This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json) Hash identifier: rp6bDpZc+bCVefcKmq9NR5uaneJEIUlXSYewWSCMkeg= Subject key identifier: 9D:47:B9:5C:C1:62:A9:02:9E:DE:EA:C1:5C:73:40:02:D2:B1:F8:1A Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Certificate serial: 019B1014A251E3527D148DFB0AC2073A2920 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft Manifest number: 1703 Signing time: Fri 12 Dec 2025 01:02:26 +0000 Manifest this update: Fri 12 Dec 2025 01:02:26 +0000 Manifest next update: Sat 13 Dec 2025 01:02:26 +0000 Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=) 2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: El490izgeymPkDEGgr2xoAiR70D1HS3rQMBhDwsXiRs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:a2:51:e3:52:7d:14:8d:fb:0a:c2:07:3a:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Validity Not Before: Dec 12 01:02:26 2025 GMT Not After : Dec 13 01:02:26 2025 GMT Subject: CN=9d47b95cc162a9029edeeac15c734002d2b1f81a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a9:29:8e:48:48:74:62:74:66:ab:c5:a6:02: f5:29:fd:4b:ec:31:ee:dd:47:97:6d:5b:f3:3d:cc: c3:1f:d5:ac:e5:0f:18:65:4f:d5:2c:22:9f:a1:66: 93:9c:0d:a2:4e:29:75:e0:84:06:fb:e0:c3:d1:dc: 98:56:08:69:24:f8:45:e2:d9:49:21:d3:82:18:75: 0d:7e:89:ac:fb:32:46:de:cb:a8:ed:99:d8:64:80: ba:4d:9b:7e:16:05:0e:9a:2c:a6:a2:d1:c8:48:f4: 14:e7:21:2e:6d:cc:ab:6a:49:76:2a:a6:5d:74:30: 45:7f:aa:cd:1d:ed:19:c8:12:a4:c1:18:91:36:cb: 03:27:1b:fe:d7:48:2b:5d:6c:f8:b7:fb:13:09:97: 1f:9a:97:15:f0:c5:55:3e:52:70:6b:4b:8c:2c:19: aa:44:1a:74:dc:55:78:44:d4:39:72:48:6c:d1:82: 5d:af:fb:97:f0:f6:63:d3:e8:f1:9a:6f:6e:b7:60: 10:0e:86:85:f5:87:ae:18:b9:bd:75:78:69:a1:6b: 0d:c8:67:88:da:a8:75:7c:94:65:ea:29:9a:40:5b: d6:f1:55:c0:3f:b3:6e:9e:b5:74:31:aa:75:17:8e: 74:bc:ca:34:ae:2b:00:1b:cd:a5:0d:55:9a:c2:e9: a5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:47:B9:5C:C1:62:A9:02:9E:DE:EA:C1:5C:73:40:02:D2:B1:F8:1A X509v3 Authority Key Identifier: keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:cc:8f:c9:13:e2:65:00:78:09:f5:76:0c:02:2a:14:bf:d6: a9:43:f6:24:ef:cd:0d:46:12:fd:07:44:0e:fb:c6:d8:c5:b2: d2:5c:f8:9a:99:a0:ab:57:4b:e2:d1:7f:db:33:52:5a:fb:df: 5a:aa:69:a3:ef:ce:11:dd:14:a2:ad:d3:27:1d:1f:e6:59:4d: f2:c2:93:a6:1e:85:c4:2d:81:61:d8:5a:21:e5:5c:b6:11:40: 35:a3:cf:08:e5:6a:53:a5:65:13:fb:07:2b:64:da:9c:94:af: e3:aa:57:4e:a1:c5:ba:e4:8a:57:37:00:76:08:70:50:9d:85: 6e:e4:ba:03:0c:62:8a:36:97:ad:dc:c0:01:ae:cb:c0:15:a3: e9:65:dc:f4:fd:68:cd:44:0f:fa:d5:97:fb:06:d0:78:c8:9d: 8b:89:7c:2d:ac:ec:9d:4f:6f:98:5d:17:01:f1:bc:8a:0a:b5: cb:f8:3b:c3:d3:96:2c:63:04:a9:1e:4a:d7:35:33:44:04:5b: 85:ad:67:e6:be:db:84:42:54:6e:ca:47:76:38:c0:82:17:a6: 8b:08:96:68:b6:d0:ff:2d:39:69:79:c9:56:3c:e4:e4:f1:9c: df:87:42:09:9c:7a:e1:a2:e5:e7:5b:f2:d1:30:93:36:c8:6a: 87:ee:38:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFKJR41J9FI37CsIHOikgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw YzMyYTQwHhcNMjUxMjEyMDEwMjI2WhcNMjUxMjEzMDEwMjI2WjAzMTEwLwYDVQQD Eyg5ZDQ3Yjk1Y2MxNjJhOTAyOWVkZWVhYzE1YzczNDAwMmQyYjFmODFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsakpjkhIdGJ0ZqvFpgL1Kf1L7DHu 3UeXbVvzPczDH9Ws5Q8YZU/VLCKfoWaTnA2iTil14IQG++DD0dyYVghpJPhF4tlJ IdOCGHUNfoms+zJG3suo7ZnYZIC6TZt+FgUOmiymotHISPQU5yEubcyrakl2KqZd dDBFf6rNHe0ZyBKkwRiRNssDJxv+10grXWz4t/sTCZcfmpcV8MVVPlJwa0uMLBmq RBp03FV4RNQ5ckhs0YJdr/uX8PZj0+jxmm9ut2AQDoaF9YeuGLm9dXhpoWsNyGeI 2qh1fJRl6imaQFvW8VXAP7NunrV0Map1F450vMo0risAG82lDVWawumlNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ1HuVzBYqkCnt7qwVxzQALSsfgaMB8GA1UdIwQY MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb8yPyRPi ZQB4CfV2DAIqFL/WqUP2JO/NDUYS/QdEDvvG2MWy0lz4mpmgq1dL4tF/2zNSWvvf Wqppo+/OEd0Uoq3TJx0f5llN8sKTph6FxC2BYdhaIeVcthFANaPPCOVqU6VlE/sH K2TanJSv46pXTqHFuuSKVzcAdghwUJ2FbuS6AwxiijaXrdzAAa7LwBWj6WXc9P1o zUQP+tWX+wbQeMidi4l8LazsnU9vmF0XAfG8igq1y/g7w9OWLGMEqR5K1zUzRARb ha1n5r7bhEJUbspHdjjAghemiwiWaLbQ/y05aXnJVjzk5PGc34dCCZx64aLl51vy 0TCTNshqh+44hg== -----END CERTIFICATE-----Generated at Fri Dec 12 03:22:08 2025 by rpki-client