This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft File: rQVANtrTLReoyRbcLfuzzoo2RSw.mft (raw, json) Hash identifier: zdyrPieqz4NrUpax5Fprefb2WDcDJXcnBCrXg8LsxPQ= Subject key identifier: 47:47:17:92:36:83:AA:A2:7C:9A:59:DE:B0:E0:0C:A8:17:78:4D:85 Authority key identifier: AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C Certificate issuer: /CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c Certificate serial: 019B25523E0C27D4FA8D956A0D4F23857A25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft Manifest number: 177C Signing time: Tue 16 Dec 2025 04:01:45 +0000 Manifest this update: Tue 16 Dec 2025 04:01:45 +0000 Manifest next update: Wed 17 Dec 2025 04:01:45 +0000 Files and hashes: 1: V1VyWKK4g97snYUaOwHJAFP_MdQ.roa (hash: IhL8EIfC6sBImzV34O7y77KJDpidcr5em23zVj3USMQ=) 2: rQVANtrTLReoyRbcLfuzzoo2RSw.crl (hash: 3/H400ub172My4kn6e0+zpCol2nx/gho7u1W9u5LHyo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:52:3e:0c:27:d4:fa:8d:95:6a:0d:4f:23:85:7a:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad054036dad32d17a8c916dc2dfbb3ce8a36452c Validity Not Before: Dec 16 04:01:45 2025 GMT Not After : Dec 17 04:01:45 2025 GMT Subject: CN=474717923683aaa27c9a59deb0e00ca817784d85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c7:75:2b:d9:8d:80:ff:88:4b:72:0c:ce:91: 1c:55:94:fc:64:61:55:4b:e7:d8:9f:3e:6d:96:1f: 2e:fa:b0:92:80:eb:a4:c2:11:8b:70:32:66:83:db: 21:86:02:90:1e:8f:46:32:44:13:3f:d7:68:d1:c9: d8:dc:90:e2:78:60:60:ba:db:98:6c:df:8e:0d:dd: 55:23:15:d6:6d:94:55:58:23:a0:fd:46:e9:ed:a9: 5f:6e:8a:ad:e9:df:9e:6e:1b:f4:5d:73:6b:9e:ee: 74:05:8a:77:15:f4:30:f9:c8:a8:5d:e1:c7:d8:40: 3c:fd:ec:fb:73:45:2c:2a:90:80:9e:f3:90:1b:e5: b9:8f:b7:ca:b2:55:34:5c:65:4b:63:36:7a:14:ca: 90:e5:95:a7:81:30:1e:0f:ab:62:6f:a0:e7:5d:33: c5:30:19:5b:5b:bf:99:3f:50:5e:3f:f0:f2:7b:48: d7:46:bc:01:df:2c:21:4b:b1:90:f1:68:c0:c4:45: 51:aa:38:8a:a6:06:36:c7:d8:de:64:21:df:8b:5a: b9:1a:77:4e:75:91:c0:a2:a4:87:bb:0f:6a:01:0b: c1:3a:a0:7c:2f:b0:7e:ee:8a:9e:91:bd:9f:c2:71: 15:33:c4:03:6a:9b:4d:e4:a1:ed:71:73:e7:d9:27: 40:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:47:17:92:36:83:AA:A2:7C:9A:59:DE:B0:E0:0C:A8:17:78:4D:85 X509v3 Authority Key Identifier: keyid:AD:05:40:36:DA:D3:2D:17:A8:C9:16:DC:2D:FB:B3:CE:8A:36:45:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQVANtrTLReoyRbcLfuzzoo2RSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/a3fbf8-45a7-49c2-a4b8-8e1514ccaa4a/1/rQVANtrTLReoyRbcLfuzzoo2RSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:34:2c:6a:05:f6:88:3f:94:36:d8:27:b9:3c:c8:93:3b:ab: 29:95:09:06:f1:cc:8f:d9:0a:c4:41:c9:c8:6c:0b:c5:84:a0: a1:39:a2:27:eb:df:ea:61:ba:c2:64:07:30:01:aa:ff:3c:01: ba:66:db:87:1f:20:3e:43:56:2d:8a:e7:87:52:59:d9:ff:1c: 62:2d:3b:bc:47:22:7d:27:ad:77:fd:3b:80:63:84:29:28:84: ad:6b:a4:33:a7:41:8f:f0:b3:af:96:f2:eb:48:39:81:40:f6: 55:c2:00:bb:d6:95:b9:e0:17:d8:0e:04:ce:64:3e:4a:56:34: cb:3b:5f:6f:8c:78:48:a8:dd:21:07:ab:b5:93:78:d6:1b:20: ff:76:b0:cc:1f:78:01:2f:df:b7:6e:56:ba:ab:d3:7d:47:e8: 0a:6b:93:09:67:67:52:60:49:82:08:87:10:a8:bb:bb:d2:f5: 2c:69:17:8f:6f:43:4a:d2:c6:6e:d5:13:ee:87:64:7d:6e:ce: ce:0f:48:c0:c9:48:fa:6b:c6:5b:12:d8:e0:3e:f7:f1:b9:ab: 5a:08:08:a0:71:5c:44:a4:a5:ac:b5:02:1e:f2:31:5f:07:78: 0f:fc:cf:44:99:f7:d5:34:ea:cc:25:93:b3:8d:5a:26:d4:e1: 8f:ac:7d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslUj4MJ9T6jZVqDU8jhXolMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMDU0MDM2ZGFkMzJkMTdhOGM5MTZkYzJkZmJiM2NlOGEz NjQ1MmMwHhcNMjUxMjE2MDQwMTQ1WhcNMjUxMjE3MDQwMTQ1WjAzMTEwLwYDVQQD Eyg0NzQ3MTc5MjM2ODNhYWEyN2M5YTU5ZGViMGUwMGNhODE3Nzg0ZDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcd1K9mNgP+IS3IMzpEcVZT8ZGFV S+fYnz5tlh8u+rCSgOukwhGLcDJmg9shhgKQHo9GMkQTP9do0cnY3JDieGBgutuY bN+ODd1VIxXWbZRVWCOg/Ubp7alfboqt6d+ebhv0XXNrnu50BYp3FfQw+cioXeHH 2EA8/ez7c0UsKpCAnvOQG+W5j7fKslU0XGVLYzZ6FMqQ5ZWngTAeD6tib6DnXTPF MBlbW7+ZP1BeP/Dye0jXRrwB3ywhS7GQ8WjAxEVRqjiKpgY2x9jeZCHfi1q5GndO dZHAoqSHuw9qAQvBOqB8L7B+7oqekb2fwnEVM8QDaptN5KHtcXPn2SdAQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdHF5I2g6qifJpZ3rDgDKgXeE2FMB8GA1UdIwQY MBaAFK0FQDba0y0XqMkW3C37s86KNkUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0Yjgt OGUxNTE0Y2NhYTRhLzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9hM2ZiZjgtNDVhNy00OWMyLWE0YjgtOGUxNTE0Y2NhYTRh LzEvclFWQU50clRMUmVveVJiY0xmdXp6b28yUlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzQsagX2 iD+UNtgnuTzIkzurKZUJBvHMj9kKxEHJyGwLxYSgoTmiJ+vf6mG6wmQHMAGq/zwB umbbhx8gPkNWLYrnh1JZ2f8cYi07vEcifSetd/07gGOEKSiErWukM6dBj/Czr5by 60g5gUD2VcIAu9aVueAX2A4EzmQ+SlY0yztfb4x4SKjdIQertZN41hsg/3awzB94 AS/ft25WuqvTfUfoCmuTCWdnUmBJggiHEKi7u9L1LGkXj29DStLGbtUT7odkfW7O zg9IwMlI+mvGWxLY4D738bmrWggIoHFcRKSlrLUCHvIxXwd4D/zPRJn31TTqzCWT s41aJtThj6x9wA== -----END CERTIFICATE-----Generated at Tue Dec 16 14:19:00 2025 by rpki-client