This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json) Hash identifier: 7jZMzrWahUx0wv3VKwqMvWfnGCZwM9wP2vOO6pjngVU= Subject key identifier: D6:92:8F:01:A9:1D:EF:5D:FE:C4:C9:94:AC:27:96:20:19:5F:BF:91 Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Certificate serial: 019B0F0098FFA07BBF202D1C72202E7DA221 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft Manifest number: 1560 Signing time: Thu 11 Dec 2025 20:00:55 +0000 Manifest this update: Thu 11 Dec 2025 20:00:55 +0000 Manifest next update: Fri 12 Dec 2025 20:00:55 +0000 Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=) 2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: BL6VLatxa9JQG34HzN3LliD1DGNL/cdZ5r+O3aviQr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0f:00:98:ff:a0:7b:bf:20:2d:1c:72:20:2e:7d:a2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Validity Not Before: Dec 11 20:00:55 2025 GMT Not After : Dec 12 20:00:55 2025 GMT Subject: CN=d6928f01a91def5dfec4c994ac279620195fbf91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:ba:42:99:1e:53:93:3b:45:9e:30:4e:5c:28: 28:27:c9:56:b1:d7:61:d1:2a:87:23:c0:7a:0e:d7: 2a:0c:01:84:33:d6:da:82:b6:ae:de:a6:35:f1:e2: 56:47:b6:79:5b:53:f9:2a:da:f4:07:93:df:61:6c: f3:33:de:19:02:c7:3e:db:b3:b9:d5:46:ea:8d:c6: 67:0d:eb:e7:0f:5b:15:4f:bb:da:cf:0a:35:7f:22: 6a:96:9f:95:fc:39:21:f7:5d:39:a2:72:5c:d1:04: b4:9f:6b:9e:db:71:66:0d:ff:88:3d:26:ed:18:f3: a6:6f:46:05:68:e3:62:71:9d:69:19:3a:73:3a:62: 22:2d:13:9f:5c:72:c5:bb:b3:05:f0:c1:df:b2:46: 89:17:2a:b2:00:e9:8e:ef:12:37:9f:45:26:db:74: fa:4c:0f:58:71:47:64:05:84:f2:7b:98:ac:21:56: 97:2a:29:cc:6b:32:7c:ac:51:6b:7d:c2:5f:a9:95: 9b:19:86:62:8c:77:a8:37:e0:40:c1:6c:80:e6:0c: 25:fc:3a:6f:66:0b:9c:82:2f:fd:9b:f9:6a:e1:9e: fd:ce:96:b9:8e:9f:f7:cb:0e:f0:06:d3:4c:71:c2: 02:09:e8:c0:c1:62:9e:d5:14:ad:60:b2:80:e8:89: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:92:8F:01:A9:1D:EF:5D:FE:C4:C9:94:AC:27:96:20:19:5F:BF:91 X509v3 Authority Key Identifier: keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:57:24:37:f2:e9:7c:17:82:ca:95:d8:54:f0:c7:23:f4:01: 97:20:64:05:89:66:2a:1c:79:af:f2:f8:79:33:ce:e5:78:65: 39:b2:61:be:50:aa:11:3a:3e:49:ec:5b:5d:78:3a:b5:90:71: e5:b7:7d:d9:2d:fa:a5:c3:75:26:a7:d1:d0:8a:ea:ed:6e:f1: f6:a5:86:d4:a4:73:74:b3:f4:6e:27:ae:8b:0a:8c:ae:bb:13: 86:ed:6d:df:c5:26:37:93:fe:61:ad:48:67:d0:3f:bf:b3:7b: fa:2a:90:7c:75:8b:36:5b:71:d6:72:05:71:1c:da:60:5a:4a: d1:10:d1:04:34:b5:5b:5f:3e:55:3f:01:7f:dc:3c:87:c5:24: e4:81:50:e9:51:b6:68:2a:6a:66:3b:9d:61:63:d6:f0:90:4c: 25:75:12:3b:38:58:95:06:06:90:7c:cf:b6:21:f1:6f:43:e3: 20:98:48:29:c0:8b:6b:04:74:a8:a4:76:36:ef:f2:16:8c:c8: ce:dd:01:d6:73:88:44:2a:3e:5c:d1:af:50:f6:fc:fa:6d:d0: 62:16:37:bb:8f:21:b5:ee:65:b6:81:26:9d:b9:62:04:5b:04: b8:fc:7a:9b:d8:04:a7:f1:b2:15:fa:61:ad:cd:e1:5d:df:ca: 6a:fb:d1:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsPAJj/oHu/IC0cciAufaIhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy YmQ0YmYwHhcNMjUxMjExMjAwMDU1WhcNMjUxMjEyMjAwMDU1WjAzMTEwLwYDVQQD EyhkNjkyOGYwMWE5MWRlZjVkZmVjNGM5OTRhYzI3OTYyMDE5NWZiZjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rpCmR5TkztFnjBOXCgoJ8lWsddh 0SqHI8B6DtcqDAGEM9bagrau3qY18eJWR7Z5W1P5Ktr0B5PfYWzzM94ZAsc+27O5 1UbqjcZnDevnD1sVT7vazwo1fyJqlp+V/Dkh9105onJc0QS0n2ue23FmDf+IPSbt GPOmb0YFaONicZ1pGTpzOmIiLROfXHLFu7MF8MHfskaJFyqyAOmO7xI3n0Um23T6 TA9YcUdkBYTye5isIVaXKinMazJ8rFFrfcJfqZWbGYZijHeoN+BAwWyA5gwl/Dpv Zgucgi/9m/lq4Z79zpa5jp/3yw7wBtNMccICCejAwWKe1RStYLKA6IlZewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNaSjwGpHe9d/sTJlKwnliAZX7+RMB8GA1UdIwQY MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3 LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1ckN/Lp fBeCypXYVPDHI/QBlyBkBYlmKhx5r/L4eTPO5XhlObJhvlCqETo+SexbXXg6tZBx 5bd92S36pcN1JqfR0Irq7W7x9qWG1KRzdLP0bieuiwqMrrsThu1t38UmN5P+Ya1I Z9A/v7N7+iqQfHWLNltx1nIFcRzaYFpK0RDRBDS1W18+VT8Bf9w8h8Uk5IFQ6VG2 aCpqZjudYWPW8JBMJXUSOzhYlQYGkHzPtiHxb0PjIJhIKcCLawR0qKR2Nu/yFozI zt0B1nOIRCo+XNGvUPb8+m3QYhY3u48hte5ltoEmnbliBFsEuPx6m9gEp/GyFfph rc3hXd/KavvR/Q== -----END CERTIFICATE-----Generated at Thu Dec 11 23:56:47 2025 by rpki-client