This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json) Hash identifier: iAwULqTQpW+/7C4VSE+1aWrAF/2voOT2Bua/6PhqJzc= Subject key identifier: 7E:B4:15:FC:ED:9B:08:3F:04:7D:DD:5E:63:A8:BE:80:C2:C2:BE:FF Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Certificate serial: 019B3DFE5668DC65BC0FC7E65A51BF54EF60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft Manifest number: 155B Signing time: Sat 20 Dec 2025 23:00:37 +0000 Manifest this update: Sat 20 Dec 2025 23:00:37 +0000 Manifest next update: Sun 21 Dec 2025 23:00:37 +0000 Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: 5W6RznKZWCcdlELcvmxe8jlMhf/fGtFksUaFhNsldZ8=) 2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:fe:56:68:dc:65:bc:0f:c7:e6:5a:51:bf:54:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Validity Not Before: Dec 20 23:00:37 2025 GMT Not After : Dec 21 23:00:37 2025 GMT Subject: CN=7eb415fced9b083f047ddd5e63a8be80c2c2beff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:8c:22:fc:5a:8d:74:15:a5:20:ff:41:04: 33:52:29:84:2e:21:e9:0b:ee:3d:7e:97:9e:da:58: 8e:f3:45:60:ab:38:bc:e5:34:fb:56:39:6d:f4:65: ab:ae:fa:7c:56:d2:89:c8:fe:8e:c1:a3:fc:5b:ea: a9:ac:12:b3:68:ad:a6:94:7b:42:71:77:ef:50:75: b2:10:a1:b7:84:09:20:f1:ed:ef:f1:bb:0b:85:0a: 0d:0a:75:8a:11:21:0a:10:6a:e7:1e:dd:6a:6c:f2: 4d:6f:1d:6b:8e:55:4f:7b:3a:02:e1:a7:fb:57:83: cb:8c:3c:2e:87:17:80:2e:95:dd:5e:28:8f:9e:7c: 73:29:84:82:52:05:3f:61:fa:27:03:ac:39:3d:9f: 01:97:84:85:f4:d8:e7:79:3b:ca:08:e6:f8:01:42: da:5a:76:bc:83:ab:ad:18:ce:1c:8d:93:6c:f8:58: ba:bd:81:d7:26:c1:94:b9:f2:51:32:93:cb:90:db: 50:c6:19:9e:0a:30:81:72:6f:eb:1e:de:ed:44:6d: 90:a7:14:8f:24:c5:8e:86:49:02:b2:03:89:79:b5: b8:be:57:34:89:30:32:35:6e:7d:8a:2f:0f:ce:80: 37:4b:b7:65:2f:5d:6f:3f:3c:08:f9:73:b4:2e:ac: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:B4:15:FC:ED:9B:08:3F:04:7D:DD:5E:63:A8:BE:80:C2:C2:BE:FF X509v3 Authority Key Identifier: keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:69:1a:34:5d:7e:ed:95:56:85:66:aa:1c:88:73:d4:71:d6: d9:c6:c3:46:db:4e:79:da:97:eb:d3:ef:1d:27:8d:64:f2:8d: 68:fd:10:53:49:83:c7:a3:c6:62:ad:aa:f2:b4:50:0f:57:be: 2f:5c:4c:4b:35:84:a8:26:f4:76:76:57:29:7d:63:5a:34:6a: 4f:b3:dc:43:8e:ea:27:22:04:2c:25:b0:b7:fc:1c:a7:b1:6e: 07:14:17:99:c3:33:1a:9f:66:94:99:79:63:a6:f0:1f:ef:14: 6a:7c:9e:6b:11:55:e3:20:ca:0b:a8:a7:05:89:ca:ca:ff:ba: bf:0f:3c:58:e3:b3:c7:25:76:7d:62:80:03:62:a9:07:67:90: 18:b0:78:bc:aa:31:fd:83:4d:85:40:4d:9f:d5:37:90:ad:a0: 36:dc:11:05:6f:1e:c6:cc:82:31:9d:56:13:29:19:4b:64:98: 60:8e:24:11:a5:ef:fe:5e:3c:f2:80:e9:07:f0:09:91:d8:c3: d3:df:1b:25:98:44:82:bc:a6:83:ea:57:b3:1c:1d:41:ee:75: 3f:b0:1f:3d:ec:80:57:95:f1:0c:c9:9f:b9:ec:3f:12:8c:41: 53:21:2b:dd:c5:9d:6a:f0:ec:80:78:49:6e:65:ee:36:19:60: 6a:79:c5:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9/lZo3GW8D8fmWlG/VO9gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk MjFjNzAwHhcNMjUxMjIwMjMwMDM3WhcNMjUxMjIxMjMwMDM3WjAzMTEwLwYDVQQD Eyg3ZWI0MTVmY2VkOWIwODNmMDQ3ZGRkNWU2M2E4YmU4MGMyYzJiZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSiMIvxajXQVpSD/QQQzUimELiHp C+49fpee2liO80Vgqzi85TT7Vjlt9GWrrvp8VtKJyP6OwaP8W+qprBKzaK2mlHtC cXfvUHWyEKG3hAkg8e3v8bsLhQoNCnWKESEKEGrnHt1qbPJNbx1rjlVPezoC4af7 V4PLjDwuhxeALpXdXiiPnnxzKYSCUgU/YfonA6w5PZ8Bl4SF9NjneTvKCOb4AULa Wna8g6utGM4cjZNs+Fi6vYHXJsGUufJRMpPLkNtQxhmeCjCBcm/rHt7tRG2QpxSP JMWOhkkCsgOJebW4vlc0iTAyNW59ii8PzoA3S7dlL11vPzwI+XO0LqzcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH60Ffztmwg/BH3dXmOovoDCwr7/MB8GA1UdIwQY MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3 LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmkaNF1+ 7ZVWhWaqHIhz1HHW2cbDRttOedqX69PvHSeNZPKNaP0QU0mDx6PGYq2q8rRQD1e+ L1xMSzWEqCb0dnZXKX1jWjRqT7PcQ47qJyIELCWwt/wcp7FuBxQXmcMzGp9mlJl5 Y6bwH+8UanyeaxFV4yDKC6inBYnKyv+6vw88WOOzxyV2fWKAA2KpB2eQGLB4vKox /YNNhUBNn9U3kK2gNtwRBW8exsyCMZ1WEykZS2SYYI4kEaXv/l488oDpB/AJkdjD 098bJZhEgrymg+pXsxwdQe51P7AfPeyAV5XxDMmfuew/EoxBUyEr3cWdavDsgHhJ bmXuNhlgannFGA== -----END CERTIFICATE-----Generated at Sun Dec 21 02:26:27 2025 by rpki-client