This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft File: sDQCUfGCY0f06WRfaCTTuT9H5d4.mft (raw, json) Hash identifier: 9mg4u45wacMmjEN7CrJD7fBJZz/qnExDecMGg+StHwQ= Subject key identifier: 53:1D:2F:AB:E7:85:21:32:E7:E6:44:3A:54:A7:DD:06:49:36:44:34 Authority key identifier: B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE Certificate issuer: /CN=b0340251f1826347f4e9645f6824d3b93f47e5de Certificate serial: 019B25F64A40452F982EFD6AAD8D80CD775C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft Manifest number: 0D80 Signing time: Tue 16 Dec 2025 07:00:56 +0000 Manifest this update: Tue 16 Dec 2025 07:00:56 +0000 Manifest next update: Wed 17 Dec 2025 07:00:56 +0000 Files and hashes: 1: qrqtK-ZhNnqsmvUdjEvFxU-EYdM.roa (hash: w1CKR1mGTdMnfdWKUqyIUV2nyHBupF+j5wpw/8wUJ44=) 2: sDQCUfGCY0f06WRfaCTTuT9H5d4.crl (hash: mMNKVDYpqWgDkhGjcCg1UGTLI7RuQDm2JHa1K5K5kMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:25:f6:4a:40:45:2f:98:2e:fd:6a:ad:8d:80:cd:77:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0340251f1826347f4e9645f6824d3b93f47e5de Validity Not Before: Dec 16 07:00:56 2025 GMT Not After : Dec 17 07:00:56 2025 GMT Subject: CN=531d2fabe7852132e7e6443a54a7dd0649364434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ca:f9:02:3b:e4:f8:63:55:4b:0d:0f:af:ac: fe:6f:16:c1:b3:bf:c7:1c:e5:55:c9:b4:3f:5f:10: fd:da:6b:9f:de:47:73:1e:72:71:d8:fd:d3:59:0b: 27:a4:9b:6d:aa:a8:29:7f:f3:72:6d:a5:03:36:4a: 8a:ab:49:19:f1:bf:19:11:43:80:e6:4e:d0:2c:f1: a7:2f:77:9a:7c:e8:94:49:af:b5:9b:71:ee:a1:0a: c7:39:26:cc:e9:65:3c:38:e6:dd:9f:4b:1a:3e:fb: 72:6b:a1:1a:a2:52:3b:35:5b:96:3c:74:7e:a6:68: a0:58:e7:bb:c6:99:cd:c8:0a:fd:3a:05:e6:83:27: f9:65:60:34:ff:88:1b:64:14:5f:3e:b9:1d:4c:0d: fa:41:9b:38:7e:67:6f:e3:3b:9a:05:3a:d7:7c:7f: 69:1f:42:91:74:fb:16:12:a7:0e:b1:aa:89:45:89: 2b:20:95:19:21:08:fb:39:6f:8d:6f:e0:f6:43:29: 81:b2:00:ba:de:71:39:99:86:42:d7:08:03:94:03: e4:73:b2:b7:ea:ce:63:a0:66:13:51:22:02:67:ed: 40:82:1e:8b:9c:24:4d:50:1d:0c:e2:7d:53:26:25: 08:9b:39:02:56:7d:34:20:df:4c:d8:3e:8f:2e:79: 66:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:1D:2F:AB:E7:85:21:32:E7:E6:44:3A:54:A7:DD:06:49:36:44:34 X509v3 Authority Key Identifier: keyid:B0:34:02:51:F1:82:63:47:F4:E9:64:5F:68:24:D3:B9:3F:47:E5:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDQCUfGCY0f06WRfaCTTuT9H5d4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/f5210d-0590-43a3-9eed-6a83563b655b/1/sDQCUfGCY0f06WRfaCTTuT9H5d4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:4b:84:55:6c:ee:5c:48:12:a3:99:8b:e4:0d:80:41:10:0e: f8:b1:f3:8d:1a:19:80:24:b3:b1:7c:a4:e2:aa:cb:8a:fc:19: 3b:8c:85:f8:7d:e4:b6:af:d3:99:8a:3b:43:40:10:e9:70:a9: 2e:86:f4:9c:c6:c1:0c:53:09:44:ef:9b:04:ff:02:60:ce:02: 5b:53:87:d9:42:11:36:9f:25:8e:50:8b:95:5b:ac:ba:f2:50: 83:1c:3b:6c:1e:a1:1a:67:2f:bd:d2:b3:13:5f:c3:b8:1c:2c: 76:15:2f:71:e5:a0:3c:96:84:d9:84:83:23:be:34:51:b9:46: 06:73:65:37:49:3e:56:aa:ca:b2:5a:38:90:95:1e:10:cb:85: b4:ac:fb:c7:3e:1c:80:90:e3:a7:cc:0a:0b:74:ea:1a:af:b1: 55:31:14:8c:dc:9a:38:7f:46:a6:8d:3e:fa:65:8e:7a:1c:e5: 80:29:62:29:c4:52:bf:7c:db:d8:be:5d:f6:f6:1e:1e:d1:e1: 9c:f6:bb:85:cd:56:66:d8:6b:bc:9c:37:4b:60:16:37:80:3f: 57:28:f6:f4:92:67:d6:79:9b:39:7c:89:d3:15:f7:47:41:6d: 7e:9c:51:b0:f6:b7:8b:52:39:ca:fa:0e:01:5a:d9:b8:c3:ae: 52:1f:68:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsl9kpARS+YLv1qrY2AzXdcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMzQwMjUxZjE4MjYzNDdmNGU5NjQ1ZjY4MjRkM2I5M2Y0 N2U1ZGUwHhcNMjUxMjE2MDcwMDU2WhcNMjUxMjE3MDcwMDU2WjAzMTEwLwYDVQQD Eyg1MzFkMmZhYmU3ODUyMTMyZTdlNjQ0M2E1NGE3ZGQwNjQ5MzY0NDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMr5Ajvk+GNVSw0Pr6z+bxbBs7/H HOVVybQ/XxD92muf3kdzHnJx2P3TWQsnpJttqqgpf/NybaUDNkqKq0kZ8b8ZEUOA 5k7QLPGnL3eafOiUSa+1m3HuoQrHOSbM6WU8OObdn0saPvtya6EaolI7NVuWPHR+ pmigWOe7xpnNyAr9OgXmgyf5ZWA0/4gbZBRfPrkdTA36QZs4fmdv4zuaBTrXfH9p H0KRdPsWEqcOsaqJRYkrIJUZIQj7OW+Nb+D2QymBsgC63nE5mYZC1wgDlAPkc7K3 6s5joGYTUSICZ+1Agh6LnCRNUB0M4n1TJiUImzkCVn00IN9M2D6PLnlmjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFMdL6vnhSEy5+ZEOlSn3QZJNkQ0MB8GA1UdIwQY MBaAFLA0AlHxgmNH9OlkX2gk07k/R+XeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQt NmE4MzU2M2I2NTViLzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My9mNTIxMGQtMDU5MC00M2EzLTllZWQtNmE4MzU2M2I2NTVi LzEvc0RRQ1VmR0NZMGYwNldSZmFDVFR1VDlINWQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEuEVWzu XEgSo5mL5A2AQRAO+LHzjRoZgCSzsXyk4qrLivwZO4yF+H3ktq/TmYo7Q0AQ6XCp Lob0nMbBDFMJRO+bBP8CYM4CW1OH2UIRNp8ljlCLlVusuvJQgxw7bB6hGmcvvdKz E1/DuBwsdhUvceWgPJaE2YSDI740UblGBnNlN0k+VqrKslo4kJUeEMuFtKz7xz4c gJDjp8wKC3TqGq+xVTEUjNyaOH9Gpo0++mWOehzlgCliKcRSv3zb2L5d9vYeHtHh nPa7hc1WZthrvJw3S2AWN4A/Vyj29JJn1nmbOXyJ0xX3R0FtfpxRsPa3i1I5yvoO AVrZuMOuUh9oSA== -----END CERTIFICATE-----Generated at Tue Dec 16 15:47:15 2025 by rpki-client