This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json) Hash identifier: ozFraj95D+d0QdO24RJuk/RuXbYiOeiykuWB0q5hQNI= Subject key identifier: F7:69:E1:27:18:16:E6:9B:E2:4F:2D:D8:27:ED:0E:17:99:D1:89:06 Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019B10EF20A0AE5D3A0C317D8D632EC4A7EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft Manifest number: 1107 Signing time: Fri 12 Dec 2025 05:01:05 +0000 Manifest this update: Fri 12 Dec 2025 05:01:05 +0000 Manifest next update: Sat 13 Dec 2025 05:01:05 +0000 Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=) 2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: aDHt2sVddu9X7EofobqVCIu0ZBKcN1Fn/sIx2zck6hI=) 3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=) 4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ef:20:a0:ae:5d:3a:0c:31:7d:8d:63:2e:c4:a7:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Dec 12 05:01:05 2025 GMT Not After : Dec 13 05:01:05 2025 GMT Subject: CN=f769e1271816e69be24f2dd827ed0e1799d18906 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e2:57:03:a2:56:ea:9f:10:1a:37:e8:04:c6: d6:98:42:2d:19:90:f4:e0:d9:aa:c1:59:28:df:10: da:05:9d:8a:dc:7b:52:69:69:c0:8e:7b:90:0d:f7: a5:2d:f9:8e:5d:3a:46:c7:d0:3e:7a:8a:2b:50:2d: e2:42:8c:01:c2:b7:47:b9:23:3a:0a:5b:f7:b0:b6: be:50:da:64:d8:c8:29:aa:42:56:5b:5a:2c:ad:b1: 35:e9:db:42:18:18:27:8a:4f:8f:8d:6e:53:53:ae: 70:00:a9:5d:1d:62:ce:aa:25:26:c1:66:ff:c1:52: b2:9e:5a:24:2a:35:e5:9b:c4:ec:d0:a6:e1:91:37: a8:09:06:2a:c3:c7:91:5a:e1:02:72:72:81:e9:6d: 27:3e:08:85:24:07:ca:18:c6:9b:eb:c5:08:6d:e2: 79:e3:9b:47:1c:df:a0:2b:6f:0c:b4:28:29:e7:6d: db:57:76:12:f2:1c:95:4d:60:08:81:3b:d8:cd:66: 50:de:97:2b:12:10:06:67:61:bc:d6:b3:fc:95:64: 8a:86:0e:8c:7a:c8:14:6c:0f:78:b7:4f:14:4b:ae: 44:8a:ea:6c:9c:af:10:b7:73:20:b8:6e:bf:07:4b: 8f:50:60:5a:5a:d8:07:24:60:a7:cc:99:24:a6:5e: 2d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:69:E1:27:18:16:E6:9B:E2:4F:2D:D8:27:ED:0E:17:99:D1:89:06 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:59:27:d4:49:13:0a:6c:63:f4:df:87:3f:95:74:31:b3:a7: 4b:ec:e2:c0:c9:d2:17:59:6f:d9:03:e3:24:98:ec:a2:f4:83: b1:6e:3b:75:57:90:99:aa:b3:90:f8:f3:ad:3f:b1:12:a4:7a: b7:26:58:90:f9:9e:10:bb:96:4a:79:05:55:78:13:1f:2d:fe: ec:d0:09:a7:64:55:62:80:f6:3f:39:22:09:db:83:c4:96:78: 97:90:ba:e8:41:6a:c5:f3:a5:ce:c9:a3:f3:79:54:ff:2c:1a: b9:d0:ec:6e:0d:40:13:64:7f:16:fd:c6:27:b7:ec:97:d7:db: cf:13:c3:cb:d2:45:f3:0f:64:b9:cd:6c:7f:e4:cf:c8:3e:68: 01:20:18:78:a1:ac:6a:b6:7e:3e:83:3b:7f:63:d2:e5:d7:64: 23:a8:d5:9c:07:2b:c2:2d:09:3c:36:87:cd:3d:16:6f:45:d6: 7d:28:4c:23:9e:a3:7b:bf:a0:2a:a9:56:85:23:48:0e:b0:99: 9a:6d:25:0e:7a:f2:72:8b:4b:f1:ef:e4:87:83:7f:49:14:fe: 94:e2:1f:d0:a1:34:e4:d2:fc:68:f9:9c:79:2a:91:27:d2:af: ef:4c:09:68:bb:a2:6e:8b:d4:93:9b:8b:5a:47:19:e3:7c:51: 1f:a3:d7:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7yCgrl06DDF9jWMuxKfsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjUxMjEyMDUwMTA1WhcNMjUxMjEzMDUwMTA1WjAzMTEwLwYDVQQD EyhmNzY5ZTEyNzE4MTZlNjliZTI0ZjJkZDgyN2VkMGUxNzk5ZDE4OTA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquJXA6JW6p8QGjfoBMbWmEItGZD0 4NmqwVko3xDaBZ2K3HtSaWnAjnuQDfelLfmOXTpGx9A+eoorUC3iQowBwrdHuSM6 Clv3sLa+UNpk2MgpqkJWW1osrbE16dtCGBgnik+PjW5TU65wAKldHWLOqiUmwWb/ wVKynlokKjXlm8Ts0KbhkTeoCQYqw8eRWuECcnKB6W0nPgiFJAfKGMab68UIbeJ5 45tHHN+gK28MtCgp523bV3YS8hyVTWAIgTvYzWZQ3pcrEhAGZ2G81rP8lWSKhg6M esgUbA94t08US65EiupsnK8Qt3MguG6/B0uPUGBaWtgHJGCnzJkkpl4tKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdp4ScYFuab4k8t2CftDheZ0YkGMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlkn1EkT Cmxj9N+HP5V0MbOnS+ziwMnSF1lv2QPjJJjsovSDsW47dVeQmaqzkPjzrT+xEqR6 tyZYkPmeELuWSnkFVXgTHy3+7NAJp2RVYoD2PzkiCduDxJZ4l5C66EFqxfOlzsmj 83lU/ywaudDsbg1AE2R/Fv3GJ7fsl9fbzxPDy9JF8w9kuc1sf+TPyD5oASAYeKGs arZ+PoM7f2PS5ddkI6jVnAcrwi0JPDaHzT0Wb0XWfShMI56je7+gKqlWhSNIDrCZ mm0lDnrycotL8e/kh4N/SRT+lOIf0KE05NL8aPmceSqRJ9Kv70wJaLuibovUk5uL WkcZ43xRH6PXmQ== -----END CERTIFICATE-----Generated at Fri Dec 12 08:26:15 2025 by rpki-client