This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json) Hash identifier: iikuzQK5hzcf1QkzJ7mG65rK4tNGe2avdptIkQMg6jo= Subject key identifier: 6A:5D:74:96:70:0D:C6:D5:8F:B4:78:2E:BC:D2:2C:9A:F7:63:E3:53 Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Certificate serial: 019B11262D32E22EC14424DC5CBADB516E65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft Manifest number: 06DF Signing time: Fri 12 Dec 2025 06:01:13 +0000 Manifest this update: Fri 12 Dec 2025 06:01:13 +0000 Manifest next update: Sat 13 Dec 2025 06:01:13 +0000 Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: GHiWaWFcmlrEfQA851LBE2Owpz/nbVNrid5LOOFW5T0=) 2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:26:2d:32:e2:2e:c1:44:24:dc:5c:ba:db:51:6e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Validity Not Before: Dec 12 06:01:13 2025 GMT Not After : Dec 13 06:01:13 2025 GMT Subject: CN=6a5d7496700dc6d58fb4782ebcd22c9af763e353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9a:3b:d8:7c:a4:d7:07:20:79:c4:4d:a0:2c: 46:d0:c5:4c:f3:3a:bc:4a:7f:42:53:40:5b:0f:7d: ac:33:3c:d4:62:72:da:e5:ff:27:f3:89:b8:29:92: 78:01:22:97:69:ec:94:ed:1e:ac:c9:67:cc:d5:6a: 84:65:3e:9e:5f:88:7c:59:df:81:12:df:1d:e2:e1: a6:c9:d0:5d:5d:b0:37:62:27:4e:0e:8e:3f:57:b6: a5:23:65:b4:65:90:dc:b2:74:59:e7:de:e2:bd:25: 43:b2:12:51:13:85:73:72:61:8e:f7:ee:97:dc:0c: 4f:2b:c3:01:5e:f3:bd:80:a7:25:61:b3:77:66:1b: 9c:3e:2f:21:46:06:07:bd:a2:fc:13:8b:bd:4b:2e: 66:3d:c6:25:d6:e8:36:ed:55:8f:78:82:35:2c:27: 2c:02:46:b4:c5:9f:0a:01:99:ca:31:3e:e5:87:78: 5a:d6:05:78:36:bf:6b:3d:40:4f:53:65:0e:1a:a7: c7:d0:28:c3:e3:12:5b:87:40:86:64:e5:93:38:b9: ec:71:c4:09:7e:02:d9:1b:19:2f:ed:50:54:59:96: d2:4a:26:ae:a6:fd:d5:7d:4e:41:1d:0c:7c:40:2b: e4:bc:d1:d4:5e:a6:67:d2:85:6c:55:b9:03:b5:91: d2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:5D:74:96:70:0D:C6:D5:8F:B4:78:2E:BC:D2:2C:9A:F7:63:E3:53 X509v3 Authority Key Identifier: keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:ba:7b:a4:a0:85:d0:82:a1:c7:50:4c:b9:5a:4f:c7:57:c6: 4a:55:a7:b4:16:a8:0e:99:4a:9e:03:0a:04:d6:a3:97:2f:11: 20:61:5f:d8:63:64:dc:95:b0:ee:13:66:9e:d8:95:85:6e:64: 9f:39:00:84:03:95:17:98:a0:40:73:4b:ce:f8:ae:56:1c:f2: 66:d9:df:66:a6:b3:90:79:31:db:ea:65:dd:c7:1a:6f:f0:2b: bf:f8:ce:cb:bb:82:a9:c3:f2:d0:12:0c:08:d8:de:8e:5a:df: e0:31:ab:73:a7:14:84:a7:e3:fd:8f:fe:d3:d3:67:ae:83:89: f8:f1:a2:c6:49:89:8e:da:3d:a5:15:44:6c:a6:bc:95:28:e1: 6e:77:a2:ea:f0:a3:17:ce:98:3f:08:59:f8:c6:9f:55:09:dd: d9:3d:e7:9c:e9:2c:69:8c:51:d3:2d:85:27:e8:48:73:43:b6: c9:1e:be:1c:07:34:b7:9e:86:5d:2a:f2:17:8a:e1:f2:e8:37: 05:71:3a:9e:f9:e1:c7:39:ce:c8:4d:9e:dd:a6:12:45:9b:c4: d9:37:02:1e:e3:bc:7a:ab:9a:0e:93:79:71:9f:a1:8a:9e:f8: 64:c3:6f:ee:aa:64:6f:94:fc:d2:70:13:84:14:42:bf:0d:6c: be:de:8b:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRJi0y4i7BRCTcXLrbUW5lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh MWRmNzIwHhcNMjUxMjEyMDYwMTEzWhcNMjUxMjEzMDYwMTEzWjAzMTEwLwYDVQQD Eyg2YTVkNzQ5NjcwMGRjNmQ1OGZiNDc4MmViY2QyMmM5YWY3NjNlMzUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5o72Hyk1wcgecRNoCxG0MVM8zq8 Sn9CU0BbD32sMzzUYnLa5f8n84m4KZJ4ASKXaeyU7R6syWfM1WqEZT6eX4h8Wd+B Et8d4uGmydBdXbA3YidODo4/V7alI2W0ZZDcsnRZ597ivSVDshJRE4VzcmGO9+6X 3AxPK8MBXvO9gKclYbN3ZhucPi8hRgYHvaL8E4u9Sy5mPcYl1ug27VWPeII1LCcs Aka0xZ8KAZnKMT7lh3ha1gV4Nr9rPUBPU2UOGqfH0CjD4xJbh0CGZOWTOLnsccQJ fgLZGxkv7VBUWZbSSiaupv3VfU5BHQx8QCvkvNHUXqZn0oVsVbkDtZHSrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpddJZwDcbVj7R4LrzSLJr3Y+NTMB8GA1UdIwQY MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1 LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASbp7pKCF 0IKhx1BMuVpPx1fGSlWntBaoDplKngMKBNajly8RIGFf2GNk3JWw7hNmntiVhW5k nzkAhAOVF5igQHNLzviuVhzyZtnfZqazkHkx2+pl3ccab/Arv/jOy7uCqcPy0BIM CNjejlrf4DGrc6cUhKfj/Y/+09NnroOJ+PGixkmJjto9pRVEbKa8lSjhbnei6vCj F86YPwhZ+MafVQnd2T3nnOksaYxR0y2FJ+hIc0O2yR6+HAc0t56GXSryF4rh8ug3 BXE6nvnhxznOyE2e3aYSRZvE2TcCHuO8equaDpN5cZ+hip74ZMNv7qpkb5T80nAT hBRCvw1svt6Lcg== -----END CERTIFICATE-----Generated at Fri Dec 12 08:22:48 2025 by rpki-client