This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: wpmyVJ1KcCILsowB82bkMDOYRFQMAgUiGxiLUzkaIg4= Subject key identifier: 33:3B:21:B2:FF:D7:17:68:42:DF:DC:EE:6D:26:95:CB:3A:7E:58:C0 Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019AF19B6D925D05F623FA4660201A7E82F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 090D Signing time: Sat 06 Dec 2025 03:01:26 +0000 Manifest this update: Sat 06 Dec 2025 03:01:26 +0000 Manifest next update: Sun 07 Dec 2025 03:01:26 +0000 Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: qH+iuTvu08miyUSitkSzW+xeSSZJI6mDS7oKStQRDIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:6d:92:5d:05:f6:23:fa:46:60:20:1a:7e:82:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Dec 6 03:01:26 2025 GMT Not After : Dec 7 03:01:26 2025 GMT Subject: CN=333b21b2ffd7176842dfdcee6d2695cb3a7e58c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:21:c9:b7:6a:66:fa:a4:4b:4a:a0:16:ec:62: 74:3d:2e:5d:78:95:53:85:da:d5:94:b8:75:db:51: c7:53:86:9d:b7:8e:be:da:cb:03:1a:c5:55:0e:92: f7:e8:f9:a0:e4:4e:d3:c4:65:4d:79:c6:1e:65:6c: a7:4c:69:23:50:4b:a8:85:aa:6b:0f:13:40:12:74: a5:e5:9b:b7:85:be:79:6d:af:b8:ac:b4:66:09:b4: df:42:d1:9a:44:29:70:e5:9f:c8:33:ad:af:b3:d5: 0d:77:f8:4f:ad:4f:71:f9:4e:33:27:68:2f:f7:7e: 00:1e:33:fa:18:09:d5:27:e1:34:16:b4:64:d2:6b: f2:23:39:05:3d:c1:8c:78:78:23:e1:27:43:3e:e8: ec:56:d3:22:a7:84:89:09:0f:be:ab:d9:db:f0:17: 79:e9:17:26:54:b7:6c:6e:9d:1a:a0:e0:da:cc:b8: 42:59:25:e1:c1:3a:a0:3a:e6:3a:46:bc:02:fd:c2: 5e:70:ec:fa:20:8e:c2:cd:b5:37:bc:ff:42:a0:24: 6d:b1:73:b0:9a:1a:da:c3:8e:ac:ce:40:08:f9:d8: b2:7f:d1:89:e9:d3:ac:bc:be:60:3c:9b:fc:ae:68: 16:3c:71:2d:52:b3:8f:34:db:a5:0a:47:c7:95:45: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3B:21:B2:FF:D7:17:68:42:DF:DC:EE:6D:26:95:CB:3A:7E:58:C0 X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8e:29:8e:0c:c4:91:ef:5e:d4:7c:5f:56:d4:3a:a6:f1:9b: ed:e5:56:8b:fd:b1:00:c3:bb:97:49:1a:58:a3:d4:05:d8:34: 6b:9d:3f:2e:10:99:c4:48:b4:5f:92:da:cc:8f:33:32:f6:d1: 45:53:fb:ec:f0:68:9a:9f:62:11:63:cd:0a:35:d5:be:da:dd: a3:9c:46:a2:99:8b:47:ae:c0:2f:cb:c6:3c:1a:66:53:59:4a: a0:7d:22:f2:6b:9f:6a:39:51:bf:a8:8c:3e:0d:89:cf:3f:97: 07:c0:ce:f4:8f:63:60:37:ed:a1:e1:d1:8c:d0:6e:9c:b0:d1: 66:e7:dc:0a:df:1f:3d:3a:5a:9d:f3:b4:37:77:fd:fc:a5:6a: ad:d7:5e:85:22:29:5d:86:3c:09:bb:6a:48:ad:a6:da:4c:5c: 74:29:a0:7f:c6:d8:d9:e9:63:7d:40:c6:c9:98:4f:88:46:b8: 19:38:db:0e:80:ef:90:57:d4:40:32:44:82:17:8f:61:d9:b9: d4:6f:08:a3:71:d1:18:55:e0:39:27:52:51:47:47:4e:d3:4e: 3a:7a:9a:3f:c9:dd:67:98:db:45:5b:0a:46:b5:16:a2:8b:ab: 31:72:64:83:f2:69:be:3a:04:1c:17:a4:ac:22:0f:52:b8:75: 2c:1d:1f:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm22SXQX2I/pGYCAafoL1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjUxMjA2MDMwMTI2WhcNMjUxMjA3MDMwMTI2WjAzMTEwLwYDVQQD EygzMzNiMjFiMmZmZDcxNzY4NDJkZmRjZWU2ZDI2OTVjYjNhN2U1OGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCHJt2pm+qRLSqAW7GJ0PS5deJVT hdrVlLh121HHU4adt46+2ssDGsVVDpL36Pmg5E7TxGVNecYeZWynTGkjUEuohapr DxNAEnSl5Zu3hb55ba+4rLRmCbTfQtGaRClw5Z/IM62vs9UNd/hPrU9x+U4zJ2gv 934AHjP6GAnVJ+E0FrRk0mvyIzkFPcGMeHgj4SdDPujsVtMip4SJCQ++q9nb8Bd5 6RcmVLdsbp0aoODazLhCWSXhwTqgOuY6RrwC/cJecOz6II7CzbU3vP9CoCRtsXOw mhraw46szkAI+diyf9GJ6dOsvL5gPJv8rmgWPHEtUrOPNNulCkfHlUUgYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDM7IbL/1xdoQt/c7m0mlcs6fljAMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL44pjgzE ke9e1HxfVtQ6pvGb7eVWi/2xAMO7l0kaWKPUBdg0a50/LhCZxEi0X5LazI8zMvbR RVP77PBomp9iEWPNCjXVvtrdo5xGopmLR67AL8vGPBpmU1lKoH0i8mufajlRv6iM Pg2Jzz+XB8DO9I9jYDftoeHRjNBunLDRZufcCt8fPTpanfO0N3f9/KVqrddehSIp XYY8CbtqSK2m2kxcdCmgf8bY2eljfUDGyZhPiEa4GTjbDoDvkFfUQDJEghePYdm5 1G8Io3HRGFXgOSdSUUdHTtNOOnqaP8ndZ5jbRVsKRrUWoourMXJkg/JpvjoEHBek rCIPUrh1LB0fvw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:18:10 2025 by rpki-client