This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: gum1oRq/2F4inu1R4muY32FRPuNp6RyoyJMU3JEgkus= Subject key identifier: 2A:67:0D:AD:A8:26:4B:E9:CA:C6:C0:FD:2A:7D:46:A8:7C:B9:6A:4B Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019B31560192A62BF77E446ADE0C607144E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 092E Signing time: Thu 18 Dec 2025 12:01:18 +0000 Manifest this update: Thu 18 Dec 2025 12:01:18 +0000 Manifest next update: Fri 19 Dec 2025 12:01:18 +0000 Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: ZIWCcjMX9cTV14p1pXio8xKYksUCgyRCZVcm/Mlnxo0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 12:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:31:56:01:92:a6:2b:f7:7e:44:6a:de:0c:60:71:44:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Dec 18 12:01:18 2025 GMT Not After : Dec 19 12:01:18 2025 GMT Subject: CN=2a670dada8264be9cac6c0fd2a7d46a87cb96a4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:af:47:85:94:06:61:2a:b1:46:da:17:92:f9: 00:3a:90:ee:d2:91:21:fc:5a:16:4f:39:05:61:3e: 10:eb:f8:7e:4e:23:cc:b8:1d:f0:aa:d3:b3:f3:c4: 07:c4:cd:a9:bb:8a:4d:f1:42:96:03:a6:e4:d7:14: 74:f8:e4:10:8f:e4:a7:66:1d:79:69:2c:cc:bc:4b: d2:b8:4e:bc:1b:f6:05:d4:29:01:6e:22:65:b5:2f: 8d:5b:bf:5c:da:d6:74:40:fb:0c:d6:3e:fa:41:b7: 0c:e7:37:27:90:57:e9:17:6f:46:3b:54:5b:70:5c: aa:c8:10:a8:59:d4:68:75:d9:c4:0c:de:70:f2:76: ae:41:73:0e:fd:13:a3:f8:41:ec:6c:25:70:63:96: b3:ba:f9:ba:32:ae:3d:41:39:20:b1:24:88:d7:4f: c1:c2:87:7f:7c:a4:fd:55:65:4d:1a:3f:f4:86:7d: b2:bd:51:7d:d2:78:c0:26:00:fb:a6:eb:07:c3:97: 6b:c4:57:d5:e2:a0:15:20:eb:ce:65:27:5f:b9:d5: 97:2d:86:b8:eb:ba:40:cd:7d:5e:9e:96:69:df:2c: 4b:a5:bf:40:90:69:0b:c1:b8:11:06:05:92:87:37: 99:fc:21:d7:0d:2c:47:e0:19:1f:18:7b:0a:0e:1c: 14:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:67:0D:AD:A8:26:4B:E9:CA:C6:C0:FD:2A:7D:46:A8:7C:B9:6A:4B X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d3:17:84:4d:bf:c9:b2:21:6b:a0:b4:69:d5:d0:c0:f9:3a: b2:12:0f:3c:83:58:49:f1:7a:0a:03:b0:0f:6e:31:4e:75:fd: 2b:c6:43:d9:69:aa:e9:51:eb:ab:00:e8:0d:d7:91:a6:8a:12: fb:fb:e7:ab:04:b0:c9:ac:8d:c7:6a:9c:6e:e5:6e:ae:23:03: 91:28:d1:2f:4f:97:4e:96:4f:0a:08:12:d9:15:36:e0:59:5f: a0:62:d2:b5:61:7e:c5:15:e1:34:de:6e:30:ef:ee:8a:55:b9: 25:f0:3c:cd:ee:8c:76:74:0c:9b:37:7c:a0:b2:64:85:51:a6: ed:28:df:3e:f0:be:37:b6:47:8f:1c:5c:43:f5:8a:71:83:be: 9b:47:1d:48:ea:08:63:2c:07:96:51:96:f9:5f:9b:b0:d5:64: 3a:ec:87:dd:9a:f8:34:f6:11:a6:75:c6:8a:6d:be:44:33:47: 78:54:98:45:96:87:79:7c:20:19:27:39:b0:0f:6a:5c:97:7e: 1d:0b:41:2c:01:b0:30:cd:19:88:c4:1b:c7:f3:ef:5b:c2:10: e4:c2:05:d7:e4:41:d0:43:8e:32:85:9f:9b:b9:90:ab:a2:8c: 20:7a:ea:89:44:9e:33:52:4f:bb:33:60:3c:55:e5:ee:05:7c: 50:e7:2e:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsxVgGSpiv3fkRq3gxgcUTjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjUxMjE4MTIwMTE4WhcNMjUxMjE5MTIwMTE4WjAzMTEwLwYDVQQD EygyYTY3MGRhZGE4MjY0YmU5Y2FjNmMwZmQyYTdkNDZhODdjYjk2YTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a9HhZQGYSqxRtoXkvkAOpDu0pEh /FoWTzkFYT4Q6/h+TiPMuB3wqtOz88QHxM2pu4pN8UKWA6bk1xR0+OQQj+SnZh15 aSzMvEvSuE68G/YF1CkBbiJltS+NW79c2tZ0QPsM1j76QbcM5zcnkFfpF29GO1Rb cFyqyBCoWdRoddnEDN5w8nauQXMO/ROj+EHsbCVwY5azuvm6Mq49QTkgsSSI10/B wod/fKT9VWVNGj/0hn2yvVF90njAJgD7pusHw5drxFfV4qAVIOvOZSdfudWXLYa4 67pAzX1enpZp3yxLpb9AkGkLwbgRBgWShzeZ/CHXDSxH4BkfGHsKDhwUrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCpnDa2oJkvpysbA/Sp9Rqh8uWpLMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9MXhE2/ ybIha6C0adXQwPk6shIPPINYSfF6CgOwD24xTnX9K8ZD2Wmq6VHrqwDoDdeRpooS +/vnqwSwyayNx2qcbuVuriMDkSjRL0+XTpZPCggS2RU24FlfoGLStWF+xRXhNN5u MO/uilW5JfA8ze6MdnQMmzd8oLJkhVGm7SjfPvC+N7ZHjxxcQ/WKcYO+m0cdSOoI YywHllGW+V+bsNVkOuyH3Zr4NPYRpnXGim2+RDNHeFSYRZaHeXwgGSc5sA9qXJd+ HQtBLAGwMM0ZiMQbx/PvW8IQ5MIF1+RB0EOOMoWfm7mQq6KMIHrqiUSeM1JPuzNg PFXl7gV8UOcu+w== -----END CERTIFICATE-----Generated at Thu Dec 18 14:22:58 2025 by rpki-client