This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft File: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft (raw, json) Hash identifier: 0LCR6g/XOpWYqxV9VcbLtT491iRH4oxfGfdYtN2bPjo= Subject key identifier: AE:87:3A:AC:39:02:79:17:93:8C:76:82:B3:0C:12:F6:E4:63:03:54 Authority key identifier: 75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC Certificate issuer: /CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Certificate serial: 019AF3F7DF65F41F1C3A0D475F12392BB7C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft Manifest number: 03F7 Signing time: Sat 06 Dec 2025 14:01:39 +0000 Manifest this update: Sat 06 Dec 2025 14:01:39 +0000 Manifest next update: Sun 07 Dec 2025 14:01:39 +0000 Files and hashes: 1: 6zamDTUBwAsnOFkspEkx8jbI6wY.roa (hash: dvRTh/kPMauvkj5ufzVensqKmDYCodFR0kOnwH7zmxk=) 2: dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl (hash: lP40TvpsLIcyNKY7Ci/34ZlDOIKHQbUt9YG3iywIxos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:df:65:f4:1f:1c:3a:0d:47:5f:12:39:2b:b7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7500bb5582e74d61e90c80283ba9b98ba65cd2dc Validity Not Before: Dec 6 14:01:39 2025 GMT Not After : Dec 7 14:01:39 2025 GMT Subject: CN=ae873aac39027917938c7682b30c12f6e4630354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:34:8f:6f:50:76:16:f9:ce:90:c0:38:e2: 6f:f4:f8:6f:ad:d7:38:2f:e3:20:58:b9:14:14:ff: 31:e8:35:c0:47:0f:ce:bb:21:a0:2a:dd:48:20:d3: 44:64:d9:a1:42:aa:b8:c3:1f:1c:55:ba:91:c0:30: ad:de:8d:69:96:e8:15:8f:6d:29:af:f2:2f:f9:4b: be:a4:6f:44:a2:ca:53:84:5c:d2:53:a4:29:3e:87: 79:a7:86:57:09:4c:34:c1:bd:f5:1e:7e:37:15:59: ff:d3:f9:3b:5c:ed:81:7e:93:2f:09:3f:ee:27:68: b2:5a:6d:fb:8a:97:29:0a:e0:b6:d0:2c:ad:66:23: 08:40:42:69:cc:67:49:c4:27:73:3e:68:40:e5:96: d3:7d:63:87:c4:56:ba:cd:dd:48:eb:d3:21:eb:3d: d0:fb:38:94:3c:4e:3a:f2:ac:f3:f4:64:7c:b6:66: f1:b3:b1:5b:9b:24:5a:14:02:6a:52:ff:7e:47:0d: 72:a9:ac:65:71:40:b6:dd:9e:c3:11:96:18:57:a8: 73:75:d0:48:14:7f:13:8f:c6:b8:90:4e:8a:63:60: a3:75:ef:f5:6c:6a:ce:67:09:4b:61:7e:3c:9a:1b: e2:58:3f:ea:a4:d8:3d:d1:db:7d:28:7e:de:26:b8: 91:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:87:3A:AC:39:02:79:17:93:8C:76:82:B3:0C:12:F6:E4:63:03:54 X509v3 Authority Key Identifier: keyid:75:00:BB:55:82:E7:4D:61:E9:0C:80:28:3B:A9:B9:8B:A6:5C:D2:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/163bb5-f8b1-4cb4-bd48-bb3d4930e459/1/dQC7VYLnTWHpDIAoO6m5i6Zc0tw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:c4:9b:06:0f:4a:0b:39:ec:51:21:b4:19:53:ee:36:7d:d9: 79:10:a7:ce:04:e4:4c:39:8c:db:e9:00:9d:bb:ae:80:81:f1: 96:2c:06:b0:a9:ce:eb:e3:de:ed:14:2a:e8:a8:e2:7b:86:3a: 25:92:a6:57:0e:b2:9e:24:1f:23:4e:c1:ea:0c:97:98:ca:b7: 44:c8:0e:bb:5e:1f:d3:fb:8c:11:58:5f:3e:ed:e4:d0:9b:c0: 80:3e:8d:62:74:f2:ff:93:b8:17:31:48:99:ef:f6:73:4f:a7: 95:fa:d6:3f:8e:ff:5d:f5:6c:c2:40:05:9a:c8:b7:d6:e7:ac: fa:64:f6:8b:32:db:5f:3e:24:21:d1:99:30:df:ea:4d:9c:48: b4:f4:4c:07:96:72:be:60:69:9b:86:40:4d:bb:eb:33:0a:f9: d1:07:07:6f:63:ec:68:70:37:17:42:ed:c0:eb:2d:d8:4e:56: c0:ee:89:7f:c8:a5:6d:ea:ce:48:1e:11:0b:47:5d:2d:47:69: ba:b1:cf:eb:b0:c0:21:eb:ec:88:d3:00:34:26:1e:e6:f2:41: aa:95:da:3c:a4:71:df:5a:aa:74:aa:db:96:39:e7:d8:e0:9b: 0a:be:3c:0c:5b:62:a5:04:dc:de:8b:da:2f:d1:ac:43:31:32: 52:82:b1:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz999l9B8cOg1HXxI5K7fIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDBiYjU1ODJlNzRkNjFlOTBjODAyODNiYTliOThiYTY1 Y2QyZGMwHhcNMjUxMjA2MTQwMTM5WhcNMjUxMjA3MTQwMTM5WjAzMTEwLwYDVQQD EyhhZTg3M2FhYzM5MDI3OTE3OTM4Yzc2ODJiMzBjMTJmNmU0NjMwMzU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowc0j29Qdhb5zpDAOOJv9Phvrdc4 L+MgWLkUFP8x6DXARw/OuyGgKt1IINNEZNmhQqq4wx8cVbqRwDCt3o1plugVj20p r/Iv+Uu+pG9EospThFzSU6QpPod5p4ZXCUw0wb31Hn43FVn/0/k7XO2BfpMvCT/u J2iyWm37ipcpCuC20CytZiMIQEJpzGdJxCdzPmhA5ZbTfWOHxFa6zd1I69Mh6z3Q +ziUPE468qzz9GR8tmbxs7FbmyRaFAJqUv9+Rw1yqaxlcUC23Z7DEZYYV6hzddBI FH8Tj8a4kE6KY2Cjde/1bGrOZwlLYX48mhviWD/qpNg90dt9KH7eJriRKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6HOqw5AnkXk4x2grMMEvbkYwNUMB8GA1UdIwQY MBaAFHUAu1WC501h6QyAKDupuYumXNLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgt YmIzZDQ5MzBlNDU5LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8xNjNiYjUtZjhiMS00Y2I0LWJkNDgtYmIzZDQ5MzBlNDU5 LzEvZFFDN1ZZTG5UV0hwRElBb082bTVpNlpjMHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcsSbBg9K CznsUSG0GVPuNn3ZeRCnzgTkTDmM2+kAnbuugIHxliwGsKnO6+Pe7RQq6Kjie4Y6 JZKmVw6yniQfI07B6gyXmMq3RMgOu14f0/uMEVhfPu3k0JvAgD6NYnTy/5O4FzFI me/2c0+nlfrWP47/XfVswkAFmsi31ues+mT2izLbXz4kIdGZMN/qTZxItPRMB5Zy vmBpm4ZATbvrMwr50QcHb2PsaHA3F0LtwOst2E5WwO6Jf8ilberOSB4RC0ddLUdp urHP67DAIevsiNMANCYe5vJBqpXaPKRx31qqdKrbljnn2OCbCr48DFtipQTc3ova L9GsQzEyUoKxhg== -----END CERTIFICATE-----Generated at Sat Dec 6 16:49:00 2025 by rpki-client