This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json) Hash identifier: YEYLkCBIoPp5ZPmmBqEO74nfADeIivVON9sn6qDg2n8= Subject key identifier: 06:40:D6:4D:26:4E:1C:AC:5A:2B:4D:F0:47:2A:27:9B:98:8A:3F:C1 Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216 Certificate serial: 019AF1D2194734FF9C69D179B4ACCBB7ED76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft Manifest number: 07A0 Signing time: Sat 06 Dec 2025 04:01:09 +0000 Manifest this update: Sat 06 Dec 2025 04:01:09 +0000 Manifest next update: Sun 07 Dec 2025 04:01:09 +0000 Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: bg6z1Q9uh5zCmd40fGm6+rFfCfg1pAuG40noKuDSTik=) 2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=) 3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:19:47:34:ff:9c:69:d1:79:b4:ac:cb:b7:ed:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216 Validity Not Before: Dec 6 04:01:09 2025 GMT Not After : Dec 7 04:01:09 2025 GMT Subject: CN=0640d64d264e1cac5a2b4df0472a279b988a3fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:e2:89:6b:4c:22:68:67:81:71:a8:0b:97: 6a:22:2a:c3:a9:2f:da:0b:98:35:25:fd:82:3d:cd: 60:03:46:64:bb:a1:86:97:ed:50:36:ea:34:0d:e2: b6:b3:ea:d7:20:1b:16:8f:ab:d7:34:f4:73:89:ae: 91:ae:58:c3:15:d9:f5:1e:5d:4d:60:89:d1:f8:af: 81:cb:73:1b:ac:3a:de:ac:8b:cc:5d:73:90:c9:1f: b4:7f:7d:6c:16:f2:87:2c:68:5a:0e:da:24:fc:90: c4:0a:86:59:a5:fb:ed:ef:8e:97:42:2b:83:d1:c4: 51:66:5a:7b:9d:94:2c:25:e5:da:fd:9a:a0:92:4a: 1d:d0:44:c0:01:73:13:50:bf:fc:77:e0:9c:e0:78: 9f:5c:43:df:57:e6:d1:03:61:a8:59:9d:66:ca:1c: 01:c6:57:b3:ef:10:9d:08:5a:2d:00:29:42:42:0d: 76:53:2d:a9:f1:0e:30:c6:67:0b:3c:4e:3b:6e:86: e3:f5:d7:70:90:69:fc:bb:af:01:af:82:c0:c6:fb: b4:4b:16:54:d3:15:e0:c3:26:89:42:f4:8f:6d:29: 0c:be:51:34:3b:98:c0:b7:68:4a:1a:9e:61:23:4b: 54:a2:a7:6c:ef:72:b7:36:71:19:03:cc:9d:4e:bd: 53:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:40:D6:4D:26:4E:1C:AC:5A:2B:4D:F0:47:2A:27:9B:98:8A:3F:C1 X509v3 Authority Key Identifier: keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:9f:5f:7c:27:4f:f8:32:77:d8:82:7e:2c:56:84:ae:90:34: 2a:f0:83:ed:fa:51:0f:73:a7:09:5d:30:99:79:47:8d:aa:de: c7:ca:03:47:43:a0:18:3d:72:69:bb:38:6e:9b:c0:d9:c7:a1: 54:ff:61:50:0b:da:5b:19:b4:9e:e9:f4:0d:6a:d7:0d:5b:94: 1c:26:89:91:91:a3:23:e0:37:b2:e7:46:03:20:97:b0:44:71: 63:f2:cd:53:df:53:15:c4:9d:e0:83:4d:f8:68:c3:4e:f1:ec: b6:fc:00:31:71:d1:0f:91:46:c7:64:41:5f:28:37:0c:13:e0: cc:1c:9d:b3:13:1c:95:9e:2c:2c:19:9f:e6:ef:05:97:cd:a8: 2a:66:32:41:d5:db:cb:04:9b:c3:0a:4b:d0:39:66:3f:59:e3: 81:fd:bf:5f:41:13:84:07:c5:c9:2e:0a:f2:52:d5:84:6f:a2: e3:8c:d0:15:c4:b5:a2:15:d5:c4:2d:8e:d9:d6:08:c2:ef:c1: 90:06:50:4f:27:53:c7:4b:46:74:e6:a5:0b:81:1c:d8:ae:67: 66:7e:9d:5a:d8:d1:d6:ee:ba:73:a5:28:be:ba:a9:2e:89:ed: f4:0a:21:aa:0b:39:3d:64:35:04:0d:8a:dd:d8:bc:f6:35:b3: 9f:02:e1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0hlHNP+cadF5tKzLt+12MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MGNkYTQ4YzM1ZTU0ZWI4MDI1NzVhYWE0MDhjY2U1Nzk5 MjcyMTYwHhcNMjUxMjA2MDQwMTA5WhcNMjUxMjA3MDQwMTA5WjAzMTEwLwYDVQQD EygwNjQwZDY0ZDI2NGUxY2FjNWEyYjRkZjA0NzJhMjc5Yjk4OGEzZmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtDiiWtMImhngXGoC5dqIirDqS/a C5g1Jf2CPc1gA0Zku6GGl+1QNuo0DeK2s+rXIBsWj6vXNPRzia6RrljDFdn1Hl1N YInR+K+By3MbrDrerIvMXXOQyR+0f31sFvKHLGhaDtok/JDECoZZpfvt746XQiuD 0cRRZlp7nZQsJeXa/Zqgkkod0ETAAXMTUL/8d+Cc4HifXEPfV+bRA2GoWZ1myhwB xlez7xCdCFotAClCQg12Uy2p8Q4wxmcLPE47bobj9ddwkGn8u68Br4LAxvu0SxZU 0xXgwyaJQvSPbSkMvlE0O5jAt2hKGp5hI0tUoqds73K3NnEZA8ydTr1TmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZA1k0mThysWitN8EcqJ5uYij/BMB8GA1UdIwQY MBaAFNUM2kjDXlTrgCV1qqQIzOV5knIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWIt MjI5MjA1NjVjZGE0LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8zNTg3ZWItZWJkNC00MGFiLWExOWItMjI5MjA1NjVjZGE0 LzEvMVF6YVNNTmVWT3VBSlhXcXBBak01WG1TY2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtJ9ffCdP +DJ32IJ+LFaErpA0KvCD7fpRD3OnCV0wmXlHjarex8oDR0OgGD1yabs4bpvA2ceh VP9hUAvaWxm0nun0DWrXDVuUHCaJkZGjI+A3sudGAyCXsERxY/LNU99TFcSd4INN +GjDTvHstvwAMXHRD5FGx2RBXyg3DBPgzBydsxMclZ4sLBmf5u8Fl82oKmYyQdXb ywSbwwpL0DlmP1njgf2/X0EThAfFyS4K8lLVhG+i44zQFcS1ohXVxC2O2dYIwu/B kAZQTydTx0tGdOalC4Ec2K5nZn6dWtjR1u66c6UovrqpLont9Aohqgs5PWQ1BA2K 3di89jWznwLhuw== -----END CERTIFICATE-----Generated at Sat Dec 6 15:02:13 2025 by rpki-client