This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft File: cQ7F-mjPme49u9GUnoIERQOh33I.mft (raw, json) Hash identifier: KjRknuOuuGchnbtwX09/YAlQwX3DEcF1+PHEIVQ35I4= Subject key identifier: B0:DB:C6:36:56:1E:45:67:C8:61:01:56:6F:92:3C:55:24:1C:3F:A4 Authority key identifier: 71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 Certificate issuer: /CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Certificate serial: 019AF42DF8782ED59E87F6913486B0558C9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft Manifest number: 06D0 Signing time: Sat 06 Dec 2025 15:00:44 +0000 Manifest this update: Sat 06 Dec 2025 15:00:44 +0000 Manifest next update: Sun 07 Dec 2025 15:00:44 +0000 Files and hashes: 1: cQ7F-mjPme49u9GUnoIERQOh33I.crl (hash: PtnknU4ZrRCRT77ZuD0hWbMVIbgODSWxUpuuvUSa4g0=) 2: jXqxCPk5SJyIm-cEEFcxqQgl9HU.roa (hash: 55uzcUC8JFxJT35uBCSfhKl+d0CAv18T7HkOsVb7EDM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:2d:f8:78:2e:d5:9e:87:f6:91:34:86:b0:55:8c:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ec5fa68cf99ee3dbbd1949e82044503a1df72 Validity Not Before: Dec 6 15:00:44 2025 GMT Not After : Dec 7 15:00:44 2025 GMT Subject: CN=b0dbc636561e4567c86101566f923c55241c3fa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:82:29:17:1d:5f:86:b0:3b:1c:a7:ed:f8:18: 54:d9:9e:90:0d:81:60:32:dc:3c:60:53:c6:b8:53: f4:53:f0:8c:4b:a0:81:e9:e0:65:cb:86:f9:bc:f3: 86:4e:63:bd:00:d7:03:ae:45:96:a8:dc:41:25:28: d2:55:57:f9:2f:7d:b4:91:aa:1a:3f:f6:33:c3:34: c3:e1:5d:fa:c8:74:9d:c0:7d:be:af:66:88:08:d8: be:ca:33:c8:8e:bf:28:f1:68:99:7e:a9:4a:0d:33: 6e:1b:de:0d:08:32:85:e8:e4:60:f1:b5:d8:df:12: fc:66:f9:f6:51:23:80:29:4f:5e:55:08:63:15:53: 2a:11:89:27:d4:16:a8:f1:75:24:f6:e5:12:ab:e4: a9:20:e1:bb:69:e5:0c:7f:4a:41:91:f9:91:f5:a7: 07:e9:40:18:09:45:a0:d6:4d:5c:69:e5:68:dd:7f: 18:62:1b:0d:c4:81:a1:fc:09:57:7a:fa:30:4d:29: e4:97:16:c6:b1:59:b0:4f:2c:8b:d1:ee:24:c4:76: 96:ef:5c:ef:7a:bc:ad:60:30:bf:66:77:56:06:54: 62:ac:a1:20:f8:f6:fc:99:d4:c5:e5:0e:56:29:0a: e5:0e:e5:84:1f:a1:88:7a:ad:ef:15:5f:b7:7c:d5: 59:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:C6:36:56:1E:45:67:C8:61:01:56:6F:92:3C:55:24:1C:3F:A4 X509v3 Authority Key Identifier: keyid:71:0E:C5:FA:68:CF:99:EE:3D:BB:D1:94:9E:82:04:45:03:A1:DF:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQ7F-mjPme49u9GUnoIERQOh33I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e35dd0-301c-4b9f-a887-92722e4ab045/1/cQ7F-mjPme49u9GUnoIERQOh33I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:34:5d:cf:84:d3:b0:f6:a9:61:58:4a:9b:3f:a5:5b:08:07: 4a:2e:c8:17:31:66:b9:af:dd:e0:87:c3:b6:52:78:2a:2d:64: 44:f8:7c:66:d0:08:06:b8:35:88:b3:e4:49:b8:b7:26:05:4c: ec:e0:a5:9c:98:de:82:49:71:b6:75:99:07:6e:57:7a:6a:b9: 3f:6f:01:51:69:8e:e1:84:f4:af:77:0f:47:62:60:5a:29:7c: 92:1e:bb:fb:91:56:af:0e:ee:af:c4:d7:10:a3:35:73:cb:93: 2a:da:86:89:5e:69:fc:bd:87:c2:c6:7a:98:f1:c1:82:30:ac: 55:5d:fa:d0:aa:cf:93:c7:34:6f:4a:2b:b0:49:7a:be:0a:cd: 10:16:15:83:19:5d:6e:e7:94:6f:df:b7:3e:84:a7:3d:eb:4a: ca:97:90:16:c3:d0:eb:a1:6e:d3:c1:f7:b0:c8:e4:7e:16:ce: e9:30:96:5d:da:2e:41:ec:04:66:98:fe:2a:3a:a3:e5:7d:df: fd:3c:6e:eb:2a:a9:1e:c2:c4:e4:d2:da:d1:d5:8b:f3:25:00: 51:67:7e:d3:dd:61:3a:3e:f4:fc:b4:e8:1b:70:f7:16:a2:89: e8:ff:7f:43:f8:a8:3d:a0:f3:26:f6:0b:d0:3a:47:c2:d1:a0: 49:bf:11:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0Lfh4LtWeh/aRNIawVYyfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGVjNWZhNjhjZjk5ZWUzZGJiZDE5NDllODIwNDQ1MDNh MWRmNzIwHhcNMjUxMjA2MTUwMDQ0WhcNMjUxMjA3MTUwMDQ0WjAzMTEwLwYDVQQD EyhiMGRiYzYzNjU2MWU0NTY3Yzg2MTAxNTY2ZjkyM2M1NTI0MWMzZmE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4IpFx1fhrA7HKft+BhU2Z6QDYFg Mtw8YFPGuFP0U/CMS6CB6eBly4b5vPOGTmO9ANcDrkWWqNxBJSjSVVf5L320kaoa P/YzwzTD4V36yHSdwH2+r2aICNi+yjPIjr8o8WiZfqlKDTNuG94NCDKF6ORg8bXY 3xL8Zvn2USOAKU9eVQhjFVMqEYkn1Bao8XUk9uUSq+SpIOG7aeUMf0pBkfmR9acH 6UAYCUWg1k1caeVo3X8YYhsNxIGh/AlXevowTSnklxbGsVmwTyyL0e4kxHaW71zv erytYDC/ZndWBlRirKEg+Pb8mdTF5Q5WKQrlDuWEH6GIeq3vFV+3fNVZOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDbxjZWHkVnyGEBVm+SPFUkHD+kMB8GA1UdIwQY MBaAFHEOxfpoz5nuPbvRlJ6CBEUDod9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODct OTI3MjJlNGFiMDQ1LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lMzVkZDAtMzAxYy00YjlmLWE4ODctOTI3MjJlNGFiMDQ1 LzEvY1E3Ri1talBtZTQ5dTlHVW5vSUVSUU9oMzNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTRdz4TT sPapYVhKmz+lWwgHSi7IFzFmua/d4IfDtlJ4Ki1kRPh8ZtAIBrg1iLPkSbi3JgVM 7OClnJjegklxtnWZB25Xemq5P28BUWmO4YT0r3cPR2JgWil8kh67+5FWrw7ur8TX EKM1c8uTKtqGiV5p/L2HwsZ6mPHBgjCsVV360KrPk8c0b0orsEl6vgrNEBYVgxld bueUb9+3PoSnPetKypeQFsPQ66Fu08H3sMjkfhbO6TCWXdouQewEZpj+Kjqj5X3f /Txu6yqpHsLE5NLa0dWL8yUAUWd+091hOj70/LToG3D3FqKJ6P9/Q/ioPaDzJvYL 0DpHwtGgSb8Rqw== -----END CERTIFICATE-----Generated at Sat Dec 6 21:38:38 2025 by rpki-client