This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json) Hash identifier: FIK2pSIWq4l4sJMJLUWv+Qg/yHAx3u4XzJRNW0es3sQ= Subject key identifier: CA:9C:EA:92:DB:6B:EF:64:44:A3:5C:1E:E9:E4:57:8D:8F:8D:E9:F2 Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Certificate serial: 019B2D0BA2162AACA87EADF58C11DC14E269 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft Manifest number: 1712 Signing time: Wed 17 Dec 2025 16:01:35 +0000 Manifest this update: Wed 17 Dec 2025 16:01:35 +0000 Manifest next update: Thu 18 Dec 2025 16:01:35 +0000 Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=) 2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: NufJM5fnh24Auk68so7PIILzAyeZd72WHdgWJc8rhgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0b:a2:16:2a:ac:a8:7e:ad:f5:8c:11:dc:14:e2:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Validity Not Before: Dec 17 16:01:35 2025 GMT Not After : Dec 18 16:01:35 2025 GMT Subject: CN=ca9cea92db6bef6444a35c1ee9e4578d8f8de9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:be:14:aa:a6:14:d3:17:0e:0d:e2:be:dc:88: a7:d4:1c:7b:2b:b6:ad:47:5e:ff:b8:77:bd:19:4d: cf:2c:12:48:0d:7e:62:c5:82:e4:85:7d:71:43:71: ea:19:4c:7f:cd:41:8a:39:a1:b6:77:9b:21:8d:72: 42:b5:73:38:da:19:13:01:c8:7a:47:30:32:ec:ef: 40:4f:59:1f:31:04:b7:5e:0f:21:14:fa:6c:15:82: e9:f0:10:52:39:79:dc:ab:67:05:ec:b0:c0:90:ac: 7b:5b:4b:a5:ed:44:ec:ce:79:70:72:92:b5:a5:a4: f4:ed:fb:75:a7:c4:a9:85:89:52:58:45:a5:be:55: 1f:1e:2c:3b:6a:21:3b:ae:e6:11:75:d2:f7:00:9a: 5c:fa:a0:e9:49:be:f5:0d:c0:68:04:b4:bf:a6:fd: 47:d2:90:0a:c2:0f:b4:a5:b1:35:9a:d4:66:2b:69: 1a:23:24:29:6c:94:f7:80:ee:34:f4:a6:3b:ab:b1: da:3b:a8:37:ea:59:7c:bd:aa:cb:e3:fb:24:8d:42: 1f:80:69:b3:25:c5:1c:a0:34:b5:1c:0d:58:9e:35: 3d:e1:62:25:37:57:c5:dc:63:7e:62:4e:99:fc:d5: fc:6d:c7:fb:5b:5d:3f:c2:8b:da:0a:51:9d:c3:13: 3f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:9C:EA:92:DB:6B:EF:64:44:A3:5C:1E:E9:E4:57:8D:8F:8D:E9:F2 X509v3 Authority Key Identifier: keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:88:1e:0b:12:da:db:03:53:7c:e2:23:92:7d:5b:6e:9c:f6: 98:b3:e5:f6:cc:ff:d8:ca:e9:18:dd:1f:6e:56:83:10:3c:a9: 4b:d2:3b:61:5d:c5:b8:81:ec:41:6a:07:8d:33:8b:b1:16:e1: b1:21:1e:06:bc:ea:a0:10:63:be:6a:1c:b2:0a:7c:8f:a1:77: a6:5f:d1:fe:9b:b7:37:8b:81:db:9c:b5:ea:5e:b0:c8:64:06: d3:32:bd:80:55:26:54:81:7c:cd:cc:30:ec:46:54:24:48:9e: 2a:ac:e6:ce:90:ec:fe:cf:b4:98:63:72:f0:7e:c3:62:4b:e2: 32:d0:88:22:0b:95:49:a8:93:b2:24:8b:17:4e:80:4e:39:ca: dc:58:76:8e:5b:a3:4a:9d:f4:3e:e8:4b:bd:a2:f5:df:d8:ce: d6:73:25:83:75:ec:f9:31:c0:c3:5d:58:f1:9f:df:2a:f3:ea: 33:e2:9b:17:87:48:3c:44:6f:cc:1d:3c:e5:50:cc:78:d7:64: 0d:ac:a0:3e:d2:e3:1b:62:40:10:aa:0a:2b:38:c4:2c:63:5b: 86:85:82:28:f1:07:50:ff:9d:7d:08:5f:92:63:95:00:13:87: ab:b1:05:a9:ad:b7:82:54:4e:2e:bd:a9:cc:ec:2b:27:2c:43: 2c:10:cd:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstC6IWKqyofq31jBHcFOJpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw YzMyYTQwHhcNMjUxMjE3MTYwMTM1WhcNMjUxMjE4MTYwMTM1WjAzMTEwLwYDVQQD EyhjYTljZWE5MmRiNmJlZjY0NDRhMzVjMWVlOWU0NTc4ZDhmOGRlOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA174UqqYU0xcODeK+3Iin1Bx7K7at R17/uHe9GU3PLBJIDX5ixYLkhX1xQ3HqGUx/zUGKOaG2d5shjXJCtXM42hkTAch6 RzAy7O9AT1kfMQS3Xg8hFPpsFYLp8BBSOXncq2cF7LDAkKx7W0ul7UTsznlwcpK1 paT07ft1p8SphYlSWEWlvlUfHiw7aiE7ruYRddL3AJpc+qDpSb71DcBoBLS/pv1H 0pAKwg+0pbE1mtRmK2kaIyQpbJT3gO409KY7q7HaO6g36ll8varL4/skjUIfgGmz JcUcoDS1HA1YnjU94WIlN1fF3GN+Yk6Z/NX8bcf7W10/wovaClGdwxM/2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqc6pLba+9kRKNcHunkV42PjenyMB8GA1UdIwQY MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaYgeCxLa 2wNTfOIjkn1bbpz2mLPl9sz/2MrpGN0fblaDEDypS9I7YV3FuIHsQWoHjTOLsRbh sSEeBrzqoBBjvmocsgp8j6F3pl/R/pu3N4uB25y16l6wyGQG0zK9gFUmVIF8zcww 7EZUJEieKqzmzpDs/s+0mGNy8H7DYkviMtCIIguVSaiTsiSLF06ATjnK3Fh2jluj Sp30PuhLvaL139jO1nMlg3Xs+THAw11Y8Z/fKvPqM+KbF4dIPERvzB085VDMeNdk DaygPtLjG2JAEKoKKzjELGNbhoWCKPEHUP+dfQhfkmOVABOHq7EFqa23glROLr2p zOwrJyxDLBDNbw== -----END CERTIFICATE-----Generated at Wed Dec 17 19:05:21 2025 by rpki-client