This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json) Hash identifier: oF19rLabo1QXkUxbXi9XNyWhosL5TXDcmW1xn5xPKR4= Subject key identifier: 60:2A:6C:C9:A1:CD:5D:BC:76:AE:1A:D3:89:AA:C0:B6:E3:96:FC:2C Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Certificate serial: 019B2219527AC1715CB83A9496CEA1A4CE64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft Manifest number: 0ED7 Signing time: Mon 15 Dec 2025 13:00:43 +0000 Manifest this update: Mon 15 Dec 2025 13:00:43 +0000 Manifest next update: Tue 16 Dec 2025 13:00:43 +0000 Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: G7zZM5ITKH5MOW4R604yyCClywn6fmdSQ9KhT7UnYqk=) 2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:52:7a:c1:71:5c:b8:3a:94:96:ce:a1:a4:ce:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Validity Not Before: Dec 15 13:00:43 2025 GMT Not After : Dec 16 13:00:43 2025 GMT Subject: CN=602a6cc9a1cd5dbc76ae1ad389aac0b6e396fc2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7c:c5:c5:46:97:bd:b5:92:dc:7a:20:ca:ed: 90:6c:b1:10:01:1a:9a:90:5c:1e:ef:ad:13:eb:c1: e5:52:a5:ba:f4:99:bd:43:bc:fa:a6:ab:b6:71:d9: 65:bf:8f:1f:00:02:88:1d:b5:56:c3:48:22:32:b0: 29:1d:a1:9c:38:eb:ac:78:ee:d5:4b:fd:91:2c:c1: 9a:73:5a:cb:b4:9e:04:83:83:f8:89:bc:8a:05:53: 52:58:0e:a6:57:ad:4e:e4:c5:93:3f:e4:f4:35:43: d3:64:0e:db:be:25:ea:1c:45:43:76:20:76:6f:c1: b2:5d:a7:95:df:a6:52:68:53:6f:e9:af:bd:d8:a5: 03:63:3b:a6:5e:38:3f:05:43:1d:fa:6d:8c:b1:d8: af:55:01:d0:4a:df:db:db:13:0a:96:63:17:67:f9: b3:74:ae:8d:59:52:31:77:76:bc:85:f2:84:b9:b0: 8d:9f:5f:98:0e:cb:1b:2a:da:a7:9d:9a:08:06:58: 1a:de:5a:6e:4f:88:e9:22:0b:58:e1:7a:57:ca:10: 24:bd:c3:88:19:94:ac:46:23:a5:83:28:0e:5f:51: 63:a6:ba:f9:c1:11:b1:f7:74:25:1a:65:46:76:7f: 0f:ef:d0:4c:18:44:a3:d0:50:76:82:56:75:d2:9b: 20:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2A:6C:C9:A1:CD:5D:BC:76:AE:1A:D3:89:AA:C0:B6:E3:96:FC:2C X509v3 Authority Key Identifier: keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:15:16:eb:43:8f:30:d6:a1:84:9f:c0:be:28:4a:eb:c2:d0: 60:4c:27:ca:6b:b2:f7:bd:85:71:e0:d8:06:f0:22:4e:52:8d: 06:ff:56:de:fd:bd:5b:4b:80:4c:bb:5d:68:1c:02:f8:15:03: 18:21:03:ad:9b:58:14:e6:1c:7a:b8:7d:2d:80:7b:d0:65:80: 5e:ab:50:e4:df:87:97:79:f3:a0:b8:f4:06:7b:d2:af:72:7b: 73:ec:f9:1f:06:7a:8e:47:1f:69:60:9f:b3:63:02:9e:a5:dc: 8a:9b:05:3a:dd:58:a8:5a:10:55:0b:0c:32:08:3b:3c:8a:0b: da:e3:41:bf:22:ec:a8:f8:8b:55:bd:7b:91:1d:16:b5:47:1c: 59:7d:60:cd:d0:d9:b8:92:7f:aa:80:22:16:83:04:9c:51:ce: 91:df:c1:7e:e0:c7:d2:c2:ad:16:86:75:d2:f6:f1:8f:6d:6d: 78:81:91:b0:79:a5:2d:2e:21:5b:c7:0e:09:1c:32:6d:fc:46: 9c:00:3a:44:3f:4e:22:18:25:1c:ee:41:7b:f1:07:c1:ef:0c: 2c:bf:a2:fa:20:43:1e:9e:ac:f6:72:8e:9f:75:ea:fa:3a:00: a9:3e:52:06:17:e8:01:31:11:b4:e1:07:9e:e9:70:d1:67:99: d9:eb:7e:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGVJ6wXFcuDqUls6hpM5kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl NmVmMTMwHhcNMjUxMjE1MTMwMDQzWhcNMjUxMjE2MTMwMDQzWjAzMTEwLwYDVQQD Eyg2MDJhNmNjOWExY2Q1ZGJjNzZhZTFhZDM4OWFhYzBiNmUzOTZmYzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XzFxUaXvbWS3Hogyu2QbLEQARqa kFwe760T68HlUqW69Jm9Q7z6pqu2cdllv48fAAKIHbVWw0giMrApHaGcOOuseO7V S/2RLMGac1rLtJ4Eg4P4ibyKBVNSWA6mV61O5MWTP+T0NUPTZA7bviXqHEVDdiB2 b8GyXaeV36ZSaFNv6a+92KUDYzumXjg/BUMd+m2MsdivVQHQSt/b2xMKlmMXZ/mz dK6NWVIxd3a8hfKEubCNn1+YDssbKtqnnZoIBlga3lpuT4jpIgtY4XpXyhAkvcOI GZSsRiOlgygOX1Fjprr5wRGx93QlGmVGdn8P79BMGESj0FB2glZ10psgJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGAqbMmhzV28dq4a04mqwLbjlvwsMB8GA1UdIwQY MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBUW60OP MNahhJ/AvihK68LQYEwnymuy972FceDYBvAiTlKNBv9W3v29W0uATLtdaBwC+BUD GCEDrZtYFOYcerh9LYB70GWAXqtQ5N+Hl3nzoLj0BnvSr3J7c+z5HwZ6jkcfaWCf s2MCnqXcipsFOt1YqFoQVQsMMgg7PIoL2uNBvyLsqPiLVb17kR0WtUccWX1gzdDZ uJJ/qoAiFoMEnFHOkd/BfuDH0sKtFoZ10vbxj21teIGRsHmlLS4hW8cOCRwybfxG nAA6RD9OIhglHO5Be/EHwe8MLL+i+iBDHp6s9nKOn3Xq+joAqT5SBhfoATERtOEH nulw0WeZ2et+4w== -----END CERTIFICATE-----Generated at Mon Dec 15 16:56:12 2025 by rpki-client