This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: Ez3QQyUQXWlAqp7w15hzGKkX3L3ot5aD0Qu/tjoIOLA= Subject key identifier: 3D:7F:06:DB:48:60:9C:96:E6:D8:38:6C:9D:EA:2F:EF:D6:FA:7D:60 Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019B3344B9CFCB981BC39C41FA60DD73EC08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 092F Signing time: Thu 18 Dec 2025 21:01:40 +0000 Manifest this update: Thu 18 Dec 2025 21:01:40 +0000 Manifest next update: Fri 19 Dec 2025 21:01:40 +0000 Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: Cbk7POV6Q6BGJ8RPTdqYfpbBKgqrGhWBnYSqPpUjUJQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:44:b9:cf:cb:98:1b:c3:9c:41:fa:60:dd:73:ec:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Dec 18 21:01:40 2025 GMT Not After : Dec 19 21:01:40 2025 GMT Subject: CN=3d7f06db48609c96e6d8386c9dea2fefd6fa7d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e5:4b:95:0d:04:f1:77:ac:c4:5a:09:f9:5f: 68:c0:ab:84:66:e9:31:79:b7:31:60:20:62:74:65: 6d:4d:3b:25:dd:be:fd:f0:5a:80:db:e2:7f:cb:87: 93:23:ed:83:15:e3:3b:15:a5:9f:c4:16:e3:82:ae: 31:8d:e2:a6:f9:46:71:53:ba:07:b9:e4:35:e4:58: 28:ba:5f:76:2f:5b:b4:be:57:9e:66:df:3a:ab:fe: b7:73:9e:b7:cf:98:7a:89:75:06:ff:25:a7:40:68: c9:b1:48:ff:19:b3:00:8b:f0:ef:f1:80:f3:72:a0: 12:33:70:2c:3a:9e:1d:86:22:c6:e1:17:53:3c:92: d1:7b:90:51:c1:2d:e9:6b:dc:2b:a0:4c:cd:44:6c: f5:ec:28:4f:8e:75:0c:02:af:3e:e8:eb:79:4e:60: f7:e4:63:2b:77:92:d6:98:ab:f9:e5:c9:a7:6c:6c: 9f:20:09:41:ef:fc:08:62:5a:7a:f1:ef:af:29:de: 1f:6b:6d:74:3c:28:05:d9:7e:11:c6:2f:36:54:b1: ea:b1:42:d4:74:73:77:80:55:a6:ca:73:e6:cd:c3: 22:39:7c:e8:fa:9b:1e:dd:9b:c1:52:64:2b:d8:71: 1a:06:39:65:e3:20:77:1e:fc:41:f7:ff:2f:8c:10: 74:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7F:06:DB:48:60:9C:96:E6:D8:38:6C:9D:EA:2F:EF:D6:FA:7D:60 X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7a:29:35:b0:5d:b9:a7:18:0d:98:23:b4:a4:0a:f2:ab:ce: 65:ae:47:91:3e:75:0a:3d:70:75:0f:36:97:b0:59:3d:50:e1: f6:8c:1c:82:04:82:c7:dd:29:3a:89:07:fa:d2:75:f0:d3:58: e0:3d:4f:e7:c4:5d:79:d5:bb:e6:8f:99:6d:1c:b1:26:e5:a1: 57:58:ce:16:e9:ba:06:b3:3d:64:4a:99:e2:11:77:c2:d9:4e: d8:1e:4d:01:92:2f:99:61:c9:10:87:f4:a7:af:62:b4:46:c9: a1:4a:93:99:77:d0:cb:04:12:80:35:99:c1:8f:9f:b6:b1:83: 75:28:8f:ec:4e:42:78:f2:e7:7b:f1:72:71:93:70:15:42:aa: 5f:f9:88:a7:fb:04:62:52:0d:db:c5:77:c9:a8:6f:31:83:c3: 36:79:15:14:1d:66:05:ce:98:34:7b:be:dd:5e:a9:95:4b:b9: 84:17:bd:93:23:2f:93:77:97:41:18:10:e8:7e:fa:ac:b6:f5: 32:83:7a:bb:ca:77:c2:af:e8:1c:0d:0a:b2:4c:03:90:73:6d: b0:49:d1:c9:f6:9b:1d:5e:9e:37:c5:5c:07:0a:dc:a3:6a:cf: 77:67:b5:05:b4:f8:91:98:d6:1d:72:d1:c2:7b:16:48:b1:c4: 8f:c8:15:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszRLnPy5gbw5xB+mDdc+wIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjUxMjE4MjEwMTQwWhcNMjUxMjE5MjEwMTQwWjAzMTEwLwYDVQQD EygzZDdmMDZkYjQ4NjA5Yzk2ZTZkODM4NmM5ZGVhMmZlZmQ2ZmE3ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOVLlQ0E8XesxFoJ+V9owKuEZukx ebcxYCBidGVtTTsl3b798FqA2+J/y4eTI+2DFeM7FaWfxBbjgq4xjeKm+UZxU7oH ueQ15Fgoul92L1u0vleeZt86q/63c563z5h6iXUG/yWnQGjJsUj/GbMAi/Dv8YDz cqASM3AsOp4dhiLG4RdTPJLRe5BRwS3pa9wroEzNRGz17ChPjnUMAq8+6Ot5TmD3 5GMrd5LWmKv55cmnbGyfIAlB7/wIYlp68e+vKd4fa210PCgF2X4Rxi82VLHqsULU dHN3gFWmynPmzcMiOXzo+pse3ZvBUmQr2HEaBjll4yB3HvxB9/8vjBB0swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1/BttIYJyW5tg4bJ3qL+/W+n1gMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXopNbBd uacYDZgjtKQK8qvOZa5HkT51Cj1wdQ82l7BZPVDh9owcggSCx90pOokH+tJ18NNY 4D1P58RdedW75o+ZbRyxJuWhV1jOFum6BrM9ZEqZ4hF3wtlO2B5NAZIvmWHJEIf0 p69itEbJoUqTmXfQywQSgDWZwY+ftrGDdSiP7E5CePLne/FycZNwFUKqX/mIp/sE YlIN28V3yahvMYPDNnkVFB1mBc6YNHu+3V6plUu5hBe9kyMvk3eXQRgQ6H76rLb1 MoN6u8p3wq/oHA0KskwDkHNtsEnRyfabHV6eN8VcBwrco2rPd2e1BbT4kZjWHXLR wnsWSLHEj8gV6A== -----END CERTIFICATE-----Generated at Thu Dec 18 22:36:40 2025 by rpki-client