This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft File: CQ-seFK0LR5rHD8PKdE85ensstY.mft (raw, json) Hash identifier: EKS8D1XbvOBjgUGGB70YXDUfvH1LMj1A4DcUcx0VO6c= Subject key identifier: D7:54:00:05:9B:BB:64:E1:66:92:05:DE:5F:9A:2F:70:39:79:97:CC Authority key identifier: 09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 Certificate issuer: /CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Certificate serial: 019AF12DA8CD6854C45B394681DD4100D98A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:01:32 +0000 Manifest this update: Sat 06 Dec 2025 01:01:32 +0000 Manifest next update: Sun 07 Dec 2025 01:01:32 +0000 Files and hashes: 1: CQ-seFK0LR5rHD8PKdE85ensstY.crl (hash: ISufBAXgThbSqfH9MD1sRpypTxxGzHt85sc5R060awY=) 2: tktnNkqo-Ucay9gG5szDFherVRo.roa (hash: fENlsqvH8zzdUmZ9S6kxqqHzh2VPnW1ALr3bQ6F8fDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:a8:cd:68:54:c4:5b:39:46:81:dd:41:00:d9:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090fac7852b42d1e6b1c3f0f29d13ce5e9ecb2d6 Validity Not Before: Dec 6 01:01:32 2025 GMT Not After : Dec 7 01:01:32 2025 GMT Subject: CN=d75400059bbb64e1669205de5f9a2f70397997cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:d9:30:11:40:03:bb:31:b9:fd:d4:93:53: 8e:c6:16:2e:87:b0:65:35:ff:0f:20:7a:e5:e5:fc: 66:de:18:0c:cb:64:65:dc:43:0a:92:af:76:bf:09: fa:7c:53:9a:9c:e1:70:83:89:32:90:25:b6:74:67: f3:4f:d5:02:63:6c:ce:ab:0f:0a:f7:49:df:a6:8e: f0:05:e1:2b:21:ff:f8:91:6b:2e:91:77:a0:3d:d7: 67:13:71:7a:6d:da:2a:22:4f:aa:eb:27:84:02:d3: 5a:99:f0:aa:e3:be:73:bd:3f:e0:8d:2e:b3:ee:b7: fd:de:d1:5c:b9:a6:18:01:ba:d6:b5:36:cc:e8:a2: 69:7a:81:87:0f:46:6e:27:8f:a8:8d:8c:c7:4b:b7: 1b:9c:16:4a:f0:43:01:31:32:8e:d2:f3:b6:1b:f9: b9:e1:85:d0:45:29:7f:24:5b:04:70:7c:88:f1:fe: 79:b8:db:31:20:24:f5:bb:d3:7e:6a:8f:02:30:8d: 4e:8f:6e:5b:3f:c1:9a:d1:1e:21:82:00:fd:cd:b4: 50:d7:a4:9b:ba:a3:a5:18:f6:dc:1b:f6:50:50:a7: f1:93:07:04:54:fc:1d:fc:75:19:38:cb:5e:4a:ad: f7:9e:34:51:d9:2d:35:f5:44:50:9b:86:37:ed:3d: 4d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:54:00:05:9B:BB:64:E1:66:92:05:DE:5F:9A:2F:70:39:79:97:CC X509v3 Authority Key Identifier: keyid:09:0F:AC:78:52:B4:2D:1E:6B:1C:3F:0F:29:D1:3C:E5:E9:EC:B2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ-seFK0LR5rHD8PKdE85ensstY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8710ba-fb59-466b-9e6b-e898681bc89e/1/CQ-seFK0LR5rHD8PKdE85ensstY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:94:8f:ed:a8:a8:73:ad:27:bc:63:60:3a:0e:58:d2:c6:da: 11:24:4b:bb:31:79:0c:77:ee:b6:60:dc:b1:6e:33:95:78:ed: 0e:8a:62:16:21:d7:7c:0e:f8:a2:bf:db:60:83:b9:fb:03:fd: f3:84:30:79:35:b9:18:e3:af:9b:38:db:53:b2:46:78:5b:fe: 62:29:7c:8e:20:b3:6c:f7:9f:e6:53:d0:fa:bd:59:9c:af:2b: e3:ba:aa:f8:71:11:9d:26:3a:ad:0a:7a:fd:79:8f:9c:19:50: 7a:73:c5:d7:b1:13:97:c5:75:4e:e0:62:2c:da:9f:23:46:db: ec:1b:5c:c5:d7:c6:25:48:ae:7b:ec:69:55:7f:4c:ab:9f:7f: cb:11:c9:b8:5b:41:2a:e1:e4:d8:4e:22:01:0b:ba:1e:e5:f1: 34:3d:f2:88:93:53:fa:07:5d:01:c5:49:ba:f9:93:8a:b6:d9: d2:b7:e0:0b:2e:ca:b4:fd:c2:f0:1b:1a:da:7d:04:4c:26:01: 20:f5:7b:58:bb:58:71:60:a2:22:20:e0:33:8d:d3:e6:ab:91: 2b:2d:f7:49:9e:67:9b:58:c1:bd:66:96:73:f9:85:c6:22:13: 21:36:38:43:1b:dc:9e:3f:68:03:75:8a:50:e2:54:a2:93:47: 5f:19:97:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLajNaFTEWzlGgd1BANmKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MGZhYzc4NTJiNDJkMWU2YjFjM2YwZjI5ZDEzY2U1ZTll Y2IyZDYwHhcNMjUxMjA2MDEwMTMyWhcNMjUxMjA3MDEwMTMyWjAzMTEwLwYDVQQD EyhkNzU0MDAwNTliYmI2NGUxNjY5MjA1ZGU1ZjlhMmY3MDM5Nzk5N2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApULZMBFAA7sxuf3Uk1OOxhYuh7Bl Nf8PIHrl5fxm3hgMy2Rl3EMKkq92vwn6fFOanOFwg4kykCW2dGfzT9UCY2zOqw8K 90nfpo7wBeErIf/4kWsukXegPddnE3F6bdoqIk+q6yeEAtNamfCq475zvT/gjS6z 7rf93tFcuaYYAbrWtTbM6KJpeoGHD0ZuJ4+ojYzHS7cbnBZK8EMBMTKO0vO2G/m5 4YXQRSl/JFsEcHyI8f55uNsxICT1u9N+ao8CMI1Oj25bP8Ga0R4hggD9zbRQ16Sb uqOlGPbcG/ZQUKfxkwcEVPwd/HUZOMteSq33njRR2S019URQm4Y37T1NlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNdUAAWbu2ThZpIF3l+aL3A5eZfMMB8GA1UdIwQY MBaAFAkPrHhStC0eaxw/DynRPOXp7LLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmIt ZTg5ODY4MWJjODllLzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy84NzEwYmEtZmI1OS00NjZiLTllNmItZTg5ODY4MWJjODll LzEvQ1Etc2VGSzBMUjVySEQ4UEtkRTg1ZW5zc3RZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk5SP7aio c60nvGNgOg5Y0sbaESRLuzF5DHfutmDcsW4zlXjtDopiFiHXfA74or/bYIO5+wP9 84QweTW5GOOvmzjbU7JGeFv+Yil8jiCzbPef5lPQ+r1ZnK8r47qq+HERnSY6rQp6 /XmPnBlQenPF17ETl8V1TuBiLNqfI0bb7BtcxdfGJUiue+xpVX9Mq59/yxHJuFtB KuHk2E4iAQu6HuXxND3yiJNT+gddAcVJuvmTirbZ0rfgCy7KtP3C8Bsa2n0ETCYB IPV7WLtYcWCiIiDgM43T5quRKy33SZ5nm1jBvWaWc/mFxiITITY4Qxvcnj9oA3WK UOJUopNHXxmXIA== -----END CERTIFICATE-----Generated at Sat Dec 6 10:43:07 2025 by rpki-client