This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json) Hash identifier: n0Chs66ZIBGRzgFwybhLJCsaLkitef8S28ggSFOVZpc= Subject key identifier: 85:53:D8:52:D5:5A:7E:E7:7F:58:CA:2D:69:DC:AA:1D:88:99:41:6C Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93 Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093 Certificate serial: 019B25BF43BF265484A0272C709C03084394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft Manifest number: 1782 Signing time: Tue 16 Dec 2025 06:00:50 +0000 Manifest this update: Tue 16 Dec 2025 06:00:50 +0000 Manifest next update: Wed 17 Dec 2025 06:00:50 +0000 Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: d5rBzJuleImpdNixvN/QM5gsO4rtmo8oN+KGy6lwnQU=) 2: KXd_5OhpNxA2dAEUBM7BRlNmng0.roa (hash: naKbPeMlQvH49cTjg2nRiud0MzlhFN73NWmhIANkiB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:bf:43:bf:26:54:84:a0:27:2c:70:9c:03:08:43:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093 Validity Not Before: Dec 16 06:00:50 2025 GMT Not After : Dec 17 06:00:50 2025 GMT Subject: CN=8553d852d55a7ee77f58ca2d69dcaa1d8899416c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:07:8e:69:1d:4d:ac:5a:8d:06:8c:6d:07:8e: 75:34:e3:45:2b:73:8e:5b:9e:b8:24:a6:f7:8f:a0: cf:d7:9b:d9:d9:57:76:d1:37:04:50:3c:bc:b9:16: 93:d8:bf:a6:1a:cb:7b:0d:eb:22:f0:fb:db:1e:e6: a2:71:eb:6a:a8:8c:33:37:9c:74:d1:11:3d:32:b0: e0:e2:09:de:29:94:86:12:65:9a:08:f0:f4:d3:ba: fa:31:ad:ea:1e:55:b9:6d:08:32:14:1f:89:49:71: e7:e6:88:bb:b8:4d:16:aa:af:8b:ca:29:d5:e6:2b: 1d:83:e2:b2:b0:71:0c:2e:b7:b5:f1:e9:66:22:ab: 3d:fa:ef:36:cf:9e:69:7b:82:a8:7b:63:77:13:41: 58:a3:0d:f6:7e:79:1b:a7:b2:ad:de:74:65:86:71: 3b:fe:0f:6d:4a:17:ca:41:f2:ef:10:e5:57:82:b2: 04:f0:79:c6:75:02:f8:20:a8:03:64:1b:7a:9d:9b: 3e:b7:e4:04:04:09:70:0b:4a:94:bc:bc:6f:4d:31: 9b:48:9e:ed:59:25:5d:c6:6e:28:79:63:02:95:99: 94:80:5b:d5:42:e3:dc:9d:78:91:1d:8a:03:8d:e0: e2:b3:0b:ff:14:d0:2c:26:35:28:65:07:1c:f7:ec: 6e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:53:D8:52:D5:5A:7E:E7:7F:58:CA:2D:69:DC:AA:1D:88:99:41:6C X509v3 Authority Key Identifier: keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:50:43:d5:1c:d4:4e:70:20:8f:17:45:b9:be:fe:98:20:46: 5e:9f:dc:57:14:be:f9:3d:e5:dc:6e:f7:e3:86:59:bc:c2:02: 0b:3e:77:0d:6c:ce:6a:6e:d5:69:12:69:63:5a:e4:89:31:5d: a4:5c:11:51:fa:1d:53:54:c9:53:c7:4c:04:e6:a6:51:fc:68: fe:ea:17:0c:59:51:8d:d8:d0:2b:4a:e2:7d:3c:fb:50:67:d6: da:4d:24:47:e6:b0:57:7f:7e:b6:db:e4:15:8e:d5:74:f9:a4: 9f:3b:ed:60:b5:4b:53:fc:be:86:3c:c7:e2:4e:24:9f:86:38: 02:7a:d8:2d:c7:e2:60:41:57:81:d2:93:8c:0b:3d:8a:3d:8a: c3:97:ca:f2:b2:55:0d:db:d2:06:3a:5b:1e:7d:b0:3e:53:3b: 10:72:70:45:59:95:3d:25:65:10:93:4c:7e:80:45:b0:f0:06: 7c:02:93:75:75:19:24:30:b7:73:e6:d3:0a:b9:c5:a7:7d:6e: f7:1d:ff:58:75:59:f6:da:ee:a1:ad:5b:39:c4:2d:91:5e:74: bd:3d:aa:4b:36:1d:28:59:1c:0a:52:0d:f8:48:ce:90:21:40: 49:5f:eb:95:89:12:6e:fb:75:75:2c:51:78:5d:d6:6d:9a:c2: 75:b9:12:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZslv0O/JlSEoCcscJwDCEOUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDg3NGIzMzNlMzVkZjE0ZmQ5NzBlMTg5NTgxZGEwOTNi YzgwOTMwHhcNMjUxMjE2MDYwMDUwWhcNMjUxMjE3MDYwMDUwWjAzMTEwLwYDVQQD Eyg4NTUzZDg1MmQ1NWE3ZWU3N2Y1OGNhMmQ2OWRjYWExZDg4OTk0MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2weOaR1NrFqNBoxtB451NONFK3OO W564JKb3j6DP15vZ2Vd20TcEUDy8uRaT2L+mGst7Desi8PvbHuaicetqqIwzN5x0 0RE9MrDg4gneKZSGEmWaCPD007r6Ma3qHlW5bQgyFB+JSXHn5oi7uE0Wqq+LyinV 5isdg+KysHEMLre18elmIqs9+u82z55pe4Koe2N3E0FYow32fnkbp7Kt3nRlhnE7 /g9tShfKQfLvEOVXgrIE8HnGdQL4IKgDZBt6nZs+t+QEBAlwC0qUvLxvTTGbSJ7t WSVdxm4oeWMClZmUgFvVQuPcnXiRHYoDjeDiswv/FNAsJjUoZQcc9+xuOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVT2FLVWn7nf1jKLWncqh2ImUFsMB8GA1UdIwQY MBaAFA0IdLMz413xT9lw4YlYHaCTvICTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUt MzE4MWRiOTExYTEzLzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUtMzE4MWRiOTExYTEz LzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAClBD1RzU TnAgjxdFub7+mCBGXp/cVxS++T3l3G7344ZZvMICCz53DWzOam7VaRJpY1rkiTFd pFwRUfodU1TJU8dMBOamUfxo/uoXDFlRjdjQK0rifTz7UGfW2k0kR+awV39+ttvk FY7VdPmknzvtYLVLU/y+hjzH4k4kn4Y4AnrYLcfiYEFXgdKTjAs9ij2Kw5fK8rJV DdvSBjpbHn2wPlM7EHJwRVmVPSVlEJNMfoBFsPAGfAKTdXUZJDC3c+bTCrnFp31u 9x3/WHVZ9truoa1bOcQtkV50vT2qSzYdKFkcClIN+EjOkCFASV/rlYkSbvt1dSxR eF3WbZrCdbkSxw== -----END CERTIFICATE-----Generated at Tue Dec 16 09:00:36 2025 by rpki-client