This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json) Hash identifier: p2mRTpKfc1SkzoT4XPgqNswr5nEIl/zapD2sJC0T26Y= Subject key identifier: 3B:87:55:35:D0:03:BF:67:C8:DF:1B:86:6F:BB:4E:C2:11:15:5B:EB Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2 Certificate serial: 019B1014401C24B59090BB0D3F15A748D625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft Manifest number: 1770 Signing time: Fri 12 Dec 2025 01:02:00 +0000 Manifest this update: Fri 12 Dec 2025 01:02:00 +0000 Manifest next update: Sat 13 Dec 2025 01:02:00 +0000 Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: a4zkXlZIj2AKleEzLrDUwDcdN5T2o+YnCZGu3uGhwRA=) 2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=) 3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:40:1c:24:b5:90:90:bb:0d:3f:15:a7:48:d6:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2 Validity Not Before: Dec 12 01:02:00 2025 GMT Not After : Dec 13 01:02:00 2025 GMT Subject: CN=3b875535d003bf67c8df1b866fbb4ec211155beb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2a:d2:69:00:4d:15:71:62:c6:b5:a6:74:3d: 5c:82:8f:b1:4a:92:1c:a0:c9:4e:dd:34:7b:52:1b: c5:1c:0b:bf:26:1e:a3:58:52:7e:0f:a5:01:66:e9: a5:cc:04:61:0e:3a:e3:e6:45:c2:93:7d:9d:8d:89: 0e:67:8c:1c:ef:60:14:91:38:68:c7:5e:ec:88:32: 1d:fd:f4:32:68:b3:57:9a:b8:e2:b9:00:32:27:c7: 27:a1:d3:4a:cf:78:ce:0b:6e:09:1b:73:2a:a5:44: 88:c3:f3:68:78:e8:2f:b8:74:a8:80:02:3c:86:9f: 40:19:9a:e1:84:36:0b:69:7a:e0:2e:2e:5c:12:f1: a5:33:4b:ba:a7:22:5c:97:43:0e:20:fb:8e:27:ae: fc:d6:93:b1:9c:5a:18:2a:fd:ac:e7:71:66:a6:ba: a3:72:80:a5:6a:55:29:bf:3c:09:ee:e2:2c:08:f7: 00:03:6e:0d:63:60:09:fe:ea:ee:cc:89:70:1d:0b: 59:42:53:4a:58:70:57:28:6d:bb:28:1e:a8:a9:3e: a0:5c:47:55:a4:d5:7d:15:54:25:be:3e:f9:d2:eb: b5:28:85:cb:fa:02:9a:ba:21:a9:b7:6b:88:c6:2d: e2:e1:fb:12:86:3f:c8:62:e7:67:b8:6c:92:03:7f: 9b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:87:55:35:D0:03:BF:67:C8:DF:1B:86:6F:BB:4E:C2:11:15:5B:EB X509v3 Authority Key Identifier: keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:19:9e:67:3d:14:be:ad:8e:5b:bb:fd:cd:1b:46:4c:d1:4d: b8:a2:5b:7f:53:40:ff:4f:62:0a:f8:53:4e:fa:b5:3d:92:12: 4e:0c:10:d1:4c:2d:3b:d6:53:26:92:5e:05:b4:a1:a3:f4:7b: cf:33:d0:d8:38:58:a8:de:5f:5d:c0:6f:a5:c9:9d:c6:4e:35: 83:a9:06:c2:6b:f3:40:e7:50:6e:5a:39:ae:18:d7:a9:f4:78: 27:bf:9f:96:ae:37:a6:58:2c:d7:e3:6e:df:d1:6d:af:75:74: d4:4d:b2:0b:b4:07:61:79:c9:7c:dd:02:ed:c6:b5:6c:8e:13: 6b:ca:be:eb:22:93:93:ef:41:18:10:95:d3:a1:f1:ea:0e:ab: 4c:e5:18:dd:bf:4c:8e:0d:02:a9:fd:9f:60:b2:8c:22:04:41: 5b:e6:52:4c:2b:4b:82:8c:e6:8c:5c:5b:ca:7d:63:91:af:8e: 74:50:3f:ef:0d:7d:ce:77:60:01:d1:ef:45:9d:f3:1a:77:a6: 1f:98:4a:85:3e:0c:c0:88:dc:d8:ec:ed:30:77:ea:3b:23:bc: e9:a6:9b:7c:4a:50:bb:89:2c:65:bc:ef:91:a8:27:41:21:0b: 15:d5:3e:0d:33:c9:5b:ee:64:50:01:66:e0:27:1b:07:0a:63: 5d:89:58:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFEAcJLWQkLsNPxWnSNYlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl NTI2ZDIwHhcNMjUxMjEyMDEwMjAwWhcNMjUxMjEzMDEwMjAwWjAzMTEwLwYDVQQD EygzYjg3NTUzNWQwMDNiZjY3YzhkZjFiODY2ZmJiNGVjMjExMTU1YmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCrSaQBNFXFixrWmdD1cgo+xSpIc oMlO3TR7UhvFHAu/Jh6jWFJ+D6UBZumlzARhDjrj5kXCk32djYkOZ4wc72AUkTho x17siDId/fQyaLNXmrjiuQAyJ8cnodNKz3jOC24JG3MqpUSIw/NoeOgvuHSogAI8 hp9AGZrhhDYLaXrgLi5cEvGlM0u6pyJcl0MOIPuOJ6781pOxnFoYKv2s53Fmprqj coClalUpvzwJ7uIsCPcAA24NY2AJ/uruzIlwHQtZQlNKWHBXKG27KB6oqT6gXEdV pNV9FVQlvj750uu1KIXL+gKauiGpt2uIxi3i4fsShj/IYudnuGySA3+bBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDuHVTXQA79nyN8bhm+7TsIRFVvrMB8GA1UdIwQY MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt YTk5ZWE5MWNiNWI5LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5 LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIBmeZz0U vq2OW7v9zRtGTNFNuKJbf1NA/09iCvhTTvq1PZISTgwQ0UwtO9ZTJpJeBbSho/R7 zzPQ2DhYqN5fXcBvpcmdxk41g6kGwmvzQOdQblo5rhjXqfR4J7+flq43plgs1+Nu 39Ftr3V01E2yC7QHYXnJfN0C7ca1bI4Ta8q+6yKTk+9BGBCV06Hx6g6rTOUY3b9M jg0Cqf2fYLKMIgRBW+ZSTCtLgozmjFxbyn1jka+OdFA/7w19zndgAdHvRZ3zGnem H5hKhT4MwIjc2OztMHfqOyO86aabfEpQu4ksZbzvkagnQSELFdU+DTPJW+5kUAFm 4CcbBwpjXYlYog== -----END CERTIFICATE-----Generated at Fri Dec 12 06:14:13 2025 by rpki-client