This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json) Hash identifier: qDz4sIqRgzG+G3M1e3ySODh612GlfdpjqD4ehpZrq74= Subject key identifier: 23:F9:32:16:C5:9A:54:1B:ED:E6:EB:10:14:C5:52:8A:2F:71:12:04 Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Certificate serial: 019B34C4BFE2F43A8CA277D5FDB64502DC47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft Manifest number: 0A4B Signing time: Fri 19 Dec 2025 04:01:08 +0000 Manifest this update: Fri 19 Dec 2025 04:01:08 +0000 Manifest next update: Sat 20 Dec 2025 04:01:08 +0000 Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: r+r7fnjyNZkkGMjz4n99qaPFjsaFV/RnUIvZEiJ0hc4=) 2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:c4:bf:e2:f4:3a:8c:a2:77:d5:fd:b6:45:02:dc:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Validity Not Before: Dec 19 04:01:08 2025 GMT Not After : Dec 20 04:01:08 2025 GMT Subject: CN=23f93216c59a541bede6eb1014c5528a2f711204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:c4:f6:d6:0a:56:fc:4f:a0:a1:d8:12:7a:55: 92:5d:74:33:4c:fd:27:af:52:d9:a2:65:12:8e:8e: 3e:f7:43:56:5d:8d:dd:d8:82:43:fb:d6:3b:8e:bc: 39:b5:53:cb:69:ca:fd:5b:99:b8:4c:1b:b4:4d:9d: e0:a3:0c:84:1a:0f:4e:ca:a5:ec:5a:95:c7:d4:b5: f5:43:0e:84:66:41:f5:d3:68:de:6a:fa:8e:55:0e: 11:25:19:81:b8:b3:91:03:6a:af:56:6c:91:0d:51: 84:d6:e3:ec:b9:6c:3e:cf:7c:0e:b5:a3:a9:f3:b0: 56:35:0f:e7:5f:88:1d:3c:4c:db:27:b8:bf:2c:c4: 76:eb:2f:f6:e9:3f:06:6f:b4:4a:e2:27:33:48:f2: c9:be:58:b5:65:d3:4a:75:f1:eb:51:04:2a:5f:10: 4e:a4:35:94:15:0c:2b:8c:7c:b4:dd:82:37:07:74: d6:75:25:5a:61:0b:dc:97:56:06:73:d9:df:99:e4: cc:51:63:76:29:34:6d:63:a9:22:85:4f:a0:36:3e: 45:c3:83:f3:cb:e3:c1:3b:57:46:5b:b5:96:63:df: 9a:4e:37:62:29:6d:f2:68:e3:87:96:20:7b:3c:8d: a1:8b:cd:70:29:6e:96:ad:b7:c6:82:1e:aa:1c:b6: 76:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F9:32:16:C5:9A:54:1B:ED:E6:EB:10:14:C5:52:8A:2F:71:12:04 X509v3 Authority Key Identifier: keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:92:96:05:af:fe:75:69:be:79:50:20:97:6c:6a:7e:66:9d: cf:c8:fb:70:57:95:f0:38:b6:e3:67:d8:63:a5:14:b2:6b:cb: 08:73:d6:28:c3:eb:cd:a3:dc:f8:e5:14:b0:d9:45:9f:a4:12: 21:63:0f:ea:4d:b4:e4:8b:b9:8c:d1:72:25:10:6c:bc:bd:f4: aa:ce:29:b7:cc:eb:ee:ed:00:ca:27:43:3a:1e:f8:51:2b:10: 6b:11:23:2c:73:4f:dc:6c:0d:b0:c7:62:05:64:a5:36:b2:d2: 2d:20:ef:36:6c:49:1f:26:c2:2d:a4:5c:a7:f6:98:af:9a:4c: ec:81:09:8b:08:de:1b:9b:3d:f1:cb:87:bf:3a:cf:63:d1:c3: ef:47:77:f4:83:6b:a2:2e:dc:00:8f:f7:b9:80:29:69:b1:47: f6:3d:d4:3e:e6:3f:1c:8a:6f:67:87:91:73:e8:b9:15:ee:f4: db:78:15:06:95:a8:b2:71:71:f7:78:19:75:59:03:b4:8c:b6: a4:bc:cf:87:d3:71:ba:4e:22:0f:a7:b3:49:5f:62:c9:a1:14: 06:0f:f7:c3:6b:d8:02:00:71:d5:69:05:49:70:b8:5b:2c:a4: 48:7d:65:78:5e:a5:85:ad:a6:6f:17:6e:c9:19:5c:e7:ff:ae: ec:a7:cb:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0xL/i9DqMonfV/bZFAtxHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx ZDA0NzUwHhcNMjUxMjE5MDQwMTA4WhcNMjUxMjIwMDQwMTA4WjAzMTEwLwYDVQQD EygyM2Y5MzIxNmM1OWE1NDFiZWRlNmViMTAxNGM1NTI4YTJmNzExMjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAycT21gpW/E+godgSelWSXXQzTP0n r1LZomUSjo4+90NWXY3d2IJD+9Y7jrw5tVPLacr9W5m4TBu0TZ3gowyEGg9OyqXs WpXH1LX1Qw6EZkH102jeavqOVQ4RJRmBuLORA2qvVmyRDVGE1uPsuWw+z3wOtaOp 87BWNQ/nX4gdPEzbJ7i/LMR26y/26T8Gb7RK4iczSPLJvli1ZdNKdfHrUQQqXxBO pDWUFQwrjHy03YI3B3TWdSVaYQvcl1YGc9nfmeTMUWN2KTRtY6kihU+gNj5Fw4Pz y+PBO1dGW7WWY9+aTjdiKW3yaOOHliB7PI2hi81wKW6WrbfGgh6qHLZ2OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCP5MhbFmlQb7ebrEBTFUoovcRIEMB8GA1UdIwQY MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpKWBa/+ dWm+eVAgl2xqfmadz8j7cFeV8Di242fYY6UUsmvLCHPWKMPrzaPc+OUUsNlFn6QS IWMP6k205Iu5jNFyJRBsvL30qs4pt8zr7u0AyidDOh74USsQaxEjLHNP3GwNsMdi BWSlNrLSLSDvNmxJHybCLaRcp/aYr5pM7IEJiwjeG5s98cuHvzrPY9HD70d39INr oi7cAI/3uYApabFH9j3UPuY/HIpvZ4eRc+i5Fe7023gVBpWosnFx93gZdVkDtIy2 pLzPh9Nxuk4iD6ezSV9iyaEUBg/3w2vYAgBx1WkFSXC4WyykSH1leF6lha2mbxdu yRlc5/+u7KfLLQ== -----END CERTIFICATE-----Generated at Fri Dec 19 11:58:28 2025 by rpki-client