: FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 Certificate issuer: /CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Certificate serial: 019B3C7E38B470C254454C16A7A9EA098E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft Manifest number: 120A Signing time: Sat 20 Dec 2025 16:01:03 +0000 Manifest this update: Sat 20 Dec 2025 16:01:03 +0000 Manifest next update: Sun 21 Dec 2025 16:01:03 +0000 Files and hashes: 1: 8Ua36sQPiROOdvji9D_u-a0zjio.roa (hash: D8ltqCdiAwJv/weW61AlTvYiDIAQY9oit7+M2ExP4Bs=) 2: _qJ-2VhOB8dA_utA17nlfMrF6VA.crl (hash: rTXkmj7kMp0bfaRfnYoJrpErnIUWJQ7HDiFAUWHjTJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:38:b4:70:c2:54:45:4c:16:a7:a9:ea:09:8e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fea27ed9584e07c740feeb40d7b9e57ccac5e950 Validity Not Before: Dec 20 16:01:03 2025 GMT Not After : Dec 21 16:01:03 2025 GMT Subject: CN=a91f3b00eeba8498916cda5c841c4346f1b4427c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:9b:06:08:f0:46:f9:c1:37:8d:0b:96:a6: 7a:f2:7d:99:3e:a1:5b:77:2b:3e:6b:a0:3b:a4:29: 75:bd:49:df:93:06:51:86:dc:42:08:5c:fa:29:37: 40:37:72:31:04:7b:63:28:13:dc:37:9b:ba:6e:6e: ec:54:22:e3:c7:3a:e6:5e:ca:00:62:d2:36:e0:b0: 56:79:7b:7f:ae:c1:8a:bf:8f:a0:5c:9d:31:e5:fe: a5:63:67:33:20:ce:5f:73:70:a1:ef:dd:b2:72:43: c7:ff:11:bb:b1:d4:4e:6b:52:3a:6f:ea:7c:a8:19: ae:0d:88:4f:70:4d:fa:5a:6f:26:f5:57:4a:1c:8b: 11:c4:f8:4a:3a:b9:93:0b:f9:3f:41:a6:da:ed:1c: c7:ec:36:61:0b:be:e5:f2:4d:92:d7:a0:7a:e7:e5: dd:53:de:20:76:1e:66:62:fd:1a:e4:86:70:6f:c1: 12:ca:63:77:bb:24:2c:c8:b6:6c:40:9f:14:0e:ae: 22:29:f5:a2:5a:d7:34:4b:6d:d8:65:02:1c:f7:f0: cb:c9:cb:bf:4b:9a:61:66:00:60:e2:6a:94:5c:7a: cf:f0:2a:2a:74:18:a6:49:2e:c5:71:c5:ad:9d:df: e8:eb:a5:ce:27:a2:12:96:d2:cb:6c:db:ac:d4:63: e9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:1F:3B:00:EE:BA:84:98:91:6C:DA:5C:84:1C:43:46:F1:B4:42:7C X509v3 Authority Key Identifier: keyid:FE:A2:7E:D9:58:4E:07:C7:40:FE:EB:40:D7:B9:E5:7C:CA:C5:E9:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qJ-2VhOB8dA_utA17nlfMrF6VA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/00ee93-9b06-4490-803d-99b456fdd954/1/_qJ-2VhOB8dA_utA17nlfMrF6VA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:49:99:7e:c8:6f:b4:9f:44:3b:c1:70:c5:4c:d3:15:e0:66: 4e:28:ab:68:0e:8c:f5:14:9f:7c:07:e6:80:9e:f9:ee:fd:90: 71:ac:81:4d:d6:b9:50:65:b2:75:6c:57:f7:a5:ed:d6:30:7c: 89:78:6f:13:64:79:ce:1c:aa:b0:3e:c8:aa:3d:a5:5d:b5:66: f2:88:5b:74:7d:b8:64:c4:fc:48:c3:eb:be:cd:0a:4c:fe:44: f2:a4:82:b4:b0:07:c6:02:ec:d5:b7:44:03:28:f5:3c:3b:43: d9:ce:64:6d:3c:79:23:a7:33:33:67:0b:f9:50:d2:30:b1:da: fd:83:82:07:8d:a2:2a:46:e4:91:ff:59:26:3e:02:c0:1e:21: f8:75:a8:5f:a9:0e:c0:40:63:3e:f6:44:7f:8b:66:38:83:d2: 90:94:f9:86:8c:b3:27:37:26:42:82:62:4d:a8:16:d0:ea:a6: 1a:3e:41:d3:ac:a2:8d:f7:d5:6a:34:fe:1e:2d:da:47:6f:33: f8:98:f3:95:2f:2f:7b:ae:7e:1e:22:bf:b6:2c:00:ee:5d:e2: fd:14:3c:e5:ff:af:1b:e0:c7:6c:08:0f:14:4f:35:a9:44:37: 1f:38:13:17:d5:d1:29:5d:8d:12:d8:a4:10:e8:15:c2:44:f3: 6e:b0:12:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fji0cMJURUwWp6nqCY6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYTI3ZWQ5NTg0ZTA3Yzc0MGZlZWI0MGQ3YjllNTdjY2Fj NWU5NTAwHhcNMjUxMjIwMTYwMTAzWhcNMjUxMjIxMTYwMTAzWjAzMTEwLwYDVQQD EyhhOTFmM2IwMGVlYmE4NDk4OTE2Y2RhNWM4NDFjNDM0NmYxYjQ0MjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue6bBgjwRvnBN40LlqZ68n2ZPqFb dys+a6A7pCl1vUnfkwZRhtxCCFz6KTdAN3IxBHtjKBPcN5u6bm7sVCLjxzrmXsoA YtI24LBWeXt/rsGKv4+gXJ0x5f6lY2czIM5fc3Ch792yckPH/xG7sdROa1I6b+p8 qBmuDYhPcE36Wm8m9VdKHIsRxPhKOrmTC/k/Qaba7RzH7DZhC77l8k2S16B65+Xd U94gdh5mYv0a5IZwb8ESymN3uyQsyLZsQJ8UDq4iKfWiWtc0S23YZQIc9/DLycu/ S5phZgBg4mqUXHrP8CoqdBimSS7FccWtnd/o66XOJ6ISltLLbNus1GPp+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKkfOwDuuoSYkWzaXIQcQ0bxtEJ8MB8GA1UdIwQY MBaAFP6iftlYTgfHQP7rQNe55XzKxelQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2Qt OTliNDU2ZmRkOTU0LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8wMGVlOTMtOWIwNi00NDkwLTgwM2QtOTliNDU2ZmRkOTU0 LzEvX3FKLTJWaE9COGRBX3V0QTE3bmxmTXJGNlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxkmZfshv tJ9EO8FwxUzTFeBmTiiraA6M9RSffAfmgJ757v2QcayBTda5UGWydWxX96Xt1jB8 iXhvE2R5zhyqsD7Iqj2lXbVm8ohbdH24ZMT8SMPrvs0KTP5E8qSCtLAHxgLs1bdE Ayj1PDtD2c5kbTx5I6czM2cL+VDSMLHa/YOCB42iKkbkkf9ZJj4CwB4h+HWoX6kO wEBjPvZEf4tmOIPSkJT5hoyzJzcmQoJiTagW0OqmGj5B06yijffVajT+Hi3aR28z +JjzlS8ve65+HiK/tiwA7l3i/RQ85f+vG+DHbAgPFE81qUQ3HzgTF9XRKV2NEtik EOgVwkTzbrAStw== -----END CERTIFICATE-----Generated at Sat Dec 20 22:21:43 2025 by rpki-client