This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json) Hash identifier: kxKzwdJLkrT2cqmFHWcT0letiQIDUVKCsyg8ZPHR3Tc= Subject key identifier: F8:0A:84:7A:7C:68:48:99:76:90:1C:2D:90:84:97:ED:9D:D3:1D:20 Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Certificate serial: 019AF1D189EC82E77144CE040C28E2F0C97C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 04:00:32 +0000 Manifest this update: Sat 06 Dec 2025 04:00:32 +0000 Manifest next update: Sun 07 Dec 2025 04:00:32 +0000 Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: XzDYyyEb4xhjzDf504gwYdu05S/5v+J2VK3rVnTdiLc=) 2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=) 3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=) 4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:89:ec:82:e7:71:44:ce:04:0c:28:e2:f0:c9:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136 Validity Not Before: Dec 6 04:00:32 2025 GMT Not After : Dec 7 04:00:32 2025 GMT Subject: CN=f80a847a7c68489976901c2d908497ed9dd31d20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:aa:b9:f2:4f:ba:78:2b:a7:bf:8f:39:7a:2b: a3:bb:bb:ad:0d:1c:7e:7e:6c:d3:94:ee:9b:58:3d: c1:51:00:a3:35:83:c8:1a:34:61:7a:84:dc:7c:15: cc:64:6d:95:04:7e:49:e7:0b:6b:b8:76:12:ba:6a: bd:6d:e1:67:81:34:7f:fb:63:eb:f3:74:bd:56:45: a0:da:5e:2b:d1:f4:b2:9d:9d:95:07:86:28:13:57: c9:8d:b3:7a:6d:f9:b0:51:4f:ef:3a:4b:54:99:93: 19:cf:88:cb:01:9f:e6:22:6c:d1:c6:fd:cb:21:a3: 9b:c1:e2:75:33:d1:27:75:16:93:a3:59:26:a2:fc: 8c:88:0a:e2:e1:3c:ab:85:15:42:e6:4a:e7:a6:d0: 4b:a7:f8:5c:f3:7c:de:59:71:a6:6e:61:6e:50:a2: 70:d6:6e:d6:0e:65:6e:5f:d9:de:ad:80:26:d0:c5: 27:d0:7b:80:3b:55:17:4a:17:51:14:0a:8e:71:18: 9b:fe:c9:d2:d1:dc:91:41:07:cf:ef:fa:2d:8e:c3: b3:ea:c5:fa:7f:ab:c8:ba:33:dd:06:e9:a3:d8:c1: 40:85:3d:e8:03:c1:bd:e6:78:6c:04:48:1c:15:74: 4d:2f:8d:25:aa:4d:bc:ac:6e:e5:43:f0:3f:62:1f: 56:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:0A:84:7A:7C:68:48:99:76:90:1C:2D:90:84:97:ED:9D:D3:1D:20 X509v3 Authority Key Identifier: keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:38:84:6b:e2:84:65:9c:9a:68:7b:7a:29:4a:76:a7:d6:ad: fc:c2:2b:a7:db:89:36:53:c7:00:86:13:94:cd:f0:a1:12:2b: 92:6f:d7:bd:53:bf:22:d6:73:d6:78:2a:11:6b:61:87:40:be: dc:99:23:ee:bd:08:9d:ac:9c:23:52:f6:4c:81:79:dd:ab:5c: 17:08:32:15:72:35:9a:ab:c8:8f:fd:42:06:30:10:ca:c3:ce: ad:1e:36:da:c1:2a:87:91:c4:e0:f0:29:bf:98:09:7b:15:d9: 1a:3a:43:ea:f8:c7:83:72:5e:64:e3:ec:2a:39:3e:41:54:3a: b4:a9:9e:2e:30:a1:af:5d:07:06:83:31:70:69:00:2b:ca:02: 56:bc:05:ea:fd:06:dd:64:2c:43:83:59:22:35:e9:9f:25:10: d3:89:2e:3a:0b:f4:58:a4:d8:a3:a1:99:e2:19:88:72:94:e3: 3e:7b:bd:34:8e:24:1e:d5:a1:87:8b:01:2f:d1:17:21:e6:7e: 8a:ff:8b:08:bd:8c:d9:ea:31:00:dd:53:5a:bc:72:74:44:9d: 77:07:a2:90:bb:66:eb:c4:b2:95:13:e1:4d:ed:ef:70:07:43: ef:93:4c:3e:a7:75:ec:49:27:81:5e:64:dd:c5:26:48:41:f6: 4b:0f:00:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0YnsgudxRM4EDCji8Ml8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYTQ0NTI2MDJjOWRmOTc3YzlkNWRkOGRjMTNiNjY2MWRm NDAxMzYwHhcNMjUxMjA2MDQwMDMyWhcNMjUxMjA3MDQwMDMyWjAzMTEwLwYDVQQD EyhmODBhODQ3YTdjNjg0ODk5NzY5MDFjMmQ5MDg0OTdlZDlkZDMxZDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqq58k+6eCunv485eiuju7utDRx+ fmzTlO6bWD3BUQCjNYPIGjRheoTcfBXMZG2VBH5J5wtruHYSumq9beFngTR/+2Pr 83S9VkWg2l4r0fSynZ2VB4YoE1fJjbN6bfmwUU/vOktUmZMZz4jLAZ/mImzRxv3L IaObweJ1M9EndRaTo1kmovyMiAri4TyrhRVC5krnptBLp/hc83zeWXGmbmFuUKJw 1m7WDmVuX9nerYAm0MUn0HuAO1UXShdRFAqOcRib/snS0dyRQQfP7/otjsOz6sX6 f6vIujPdBumj2MFAhT3oA8G95nhsBEgcFXRNL40lqk28rG7lQ/A/Yh9WMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPgKhHp8aEiZdpAcLZCEl+2d0x0gMB8GA1UdIwQY MBaAFNKkRSYCyd+XfJ1d2NwTtmYd9AE2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQt ZmU3NGVmN2FhYzk1LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNWZkOTktOGFlMC00YWUwLWI2YjQtZmU3NGVmN2FhYzk1 LzEvMHFSRkpnTEozNWQ4blYzWTNCTzJaaDMwQVRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsjiEa+KE ZZyaaHt6KUp2p9at/MIrp9uJNlPHAIYTlM3woRIrkm/XvVO/ItZz1ngqEWthh0C+ 3Jkj7r0InaycI1L2TIF53atcFwgyFXI1mqvIj/1CBjAQysPOrR422sEqh5HE4PAp v5gJexXZGjpD6vjHg3JeZOPsKjk+QVQ6tKmeLjChr10HBoMxcGkAK8oCVrwF6v0G 3WQsQ4NZIjXpnyUQ04kuOgv0WKTYo6GZ4hmIcpTjPnu9NI4kHtWhh4sBL9EXIeZ+ iv+LCL2M2eoxAN1TWrxydESddweikLtm68SylRPhTe3vcAdD75NMPqd17EkngV5k 3cUmSEH2Sw8AKw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:03:38 2025 by rpki-client