This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json) Hash identifier: zUo2PvsIBqFm+KwgHoGDZvn5Pu7i1INpYTrk+U4y8OQ= Subject key identifier: DA:F5:06:4A:C4:33:23:BB:C1:94:DE:D9:5F:E9:DC:7C:4F:C6:6B:27 Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Certificate serial: 019AF31C31065A0AADF6059F7D4C535D94DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft Manifest number: 0A29 Signing time: Sat 06 Dec 2025 10:01:42 +0000 Manifest this update: Sat 06 Dec 2025 10:01:42 +0000 Manifest next update: Sun 07 Dec 2025 10:01:42 +0000 Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: KLUYbLhxJK7zyceUc9+wrLtac8KjcdeaqeADtO/o6H8=) 2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:31:06:5a:0a:ad:f6:05:9f:7d:4c:53:5d:94:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Validity Not Before: Dec 6 10:01:42 2025 GMT Not After : Dec 7 10:01:42 2025 GMT Subject: CN=daf5064ac43323bbc194ded95fe9dc7c4fc66b27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:ac:31:6b:f4:eb:b1:9c:e6:47:8a:92:97: e5:64:f9:40:01:d4:c3:10:97:8c:ae:ef:26:fa:87: 19:ea:1b:42:40:30:e4:af:b3:8b:f7:4e:6c:ec:69: b2:aa:8e:cf:c8:8d:bf:10:df:67:d1:6d:b5:48:85: be:30:ee:0f:b0:ac:ee:40:8b:1f:0c:1d:0c:90:45: c5:bc:1c:54:6a:7f:ec:69:e9:44:99:5d:65:52:24: 5b:9f:cf:2d:e7:cd:1b:13:69:8e:22:5f:45:8c:61: 7e:16:9d:95:f2:3f:52:b5:b4:a0:0a:d0:bc:6b:7b: 64:30:45:c3:b1:96:60:3d:f1:db:04:68:7a:9d:3c: 69:a0:bd:b8:e4:c7:66:c4:01:d5:65:d8:a3:36:aa: 56:40:6a:d8:89:01:ef:ca:56:4a:11:c7:8f:f4:b2: 90:80:fa:30:52:20:eb:33:b6:c3:fe:61:cc:79:e8: ec:65:ce:28:9e:0f:74:d6:e8:f9:ea:50:0b:2e:90: d5:fb:73:6d:33:4e:f3:24:18:ee:d5:40:db:90:19: ff:bf:81:eb:c8:6c:dc:90:d7:bf:5d:40:c5:f9:80: 9e:fe:03:29:14:3d:40:bd:6b:b5:30:0f:a2:ed:76: 34:3f:9d:05:b7:bc:b4:e1:97:4b:c7:d7:0d:c2:61: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F5:06:4A:C4:33:23:BB:C1:94:DE:D9:5F:E9:DC:7C:4F:C6:6B:27 X509v3 Authority Key Identifier: keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a2:29:ce:a6:99:fb:e8:b3:99:db:7c:29:46:b4:5e:e8:16: fd:cc:c5:04:a6:46:ff:87:87:7a:be:e5:dd:68:01:b4:4f:59: a0:e5:8d:02:40:6c:96:b9:44:a5:54:ec:2c:a4:b5:4d:d9:a6: ad:6e:fb:49:4e:f0:b6:c7:43:0a:0c:d5:2c:25:c4:f5:a4:e3: 49:2b:1e:b2:c6:c5:5a:4d:c3:e0:6c:a0:c0:d8:af:cd:f7:42: 84:01:8b:2a:54:58:e9:a9:aa:25:a5:69:de:58:e7:2a:ad:df: ef:cd:3a:18:7c:cb:6b:e9:ad:ce:f7:92:d0:07:18:78:78:63: 3b:51:52:26:48:f1:b9:8b:12:32:ca:27:1d:31:ca:7c:6c:e5: a7:68:db:44:3d:e2:58:bd:83:aa:3e:ad:62:0d:c5:e9:07:f0: 8d:9d:89:78:39:9e:a6:89:f6:d5:ab:b0:67:d9:7d:e3:79:da: ca:c6:13:bc:65:14:17:0a:a1:3a:33:74:2f:a2:e9:b6:c0:d4: 5d:d8:97:dd:5f:f5:f3:bd:b2:53:41:cd:84:0c:50:b0:a4:79: 45:c8:2d:e5:f6:84:13:1f:a5:f0:54:e4:0d:04:16:68:d0:2d: d3:a4:68:29:38:92:74:39:bb:03:fe:23:53:a5:a4:cb:c6:49: 93:38:96:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHDEGWgqt9gWffUxTXZTfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx ZDA0NzUwHhcNMjUxMjA2MTAwMTQyWhcNMjUxMjA3MTAwMTQyWjAzMTEwLwYDVQQD EyhkYWY1MDY0YWM0MzMyM2JiYzE5NGRlZDk1ZmU5ZGM3YzRmYzY2YjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1esMWv067Gc5keKkpflZPlAAdTD EJeMru8m+ocZ6htCQDDkr7OL905s7Gmyqo7PyI2/EN9n0W21SIW+MO4PsKzuQIsf DB0MkEXFvBxUan/saelEmV1lUiRbn88t580bE2mOIl9FjGF+Fp2V8j9StbSgCtC8 a3tkMEXDsZZgPfHbBGh6nTxpoL245MdmxAHVZdijNqpWQGrYiQHvylZKEceP9LKQ gPowUiDrM7bD/mHMeejsZc4ong901uj56lALLpDV+3NtM07zJBju1UDbkBn/v4Hr yGzckNe/XUDF+YCe/gMpFD1AvWu1MA+i7XY0P50Ft7y04ZdLx9cNwmFeIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNr1BkrEMyO7wZTe2V/p3HxPxmsnMB8GA1UdIwQY MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEaIpzqaZ ++izmdt8KUa0XugW/czFBKZG/4eHer7l3WgBtE9ZoOWNAkBslrlEpVTsLKS1Tdmm rW77SU7wtsdDCgzVLCXE9aTjSSsessbFWk3D4GygwNivzfdChAGLKlRY6amqJaVp 3ljnKq3f7806GHzLa+mtzveS0AcYeHhjO1FSJkjxuYsSMsonHTHKfGzlp2jbRD3i WL2Dqj6tYg3F6QfwjZ2JeDmepon21auwZ9l943naysYTvGUUFwqhOjN0L6LptsDU XdiX3V/1872yU0HNhAxQsKR5Rcgt5faEEx+l8FTkDQQWaNAt06RoKTiSdDm7A/4j U6Wky8ZJkziWIA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:22:54 2025 by rpki-client