This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json) Hash identifier: w3V2ATpLUjeC73wMKzyaY4RsDu2J/itOBdf2K3EAPE8= Subject key identifier: A7:0B:68:60:75:25:7F:72:B2:79:3B:99:AF:0A:B4:63:B7:8B:CA:D1 Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Certificate serial: 019B10142834D0BA6367CB8793DB0C7F9470 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:01:55 +0000 Manifest this update: Fri 12 Dec 2025 01:01:55 +0000 Manifest next update: Sat 13 Dec 2025 01:01:55 +0000 Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=) 2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=) 3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: YFOZI7+T/5tYXnOB20zJhuQo2s423TIX46C/F7JiocY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:28:34:d0:ba:63:67:cb:87:93:db:0c:7f:94:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Validity Not Before: Dec 12 01:01:55 2025 GMT Not After : Dec 13 01:01:55 2025 GMT Subject: CN=a70b686075257f72b2793b99af0ab463b78bcad1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:95:21:b3:38:c2:67:7b:a5:d5:36:37:59:a5: d8:fc:44:3e:fe:af:2b:ad:28:66:0a:44:3f:39:31: ae:95:27:03:af:d0:13:59:ff:be:21:e3:7b:3f:5a: 05:1a:bc:32:84:f0:c1:43:21:06:ba:68:a6:7c:c3: 8c:ec:83:1e:8e:d8:2c:c3:6d:3a:16:2f:64:ef:6c: 2f:16:2f:ad:ed:e4:8c:21:26:d3:57:d9:e5:38:8d: 87:4a:14:dc:b0:ab:dd:76:8b:aa:28:1e:3e:dd:6e: 04:ec:e5:f8:ee:34:72:cc:63:31:93:97:68:ff:7e: 0e:93:7d:e3:f9:a4:ba:e1:4a:d4:72:4b:e1:9f:57: e1:32:be:77:ef:04:82:d3:58:7f:3f:fd:e6:58:e2: 48:7d:68:2a:0b:9b:9e:32:37:00:65:80:74:85:5e: dd:da:aa:e8:0f:e7:ef:45:27:fa:78:38:b3:48:92: 31:ba:1b:2d:9d:4c:57:2e:6a:a2:3f:02:1d:e5:e3: a6:22:6d:12:56:de:da:2f:a7:73:ac:88:73:7c:ef: f8:86:d1:c5:45:ad:1c:a7:94:25:39:e0:15:32:0c: b7:f8:9e:42:6d:a3:00:df:d7:eb:e7:80:76:71:e4: 71:a7:55:46:6f:4f:c3:72:0d:de:2b:e4:f6:f9:22: 2b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:0B:68:60:75:25:7F:72:B2:79:3B:99:AF:0A:B4:63:B7:8B:CA:D1 X509v3 Authority Key Identifier: keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a8:fb:b4:6e:93:cc:a8:9d:94:36:d1:02:76:2c:98:3f:9e: 8a:3e:ea:64:b9:0e:15:fe:4f:97:2a:00:11:be:e0:5a:ea:5c: 83:58:1d:70:3a:93:e2:8a:2e:f4:57:35:8e:9f:5e:46:ec:24: 29:15:36:84:54:0b:34:6a:59:f0:c9:6a:66:df:cb:d0:41:44: 3a:bc:56:08:00:5c:a0:55:a4:c9:d9:a5:17:b8:a4:92:19:6a: 82:44:e5:c4:15:e4:65:52:ac:b8:42:b1:3f:28:7d:eb:38:32: d8:32:eb:eb:9b:47:7c:1e:2a:1d:d9:5c:66:dc:2f:59:ab:5f: a0:7e:ca:b7:2d:88:51:9f:e0:c2:04:97:6e:3f:fa:42:1f:be: 71:64:2c:92:bf:d5:d1:5c:8a:ce:71:e4:50:3b:3c:8c:e0:43: 3e:23:4c:2d:38:fd:c5:33:55:44:ec:6e:7b:e3:b1:28:ea:f6: a0:cf:92:b1:ff:47:3a:c4:ca:77:88:29:cd:40:ed:13:5a:a1: 71:2d:64:59:ad:31:7e:c4:db:91:37:d2:61:b0:50:14:b0:2e: 5d:74:d2:e7:59:a7:e0:c3:eb:f3:4f:81:d6:fe:2a:ba:1e:37: 6e:17:ef:8e:84:c1:37:c9:a5:ef:f1:5c:0e:a1:83:85:d1:31: 40:94:b9:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFCg00LpjZ8uHk9sMf5RwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1 MmUyNTEwHhcNMjUxMjEyMDEwMTU1WhcNMjUxMjEzMDEwMTU1WjAzMTEwLwYDVQQD EyhhNzBiNjg2MDc1MjU3ZjcyYjI3OTNiOTlhZjBhYjQ2M2I3OGJjYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5UhszjCZ3ul1TY3WaXY/EQ+/q8r rShmCkQ/OTGulScDr9ATWf++IeN7P1oFGrwyhPDBQyEGumimfMOM7IMejtgsw206 Fi9k72wvFi+t7eSMISbTV9nlOI2HShTcsKvddouqKB4+3W4E7OX47jRyzGMxk5do /34Ok33j+aS64UrUckvhn1fhMr537wSC01h/P/3mWOJIfWgqC5ueMjcAZYB0hV7d 2qroD+fvRSf6eDizSJIxuhstnUxXLmqiPwId5eOmIm0SVt7aL6dzrIhzfO/4htHF Ra0cp5QlOeAVMgy3+J5CbaMA39fr54B2ceRxp1VGb0/Dcg3eK+T2+SIrXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcLaGB1JX9ysnk7ma8KtGO3i8rRMB8GA1UdIwQY MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraj7tG6T zKidlDbRAnYsmD+eij7qZLkOFf5PlyoAEb7gWupcg1gdcDqT4oou9Fc1jp9eRuwk KRU2hFQLNGpZ8MlqZt/L0EFEOrxWCABcoFWkydmlF7ikkhlqgkTlxBXkZVKsuEKx Pyh96zgy2DLr65tHfB4qHdlcZtwvWatfoH7Kty2IUZ/gwgSXbj/6Qh++cWQskr/V 0VyKznHkUDs8jOBDPiNMLTj9xTNVROxue+OxKOr2oM+Ssf9HOsTKd4gpzUDtE1qh cS1kWa0xfsTbkTfSYbBQFLAuXXTS51mn4MPr80+B1v4quh43bhfvjoTBN8ml7/Fc DqGDhdExQJS5/w== -----END CERTIFICATE-----Generated at Fri Dec 12 06:54:42 2025 by rpki-client