This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft File: QmRGpKHLVrP3b-a03vq6072bUgc.mft (raw, json) Hash identifier: mKZ6BqBxrZeoD+SSDcL7jGxm7BnNsGbH8uq9QqKRNJ4= Subject key identifier: 39:2E:1B:1D:DC:6C:00:5A:1D:D4:A3:01:86:76:72:B5:27:2E:EB:27 Authority key identifier: 42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07 Certificate issuer: /CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207 Certificate serial: 019AF163D368BB61F0774550495F0B256EBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft Manifest number: 0CCF Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: QmRGpKHLVrP3b-a03vq6072bUgc.crl (hash: wxKq7m2vFpU+af5ZRnZpgHxu5rGrAzcvvoDR6+EKrnc=) 2: fFstVPrb_3K-jl7g58_b4ihHTfY.roa (hash: sDN8YMAsFynzsUb+KhP7tCE7b4tst1zO6K3vmsmzSlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d3:68:bb:61:f0:77:45:50:49:5f:0b:25:6e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426446a4a1cb56b3f76fe6b4defabad3bd9b5207 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=392e1b1ddc6c005a1dd4a301867672b5272eeb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:64:5d:ae:b5:9e:7a:19:5e:06:ce:68:4f:10: 86:7e:7d:0a:45:04:76:4f:b6:03:d5:b6:f2:ef:c7: 37:15:18:87:4b:6c:c4:04:ab:02:25:34:0b:bb:1d: 3b:f2:d4:f1:d3:f1:ac:d1:d0:30:d3:ed:e7:37:f2: c8:9e:b8:d5:61:d0:e6:68:48:04:05:e3:06:6d:f8: 6a:80:32:e1:97:d6:dd:19:0d:a6:2c:92:5e:dc:e5: 69:eb:0b:f1:af:78:d7:bd:96:2d:16:56:04:19:ad: 46:a3:2c:2b:2b:0a:14:b1:ab:8b:01:81:81:8c:cf: a8:2e:b7:c3:98:04:71:38:e3:4a:6d:c7:9b:4f:bb: c5:bf:b9:f9:26:6b:73:82:d3:cf:68:3e:af:a3:99: 7f:1c:36:fd:a2:31:bf:8f:44:46:7f:36:bb:39:e1: c6:17:41:8d:13:1e:d9:a1:6e:06:8d:96:e4:aa:3c: b1:79:c8:6d:f7:8b:4c:fd:c2:68:14:d7:d9:91:16: 67:c4:64:28:15:92:54:54:96:33:58:86:65:82:a5: 2c:54:d8:05:5a:9c:a2:a3:ed:a7:84:48:40:d3:39: 12:19:a0:0e:22:e0:f9:85:9e:59:5c:40:d0:cf:c1: 09:d3:9a:1e:4c:8a:4f:b3:7c:fe:89:6b:cc:0c:ed: 1f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:2E:1B:1D:DC:6C:00:5A:1D:D4:A3:01:86:76:72:B5:27:2E:EB:27 X509v3 Authority Key Identifier: keyid:42:64:46:A4:A1:CB:56:B3:F7:6F:E6:B4:DE:FA:BA:D3:BD:9B:52:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmRGpKHLVrP3b-a03vq6072bUgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/2610af-e856-4828-a6ea-ede0282f9bb9/1/QmRGpKHLVrP3b-a03vq6072bUgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f5:13:f7:59:4d:06:94:cf:32:65:81:fe:6e:d9:aa:07:c0: f0:9f:d1:4a:68:59:72:4e:1f:dc:79:f5:b9:e7:ed:63:6f:82: 8a:10:76:97:85:f7:b9:35:a6:71:ef:d1:db:cc:3f:89:36:80: ab:92:ea:9a:4b:91:e1:11:65:a7:5a:43:0a:3c:81:9b:50:57: f2:bf:80:68:71:1b:4f:d0:14:3c:1d:7f:04:4c:c4:5c:3a:04: 5d:4a:20:6c:fd:8a:b1:25:bd:19:c8:a9:58:7e:92:ad:70:27: 40:96:97:ca:79:dc:6e:41:64:49:8b:2b:d6:0e:b2:5e:61:3d: 0b:be:06:eb:ae:e6:d9:00:dc:d9:64:e4:23:cc:77:58:18:b0: 15:f8:89:04:5f:ca:f3:62:66:2e:1f:05:69:da:1d:59:b7:c6: dc:a8:f1:03:bb:36:2a:c9:1e:5a:d2:8b:ac:7f:c6:4e:17:23: 71:3a:e9:d6:60:67:12:5b:af:41:3a:2c:6a:a0:7f:e2:2b:29: 8a:d5:3a:7f:40:e7:8f:64:ef:9c:31:16:45:f7:00:3c:31:3b: 75:9e:8f:20:39:15:48:ee:90:3e:f7:3b:7f:db:0f:84:56:8a: 7f:8a:9e:49:99:06:5f:18:bf:96:33:fb:38:9f:12:0c:32:d4: ea:60:92:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9Nou2Hwd0VQSV8LJW6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNjQ0NmE0YTFjYjU2YjNmNzZmZTZiNGRlZmFiYWQzYmQ5 YjUyMDcwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EygzOTJlMWIxZGRjNmMwMDVhMWRkNGEzMDE4Njc2NzJiNTI3MmVlYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGRdrrWeehleBs5oTxCGfn0KRQR2 T7YD1bby78c3FRiHS2zEBKsCJTQLux078tTx0/Gs0dAw0+3nN/LInrjVYdDmaEgE BeMGbfhqgDLhl9bdGQ2mLJJe3OVp6wvxr3jXvZYtFlYEGa1GoywrKwoUsauLAYGB jM+oLrfDmARxOONKbcebT7vFv7n5JmtzgtPPaD6vo5l/HDb9ojG/j0RGfza7OeHG F0GNEx7ZoW4GjZbkqjyxecht94tM/cJoFNfZkRZnxGQoFZJUVJYzWIZlgqUsVNgF Wpyio+2nhEhA0zkSGaAOIuD5hZ5ZXEDQz8EJ05oeTIpPs3z+iWvMDO0fJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDkuGx3cbABaHdSjAYZ2crUnLusnMB8GA1UdIwQY MBaAFEJkRqShy1az92/mtN76utO9m1IHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEt ZWRlMDI4MmY5YmI5LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8yNjEwYWYtZTg1Ni00ODI4LWE2ZWEtZWRlMDI4MmY5YmI5 LzEvUW1SR3BLSExWclAzYi1hMDN2cTYwNzJiVWdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvUT91lN BpTPMmWB/m7ZqgfA8J/RSmhZck4f3Hn1ueftY2+CihB2l4X3uTWmce/R28w/iTaA q5LqmkuR4RFlp1pDCjyBm1BX8r+AaHEbT9AUPB1/BEzEXDoEXUogbP2KsSW9Gcip WH6SrXAnQJaXynncbkFkSYsr1g6yXmE9C74G667m2QDc2WTkI8x3WBiwFfiJBF/K 82JmLh8FadodWbfG3KjxA7s2KskeWtKLrH/GThcjcTrp1mBnEluvQTosaqB/4isp itU6f0Dnj2TvnDEWRfcAPDE7dZ6PIDkVSO6QPvc7f9sPhFaKf4qeSZkGXxi/ljP7 OJ8SDDLU6mCSdw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:08:58 2025 by rpki-client