This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json) Hash identifier: qCjglWmzcmHyDZNWr2DHOdZ9gxL8CIdSmdGwlkgjzM0= Subject key identifier: D5:68:56:7C:8D:E5:DE:4C:68:59:32:6B:8B:97:C3:74:CC:C6:D4:80 Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Certificate serial: 019AF465A6A48FB0942BD37378F3DA2A84B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 16:01:33 +0000 Manifest this update: Sat 06 Dec 2025 16:01:33 +0000 Manifest next update: Sun 07 Dec 2025 16:01:33 +0000 Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: bPr8VkgHJC8+LNIiDqH2MWvCyOsrjiqyebtEvymc+uc=) 2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=) 3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a6:a4:8f:b0:94:2b:d3:73:78:f3:da:2a:84:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Validity Not Before: Dec 6 16:01:33 2025 GMT Not After : Dec 7 16:01:33 2025 GMT Subject: CN=d568567c8de5de4c6859326b8b97c374ccc6d480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5b:8f:19:1e:13:e6:b3:c8:f0:b3:1f:b9:8d: 6f:24:5a:77:a0:c3:08:f4:be:10:94:75:8d:61:96: e8:b5:50:b5:42:38:ba:eb:9e:cb:37:d5:97:0f:4e: 2d:4e:cc:ce:17:2f:c8:89:c1:0a:d2:c2:8c:d6:41: fd:93:7b:c4:32:a7:33:c7:c0:66:23:8a:bc:35:27: 59:01:71:af:b5:9d:84:17:f5:03:f7:0a:29:29:08: 9b:93:3d:74:1c:75:a9:6a:72:aa:d1:35:a5:be:39: ab:d8:e9:a5:76:55:2d:3c:20:ca:76:ad:70:83:a2: 4f:27:2d:3e:a0:b6:2b:1f:89:3f:d3:82:8b:1d:b5: 09:6a:91:2b:25:3e:14:64:8a:55:a3:ee:cd:bd:17: 88:63:48:bb:30:d0:f2:55:3e:d6:5f:6d:ec:98:0c: 96:ef:ef:67:d4:12:a0:d2:e3:36:9f:70:26:50:29: bc:c3:24:28:6a:00:60:27:bf:1c:5b:ca:ed:88:94: 65:49:ff:17:c5:0e:3d:65:6b:8c:a1:0b:20:d9:52: 98:9c:1c:02:0c:8e:a3:95:6a:7a:b5:0b:75:a7:46: 81:18:50:25:df:31:72:4d:73:ff:45:f9:e8:48:60: 59:97:0d:62:cd:7a:ce:a2:69:26:ff:51:3d:00:d0: 57:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:68:56:7C:8D:E5:DE:4C:68:59:32:6B:8B:97:C3:74:CC:C6:D4:80 X509v3 Authority Key Identifier: keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:fc:63:22:28:71:94:ac:62:fa:4c:57:b9:f4:1d:d0:a0:4f: 38:54:3d:37:ba:89:27:d0:be:03:1f:71:85:fc:f1:68:b2:f3: 6f:7b:58:9a:b8:32:d0:86:d5:73:e3:2c:ec:ff:15:c5:f0:f4: 8b:0f:74:fb:e4:a1:6c:ba:85:80:a5:47:d2:62:3d:c7:8b:9f: 0b:d1:81:bf:f9:17:51:0d:a2:cf:95:fc:c3:f1:2f:c9:fb:e1: 6c:90:b1:7f:d6:af:9b:35:07:47:85:fd:f2:d8:cd:53:88:9d: 21:a5:e9:c6:ff:ee:65:af:bb:43:fc:12:16:ab:39:e8:e0:c1: d9:95:bd:d3:78:7d:b5:34:94:a9:2a:63:3b:40:e5:1e:49:21: e0:87:ad:1b:5e:4d:53:06:01:15:9b:a8:42:9f:0f:31:37:f6: 11:06:5b:b3:26:a2:81:b9:9f:90:65:b6:37:1e:dc:49:d5:8e: 45:41:21:7b:a2:9d:e5:62:78:3a:a3:9e:6c:61:f8:3f:ec:ee: a8:ab:11:73:45:03:e1:74:aa:74:d2:3d:3b:71:38:31:1f:fa: 4c:9c:59:7e:03:8c:7b:9e:85:64:34:e6:b8:b2:53:f6:77:00: f2:0e:4e:09:fb:7b:6b:c7:1c:8e:89:85:9d:f2:f0:03:b8:34: 2d:5c:be:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Zaakj7CUK9NzePPaKoSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl NzgzYjIwHhcNMjUxMjA2MTYwMTMzWhcNMjUxMjA3MTYwMTMzWjAzMTEwLwYDVQQD EyhkNTY4NTY3YzhkZTVkZTRjNjg1OTMyNmI4Yjk3YzM3NGNjYzZkNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVuPGR4T5rPI8LMfuY1vJFp3oMMI 9L4QlHWNYZbotVC1Qji6657LN9WXD04tTszOFy/IicEK0sKM1kH9k3vEMqczx8Bm I4q8NSdZAXGvtZ2EF/UD9wopKQibkz10HHWpanKq0TWlvjmr2OmldlUtPCDKdq1w g6JPJy0+oLYrH4k/04KLHbUJapErJT4UZIpVo+7NvReIY0i7MNDyVT7WX23smAyW 7+9n1BKg0uM2n3AmUCm8wyQoagBgJ78cW8rtiJRlSf8XxQ49ZWuMoQsg2VKYnBwC DI6jlWp6tQt1p0aBGFAl3zFyTXP/RfnoSGBZlw1izXrOomkm/1E9ANBXKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNVoVnyN5d5MaFkya4uXw3TMxtSAMB8GA1UdIwQY MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANfxjIihx lKxi+kxXufQd0KBPOFQ9N7qJJ9C+Ax9xhfzxaLLzb3tYmrgy0IbVc+Ms7P8VxfD0 iw90++ShbLqFgKVH0mI9x4ufC9GBv/kXUQ2iz5X8w/EvyfvhbJCxf9avmzUHR4X9 8tjNU4idIaXpxv/uZa+7Q/wSFqs56ODB2ZW903h9tTSUqSpjO0DlHkkh4IetG15N UwYBFZuoQp8PMTf2EQZbsyaigbmfkGW2Nx7cSdWORUEhe6Kd5WJ4OqOebGH4P+zu qKsRc0UD4XSqdNI9O3E4MR/6TJxZfgOMe56FZDTmuLJT9ncA8g5OCft7a8ccjomF nfLwA7g0LVy+jg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:34:52 2025 by rpki-client