This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json) Hash identifier: dQGfmMX5UQwyanfiQBvPEIDFg1Z6I784jyM/Del90nw= Subject key identifier: 8A:17:B6:30:03:5E:4B:C5:9B:08:E1:74:46:BB:C2:75:06:57:4A:FA Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Certificate serial: 019B2F9E46CCFA0FB21D239D47E548812379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft Manifest number: 1783 Signing time: Thu 18 Dec 2025 04:01:00 +0000 Manifest this update: Thu 18 Dec 2025 04:01:00 +0000 Manifest next update: Fri 19 Dec 2025 04:01:00 +0000 Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: SXBlOAOcMIsTW3uftvBPJQNT/j1/HUVs0khb9RrpkoM=) 2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=) 3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=) 4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:9e:46:cc:fa:0f:b2:1d:23:9d:47:e5:48:81:23:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Validity Not Before: Dec 18 04:01:00 2025 GMT Not After : Dec 19 04:01:00 2025 GMT Subject: CN=8a17b630035e4bc59b08e17446bbc27506574afa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7f:9a:18:b9:66:6f:05:3d:ce:0e:c5:ee:42: 3b:a0:73:6d:ea:a3:b0:aa:42:fe:05:c9:d7:ff:8a: f8:a7:d8:37:7c:4b:e6:c1:c1:9d:1e:aa:ab:8a:50: 00:aa:84:a9:4f:8e:91:85:79:27:eb:6a:d1:22:6c: 9a:c4:6b:2c:e2:82:4f:f6:9a:51:bd:1b:70:a1:5e: 16:bb:91:59:31:d6:7a:1c:4e:04:01:22:53:43:46: 38:01:33:8c:7e:c3:ca:f9:a4:b6:12:67:54:d8:bc: c2:a0:12:0a:0e:fb:b1:6c:10:28:7e:aa:21:fb:a8: 0e:00:61:e5:08:b6:9f:32:9d:48:77:73:99:35:15: 75:e6:e1:8a:0b:79:7a:b5:01:9b:95:ec:ed:73:2f: 43:f9:50:41:7d:96:9b:e4:b6:f8:2e:21:aa:f8:dd: 1d:05:14:44:c0:a6:cc:c8:3d:12:07:ce:8d:af:06: 7a:c5:ad:fd:ad:21:74:c0:11:d4:c0:9e:fd:f9:62: dd:64:69:02:ec:9a:97:26:68:57:87:05:6c:91:4c: 4b:2b:74:a8:65:6e:61:01:c1:04:82:1a:96:ba:eb: 17:ca:5b:7f:d0:bc:4e:12:48:30:c9:8b:34:00:65: ff:29:3c:11:9b:f7:a1:6e:01:a1:91:71:6f:09:1f: 9b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:17:B6:30:03:5E:4B:C5:9B:08:E1:74:46:BB:C2:75:06:57:4A:FA X509v3 Authority Key Identifier: keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:57:a6:f6:cd:61:69:38:55:c4:d1:89:27:7d:7d:39:e4:76: f4:aa:2e:56:55:4f:86:f6:97:6e:b6:64:96:02:63:8e:4a:e4: bf:c1:d6:4a:e5:41:45:97:38:72:a3:3d:75:8b:6a:2b:63:37: ed:9d:c2:50:1f:74:1f:6a:4f:61:3f:5b:9c:10:5f:36:2f:69: e0:da:97:65:37:0f:50:40:bf:52:67:48:da:e6:80:9c:0c:c6: 16:5e:88:6a:7b:0a:5c:a7:57:ba:0c:b9:5b:72:99:f8:da:2a: df:e3:1e:ef:eb:8a:2d:88:23:89:a1:a3:0a:cc:e3:46:64:ec: 07:b2:47:f3:24:3f:13:2e:c1:bc:a3:79:bb:30:27:ca:ee:0e: 82:32:3c:2b:a7:ed:00:26:6c:f4:ea:5d:20:75:f6:32:31:64: aa:6d:e0:8d:62:77:10:cf:62:27:03:35:df:bd:02:5c:55:b6: e5:5c:86:3f:c7:c9:7b:07:bf:a0:91:81:54:5d:be:f7:45:07: e4:6b:5f:14:3e:45:c7:62:b5:87:8c:14:8f:23:0f:1c:05:57: b5:59:9e:32:a1:70:5a:41:bc:2a:4f:46:6c:09:f2:67:07:00: fe:88:cd:9c:9b:7b:81:0a:33:de:0d:de:34:77:45:45:0f:d1: e3:78:8b:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvnkbM+g+yHSOdR+VIgSN5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm NDAxMzYwHhcNMjUxMjE4MDQwMTAwWhcNMjUxMjE5MDQwMTAwWjAzMTEwLwYDVQQD Eyg4YTE3YjYzMDAzNWU0YmM1OWIwOGUxNzQ0NmJiYzI3NTA2NTc0YWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX+aGLlmbwU9zg7F7kI7oHNt6qOw qkL+BcnX/4r4p9g3fEvmwcGdHqqrilAAqoSpT46RhXkn62rRImyaxGss4oJP9ppR vRtwoV4Wu5FZMdZ6HE4EASJTQ0Y4ATOMfsPK+aS2EmdU2LzCoBIKDvuxbBAofqoh +6gOAGHlCLafMp1Id3OZNRV15uGKC3l6tQGbleztcy9D+VBBfZab5Lb4LiGq+N0d BRREwKbMyD0SB86NrwZ6xa39rSF0wBHUwJ79+WLdZGkC7JqXJmhXhwVskUxLK3So ZW5hAcEEghqWuusXylt/0LxOEkgwyYs0AGX/KTwRm/ehbgGhkXFvCR+btwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIoXtjADXkvFmwjhdEa7wnUGV0r6MB8GA1UdIwQY MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1 LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAllem9s1h aThVxNGJJ319OeR29KouVlVPhvaXbrZklgJjjkrkv8HWSuVBRZc4cqM9dYtqK2M3 7Z3CUB90H2pPYT9bnBBfNi9p4NqXZTcPUEC/UmdI2uaAnAzGFl6IansKXKdXugy5 W3KZ+Noq3+Me7+uKLYgjiaGjCszjRmTsB7JH8yQ/Ey7BvKN5uzAnyu4OgjI8K6ft ACZs9OpdIHX2MjFkqm3gjWJ3EM9iJwM1370CXFW25VyGP8fJewe/oJGBVF2+90UH 5GtfFD5Fx2K1h4wUjyMPHAVXtVmeMqFwWkG8Kk9GbAnyZwcA/ojNnJt7gQoz3g3e NHdFRQ/R43iLPA== -----END CERTIFICATE-----Generated at Thu Dec 18 12:45:31 2025 by rpki-client