This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft File: qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft (raw, json) Hash identifier: hiDA627cfnq38WRnBwv7BfbZlQ7qgdfTqet0FFpaCsE= Subject key identifier: 3E:B3:47:1D:EE:14:F8:D9:3D:F9:8C:74:66:80:1E:4A:D4:AA:0B:B5 Authority key identifier: A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 Certificate issuer: /CN=a83084a09eddcf556d19b3b7355c9defe0a278f5 Certificate serial: 019AF389A83308260A820066AC6E9F0F9497 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft Manifest number: 0CBD Signing time: Sat 06 Dec 2025 12:01:16 +0000 Manifest this update: Sat 06 Dec 2025 12:01:16 +0000 Manifest next update: Sun 07 Dec 2025 12:01:16 +0000 Files and hashes: 1: FHgmJVzT42MAfIzapVC9e2NA_iY.roa (hash: ZFuf9CA7YgoKL9WKUlfIU4bCNAlr9XJKo81l94myN/w=) 2: qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl (hash: KUtZM61dV548G6X/j+3kC+DdBffBcfReFUfKfB8Rikc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:a8:33:08:26:0a:82:00:66:ac:6e:9f:0f:94:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a83084a09eddcf556d19b3b7355c9defe0a278f5 Validity Not Before: Dec 6 12:01:16 2025 GMT Not After : Dec 7 12:01:16 2025 GMT Subject: CN=3eb3471dee14f8d93df98c7466801e4ad4aa0bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:77:0a:67:01:ff:dc:56:5a:83:45:dc:17:d5: 02:a9:d7:3e:81:c6:f0:57:5b:a1:d2:bd:43:d9:19: db:03:e0:15:34:50:14:9f:cb:32:61:97:e9:32:6c: 6b:4f:db:5b:fa:bc:9f:b5:0c:55:8e:f3:f4:a6:fa: 86:97:61:9a:f3:38:b3:77:b9:ce:d5:c1:21:15:0d: ee:94:61:34:d7:44:1f:bd:17:47:e1:4c:28:23:53: b3:cb:fd:52:6c:dd:b9:87:04:e8:e5:da:16:fa:19: d9:f1:53:58:fc:67:28:cd:4f:2d:32:89:c4:25:0b: 78:46:91:32:69:09:09:bd:89:75:9e:5b:d9:46:6c: b9:f3:99:48:46:e6:b8:b5:b1:bb:d8:8e:e7:47:1a: a5:c5:49:ea:b3:5a:c1:3b:c0:33:0f:d8:82:da:70: 7f:d4:d0:cb:4c:5e:08:eb:f5:87:9c:70:58:6a:89: 2d:0d:b9:89:c6:95:bb:65:ff:12:d2:94:d6:c7:53: 72:18:f0:4a:d0:d4:40:e7:ed:cf:91:15:89:59:4b: bb:0b:b3:8b:f8:b9:33:b9:45:5e:e7:dd:b8:3a:5b: 9f:de:0b:0b:df:73:3f:39:b5:d4:7f:c1:c1:08:56: 21:3f:59:14:cf:22:88:8a:78:14:fa:e3:6d:a9:1a: c1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B3:47:1D:EE:14:F8:D9:3D:F9:8C:74:66:80:1E:4A:D4:AA:0B:B5 X509v3 Authority Key Identifier: keyid:A8:30:84:A0:9E:DD:CF:55:6D:19:B3:B7:35:5C:9D:EF:E0:A2:78:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDCEoJ7dz1VtGbO3NVyd7-CiePU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0217e6-d2c3-46f8-8e49-3f1439a15f1b/1/qDCEoJ7dz1VtGbO3NVyd7-CiePU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:44:9a:b3:7f:bc:dc:62:51:9e:e4:d6:17:da:ea:40:33:98: bd:5f:58:8c:67:48:84:7d:19:75:52:c1:da:a7:4e:18:ca:31: 1d:81:b8:5f:7e:91:9d:47:e1:97:96:30:38:dd:5b:2a:9d:79: 49:53:1f:dc:ef:40:bc:e7:cc:93:83:e8:63:b1:fc:50:ed:83: c2:74:1b:8d:6b:1a:5b:e1:3c:be:ab:ab:12:61:f0:45:e4:78: 76:02:98:02:58:c8:78:07:54:8d:9e:b7:8f:5f:f6:ee:8f:56: e7:5b:79:f1:15:9d:9f:89:ab:09:7d:17:85:37:a4:0c:06:3d: 99:14:07:99:a0:6c:4c:81:d8:ee:ac:34:00:5f:82:57:a3:09: 1e:83:85:b0:60:3a:76:96:3b:61:5b:10:a6:11:1c:ed:02:82: 57:9c:61:6e:6b:fa:b4:c2:14:83:6e:a8:ac:b7:d1:31:9c:ee: 34:fe:95:18:ab:b3:c8:ad:af:26:d4:1c:d9:25:d6:cf:dc:0f: 9a:27:f1:5b:ce:84:fc:87:4e:3a:e6:c6:3b:f0:c6:6e:0a:a2: 0c:d2:94:84:06:94:f7:bd:2a:9c:2d:64:5b:85:dd:36:0c:f7: a5:c8:0d:08:69:b9:29:82:4d:98:76:12:9d:38:4f:20:68:21: ac:2c:62:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziagzCCYKggBmrG6fD5SXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzA4NGEwOWVkZGNmNTU2ZDE5YjNiNzM1NWM5ZGVmZTBh Mjc4ZjUwHhcNMjUxMjA2MTIwMTE2WhcNMjUxMjA3MTIwMTE2WjAzMTEwLwYDVQQD EygzZWIzNDcxZGVlMTRmOGQ5M2RmOThjNzQ2NjgwMWU0YWQ0YWEwYmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3cKZwH/3FZag0XcF9UCqdc+gcbw V1uh0r1D2RnbA+AVNFAUn8syYZfpMmxrT9tb+ryftQxVjvP0pvqGl2Ga8zizd7nO 1cEhFQ3ulGE010QfvRdH4UwoI1Ozy/1SbN25hwTo5doW+hnZ8VNY/GcozU8tMonE JQt4RpEyaQkJvYl1nlvZRmy585lIRua4tbG72I7nRxqlxUnqs1rBO8AzD9iC2nB/ 1NDLTF4I6/WHnHBYaoktDbmJxpW7Zf8S0pTWx1NyGPBK0NRA5+3PkRWJWUu7C7OL +LkzuUVe5924Oluf3gsL33M/ObXUf8HBCFYhP1kUzyKIingU+uNtqRrBJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD6zRx3uFPjZPfmMdGaAHkrUqgu1MB8GA1UdIwQY MBaAFKgwhKCe3c9VbRmztzVcne/gonj1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDkt M2YxNDM5YTE1ZjFiLzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8wMjE3ZTYtZDJjMy00NmY4LThlNDktM2YxNDM5YTE1ZjFi LzEvcURDRW9KN2R6MVZ0R2JPM05WeWQ3LUNpZVBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYUSas3+8 3GJRnuTWF9rqQDOYvV9YjGdIhH0ZdVLB2qdOGMoxHYG4X36RnUfhl5YwON1bKp15 SVMf3O9AvOfMk4PoY7H8UO2DwnQbjWsaW+E8vqurEmHwReR4dgKYAljIeAdUjZ63 j1/27o9W51t58RWdn4mrCX0XhTekDAY9mRQHmaBsTIHY7qw0AF+CV6MJHoOFsGA6 dpY7YVsQphEc7QKCV5xhbmv6tMIUg26orLfRMZzuNP6VGKuzyK2vJtQc2SXWz9wP mifxW86E/IdOOubGO/DGbgqiDNKUhAaU970qnC1kW4XdNgz3pcgNCGm5KYJNmHYS nThPIGghrCxixQ== -----END CERTIFICATE-----Generated at Sat Dec 6 14:33:55 2025 by rpki-client