This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft File: q3dzqhxxoCJlFGujNszC5Y3q24g.mft (raw, json) Hash identifier: yriLOdK9ZYj/MCMP9bkBf5S6dSrVdNOSJuYzOx2a7Y8= Subject key identifier: 52:C7:38:57:F5:AF:24:F9:04:B2:12:5A:50:88:9A:01:5F:F0:67:8B Authority key identifier: AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 Certificate issuer: /CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Certificate serial: 019AF465A9B1BE647760DD6674EFA667FE8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 16:01:34 +0000 Manifest this update: Sat 06 Dec 2025 16:01:34 +0000 Manifest next update: Sun 07 Dec 2025 16:01:34 +0000 Files and hashes: 1: cyFUaiualt3wMiC5gtz5aMOvlGc.roa (hash: RoAUS0DbrFV1sDA69agJ/hjEE06MIOfXgztHL0bgXao=) 2: q3dzqhxxoCJlFGujNszC5Y3q24g.crl (hash: QghO0CKPrwyMZFRqeBIhP24rlPAbYxoXmU9iD7OXU+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:a9:b1:be:64:77:60:dd:66:74:ef:a6:67:fe:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab7773aa1c71a02265146ba336ccc2e58deadb88 Validity Not Before: Dec 6 16:01:34 2025 GMT Not After : Dec 7 16:01:34 2025 GMT Subject: CN=52c73857f5af24f904b2125a50889a015ff0678b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4d:78:e8:e4:08:84:bf:e1:9a:cb:95:59:f0: 86:d2:bb:49:b8:0e:95:a8:36:70:59:23:10:93:c0: e4:5e:ca:a7:f4:50:02:7c:99:d5:34:9c:42:2a:66: 82:f1:b8:c4:18:a3:2f:81:66:e2:f3:b8:78:d2:62: 03:bf:ea:b9:52:8b:a0:1a:14:3c:c2:34:4a:7a:c4: aa:54:8e:5f:d7:20:34:a9:62:c7:78:fc:3b:9a:04: b7:96:62:37:39:50:7a:3d:94:7d:e6:63:2c:61:d7: c2:f9:e7:80:b4:ae:ae:d7:20:82:80:2b:27:80:e4: b3:f2:e5:76:f4:85:8d:42:db:92:ed:d5:7e:8b:1d: f2:9a:53:4c:ca:d5:48:e6:cd:3f:a2:40:ae:d1:aa: 2b:c3:4a:b7:0b:f2:cb:88:87:1b:c6:43:b6:8b:b9: a6:61:77:13:82:81:ac:bc:73:6b:ca:c8:48:48:62: b9:41:de:9c:d0:70:10:1c:89:92:0a:cf:91:84:0a: 39:6f:6f:7d:b5:9c:d9:1a:29:e2:f3:3f:d0:09:91: 42:34:71:88:21:78:1a:14:20:b5:95:df:eb:97:4a: 07:0a:de:2d:c6:89:97:9a:51:57:c0:26:7a:e0:70: f7:94:d4:06:de:30:4f:f3:8b:3f:92:13:35:e5:15: fd:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:C7:38:57:F5:AF:24:F9:04:B2:12:5A:50:88:9A:01:5F:F0:67:8B X509v3 Authority Key Identifier: keyid:AB:77:73:AA:1C:71:A0:22:65:14:6B:A3:36:CC:C2:E5:8D:EA:DB:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3dzqhxxoCJlFGujNszC5Y3q24g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/01f997-f027-4a3a-8552-e6dfba1df230/1/q3dzqhxxoCJlFGujNszC5Y3q24g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:6e:46:2b:22:43:6d:f9:56:f3:f2:cc:d5:0d:ec:63:2f:73: 9e:88:54:39:57:7b:6d:91:38:88:83:cd:e6:22:27:2f:a0:37: 12:c5:fc:0d:fa:6b:54:74:36:e2:88:bf:1c:37:f3:17:f3:ef: 68:b3:ea:fa:ce:a1:98:1b:be:71:40:a7:34:01:dd:79:c1:67: 5a:95:af:71:e4:08:19:96:af:e2:48:b1:c0:58:08:60:aa:6e: e9:4b:60:66:9a:f6:26:cd:fa:1f:52:0c:07:50:95:21:43:0b: ae:b1:f4:0f:c4:bb:3c:85:b2:c8:34:3c:41:5f:52:5e:c3:9f: 97:d3:b8:73:23:ca:60:8e:f7:a2:88:f4:43:78:f1:2f:1a:17: 94:bf:f1:5b:20:1f:84:33:68:5c:99:9c:45:3c:55:6a:30:ac: eb:c0:ce:5d:3b:e0:e2:12:2b:37:ed:af:79:0b:bd:38:97:29: 14:fa:90:c8:a0:3c:e5:ad:1f:d5:b8:ce:77:77:23:94:f7:e7: c1:d0:b9:e2:e0:0f:fe:34:17:e5:54:f8:44:c3:71:3d:30:92: 76:24:3c:c4:a5:56:8b:47:fd:34:4e:3a:a2:8c:af:a4:d8:aa: 3f:e4:79:f3:ff:36:e6:9b:63:4f:04:0c:88:ca:de:f9:c5:24: af:64:25:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZamxvmR3YN1mdO+mZ/6LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNzc3M2FhMWM3MWEwMjI2NTE0NmJhMzM2Y2NjMmU1OGRl YWRiODgwHhcNMjUxMjA2MTYwMTM0WhcNMjUxMjA3MTYwMTM0WjAzMTEwLwYDVQQD Eyg1MmM3Mzg1N2Y1YWYyNGY5MDRiMjEyNWE1MDg4OWEwMTVmZjA2NzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE146OQIhL/hmsuVWfCG0rtJuA6V qDZwWSMQk8DkXsqn9FACfJnVNJxCKmaC8bjEGKMvgWbi87h40mIDv+q5UougGhQ8 wjRKesSqVI5f1yA0qWLHePw7mgS3lmI3OVB6PZR95mMsYdfC+eeAtK6u1yCCgCsn gOSz8uV29IWNQtuS7dV+ix3ymlNMytVI5s0/okCu0aorw0q3C/LLiIcbxkO2i7mm YXcTgoGsvHNryshISGK5Qd6c0HAQHImSCs+RhAo5b299tZzZGini8z/QCZFCNHGI IXgaFCC1ld/rl0oHCt4txomXmlFXwCZ64HD3lNQG3jBP84s/khM15RX9TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFLHOFf1ryT5BLISWlCImgFf8GeLMB8GA1UdIwQY MBaAFKt3c6occaAiZRRrozbMwuWN6tuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTIt ZTZkZmJhMWRmMjMwLzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS8wMWY5OTctZjAyNy00YTNhLTg1NTItZTZkZmJhMWRmMjMw LzEvcTNkenFoeHhvQ0psRkd1ak5zekM1WTNxMjRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYm5GKyJD bflW8/LM1Q3sYy9znohUOVd7bZE4iIPN5iInL6A3EsX8DfprVHQ24oi/HDfzF/Pv aLPq+s6hmBu+cUCnNAHdecFnWpWvceQIGZav4kixwFgIYKpu6UtgZpr2Js36H1IM B1CVIUMLrrH0D8S7PIWyyDQ8QV9SXsOfl9O4cyPKYI73ooj0Q3jxLxoXlL/xWyAf hDNoXJmcRTxVajCs68DOXTvg4hIrN+2veQu9OJcpFPqQyKA85a0f1bjOd3cjlPfn wdC54uAP/jQX5VT4RMNxPTCSdiQ8xKVWi0f9NE46ooyvpNiqP+R58/825ptjTwQM iMre+cUkr2QlIQ== -----END CERTIFICATE-----Generated at Sat Dec 6 18:18:41 2025 by rpki-client