This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json) Hash identifier: 4SiYgrZ4rGeMUuDFu2SD5sIWIk0oUTdVjE0AMTi0HLI= Subject key identifier: 1C:1B:8A:F1:ED:3F:0B:95:0B:D9:09:7C:17:54:CE:21:3A:C0:86:EC Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10 Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210 Certificate serial: 019B292F2A6DAA23C03363F2F0839F91CDD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft Manifest number: 177D Signing time: Tue 16 Dec 2025 22:01:55 +0000 Manifest this update: Tue 16 Dec 2025 22:01:55 +0000 Manifest next update: Wed 17 Dec 2025 22:01:55 +0000 Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=) 2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: S02QJJ1J5RAb/CXm2OKopriwUWa+XxXQ+dP3P4sQwJM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:2a:6d:aa:23:c0:33:63:f2:f0:83:9f:91:cd:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210 Validity Not Before: Dec 16 22:01:55 2025 GMT Not After : Dec 17 22:01:55 2025 GMT Subject: CN=1c1b8af1ed3f0b950bd9097c1754ce213ac086ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:0c:30:ca:dd:f4:c5:f3:e0:81:7d:63:b5: 67:c2:7b:8a:da:eb:9d:ab:b3:88:b6:58:01:43:65: 78:3d:22:6d:14:47:3b:82:42:09:cd:54:23:b4:81: c5:02:87:5f:da:c4:4d:b6:57:5d:1b:1a:c7:bd:2a: 60:2e:a3:5c:d9:d4:5c:c7:47:e8:66:c4:17:6b:d8: 81:08:43:ef:de:4a:b9:23:9d:b2:bc:22:a6:d7:fc: 28:e9:38:5e:7e:78:ba:f3:c3:ed:d1:be:ed:f8:92: df:14:4c:63:81:fe:9d:28:ee:e2:e6:ce:33:d6:4c: f0:de:b1:14:28:d6:fd:d7:5a:23:d8:61:14:99:26: 1b:e3:b4:15:1f:5a:53:25:97:9b:d3:ec:6c:0e:b2: 14:6c:33:c5:8b:45:11:1d:f0:bb:40:79:9e:d2:9a: 8b:98:72:ac:aa:76:67:e4:81:01:1a:ac:64:5d:74: 25:80:7c:2f:54:63:42:59:81:82:26:6a:91:15:7e: 81:74:e9:8e:06:8d:54:3b:72:9b:a3:10:e6:67:17: 24:3c:0f:e2:18:80:a8:39:2d:e4:c9:2f:76:8e:43: ce:c8:91:fc:56:c6:0a:39:e9:37:ef:c2:2c:ef:ca: 70:4d:7b:b3:d6:04:7d:50:2f:a7:60:0f:99:de:4d: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:1B:8A:F1:ED:3F:0B:95:0B:D9:09:7C:17:54:CE:21:3A:C0:86:EC X509v3 Authority Key Identifier: keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:3f:64:73:9c:d7:a2:75:04:3b:85:84:3c:9b:14:13:81:5e: 58:8d:81:82:8c:c8:d1:3a:94:92:1e:9a:5a:0f:88:17:51:25: de:b2:dc:13:95:ff:c8:be:8e:b4:0d:18:d6:4b:1f:ff:6c:71: 30:a8:f9:3f:9c:75:16:4c:01:d5:aa:2f:6e:2a:e5:b7:ca:67: f4:1a:58:fe:37:32:66:62:5c:47:fd:d5:a3:fc:57:32:03:05: 35:bf:70:48:b9:66:92:f0:70:83:ab:49:80:3e:bb:89:4b:1c: a0:5b:bb:11:6d:a3:4a:13:58:1f:e1:c9:87:32:33:93:bb:0b: 8c:46:65:08:17:78:c4:a8:72:6e:80:42:ed:46:fb:8b:a0:6a: 8f:5c:99:82:21:41:f7:c8:0a:6b:ef:30:38:ee:ca:af:62:2d: d2:11:4e:5e:11:8c:f0:6f:60:97:d7:35:11:97:07:5d:df:7e: 5b:98:11:f2:78:9e:ca:62:0a:7f:fb:be:0e:f9:00:13:9c:f0: 6c:93:ea:5a:9f:ed:54:60:25:c5:09:d8:37:8a:30:ca:dd:16: 9d:a7:e0:38:9b:9b:e0:bb:95:93:46:74:64:dc:8f:15:04:9b: b3:b2:be:21:de:83:a4:a0:79:88:3a:50:8f:c5:ef:9f:b1:d4: b2:40:af:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspLyptqiPAM2Py8IOfkc3RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy MWEyMTAwHhcNMjUxMjE2MjIwMTU1WhcNMjUxMjE3MjIwMTU1WjAzMTEwLwYDVQQD EygxYzFiOGFmMWVkM2YwYjk1MGJkOTA5N2MxNzU0Y2UyMTNhYzA4NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY8MMMrd9MXz4IF9Y7VnwnuK2uud q7OItlgBQ2V4PSJtFEc7gkIJzVQjtIHFAodf2sRNtlddGxrHvSpgLqNc2dRcx0fo ZsQXa9iBCEPv3kq5I52yvCKm1/wo6Thefni688Pt0b7t+JLfFExjgf6dKO7i5s4z 1kzw3rEUKNb911oj2GEUmSYb47QVH1pTJZeb0+xsDrIUbDPFi0URHfC7QHme0pqL mHKsqnZn5IEBGqxkXXQlgHwvVGNCWYGCJmqRFX6BdOmOBo1UO3KboxDmZxckPA/i GICoOS3kyS92jkPOyJH8VsYKOek378Is78pwTXuz1gR9UC+nYA+Z3k0kXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwbivHtPwuVC9kJfBdUziE6wIbsMB8GA1UdIwQY MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt ODViNjViYWNkNGZiLzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARz9kc5zX onUEO4WEPJsUE4FeWI2BgozI0TqUkh6aWg+IF1El3rLcE5X/yL6OtA0Y1ksf/2xx MKj5P5x1FkwB1aovbirlt8pn9BpY/jcyZmJcR/3Vo/xXMgMFNb9wSLlmkvBwg6tJ gD67iUscoFu7EW2jShNYH+HJhzIzk7sLjEZlCBd4xKhyboBC7Ub7i6Bqj1yZgiFB 98gKa+8wOO7Kr2It0hFOXhGM8G9gl9c1EZcHXd9+W5gR8nieymIKf/u+DvkAE5zw bJPqWp/tVGAlxQnYN4owyt0WnafgOJub4LuVk0Z0ZNyPFQSbs7K+Id6DpKB5iDpQ j8Xvn7HUskCvug== -----END CERTIFICATE-----Generated at Tue Dec 16 23:51:30 2025 by rpki-client