This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json) Hash identifier: nVWG/zaC2VorQCvsfLD6LAnOEv2N5GxwwYPx7WS/grE= Subject key identifier: 44:8C:B2:7E:06:F0:37:A4:2C:F6:3E:45:E5:25:BE:F3:14:52:95:14 Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Certificate serial: 019B266437D0B59B60B8C0BD35D3AC8B630E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft Manifest number: 06EA Signing time: Tue 16 Dec 2025 09:01:00 +0000 Manifest this update: Tue 16 Dec 2025 09:01:00 +0000 Manifest next update: Wed 17 Dec 2025 09:01:00 +0000 Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: WVIPNRNLjO6zQtKTDEXSi2ajs5V/6I39N0m+l3uBjTY=) 2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:64:37:d0:b5:9b:60:b8:c0:bd:35:d3:ac:8b:63:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Validity Not Before: Dec 16 09:01:00 2025 GMT Not After : Dec 17 09:01:00 2025 GMT Subject: CN=448cb27e06f037a42cf63e45e525bef314529514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:f3:fd:bb:0e:50:3a:4b:0f:7f:03:91:b1: f0:73:7e:b8:65:26:38:96:a3:31:71:03:5d:e9:ce: 5c:8f:2e:29:0e:52:bf:c1:14:c8:51:d3:ca:c9:1d: 6e:63:05:a5:8d:e5:b3:2a:53:49:81:91:33:f4:e9: 97:63:83:4d:9b:8b:55:e1:90:71:40:10:ad:f0:21: 2e:9b:7f:27:75:69:67:a9:b5:e4:4c:5d:a4:5c:ae: b4:c0:a6:58:76:ed:88:90:42:ea:e7:d1:c7:84:25: d7:01:dd:6c:5a:86:3c:16:cf:28:8c:e8:14:dd:8c: c3:00:ea:a1:49:f0:33:9f:7d:92:97:1e:38:f0:99: 6a:87:ff:1b:08:8a:88:af:6b:85:e0:1b:60:05:b4: f7:1a:f2:4e:e3:8a:03:09:b3:7d:91:53:56:51:a7: 47:1a:bd:3e:2d:06:92:53:0b:3d:8f:f6:6e:3e:8d: 56:c0:7e:6e:94:79:a6:bf:d4:89:91:e8:e5:9d:da: af:a2:b3:9d:21:01:69:62:92:c7:04:1a:e8:22:b4: 71:75:ad:b9:55:6d:09:79:a6:65:7a:4b:24:52:77: a5:d4:93:3b:4c:76:89:42:01:b9:49:95:7e:26:ee: ee:6a:da:20:2c:46:7f:68:06:20:48:1d:cf:f0:4b: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8C:B2:7E:06:F0:37:A4:2C:F6:3E:45:E5:25:BE:F3:14:52:95:14 X509v3 Authority Key Identifier: keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:03:34:39:c9:1d:9f:43:8b:49:68:36:ad:1e:8e:ee:4d:0a: cb:e3:b7:9a:88:eb:44:98:b9:a4:d1:13:48:11:46:11:4a:20: fc:2f:13:de:aa:6e:e9:dd:3f:10:94:f1:a6:8d:98:48:22:4d: ce:b3:09:89:88:17:7e:ef:f0:39:db:29:bc:62:cf:12:7d:ec: c1:cf:c8:ee:ed:24:a1:d3:b8:ee:1d:3d:01:f3:99:83:6f:3b: 17:93:3c:cb:d0:5a:92:99:6c:0d:7e:e0:49:e5:31:4d:2a:5b: 25:fb:c5:54:d8:1a:6c:b9:75:3d:f4:b9:88:e7:26:b4:6b:77: 0d:a7:4b:cf:6f:8b:96:93:70:82:5d:33:2c:2c:72:2f:9a:8b: 43:c7:ef:52:6f:40:23:fb:b8:00:22:9f:be:0a:37:a9:de:8d: 9f:98:25:0e:e9:66:ca:bd:1c:27:ce:72:c5:f9:94:a6:bb:b1: b6:51:49:a9:53:9b:7e:2d:ef:30:ec:c5:0e:52:e1:da:b6:57: b8:9c:05:e1:0a:78:9c:74:3a:e2:64:88:45:91:e5:46:08:2e: e7:0a:ce:5d:b4:1c:d8:df:8f:63:22:40:69:5f:ae:9d:94:0a: 0b:04:6b:1f:f6:7f:a0:9e:42:df:a6:82:dd:8f:b2:19:fe:e3: 16:2a:95:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsmZDfQtZtguMC9NdOsi2MOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh MWRmNzIwHhcNMjUxMjE2MDkwMTAwWhcNMjUxMjE3MDkwMTAwWjAzMTEwLwYDVQQD Eyg0NDhjYjI3ZTA2ZjAzN2E0MmNmNjNlNDVlNTI1YmVmMzE0NTI5NTE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV/z/bsOUDpLD38DkbHwc364ZSY4 lqMxcQNd6c5cjy4pDlK/wRTIUdPKyR1uYwWljeWzKlNJgZEz9OmXY4NNm4tV4ZBx QBCt8CEum38ndWlnqbXkTF2kXK60wKZYdu2IkELq59HHhCXXAd1sWoY8Fs8ojOgU 3YzDAOqhSfAzn32Slx448Jlqh/8bCIqIr2uF4BtgBbT3GvJO44oDCbN9kVNWUadH Gr0+LQaSUws9j/ZuPo1WwH5ulHmmv9SJkejlndqvorOdIQFpYpLHBBroIrRxda25 VW0JeaZlekskUnel1JM7THaJQgG5SZV+Ju7uatogLEZ/aAYgSB3P8Ev3ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFESMsn4G8DekLPY+ReUlvvMUUpUUMB8GA1UdIwQY MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1 LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcAM0Ockd n0OLSWg2rR6O7k0Ky+O3mojrRJi5pNETSBFGEUog/C8T3qpu6d0/EJTxpo2YSCJN zrMJiYgXfu/wOdspvGLPEn3swc/I7u0kodO47h09AfOZg287F5M8y9BakplsDX7g SeUxTSpbJfvFVNgabLl1PfS5iOcmtGt3DadLz2+LlpNwgl0zLCxyL5qLQ8fvUm9A I/u4ACKfvgo3qd6Nn5glDulmyr0cJ85yxfmUpruxtlFJqVObfi3vMOzFDlLh2rZX uJwF4Qp4nHQ64mSIRZHlRggu5wrOXbQc2N+PYyJAaV+unZQKCwRrH/Z/oJ5C36aC 3Y+yGf7jFiqVTQ== -----END CERTIFICATE-----Generated at Tue Dec 16 17:56:09 2025 by rpki-client