This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft File: cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft (raw, json) Hash identifier: X9PRhFKkQLa/Qx1ULt7graI/V9OehHDtlz35zftaFA4= Subject key identifier: 53:D7:9B:47:5B:36:53:97:97:83:03:FF:85:66:D3:6B:A0:5B:80:6A Authority key identifier: 72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 Certificate issuer: /CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Certificate serial: 019B5A88A615B56C80C91F5E013CE9C8DE4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft Manifest number: 147F Signing time: Fri 26 Dec 2025 12:01:03 +0000 Manifest this update: Fri 26 Dec 2025 12:01:03 +0000 Manifest next update: Sat 27 Dec 2025 12:01:03 +0000 Files and hashes: 1: RQNfhNpDtrXAYDIMR8vJALA1HXQ.roa (hash: BQVDm+Vihmo0lXLWfB0xQkZscpfEAOjZgVYWa2N8wts=) 2: cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl (hash: Jm5A39EVrlyeipIDeYVmP/s35tXDOzTLW4kca1PDaLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:a6:15:b5:6c:80:c9:1f:5e:01:3c:e9:c8:de:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72aa02f45b97930c7a46d0ef18a91c0aaf8992f2 Validity Not Before: Dec 26 12:01:03 2025 GMT Not After : Dec 27 12:01:03 2025 GMT Subject: CN=53d79b475b365397978303ff8566d36ba05b806a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:5c:d1:b1:36:b0:aa:70:cb:59:17:08:a3:aa: 25:57:58:47:ee:16:7a:5f:57:ad:54:18:df:d2:62: 69:8b:89:81:b5:17:b2:c5:be:bb:06:1c:45:46:d1: 1b:3f:49:65:36:48:bc:01:9c:b8:da:d2:22:b3:e0: e8:03:cd:76:c9:0c:18:ff:f6:44:db:55:ca:5c:3d: 71:61:52:8e:f2:96:6e:47:c0:44:4f:ed:b5:3f:13: 37:8f:78:ab:30:ae:87:f6:80:9b:f5:99:63:7d:27: 91:c3:f8:de:cd:53:72:8c:63:63:25:af:aa:50:b0: 03:74:c3:66:bc:ba:8a:92:f8:ac:86:3a:55:eb:d9: 97:63:98:c7:c6:b9:19:a7:19:0b:29:46:7d:92:ee: da:89:49:24:70:98:f7:bf:37:19:64:b0:9a:59:5d: 50:14:f9:f3:df:06:2f:f0:f3:c9:cd:2d:1f:aa:94: 0b:b8:74:9d:34:d4:25:33:e4:10:65:47:97:24:ac: ba:7b:3e:8f:4d:3d:bb:8e:22:00:49:ed:90:da:c6: 1c:c0:21:fb:6f:89:bb:01:46:6a:8a:f5:d6:de:8d: a8:f3:63:9f:39:cd:1e:16:4e:da:db:9f:0b:6d:b8: 7d:f8:0d:87:9d:6a:9e:bb:22:4f:ea:2d:01:5e:69: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D7:9B:47:5B:36:53:97:97:83:03:FF:85:66:D3:6B:A0:5B:80:6A X509v3 Authority Key Identifier: keyid:72:AA:02:F4:5B:97:93:0C:7A:46:D0:EF:18:A9:1C:0A:AF:89:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqoC9FuXkwx6RtDvGKkcCq-JkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/603444-4a0d-4c52-bef7-d79b0ec78e97/1/cqoC9FuXkwx6RtDvGKkcCq-JkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e8:82:c0:28:91:0e:55:bd:ee:f7:65:bb:91:c8:ed:61:36: 2c:9d:d1:89:f8:6c:c7:10:60:32:12:a8:87:8d:3a:34:b1:3e: 79:ec:9c:a9:5c:19:ad:eb:d3:87:ef:be:21:d9:a6:61:a1:f4: fc:f8:57:da:4b:e8:a6:46:15:41:62:ae:d2:de:ed:69:24:fa: f3:a2:c4:9c:9a:98:5d:b0:68:30:bd:05:3c:a0:64:90:c6:bc: 5c:b4:14:e6:ea:b8:51:0c:fe:74:e0:8b:42:32:2d:b0:2c:ba: d4:92:71:13:5e:fc:ea:58:09:c5:8b:21:37:67:11:cb:bc:4c: 0e:6e:d5:0d:16:a3:d0:e9:b7:38:56:bc:af:bb:1d:b1:c5:dc: 36:98:cb:77:69:22:8e:1d:4f:fd:5e:80:8e:d8:d5:3c:66:46: 61:cb:25:d9:b7:b4:f7:f8:57:ce:85:6e:0d:71:6d:16:e7:24: c3:af:a8:6d:2a:e4:42:7b:2f:a8:07:0c:07:16:ab:c8:04:5a: f6:ac:7e:0e:48:a5:56:c7:79:3b:f1:f1:55:68:b3:86:ec:45: 0c:94:23:9e:a9:3f:21:5a:d2:07:0d:20:b4:cc:79:0e:c8:ee: 54:7d:3a:da:dc:07:f6:59:c1:6f:0f:9e:fd:f4:8b:7e:7d:1e: 73:2a:7a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiKYVtWyAyR9eATzpyN5MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYWEwMmY0NWI5NzkzMGM3YTQ2ZDBlZjE4YTkxYzBhYWY4 OTkyZjIwHhcNMjUxMjI2MTIwMTAzWhcNMjUxMjI3MTIwMTAzWjAzMTEwLwYDVQQD Eyg1M2Q3OWI0NzViMzY1Mzk3OTc4MzAzZmY4NTY2ZDM2YmEwNWI4MDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlzRsTawqnDLWRcIo6olV1hH7hZ6 X1etVBjf0mJpi4mBtReyxb67BhxFRtEbP0llNki8AZy42tIis+DoA812yQwY//ZE 21XKXD1xYVKO8pZuR8BET+21PxM3j3irMK6H9oCb9ZljfSeRw/jezVNyjGNjJa+q ULADdMNmvLqKkvishjpV69mXY5jHxrkZpxkLKUZ9ku7aiUkkcJj3vzcZZLCaWV1Q FPnz3wYv8PPJzS0fqpQLuHSdNNQlM+QQZUeXJKy6ez6PTT27jiIASe2Q2sYcwCH7 b4m7AUZqivXW3o2o82OfOc0eFk7a258Lbbh9+A2HnWqeuyJP6i0BXmnEZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFPXm0dbNlOXl4MD/4Vm02ugW4BqMB8GA1UdIwQY MBaAFHKqAvRbl5MMekbQ7xipHAqviZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjct ZDc5YjBlYzc4ZTk3LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC82MDM0NDQtNGEwZC00YzUyLWJlZjctZDc5YjBlYzc4ZTk3 LzEvY3FvQzlGdVhrd3g2UnREdkdLa2NDcS1Ka3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJOiCwCiR DlW97vdlu5HI7WE2LJ3RifhsxxBgMhKoh406NLE+eeycqVwZrevTh+++IdmmYaH0 /PhX2kvopkYVQWKu0t7taST686LEnJqYXbBoML0FPKBkkMa8XLQU5uq4UQz+dOCL QjItsCy61JJxE1786lgJxYshN2cRy7xMDm7VDRaj0Om3OFa8r7sdscXcNpjLd2ki jh1P/V6AjtjVPGZGYcsl2be09/hXzoVuDXFtFuckw6+obSrkQnsvqAcMBxaryARa 9qx+DkilVsd5O/HxVWizhuxFDJQjnqk/IVrSBw0gtMx5DsjuVH062twH9lnBbw+e /fSLfn0ecyp66Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:21 2025 by rpki-client