This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft File: rQYYvADZEaXV7r-cWJakG_KJjss.mft (raw, json) Hash identifier: LOak+KA+i4gJ/7IdjnU3OrXvQYQXVrLzj7Oq4V7RbR0= Subject key identifier: FF:BB:E2:1D:E0:76:6E:7D:F8:90:2D:DB:C7:77:A1:D8:BC:66:EA:38 Authority key identifier: AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB Certificate issuer: /CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Certificate serial: 019B3EDA23660C8E3B694D4E6AC512845969 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 03:00:41 +0000 Manifest this update: Sun 21 Dec 2025 03:00:41 +0000 Manifest next update: Mon 22 Dec 2025 03:00:41 +0000 Files and hashes: 1: P05t-254IWXoRfvJ8I88nflXaUg.roa (hash: 2/CzHNUF/1AeD5pdSyLVqCJoUWPrU+YxMAzaIv8CwTI=) 2: rQYYvADZEaXV7r-cWJakG_KJjss.crl (hash: Hkjcsh3c0BmBAILsuQy6cLAZ1XV/bQzscYSYroJQg30=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:da:23:66:0c:8e:3b:69:4d:4e:6a:c5:12:84:59:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0618bc00d911a5d5eebf9c5896a41bf2898ecb Validity Not Before: Dec 21 03:00:41 2025 GMT Not After : Dec 22 03:00:41 2025 GMT Subject: CN=ffbbe21de0766e7df8902ddbc777a1d8bc66ea38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:1a:fc:c9:62:7e:c1:cd:de:46:cb:85:47: 8a:0e:98:f4:2e:d1:cd:f9:82:63:33:bc:17:36:7d: b7:2e:8b:87:73:29:21:d8:f1:90:be:5a:58:29:f2: 1c:f1:52:3d:ba:37:ec:dc:e0:ef:f1:f0:94:80:ad: ce:c3:4a:09:48:cc:c6:fd:cd:70:60:26:6d:75:3a: 46:1b:60:81:b7:fc:03:7c:4a:91:b2:7f:2c:c6:5e: 1b:c8:35:91:58:c8:82:ec:e0:ee:80:55:1c:26:8c: cd:df:f5:08:10:bc:2f:4c:e7:83:5f:a4:a8:0c:74: 9b:05:ec:81:07:af:6a:ad:32:e9:24:d5:dc:28:a7: 3f:dd:2b:d9:30:da:41:23:1c:65:1b:96:b2:07:01: 89:84:d0:0f:ea:59:f0:dc:41:e2:0a:1d:ec:5b:9b: 81:95:9e:8c:3c:f9:95:42:3a:17:22:50:77:6d:97: b0:95:52:f8:9d:b8:ef:ab:b6:55:4f:c9:df:80:87: 9e:b9:03:46:52:e0:c7:2e:f4:e7:0c:e8:4c:18:0e: 4b:d3:e5:53:1e:17:56:18:a7:9e:73:20:70:1b:65: ff:b7:3e:20:06:cc:8b:20:bb:ad:8d:7e:8f:d9:1e: 17:de:de:02:bb:51:c8:fd:ac:de:ed:be:99:98:25: 44:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:BB:E2:1D:E0:76:6E:7D:F8:90:2D:DB:C7:77:A1:D8:BC:66:EA:38 X509v3 Authority Key Identifier: keyid:AD:06:18:BC:00:D9:11:A5:D5:EE:BF:9C:58:96:A4:1B:F2:89:8E:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQYYvADZEaXV7r-cWJakG_KJjss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9f35e9-a17a-48cd-9402-31d245f3b3b8/1/rQYYvADZEaXV7r-cWJakG_KJjss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ac:73:85:a9:7c:f5:5b:d9:df:2d:76:95:46:e1:21:04:9c: fe:c5:9e:93:22:06:43:f2:0b:11:f2:9a:36:ac:f0:31:c8:f0: 2e:74:dd:76:f2:80:bc:cb:1e:db:b7:cb:70:f7:11:a6:16:07: ce:e4:b8:f4:26:e4:fb:56:58:d7:93:32:38:a9:d3:b9:53:67: bb:e9:36:98:4b:86:79:82:7e:01:7a:7f:b0:91:8e:59:8f:a9: 1d:5d:ec:35:c3:2a:fc:68:cc:38:f9:ed:f9:32:4b:4a:a4:35: 7a:da:a2:a5:1a:3e:78:c3:5c:5e:2f:cf:62:08:75:95:88:e6: e0:85:dc:6d:32:4f:74:c4:dc:c0:f2:11:4f:ee:6c:ca:20:8e: 63:41:84:79:bb:d3:88:d3:90:ef:0c:4e:53:6c:6d:51:bf:f8: fb:af:38:0a:9b:18:5b:69:f7:c9:70:6b:7b:1a:1b:ad:82:72: 6e:8e:1a:65:67:a4:ec:e9:75:f7:9c:62:c7:a0:49:78:4b:70: 43:d9:a5:74:59:a8:ef:08:90:90:91:41:3f:b4:d3:2d:5e:5d: 9e:65:d0:b7:1c:8a:68:d6:b0:cc:fc:b4:72:ad:04:dd:7d:8d: 4c:50:1d:81:31:8b:ae:c6:f9:ec:63:35:d7:f0:6a:7d:de:30: 21:88:26:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+2iNmDI47aU1OasUShFlpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMDYxOGJjMDBkOTExYTVkNWVlYmY5YzU4OTZhNDFiZjI4 OThlY2IwHhcNMjUxMjIxMDMwMDQxWhcNMjUxMjIyMDMwMDQxWjAzMTEwLwYDVQQD EyhmZmJiZTIxZGUwNzY2ZTdkZjg5MDJkZGJjNzc3YTFkOGJjNjZlYTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvn8a/MlifsHN3kbLhUeKDpj0LtHN +YJjM7wXNn23LouHcykh2PGQvlpYKfIc8VI9ujfs3ODv8fCUgK3Ow0oJSMzG/c1w YCZtdTpGG2CBt/wDfEqRsn8sxl4byDWRWMiC7ODugFUcJozN3/UIELwvTOeDX6So DHSbBeyBB69qrTLpJNXcKKc/3SvZMNpBIxxlG5ayBwGJhNAP6lnw3EHiCh3sW5uB lZ6MPPmVQjoXIlB3bZewlVL4nbjvq7ZVT8nfgIeeuQNGUuDHLvTnDOhMGA5L0+VT HhdWGKeecyBwG2X/tz4gBsyLILutjX6P2R4X3t4Cu1HI/aze7b6ZmCVEawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+74h3gdm59+JAt28d3odi8Zuo4MB8GA1UdIwQY MBaAFK0GGLwA2RGl1e6/nFiWpBvyiY7LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDIt MzFkMjQ1ZjNiM2I4LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS85ZjM1ZTktYTE3YS00OGNkLTk0MDItMzFkMjQ1ZjNiM2I4 LzEvclFZWXZBRFpFYVhWN3ItY1dKYWtHX0tKanNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQaxzhal8 9VvZ3y12lUbhIQSc/sWekyIGQ/ILEfKaNqzwMcjwLnTddvKAvMse27fLcPcRphYH zuS49Cbk+1ZY15MyOKnTuVNnu+k2mEuGeYJ+AXp/sJGOWY+pHV3sNcMq/GjMOPnt +TJLSqQ1etqipRo+eMNcXi/PYgh1lYjm4IXcbTJPdMTcwPIRT+5syiCOY0GEebvT iNOQ7wxOU2xtUb/4+684CpsYW2n3yXBrexobrYJybo4aZWek7Ol195xix6BJeEtw Q9mldFmo7wiQkJFBP7TTLV5dnmXQtxyKaNawzPy0cq0E3X2NTFAdgTGLrsb57GM1 1/Bqfd4wIYgmTQ== -----END CERTIFICATE-----Generated at Sun Dec 21 10:15:55 2025 by rpki-client