This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft File: 0qurdedG2x7KqZh1mQA5lIUJMCc.mft (raw, json) Hash identifier: cN36Ku5In7HJKOvFJ8mtxtN1rlBeYzLX/7BU9v9TRuY= Subject key identifier: 0E:90:8C:23:7F:D8:A9:07:77:00:D5:6B:8A:3D:BD:D6:35:35:F0:E2 Authority key identifier: D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 Certificate issuer: /CN=d2abab75e746db1ecaa998759900399485093027 Certificate serial: 019AF2ADF1D18650E01396AE521855FF317F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft Manifest number: 0EEF Signing time: Sat 06 Dec 2025 08:01:17 +0000 Manifest this update: Sat 06 Dec 2025 08:01:17 +0000 Manifest next update: Sun 07 Dec 2025 08:01:17 +0000 Files and hashes: 1: 0qurdedG2x7KqZh1mQA5lIUJMCc.crl (hash: 6qKFzLnvJhnwxf0P0ru9T+uZWZ1VUxB+KnRWP3s6xfY=) 2: 2cTr93XSpmWbM-qTTud8CZ5Sh1I.roa (hash: Ox67FMktxFvYuYpHVpuT5WkOs/dH1k6Q6zB500ivOTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:f1:d1:86:50:e0:13:96:ae:52:18:55:ff:31:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2abab75e746db1ecaa998759900399485093027 Validity Not Before: Dec 6 08:01:17 2025 GMT Not After : Dec 7 08:01:17 2025 GMT Subject: CN=0e908c237fd8a9077700d56b8a3dbdd63535f0e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:eb:47:66:de:a7:20:a7:a2:06:a8:5d:fc:5e: 26:1c:26:ee:42:cb:6e:f4:f8:19:c9:20:16:93:76: 72:2d:90:22:ed:67:4b:a7:d1:89:6d:f4:ed:ae:79: ee:52:f9:93:9e:ad:65:98:02:01:cd:28:d4:a8:d3: 33:03:0c:15:00:2d:03:3f:1a:30:53:f2:78:c1:7f: 02:1a:ce:35:9d:ac:46:b7:5f:86:48:f1:ff:15:fd: 6c:db:c3:2f:d2:a9:92:c1:14:b7:8e:36:2d:bc:73: 4c:8b:da:f5:29:e7:52:e4:71:da:e3:54:57:00:9e: d7:62:28:54:b7:94:a4:79:ea:94:9e:74:34:41:1a: 11:96:f4:29:16:9c:6b:2e:8b:3a:e8:32:88:e5:72: be:86:4a:1f:65:fa:d7:43:fa:1b:ce:64:34:aa:34: 2d:aa:a9:46:62:63:f3:53:64:3d:8e:c2:4e:87:97: f5:2d:58:0b:a2:16:e6:34:fa:1e:e1:1d:8d:13:00: 17:a4:a0:b2:b6:af:90:df:51:68:e3:d1:1a:7d:9d: 24:5b:cf:9c:d2:5f:fa:27:e7:29:57:d0:c1:c9:60: 5a:67:ca:cd:8a:4c:bf:bb:91:6c:0a:59:71:86:f3: fb:a6:b2:1b:34:af:84:7e:64:df:fd:61:71:d9:97: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:8C:23:7F:D8:A9:07:77:00:D5:6B:8A:3D:BD:D6:35:35:F0:E2 X509v3 Authority Key Identifier: keyid:D2:AB:AB:75:E7:46:DB:1E:CA:A9:98:75:99:00:39:94:85:09:30:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qurdedG2x7KqZh1mQA5lIUJMCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/6e22f4-17b7-4f2c-956d-595adc5bfd74/1/0qurdedG2x7KqZh1mQA5lIUJMCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:90:1e:ef:e4:11:86:b3:83:e2:c3:7a:cf:e5:91:8a:dc:0f: 97:61:84:70:11:81:e9:39:2a:5d:46:0f:f0:54:8f:e7:62:d3: de:58:04:2b:59:5c:7f:fc:22:a9:3c:94:74:2a:d0:e0:29:81: 30:d4:1c:63:20:69:f1:e4:ba:e8:d3:37:ff:a4:e3:f0:af:d7: 15:f8:3c:1a:e7:01:5b:a5:ab:ad:06:d0:a5:89:98:ab:2b:b7: ce:50:f3:ac:07:3d:ce:f6:17:bd:6f:71:2f:03:11:5a:5c:97: b0:8d:77:6b:ff:e4:26:aa:51:6c:7a:b2:a8:8b:ec:e7:fd:df: 97:7f:76:fe:3f:c0:99:9e:3c:1e:bd:e9:2c:68:ee:73:87:b5: 53:74:c9:2a:40:11:ef:a7:2a:d5:2a:fd:bc:3a:c6:8a:4e:b5: ea:68:88:d5:b4:31:eb:a4:f4:36:1c:90:dd:d4:4e:8e:b8:cf: 74:43:3d:b7:58:50:a1:91:27:5d:b1:68:2d:71:67:ad:d5:ef: f4:bc:e6:b3:d0:f3:0a:03:ab:86:27:ac:4c:62:95:a1:20:c2: 06:b7:63:34:74:09:29:8c:5a:24:73:2f:ac:e7:e9:7c:77:52: 8b:c3:8a:48:7e:30:90:a3:7d:ea:cd:c9:14:8f:d2:c6:54:06: 5d:78:68:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrfHRhlDgE5auUhhV/zF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyYWJhYjc1ZTc0NmRiMWVjYWE5OTg3NTk5MDAzOTk0ODUw OTMwMjcwHhcNMjUxMjA2MDgwMTE3WhcNMjUxMjA3MDgwMTE3WjAzMTEwLwYDVQQD EygwZTkwOGMyMzdmZDhhOTA3NzcwMGQ1NmI4YTNkYmRkNjM1MzVmMGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+tHZt6nIKeiBqhd/F4mHCbuQstu 9PgZySAWk3ZyLZAi7WdLp9GJbfTtrnnuUvmTnq1lmAIBzSjUqNMzAwwVAC0DPxow U/J4wX8CGs41naxGt1+GSPH/Ff1s28Mv0qmSwRS3jjYtvHNMi9r1KedS5HHa41RX AJ7XYihUt5SkeeqUnnQ0QRoRlvQpFpxrLos66DKI5XK+hkofZfrXQ/obzmQ0qjQt qqlGYmPzU2Q9jsJOh5f1LVgLohbmNPoe4R2NEwAXpKCytq+Q31Fo49EafZ0kW8+c 0l/6J+cpV9DByWBaZ8rNiky/u5FsCllxhvP7prIbNK+EfmTf/WFx2ZeNDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6QjCN/2KkHdwDVa4o9vdY1NfDiMB8GA1UdIwQY MBaAFNKrq3XnRtseyqmYdZkAOZSFCTAnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQt NTk1YWRjNWJmZDc0LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS82ZTIyZjQtMTdiNy00ZjJjLTk1NmQtNTk1YWRjNWJmZDc0 LzEvMHF1cmRlZEcyeDdLcVpoMW1RQTVsSVVKTUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMJAe7+QR hrOD4sN6z+WRitwPl2GEcBGB6TkqXUYP8FSP52LT3lgEK1lcf/wiqTyUdCrQ4CmB MNQcYyBp8eS66NM3/6Tj8K/XFfg8GucBW6WrrQbQpYmYqyu3zlDzrAc9zvYXvW9x LwMRWlyXsI13a//kJqpRbHqyqIvs5/3fl392/j/AmZ48Hr3pLGjuc4e1U3TJKkAR 76cq1Sr9vDrGik616miI1bQx66T0NhyQ3dROjrjPdEM9t1hQoZEnXbFoLXFnrdXv 9Lzms9DzCgOrhiesTGKVoSDCBrdjNHQJKYxaJHMvrOfpfHdSi8OKSH4wkKN96s3J FI/SxlQGXXhoqQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:58:33 2025 by rpki-client