This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json) Hash identifier: 69hysMJEncdBuwMBQkZxdAs9atKegc+LjIEC76vcR/w= Subject key identifier: C5:17:7D:02:F0:59:69:44:85:0F:CC:82:11:EA:7C:6B:81:5C:BA:50 Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Certificate serial: 019B3F1119EB6C2F6668D5A581F1DA52707E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft Manifest number: 0EE5 Signing time: Sun 21 Dec 2025 04:00:43 +0000 Manifest this update: Sun 21 Dec 2025 04:00:43 +0000 Manifest next update: Mon 22 Dec 2025 04:00:43 +0000 Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=) 2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: gbktdRGt5215aj9RwmkmtfQrDp8LBxRRMIPSAMEBfzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 00:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3f:11:19:eb:6c:2f:66:68:d5:a5:81:f1:da:52:70:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Validity Not Before: Dec 21 04:00:43 2025 GMT Not After : Dec 22 04:00:43 2025 GMT Subject: CN=c5177d02f0596944850fcc8211ea7c6b815cba50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4a:34:d6:a0:27:c5:d8:ad:04:b5:bd:ac:41: a5:8b:98:b3:32:6c:ab:5e:58:a6:00:ab:88:10:d4: 65:97:f0:e2:14:70:15:a7:71:f6:7d:e2:11:9e:f7: f7:2d:ea:04:4c:db:b4:5b:65:cd:eb:6c:92:0c:bb: c5:ed:f0:cc:e4:40:f3:25:4c:84:b0:fe:6f:c9:3e: e8:a0:f6:48:11:a5:e5:9c:d6:38:ca:ed:34:03:d3: 05:ac:ba:b1:c2:e0:69:f4:5c:17:b3:ec:e1:fe:3f: 96:96:04:ba:9d:65:3e:3b:73:b1:5f:8e:47:96:6e: 6e:b4:f9:ad:46:de:13:1c:2d:21:71:a4:ca:88:4e: af:65:41:0b:a8:c4:a5:0d:b6:54:fd:f0:00:71:d6: 42:77:3a:89:bd:b1:3d:13:df:17:4d:f7:0e:39:51: e7:70:a1:a8:96:78:7b:e9:92:97:d6:49:38:62:d3: 4b:19:aa:4c:47:38:71:ab:71:fa:bd:c7:46:c6:d8: a3:0a:df:85:a7:0f:84:a8:ee:ae:a0:0d:c0:29:5a: 27:74:ff:b8:91:75:8e:e9:81:1c:bf:bb:d4:db:d0: 9c:00:07:da:80:b6:a6:f9:e0:da:09:20:0a:a6:5b: f1:84:29:5d:33:df:15:3b:7e:0a:ab:17:e5:a8:9d: 25:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:17:7D:02:F0:59:69:44:85:0F:CC:82:11:EA:7C:6B:81:5C:BA:50 X509v3 Authority Key Identifier: keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:17:d8:83:8d:f8:60:7f:18:52:45:b6:76:4c:05:68:0d:a9: 69:d1:39:b7:2d:20:58:25:9a:b0:42:ed:7a:ac:a1:dc:b9:0e: a4:18:c8:99:ac:12:92:aa:e5:9a:b5:4b:9b:0f:f9:d9:1b:42: 16:18:35:e5:80:ab:24:18:b2:af:38:67:c8:6e:a2:d6:95:3f: 1a:fb:6b:76:e5:0c:f7:eb:79:8a:58:d1:c5:19:a9:14:67:eb: 8a:3c:02:78:6c:30:5f:c6:28:d9:4b:9e:75:9e:bf:2e:f8:f3: 4e:e4:2f:77:ec:2f:74:e6:c5:e4:57:70:d8:9d:b1:ee:b0:68: 70:3e:62:59:ee:af:c7:f3:a1:20:7b:01:59:9d:de:3c:d0:e8: 79:7e:2a:a3:e3:8a:b4:e2:e0:f7:b8:84:2f:79:1e:77:57:5a: 7d:61:52:3b:05:05:62:5f:65:49:d3:90:6d:44:48:66:ce:1e: 36:49:d5:bf:f3:07:11:93:cb:cb:4c:28:d7:b8:1c:b1:52:df: ca:38:d9:10:ee:dc:81:9f:50:f7:df:66:6b:1c:8b:52:b7:f2: d5:94:d6:8d:aa:1d:e7:50:78:3d:a7:13:4e:79:a5:71:82:13: 4c:e2:bf:2c:2c:44:4b:fc:be:cb:e0:eb:65:d6:38:f7:5e:e9: ac:eb:ac:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs/ERnrbC9maNWlgfHaUnB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWEzM2U3ZTFjMjM5NGM2NjNiZTg1ZDczYjllZTM0Yjc2 OTQ5NWYwHhcNMjUxMjIxMDQwMDQzWhcNMjUxMjIyMDQwMDQzWjAzMTEwLwYDVQQD EyhjNTE3N2QwMmYwNTk2OTQ0ODUwZmNjODIxMWVhN2M2YjgxNWNiYTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEo01qAnxditBLW9rEGli5izMmyr XlimAKuIENRll/DiFHAVp3H2feIRnvf3LeoETNu0W2XN62ySDLvF7fDM5EDzJUyE sP5vyT7ooPZIEaXlnNY4yu00A9MFrLqxwuBp9FwXs+zh/j+WlgS6nWU+O3OxX45H lm5utPmtRt4THC0hcaTKiE6vZUELqMSlDbZU/fAAcdZCdzqJvbE9E98XTfcOOVHn cKGolnh76ZKX1kk4YtNLGapMRzhxq3H6vcdGxtijCt+Fpw+EqO6uoA3AKVondP+4 kXWO6YEcv7vU29CcAAfagLam+eDaCSAKplvxhCldM98VO34KqxflqJ0lIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUXfQLwWWlEhQ/MghHqfGuBXLpQMB8GA1UdIwQY MBaAFHaqM+fhwjlMZjvoXXO57jS3aUlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTct NzRkNGMyYzViNjk0LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTctNzRkNGMyYzViNjk0 LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRfYg434 YH8YUkW2dkwFaA2padE5ty0gWCWasELteqyh3LkOpBjImawSkqrlmrVLmw/52RtC Fhg15YCrJBiyrzhnyG6i1pU/GvtrduUM9+t5iljRxRmpFGfrijwCeGwwX8Yo2Uue dZ6/LvjzTuQvd+wvdObF5Fdw2J2x7rBocD5iWe6vx/OhIHsBWZ3ePNDoeX4qo+OK tOLg97iEL3ked1dafWFSOwUFYl9lSdOQbURIZs4eNknVv/MHEZPLy0wo17gcsVLf yjjZEO7cgZ9Q999maxyLUrfy1ZTWjaod51B4PacTTnmlcYITTOK/LCxES/y+y+Dr ZdY4917prOusvA== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:06 2025 by rpki-client