This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft File: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft (raw, json) Hash identifier: qNZ62TVRZwBxIIXzGNtI+YXdAbBn6vJkr4CDA1gWSY8= Subject key identifier: C0:4F:78:24:2D:E5:91:EC:CE:02:80:DC:A0:53:C2:98:90:D7:3A:55 Authority key identifier: A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 Certificate issuer: /CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Certificate serial: 019B2D7912A740A6FD49577E80138076475C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft Manifest number: 0C33 Signing time: Wed 17 Dec 2025 18:01:07 +0000 Manifest this update: Wed 17 Dec 2025 18:01:07 +0000 Manifest next update: Thu 18 Dec 2025 18:01:07 +0000 Files and hashes: 1: 6jOAX6ZKooyhgzG3-RXUavHtejc.roa (hash: zAiUnOceYAANogRzQmsXCXZI4dk5OulIUSwMR15rFvs=) 2: pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl (hash: VYZNMRhQg5CjxEKL1Xrc1nxKkDivTLDSlT1DTU1AOwQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 18:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:79:12:a7:40:a6:fd:49:57:7e:80:13:80:76:47:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a503b1dd410070ad62e4a2fc66a13b4eb61368f4 Validity Not Before: Dec 17 18:01:07 2025 GMT Not After : Dec 18 18:01:07 2025 GMT Subject: CN=c04f78242de591ecce0280dca053c29890d73a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1e:a6:9e:77:a2:52:0c:43:57:b3:01:a2:7b: a8:0c:1a:90:d2:ac:d6:08:f2:43:24:b7:c6:9b:40: fc:8b:b1:c2:ff:50:dc:51:ae:21:38:0e:13:7f:c8: 39:cb:8a:2f:cf:03:be:28:04:d0:d3:c6:e1:8d:81: dc:f0:e6:6b:3e:61:8a:21:71:37:33:cf:65:ae:22: c5:60:77:26:55:8a:cf:d6:17:c2:f3:6e:d2:35:77: 0e:4a:ce:75:72:b7:dc:36:44:82:be:f4:8b:7d:23: 08:c4:80:5a:03:f3:c1:ea:0f:cf:cb:8a:59:ee:e7: 54:5f:f0:4a:90:8f:ab:95:7e:c2:4a:48:b8:ce:04: 90:bc:ca:85:b6:06:2a:0a:89:b6:96:82:0f:59:95: 14:b7:45:42:30:de:97:22:cd:a5:37:8d:9e:7a:3e: d6:95:50:a5:8d:8b:9c:45:a5:66:11:b4:48:e1:3c: 13:e9:20:6a:b5:7d:49:45:5d:07:26:93:c1:bd:fe: 21:a1:5e:2e:6f:79:88:08:36:29:d7:31:87:a3:ab: 28:35:9f:cd:f5:f7:26:68:f6:4c:49:ab:a5:91:bd: 6c:2a:50:29:42:5d:ab:a7:c0:18:51:16:27:a6:cb: 1a:01:af:5d:d9:f5:d3:97:b7:97:81:40:79:65:40: a9:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:78:24:2D:E5:91:EC:CE:02:80:DC:A0:53:C2:98:90:D7:3A:55 X509v3 Authority Key Identifier: keyid:A5:03:B1:DD:41:00:70:AD:62:E4:A2:FC:66:A1:3B:4E:B6:13:68:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ffef96-bac5-4126-b2b7-0135d9128e86/1/pQOx3UEAcK1i5KL8ZqE7TrYTaPQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:c6:83:dc:5f:a9:3f:31:33:5c:13:1d:43:66:29:97:4b:85: db:d0:40:32:3b:30:89:e1:90:f6:23:8c:69:01:c5:22:2b:52: f9:64:26:14:3b:7c:67:5c:5d:04:69:60:19:84:9a:20:cd:48: 04:59:2e:f3:17:42:87:42:51:72:51:7e:f6:b6:b4:c8:2c:82: b6:a7:73:58:85:9d:82:4d:2c:9f:63:f8:a1:77:39:fd:d3:68: 81:63:d3:4b:89:33:7b:43:48:fe:7b:14:87:7d:54:07:47:f7: b9:0a:3c:15:38:53:9a:5f:b4:47:21:be:8e:08:93:8a:aa:76: e0:2f:2b:e5:72:3b:04:37:85:ac:e0:50:11:77:9b:d2:a5:2a: 10:88:3b:9f:c5:45:48:ee:f3:46:b5:62:74:df:29:bc:61:2f: f7:66:b4:07:c8:0b:f4:9c:2e:00:c0:ac:80:5f:1a:92:ce:7f: 07:ef:0c:d4:e4:c2:68:3c:a4:27:99:36:0b:1d:b2:a3:ae:c9: f8:2b:72:b9:c6:28:3c:76:85:91:85:a3:34:5e:fb:1a:b1:32: 2b:3b:ea:65:7b:5c:cd:d3:78:03:ad:a2:c7:55:ea:33:e4:ca: 0d:87:4e:f0:16:19:b3:4b:13:e5:b9:67:6c:6b:1b:a4:1d:c6: 2f:66:7f:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsteRKnQKb9SVd+gBOAdkdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDNiMWRkNDEwMDcwYWQ2MmU0YTJmYzY2YTEzYjRlYjYx MzY4ZjQwHhcNMjUxMjE3MTgwMTA3WhcNMjUxMjE4MTgwMTA3WjAzMTEwLwYDVQQD EyhjMDRmNzgyNDJkZTU5MWVjY2UwMjgwZGNhMDUzYzI5ODkwZDczYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuh6mnneiUgxDV7MBonuoDBqQ0qzW CPJDJLfGm0D8i7HC/1DcUa4hOA4Tf8g5y4ovzwO+KATQ08bhjYHc8OZrPmGKIXE3 M89lriLFYHcmVYrP1hfC827SNXcOSs51crfcNkSCvvSLfSMIxIBaA/PB6g/Py4pZ 7udUX/BKkI+rlX7CSki4zgSQvMqFtgYqCom2loIPWZUUt0VCMN6XIs2lN42eej7W lVCljYucRaVmEbRI4TwT6SBqtX1JRV0HJpPBvf4hoV4ub3mICDYp1zGHo6soNZ/N 9fcmaPZMSaulkb1sKlApQl2rp8AYURYnpssaAa9d2fXTl7eXgUB5ZUCpgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMBPeCQt5ZHszgKA3KBTwpiQ1zpVMB8GA1UdIwQY MBaAFKUDsd1BAHCtYuSi/GahO062E2j0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjct MDEzNWQ5MTI4ZTg2LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mZmVmOTYtYmFjNS00MTI2LWIyYjctMDEzNWQ5MTI4ZTg2 LzEvcFFPeDNVRUFjSzFpNUtMOFpxRTdUcllUYVBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwcaD3F+p PzEzXBMdQ2Ypl0uF29BAMjswieGQ9iOMaQHFIitS+WQmFDt8Z1xdBGlgGYSaIM1I BFku8xdCh0JRclF+9ra0yCyCtqdzWIWdgk0sn2P4oXc5/dNogWPTS4kze0NI/nsU h31UB0f3uQo8FThTml+0RyG+jgiTiqp24C8r5XI7BDeFrOBQEXeb0qUqEIg7n8VF SO7zRrVidN8pvGEv92a0B8gL9JwuAMCsgF8aks5/B+8M1OTCaDykJ5k2Cx2yo67J +CtyucYoPHaFkYWjNF77GrEyKzvqZXtczdN4A62ix1XqM+TKDYdO8BYZs0sT5bln bGsbpB3GL2Z/gA== -----END CERTIFICATE-----Generated at Wed Dec 17 23:44:11 2025 by rpki-client