This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft File: pQHIn0SCnHLyqVPSorpK4Le1DYo.mft (raw, json) Hash identifier: huI9sYWyRWOTLCNaYAfzMewRV8gi+no0Z+lPaYZBRVg= Subject key identifier: F3:C4:1F:7E:0D:44:CB:21:CF:FD:06:EE:5A:ED:AC:39:2F:03:91:30 Authority key identifier: A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A Certificate issuer: /CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Certificate serial: 019AF5AF1F662BBB60525FBB3C32CA99531B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 22:01:25 +0000 Manifest this update: Sat 06 Dec 2025 22:01:25 +0000 Manifest next update: Sun 07 Dec 2025 22:01:25 +0000 Files and hashes: 1: D5U1j0YPEDas8bxMtDOehRJb48U.roa (hash: AkMtfy33YmmtJG2wcdM/0Qvh01UPoaXKoDXm68LNuus=) 2: pQHIn0SCnHLyqVPSorpK4Le1DYo.crl (hash: FDxGy7xzJgMhrAz5i3bpErCl+7hxlF0SMxH//TYXixQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:af:1f:66:2b:bb:60:52:5f:bb:3c:32:ca:99:53:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a501c89f44829c72f2a953d2a2ba4ae0b7b50d8a Validity Not Before: Dec 6 22:01:25 2025 GMT Not After : Dec 7 22:01:25 2025 GMT Subject: CN=f3c41f7e0d44cb21cffd06ee5aedac392f039130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a3:e3:b3:2c:56:c9:26:7a:f7:06:e5:64:3a: 57:32:08:85:42:f4:9e:d3:31:91:10:31:54:10:01: 8d:a1:29:59:a0:b2:5f:1c:ef:91:2d:27:8e:38:43: 09:a9:f0:da:46:e8:07:d3:e3:57:a5:75:34:7c:95: 4e:4c:4f:a7:85:71:5b:93:e7:5b:bb:72:bf:c3:95: f9:31:e6:13:2e:4f:dd:d6:d3:c2:ac:22:59:c6:6a: 7b:64:e8:f1:7f:c0:7e:2a:54:f3:07:68:42:81:5d: 71:97:37:4a:16:9b:30:76:77:2f:f6:c5:43:c8:fc: 1d:8c:ed:ea:bd:7d:97:0f:a1:51:8c:9a:75:f2:b9: a7:32:fc:15:6b:57:28:e6:b6:e5:41:25:ea:15:78: 26:30:4b:87:c5:34:a1:21:c6:40:36:31:03:d7:ed: aa:72:6d:5c:3a:1b:a6:20:b8:a2:7f:f8:fc:b4:e7: 16:01:d4:42:bd:c5:f0:1d:9a:20:4c:d7:30:db:58: 3e:eb:ee:4c:f9:50:31:c5:51:c0:34:1a:f5:00:b0: 98:aa:d6:ae:7e:3c:80:cf:48:c9:c6:2a:9f:71:11: 2a:be:e9:8d:42:75:8c:75:c0:82:f4:5b:e5:d6:79: ff:2e:37:fd:f9:a6:3d:d4:f0:c1:9b:fd:52:28:ec: 6e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C4:1F:7E:0D:44:CB:21:CF:FD:06:EE:5A:ED:AC:39:2F:03:91:30 X509v3 Authority Key Identifier: keyid:A5:01:C8:9F:44:82:9C:72:F2:A9:53:D2:A2:BA:4A:E0:B7:B5:0D:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pQHIn0SCnHLyqVPSorpK4Le1DYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/d5e103-90b5-44f1-b864-14a1eb5512d6/1/pQHIn0SCnHLyqVPSorpK4Le1DYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a8:22:4d:a0:30:1b:bf:b9:83:07:63:42:99:c9:07:59:de: c8:98:d3:fc:dd:d4:66:23:c4:dd:f2:9c:de:1e:ef:bc:e3:be: 83:03:b3:27:0a:ec:17:82:7e:9b:e6:36:51:b9:34:84:31:79: 9c:cd:1c:6c:22:37:92:34:6d:84:4f:d7:58:be:4e:e2:65:85: fb:76:00:61:13:ba:fa:50:c7:e5:1e:1f:c6:2f:54:1e:6e:3e: 98:81:59:1a:d5:fc:02:9b:9e:0e:11:07:af:31:d9:f3:0b:64: 19:4a:df:45:41:97:c9:8c:c6:79:32:0f:fc:f3:fe:25:5c:93: 2b:9c:95:89:71:0c:80:24:dd:0c:f9:23:a4:42:95:0b:53:fe: 4a:43:51:91:80:62:78:e2:83:94:30:de:c6:09:34:95:16:d0: c3:34:8b:b9:d4:fd:f0:91:44:60:c9:e8:bf:bd:b7:80:27:71: 3a:d1:08:30:5b:1d:fd:aa:7f:49:a3:6b:26:67:1a:ca:03:27: 80:6d:e0:b8:b2:06:82:22:af:70:de:3d:f3:ae:fc:10:f2:e6: af:6f:02:79:98:14:25:5c:78:a1:00:6b:f1:1e:4f:87:01:2a: c7:6b:41:e2:3a:a1:2e:d8:75:c4:7d:2e:46:c0:51:ff:87:db: 5b:c9:34:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1rx9mK7tgUl+7PDLKmVMbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MDFjODlmNDQ4MjljNzJmMmE5NTNkMmEyYmE0YWUwYjdi NTBkOGEwHhcNMjUxMjA2MjIwMTI1WhcNMjUxMjA3MjIwMTI1WjAzMTEwLwYDVQQD EyhmM2M0MWY3ZTBkNDRjYjIxY2ZmZDA2ZWU1YWVkYWMzOTJmMDM5MTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaPjsyxWySZ69wblZDpXMgiFQvSe 0zGREDFUEAGNoSlZoLJfHO+RLSeOOEMJqfDaRugH0+NXpXU0fJVOTE+nhXFbk+db u3K/w5X5MeYTLk/d1tPCrCJZxmp7ZOjxf8B+KlTzB2hCgV1xlzdKFpswdncv9sVD yPwdjO3qvX2XD6FRjJp18rmnMvwVa1co5rblQSXqFXgmMEuHxTShIcZANjED1+2q cm1cOhumILiif/j8tOcWAdRCvcXwHZogTNcw21g+6+5M+VAxxVHANBr1ALCYqtau fjyAz0jJxiqfcREqvumNQnWMdcCC9Fvl1nn/Ljf9+aY91PDBm/1SKOxuPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPEH34NRMshz/0G7lrtrDkvA5EwMB8GA1UdIwQY MBaAFKUByJ9Egpxy8qlT0qK6SuC3tQ2KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQt MTRhMWViNTUxMmQ2LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC9kNWUxMDMtOTBiNS00NGYxLWI4NjQtMTRhMWViNTUxMmQ2 LzEvcFFISW4wU0NuSEx5cVZQU29ycEs0TGUxRFlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACagiTaAw G7+5gwdjQpnJB1neyJjT/N3UZiPE3fKc3h7vvOO+gwOzJwrsF4J+m+Y2Ubk0hDF5 nM0cbCI3kjRthE/XWL5O4mWF+3YAYRO6+lDH5R4fxi9UHm4+mIFZGtX8ApueDhEH rzHZ8wtkGUrfRUGXyYzGeTIP/PP+JVyTK5yViXEMgCTdDPkjpEKVC1P+SkNRkYBi eOKDlDDexgk0lRbQwzSLudT98JFEYMnov723gCdxOtEIMFsd/ap/SaNrJmcaygMn gG3guLIGgiKvcN498678EPLmr28CeZgUJVx4oQBr8R5PhwEqx2tB4jqhLth1xH0u RsBR/4fbW8k0/Q== -----END CERTIFICATE-----Generated at Sun Dec 7 01:50:23 2025 by rpki-client