This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft File: 0Q1bMLRse5ey28RYnOo2Iq11YVY.mft (raw, json) Hash identifier: WfW/c4FD1GnzLAMMLwaFkgoS5n8+nQr3lF++8yXJnoE= Subject key identifier: A0:46:20:F5:F3:1C:B6:97:F3:F2:0D:92:18:AF:2E:10:15:86:B8:C9 Authority key identifier: D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 Certificate issuer: /CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Certificate serial: 019AF12ED68E481500B1458ED93AD998BD31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 01:02:49 +0000 Manifest this update: Sat 06 Dec 2025 01:02:49 +0000 Manifest next update: Sun 07 Dec 2025 01:02:49 +0000 Files and hashes: 1: 0Q1bMLRse5ey28RYnOo2Iq11YVY.crl (hash: RKUMVKpz6m1a/nfTewZjxW5Hm/CfvJOzkVMi7capd+4=) 2: U_YkWvIbAgSV60H8mUEYqY805XM.roa (hash: rIv2yHmGWREBYz1rPgWWMboLSc3Q207kM2zjs8JlUoo=) 3: muAVUu1aPnEHmAc-r1xMJMX_xwE.roa (hash: t/IG40S9IeJr1JmuDkCemhTExv33uEsQ8ntTYx4HhXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:d6:8e:48:15:00:b1:45:8e:d9:3a:d9:98:bd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d10d5b30b46c7b97b2dbc4589cea3622ad756156 Validity Not Before: Dec 6 01:02:49 2025 GMT Not After : Dec 7 01:02:49 2025 GMT Subject: CN=a04620f5f31cb697f3f20d9218af2e101586b8c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2b:98:a2:a8:03:35:dc:b6:b3:f7:8e:b2:80: 29:5c:ba:96:ed:2e:ae:38:6d:ea:ac:bc:a8:bd:77: 63:57:54:54:e7:ae:bc:96:ba:27:35:ef:8e:c9:58: ca:79:44:20:36:d6:46:73:a3:4d:d8:76:49:18:e3: 73:f4:2e:a9:c1:90:5e:37:31:78:f9:b6:f2:f0:99: cc:bd:3d:ea:2c:84:34:2f:ef:8e:6f:60:7e:93:35: 85:22:42:bb:f5:96:17:7e:7a:26:ef:24:7f:bd:a5: fc:d4:30:2b:b3:17:f0:b5:78:13:44:de:13:9c:d4: 15:bd:63:b7:13:c6:2e:03:74:f5:af:27:0c:34:b9: d6:0a:ed:10:9c:de:e9:d3:27:e1:60:0c:6c:35:61: 4c:56:3d:44:7e:9e:e5:0c:71:11:4c:b9:1e:26:9c: 86:85:d6:9d:99:55:21:4b:b8:e0:d3:c6:af:20:00: f9:bd:44:81:38:62:7b:78:69:e0:98:21:9c:2f:ac: bd:27:96:22:ab:d4:1f:d6:ae:4c:a7:78:45:63:ea: 1c:eb:5f:25:7c:20:11:f0:79:22:81:1b:9c:c8:c0: 29:8f:73:da:ed:a9:9d:77:b1:e5:72:c7:d6:41:9c: c5:07:9d:f6:76:32:d0:fc:53:ee:c0:86:5a:4e:cf: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:46:20:F5:F3:1C:B6:97:F3:F2:0D:92:18:AF:2E:10:15:86:B8:C9 X509v3 Authority Key Identifier: keyid:D1:0D:5B:30:B4:6C:7B:97:B2:DB:C4:58:9C:EA:36:22:AD:75:61:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Q1bMLRse5ey28RYnOo2Iq11YVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7256ec-c346-4b29-b7f5-3e40d01740b2/1/0Q1bMLRse5ey28RYnOo2Iq11YVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:92:f2:90:eb:30:83:70:0d:2a:2c:f5:d6:4b:b9:95:66:ae: fe:a7:67:2c:1b:28:f5:bf:b3:82:75:9d:be:e4:3f:6d:1c:e1: de:e0:a2:87:f8:6a:05:37:2c:15:f3:c9:cc:09:a9:ec:49:3e: 80:41:6a:b6:c2:f5:2f:e5:11:b6:dc:90:2a:40:2e:ba:f7:c1: a7:51:d3:9e:3f:3e:4f:86:84:50:a5:69:e4:34:1d:2d:44:83: b9:7c:aa:f6:75:71:3e:d1:ac:50:60:ba:c1:22:ef:8c:0a:08: d2:65:7f:d7:24:d2:26:40:7d:11:66:c0:c6:4c:e6:95:40:45: f1:94:b6:b4:49:6b:53:4e:50:b3:e6:1f:17:05:9d:d8:f0:54: 04:e2:fb:9f:13:46:a8:02:e9:3c:18:c4:30:de:ab:ca:cf:8d: 50:eb:39:8d:4d:41:29:e4:39:bc:1d:19:59:7b:c1:77:04:b3: 98:0d:67:07:a4:08:17:df:7c:93:5c:2f:d5:59:91:5d:98:85: e5:c3:91:9f:e2:a5:05:5c:89:b7:b3:e0:a3:e5:b6:fb:46:b4: ed:34:e6:6d:15:62:12:2c:fc:c8:de:54:1c:6f:55:b0:f3:54: 8c:7f:97:a9:03:06:1a:9d:ab:2c:00:09:76:bf:7e:22:08:7f: 27:40:80:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLtaOSBUAsUWO2TrZmL0xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxMGQ1YjMwYjQ2YzdiOTdiMmRiYzQ1ODljZWEzNjIyYWQ3 NTYxNTYwHhcNMjUxMjA2MDEwMjQ5WhcNMjUxMjA3MDEwMjQ5WjAzMTEwLwYDVQQD EyhhMDQ2MjBmNWYzMWNiNjk3ZjNmMjBkOTIxOGFmMmUxMDE1ODZiOGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSuYoqgDNdy2s/eOsoApXLqW7S6u OG3qrLyovXdjV1RU5668lronNe+OyVjKeUQgNtZGc6NN2HZJGONz9C6pwZBeNzF4 +bby8JnMvT3qLIQ0L++Ob2B+kzWFIkK79ZYXfnom7yR/vaX81DArsxfwtXgTRN4T nNQVvWO3E8YuA3T1rycMNLnWCu0QnN7p0yfhYAxsNWFMVj1Efp7lDHERTLkeJpyG hdadmVUhS7jg08avIAD5vUSBOGJ7eGngmCGcL6y9J5Yiq9Qf1q5Mp3hFY+oc618l fCAR8HkigRucyMApj3Pa7amdd7HlcsfWQZzFB532djLQ/FPuwIZaTs9iSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKBGIPXzHLaX8/INkhivLhAVhrjJMB8GA1UdIwQY MBaAFNENWzC0bHuXstvEWJzqNiKtdWFWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUt M2U0MGQwMTc0MGIyLzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS83MjU2ZWMtYzM0Ni00YjI5LWI3ZjUtM2U0MGQwMTc0MGIy LzEvMFExYk1MUnNlNWV5MjhSWW5PbzJJcTExWVZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpLykOsw g3ANKiz11ku5lWau/qdnLBso9b+zgnWdvuQ/bRzh3uCih/hqBTcsFfPJzAmp7Ek+ gEFqtsL1L+URttyQKkAuuvfBp1HTnj8+T4aEUKVp5DQdLUSDuXyq9nVxPtGsUGC6 wSLvjAoI0mV/1yTSJkB9EWbAxkzmlUBF8ZS2tElrU05Qs+YfFwWd2PBUBOL7nxNG qALpPBjEMN6rys+NUOs5jU1BKeQ5vB0ZWXvBdwSzmA1nB6QIF998k1wv1VmRXZiF 5cORn+KlBVyJt7Pgo+W2+0a07TTmbRViEiz8yN5UHG9VsPNUjH+XqQMGGp2rLAAJ dr9+Igh/J0CA3A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:11:24 2025 by rpki-client