This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft File: 0xQt8vZwlAzPWksnoNDJh-zIhlY.mft (raw, json) Hash identifier: yx/CAHOmLNHkw05+rCYV1Fz93JHESjtWOw7XVGLQ62I= Subject key identifier: 40:EE:D2:A1:88:B4:DA:3C:C1:D3:F4:20:3A:B0:05:23:7C:72:6E:50 Authority key identifier: D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 Certificate issuer: /CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Certificate serial: 019AF1D1F3C4D76AB29F961CAFF14FC51918 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft Manifest number: 0472 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: 0xQt8vZwlAzPWksnoNDJh-zIhlY.crl (hash: fVNQF1e3Wt76VwaoVu1Ln6H3vW33B848ZLSGJXzeayo=) 2: DxWkaJkNeo1GnfX8PTB6m_7NDo8.roa (hash: 1C13Qsc+uAlJmXy/kak788lVFXMyWIaA+AZiv7RcjGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f3:c4:d7:6a:b2:9f:96:1c:af:f1:4f:c5:19:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3142df2f670940ccf5a4b27a0d0c987ecc88656 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=40eed2a188b4da3cc1d3f4203ab005237c726e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fe:55:46:67:68:a2:ee:16:73:39:cc:9f:36: bd:15:6c:cd:e0:2c:b4:ad:0a:d6:41:5d:60:ae:b8: db:e7:77:75:eb:17:50:db:d6:03:c1:80:c2:fe:72: 52:60:22:6e:01:b7:a3:e3:00:c2:d2:eb:2b:c8:cb: 0d:e5:e9:d7:86:f7:22:f7:11:7b:7e:4c:08:19:d1: d3:d4:19:f1:f9:20:50:ac:a4:1c:b7:0b:86:83:e6: b2:50:3a:32:42:61:ba:e9:7e:46:e8:f9:a6:75:e3: 79:62:5e:69:cc:dd:79:64:eb:cf:0b:cb:3a:f4:55: ec:3c:c1:b3:14:4c:9e:09:37:67:72:4d:b1:f1:b1: e0:84:82:34:83:f4:75:c1:03:7c:e7:99:b5:b3:96: 63:99:ba:2b:51:0a:15:c8:f9:78:43:6d:78:60:fa: ee:e1:32:5e:3f:53:d9:4e:4f:dd:1c:8f:9e:35:1b: 62:18:e8:a8:b0:f3:07:d4:98:f5:e8:17:3e:25:ca: 52:5a:b5:32:4a:83:3b:a8:64:5f:3d:4c:53:ea:6c: 32:95:b8:b0:60:44:b3:9f:ed:78:f6:bd:14:55:bc: a6:01:c7:bc:b1:e0:a0:c5:2e:98:d1:3b:48:ce:77: 2e:c1:41:1a:25:03:80:74:cf:72:f3:01:25:28:48: d7:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:D2:A1:88:B4:DA:3C:C1:D3:F4:20:3A:B0:05:23:7C:72:6E:50 X509v3 Authority Key Identifier: keyid:D3:14:2D:F2:F6:70:94:0C:CF:5A:4B:27:A0:D0:C9:87:EC:C8:86:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xQt8vZwlAzPWksnoNDJh-zIhlY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ec39be-e227-4a2d-b4b2-632caeef4584/1/0xQt8vZwlAzPWksnoNDJh-zIhlY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a5:f1:f3:ac:fc:09:86:d1:14:af:f3:f8:3d:e0:ee:ba:21: 8d:1c:d5:69:d8:34:fd:a5:c6:f1:c9:68:56:85:50:12:3d:cd: 4b:41:b7:69:02:cd:5e:8d:f6:af:bf:b9:cb:64:92:55:20:19: 8c:df:da:ae:65:88:db:a3:97:27:06:ec:b9:80:70:aa:84:a5: a3:f5:a3:b7:7b:53:fa:06:2d:fa:81:2d:64:20:c4:8f:cb:53: 73:58:81:f4:2a:38:7a:5f:a5:d6:7f:3b:a1:b5:3c:97:11:d6: ff:ff:e9:91:12:38:54:6a:f8:1c:8c:c1:11:fe:e1:f8:f0:8a: 88:08:0b:b3:65:cf:ee:f2:74:40:22:99:b5:c8:51:e0:35:3e: 23:39:a7:96:9a:74:36:f3:44:1a:d8:cb:33:ac:1e:e6:9f:67: 18:71:44:72:84:20:53:09:27:fb:ee:75:0c:67:c3:fe:df:ff: c2:89:15:05:54:6e:eb:0d:19:ab:9e:06:db:88:8f:aa:d0:7a: 72:28:ff:f5:6c:dc:d1:52:7e:83:99:46:25:87:a9:b9:51:a1: d9:d8:16:80:8d:2c:b3:fc:d3:27:38:e7:80:8f:9b:a2:63:ff: b9:ba:a3:0e:46:db:d3:4a:54:2d:e3:6c:43:31:fb:61:58:43: 70:18:92:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fPE12qyn5Ycr/FPxRkYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMTQyZGYyZjY3MDk0MGNjZjVhNGIyN2EwZDBjOTg3ZWNj ODg2NTYwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg0MGVlZDJhMTg4YjRkYTNjYzFkM2Y0MjAzYWIwMDUyMzdjNzI2ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP5VRmdoou4WcznMnza9FWzN4Cy0 rQrWQV1grrjb53d16xdQ29YDwYDC/nJSYCJuAbej4wDC0usryMsN5enXhvci9xF7 fkwIGdHT1Bnx+SBQrKQctwuGg+ayUDoyQmG66X5G6PmmdeN5Yl5pzN15ZOvPC8s6 9FXsPMGzFEyeCTdnck2x8bHghII0g/R1wQN855m1s5ZjmborUQoVyPl4Q214YPru 4TJeP1PZTk/dHI+eNRtiGOiosPMH1Jj16Bc+JcpSWrUySoM7qGRfPUxT6mwylbiw YESzn+149r0UVbymAce8seCgxS6Y0TtIzncuwUEaJQOAdM9y8wElKEjXBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDu0qGItNo8wdP0IDqwBSN8cm5QMB8GA1UdIwQY MBaAFNMULfL2cJQMz1pLJ6DQyYfsyIZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjIt NjMyY2FlZWY0NTg0LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9lYzM5YmUtZTIyNy00YTJkLWI0YjItNjMyY2FlZWY0NTg0 LzEvMHhRdDh2WndsQXpQV2tzbm9OREpoLXpJaGxZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6Xx86z8 CYbRFK/z+D3g7rohjRzVadg0/aXG8cloVoVQEj3NS0G3aQLNXo32r7+5y2SSVSAZ jN/armWI26OXJwbsuYBwqoSlo/Wjt3tT+gYt+oEtZCDEj8tTc1iB9Co4el+l1n87 obU8lxHW///pkRI4VGr4HIzBEf7h+PCKiAgLs2XP7vJ0QCKZtchR4DU+Izmnlpp0 NvNEGtjLM6we5p9nGHFEcoQgUwkn++51DGfD/t//wokVBVRu6w0Zq54G24iPqtB6 cij/9Wzc0VJ+g5lGJYepuVGh2dgWgI0ss/zTJzjngI+bomP/ubqjDkbb00pULeNs QzH7YVhDcBiSFw== -----END CERTIFICATE-----Generated at Sat Dec 6 10:07:00 2025 by rpki-client