This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json) Hash identifier: N8Q5NgnxzwMG2sH+twDuwFIHWLw/mVeElAi3a/HxWBI= Subject key identifier: 31:86:B5:E0:AD:C5:F2:02:08:8D:31:2C:FF:2E:E0:FA:10:46:1A:B2 Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Certificate serial: 019AF389322DFCBE0BB876B937DBA7BF9905 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 12:00:46 +0000 Manifest this update: Sat 06 Dec 2025 12:00:46 +0000 Manifest next update: Sun 07 Dec 2025 12:00:46 +0000 Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: svzNIoLC9zL4JRpx4RBC9PH/W+SHnxHrazMsFaHfnV0=) 2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:32:2d:fc:be:0b:b8:76:b9:37:db:a7:bf:99:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4 Validity Not Before: Dec 6 12:00:46 2025 GMT Not After : Dec 7 12:00:46 2025 GMT Subject: CN=3186b5e0adc5f202088d312cff2ee0fa10461ab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:da:84:c3:3f:9b:18:a8:0d:1c:64:d4:aa: bb:2d:4d:1d:6f:5f:ef:bb:09:0e:02:61:93:21:34: 26:a6:12:cf:b4:be:9f:dc:b9:79:a0:cd:70:11:89: 2b:7a:cd:25:ae:f0:bc:8b:c3:0c:d6:27:eb:fa:fa: 80:d1:8b:0d:06:a2:49:67:0c:a9:95:35:b3:da:60: d0:cd:93:e2:9e:19:49:f5:a6:1a:71:d4:b3:88:78: cb:ce:38:7e:30:8a:4f:f4:6e:65:60:68:dd:84:67: 71:0a:19:ed:c8:00:e8:19:f4:87:43:73:40:73:42: 8c:92:d6:df:d2:9c:a3:44:45:40:77:47:58:98:10: 49:cf:49:d3:70:35:57:9f:fe:f2:fb:11:c2:54:b5: 41:37:23:4b:d7:3d:f5:42:e4:7c:1c:91:96:47:ad: ba:5a:fe:79:62:72:00:50:09:ba:8e:14:25:a2:11: f7:1f:cb:79:1c:91:83:32:f5:a9:30:ef:0b:a4:0f: 16:dd:6b:1d:62:cd:8a:b9:65:ac:0b:02:27:aa:ad: 54:a8:20:86:32:9d:26:88:0b:13:14:6f:c5:fb:d1: 14:df:21:d3:b1:76:d1:ef:fc:19:73:17:7b:56:2f: b1:d8:8b:5a:41:a9:fc:48:78:bd:c6:98:b1:ad:74: 1a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:86:B5:E0:AD:C5:F2:02:08:8D:31:2C:FF:2E:E0:FA:10:46:1A:B2 X509v3 Authority Key Identifier: keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3a:cb:b9:5d:66:0a:ba:80:27:32:a9:3a:59:17:22:2e:a8: 7c:b2:b5:5b:7c:82:10:ac:fd:55:ee:74:c7:f2:e0:dd:f4:f2: 1e:47:2f:d5:36:3f:de:0c:6d:ae:9e:ba:94:dd:e8:91:cf:47: 41:05:08:98:a0:97:46:03:5d:a7:a9:1c:45:97:d3:93:ae:43: c6:af:f3:84:06:a2:7e:11:1a:13:28:28:13:5f:0d:0c:46:2b: fb:bc:e8:14:42:91:53:97:b3:39:0c:c5:b7:93:19:6f:58:04: 5a:ba:ae:bb:9f:e4:97:d7:ed:0c:2b:25:c5:48:b6:03:72:9a: c1:09:35:8f:60:72:56:b3:88:51:ac:eb:ce:67:92:85:10:04: 45:59:a0:84:b3:f4:34:ef:43:11:06:aa:1b:2a:2d:3f:37:4b: 3d:7d:cf:34:92:ef:ec:64:bd:8f:89:ef:bd:0c:17:09:33:22: 6d:66:50:d3:17:72:05:4a:e3:bb:eb:97:68:6c:a5:f5:b4:6a: ad:18:13:11:e8:00:2b:56:7b:65:8a:99:c9:c5:ad:ee:97:1e: 97:91:e9:f7:56:db:2e:ba:a3:53:29:08:9a:93:c4:d6:8a:71: 84:7b:03:e5:34:17:4d:20:94:23:bb:24:25:f3:93:ac:ee:0d: 36:5b:ad:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziTIt/L4LuHa5N9unv5kFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1 YWM0ZDQwHhcNMjUxMjA2MTIwMDQ2WhcNMjUxMjA3MTIwMDQ2WjAzMTEwLwYDVQQD EygzMTg2YjVlMGFkYzVmMjAyMDg4ZDMxMmNmZjJlZTBmYTEwNDYxYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzvahMM/mxioDRxk1Kq7LU0db1/v uwkOAmGTITQmphLPtL6f3Ll5oM1wEYkres0lrvC8i8MM1ifr+vqA0YsNBqJJZwyp lTWz2mDQzZPinhlJ9aYacdSziHjLzjh+MIpP9G5lYGjdhGdxChntyADoGfSHQ3NA c0KMktbf0pyjREVAd0dYmBBJz0nTcDVXn/7y+xHCVLVBNyNL1z31QuR8HJGWR626 Wv55YnIAUAm6jhQlohH3H8t5HJGDMvWpMO8LpA8W3WsdYs2KuWWsCwInqq1UqCCG Mp0miAsTFG/F+9EU3yHTsXbR7/wZcxd7Vi+x2ItaQan8SHi9xpixrXQarwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGGteCtxfICCI0xLP8u4PoQRhqyMB8GA1UdIwQY MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt ZWY3ZjU2ODQyNTQ2LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2 LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIDrLuV1m CrqAJzKpOlkXIi6ofLK1W3yCEKz9Ve50x/Lg3fTyHkcv1TY/3gxtrp66lN3okc9H QQUImKCXRgNdp6kcRZfTk65Dxq/zhAaifhEaEygoE18NDEYr+7zoFEKRU5ezOQzF t5MZb1gEWrquu5/kl9ftDCslxUi2A3KawQk1j2ByVrOIUazrzmeShRAERVmghLP0 NO9DEQaqGyotPzdLPX3PNJLv7GS9j4nvvQwXCTMibWZQ0xdyBUrju+uXaGyl9bRq rRgTEegAK1Z7ZYqZycWt7pcel5Hp91bbLrqjUykImpPE1opxhHsD5TQXTSCUI7sk JfOTrO4NNlutiQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:15:33 2025 by rpki-client