This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json) Hash identifier: fpv9btOqoB3iMiuzjlmSY2fAN0sdNyOMBpxC6k/Ddvw= Subject key identifier: D3:E9:5F:79:95:A6:5D:B7:46:64:17:48:C9:D5:FB:8F:B8:4A:8E:64 Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Certificate serial: 019AF61CD889D53FE46EC31F962C5955FEA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft Manifest number: 08F9 Signing time: Sun 07 Dec 2025 00:01:16 +0000 Manifest this update: Sun 07 Dec 2025 00:01:16 +0000 Manifest next update: Mon 08 Dec 2025 00:01:16 +0000 Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: hKVMxOin8Y30EjiOUVFfibpnQrcCAc9rYlAQ+w8zASc=) 2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:d8:89:d5:3f:e4:6e:c3:1f:96:2c:59:55:fe:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Validity Not Before: Dec 7 00:01:16 2025 GMT Not After : Dec 8 00:01:16 2025 GMT Subject: CN=d3e95f7995a65db746641748c9d5fb8fb84a8e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:cc:b2:71:c8:a7:f4:16:7e:fe:85:07:b5:6f: 4d:83:17:d0:34:73:f0:52:03:4f:1c:96:29:38:5b: bf:e6:bb:c8:ad:07:53:fe:9f:2e:34:d1:0c:57:7c: dd:0f:ed:19:3c:26:e9:d1:70:e6:e9:f5:95:6c:df: 72:d1:6d:6b:03:48:d5:9b:74:1c:96:11:de:b6:6e: 35:41:d0:8d:f1:6d:c3:68:70:32:d5:d4:56:0e:d0: b6:41:81:3d:88:46:16:27:cd:91:6f:65:fa:07:5d: 2b:01:26:0b:c3:23:b2:0d:05:1f:17:45:7d:d2:3e: ec:99:eb:0e:ee:89:3a:54:f9:f6:36:d8:8f:fa:cb: f6:17:f7:f6:b6:3d:bd:ed:fa:7b:ce:16:a1:0c:46: 49:94:55:be:b1:99:9f:2b:2e:92:af:32:67:ff:91: 92:cd:c1:0c:62:1b:ec:fc:f6:b8:8c:d3:ee:8c:f2: 69:a8:9c:fb:0b:cd:8e:9a:3a:2c:a6:55:26:22:03: 3c:fe:52:22:5e:d2:8a:ab:6e:13:0d:16:1d:68:1e: d8:b3:17:f8:43:40:b8:0a:3f:41:c9:e6:fb:43:b2: e6:40:05:55:07:8d:e2:9f:e7:c3:01:84:fa:6f:10: fb:a8:33:e8:1f:6b:7d:56:16:87:56:8a:d3:e3:7e: da:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E9:5F:79:95:A6:5D:B7:46:64:17:48:C9:D5:FB:8F:B8:4A:8E:64 X509v3 Authority Key Identifier: keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:20:a0:76:ff:0a:a9:68:8d:68:ec:7d:22:f0:5b:ec:5f:ae: 12:e0:89:a8:9e:ce:d1:2f:30:de:0f:78:bd:d7:33:6e:1a:45: 59:cb:ea:f7:14:53:a0:68:8e:94:49:75:73:df:1a:71:0f:82: 15:a9:02:20:2d:c4:25:7e:f3:fe:90:dc:37:f0:0b:3c:20:70: a4:b5:7b:f5:6b:26:86:31:3b:a2:86:70:0a:4c:6d:2d:63:b1: 13:c2:31:ee:85:38:aa:00:d9:78:e1:a2:74:c0:43:c9:55:58: ee:a4:3d:53:d3:cf:ff:26:58:25:a2:8b:22:44:a5:f0:be:27: 9f:cc:21:83:14:8c:29:c5:62:f7:1e:25:f9:83:78:03:c2:9d: 42:c5:4e:50:c4:bb:50:74:ab:1c:f1:dd:44:ae:fc:40:41:4e: 20:43:bc:b6:7f:2c:fa:30:a0:a3:de:59:bd:87:a1:11:14:62: b7:d0:5a:81:b8:fb:57:7b:a4:28:45:ef:26:38:3a:45:d2:d2: 1e:82:37:f1:bc:a9:dd:30:eb:38:5e:69:70:97:5e:94:ce:14: ce:76:d5:c4:fb:ea:46:17:bf:06:0d:07:70:03:c6:bc:2d:bd: d3:18:18:8e:b0:79:a8:7b:55:80:9c:97:61:ae:42:e8:3c:a8: d1:d7:56:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HNiJ1T/kbsMflixZVf6jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi YmQ4MzgwHhcNMjUxMjA3MDAwMTE2WhcNMjUxMjA4MDAwMTE2WjAzMTEwLwYDVQQD EyhkM2U5NWY3OTk1YTY1ZGI3NDY2NDE3NDhjOWQ1ZmI4ZmI4NGE4ZTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcyyccin9BZ+/oUHtW9NgxfQNHPw UgNPHJYpOFu/5rvIrQdT/p8uNNEMV3zdD+0ZPCbp0XDm6fWVbN9y0W1rA0jVm3Qc lhHetm41QdCN8W3DaHAy1dRWDtC2QYE9iEYWJ82Rb2X6B10rASYLwyOyDQUfF0V9 0j7smesO7ok6VPn2NtiP+sv2F/f2tj297fp7zhahDEZJlFW+sZmfKy6SrzJn/5GS zcEMYhvs/Pa4jNPujPJpqJz7C82OmjosplUmIgM8/lIiXtKKq24TDRYdaB7Ysxf4 Q0C4Cj9Byeb7Q7LmQAVVB43in+fDAYT6bxD7qDPoH2t9VhaHVorT437ahwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNPpX3mVpl23RmQXSMnV+4+4So5kMB8GA1UdIwQY MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKyCgdv8K qWiNaOx9IvBb7F+uEuCJqJ7O0S8w3g94vdczbhpFWcvq9xRToGiOlEl1c98acQ+C FakCIC3EJX7z/pDcN/ALPCBwpLV79WsmhjE7ooZwCkxtLWOxE8Ix7oU4qgDZeOGi dMBDyVVY7qQ9U9PP/yZYJaKLIkSl8L4nn8whgxSMKcVi9x4l+YN4A8KdQsVOUMS7 UHSrHPHdRK78QEFOIEO8tn8s+jCgo95ZvYehERRit9Bagbj7V3ukKEXvJjg6RdLS HoI38byp3TDrOF5pcJdelM4UznbVxPvqRhe/Bg0HcAPGvC290xgYjrB5qHtVgJyX Ya5C6Dyo0ddW8A== -----END CERTIFICATE-----Generated at Sun Dec 7 05:34:47 2025 by rpki-client