This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft File: rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft (raw, json) Hash identifier: NKPgHji1itxbXnWl9koLx8sSdkNQMCnpz/+vQ0YMlpU= Subject key identifier: 77:8B:2F:29:FB:4D:36:12:98:D4:CC:4F:41:6F:B3:EA:82:3B:A0:7A Authority key identifier: AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78 Certificate issuer: /CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78 Certificate serial: 019AF6F92350B984274EDDAB9843AD1B9F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft Manifest number: 0B72 Signing time: Sun 07 Dec 2025 04:01:53 +0000 Manifest this update: Sun 07 Dec 2025 04:01:53 +0000 Manifest next update: Mon 08 Dec 2025 04:01:53 +0000 Files and hashes: 1: OUGzudtTbJQVw_1mFk8aHx4RCVE.roa (hash: pnWv/Z4SyVfyPYv0oxknc3DOerNA4xLQHYB0+b/8kWY=) 2: rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl (hash: TJa1v2jjdn5KIv5EJhuoHfOWvhntwrbWWcRdbbkX2wI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 04:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:f9:23:50:b9:84:27:4e:dd:ab:98:43:ad:1b:9f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0dc108b60f47b0d9772808e5fcc381eaa81c78 Validity Not Before: Dec 7 04:01:53 2025 GMT Not After : Dec 8 04:01:53 2025 GMT Subject: CN=778b2f29fb4d361298d4cc4f416fb3ea823ba07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b2:f6:57:db:37:72:49:ae:2e:44:70:40:9e: 0c:99:bf:20:d8:5c:b4:5e:c4:fb:db:57:46:d2:15: f6:7a:3b:4b:2a:57:6c:6c:be:f6:73:fb:24:6b:06: 68:5b:6c:02:b6:e4:d6:85:ad:60:3a:0f:84:08:12: 99:52:10:c0:96:46:66:5e:1b:c4:68:07:23:1e:5a: 94:8e:54:f2:28:8a:5b:49:e6:6f:13:22:27:ce:8f: 03:ef:9e:28:80:f4:85:c1:45:30:e6:2c:a0:a9:1a: c6:e4:1c:1e:70:00:ef:4f:2f:81:b0:26:57:ea:3f: 2c:32:2e:0a:0f:95:7b:24:4d:ad:76:ef:36:27:bc: fc:05:4a:99:f2:9c:b4:cf:bc:88:ce:dc:d6:32:2f: 16:46:4f:10:9e:03:cc:0d:89:11:9c:07:40:1b:3a: 1d:df:cb:68:6a:3d:c9:46:44:76:20:0e:66:5b:d0: 0a:c9:a8:e3:be:2c:ba:df:05:ae:c4:0a:5b:89:48: 6f:a9:45:9b:cd:e9:fe:1d:ec:47:e1:4c:dc:94:72: 79:c5:d9:00:f2:80:0d:dc:3f:c4:9b:de:60:4e:e0: 6b:a4:bd:c8:c8:14:1d:9a:43:90:30:42:c1:f5:6c: a3:65:27:ab:0b:56:04:c5:40:23:6c:5f:1d:79:75: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8B:2F:29:FB:4D:36:12:98:D4:CC:4F:41:6F:B3:EA:82:3B:A0:7A X509v3 Authority Key Identifier: keyid:AD:0D:C1:08:B6:0F:47:B0:D9:77:28:08:E5:FC:C3:81:EA:A8:1C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ3BCLYPR7DZdygI5fzDgeqoHHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/0b5860-cd57-4183-b9ae-e84785894838/1/rQ3BCLYPR7DZdygI5fzDgeqoHHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:ff:dd:65:a4:78:1a:a6:7a:95:24:48:7d:5b:93:6e:77:a1: bd:61:cc:8f:63:0e:9d:58:98:7d:49:a2:7f:68:27:b0:8e:5c: 2f:cb:f5:07:2e:d2:bb:69:c8:83:d9:42:a0:c5:44:d7:02:d7: 12:cf:3a:cc:19:10:f3:51:ec:06:06:d2:41:5f:64:c3:1e:8c: f1:4c:35:ec:2b:c8:f7:38:6e:8c:51:80:2c:7c:ef:3c:39:02: 6d:19:82:11:86:0d:b5:20:71:f0:4f:a5:95:a6:d1:3c:5e:d1: a8:a6:1c:24:6a:dd:94:5d:d0:60:3a:60:26:9d:d1:a8:98:06: 56:0b:5e:86:c9:b2:3e:fb:67:43:6f:55:4f:ed:01:3d:21:b6: 48:bf:2d:64:1d:3f:4c:db:0f:a2:96:ba:0f:05:81:4c:4a:ff: b2:36:1c:bb:6f:c9:26:ff:96:74:13:2e:b2:c3:d3:e4:b6:9e: 99:87:76:4a:a7:72:91:e6:86:c3:d7:03:e9:91:f0:49:9f:d0: 89:ff:1f:44:91:4a:24:fa:9a:e1:34:5f:d0:35:5a:d9:79:bb: 29:9e:db:50:6b:ee:dc:ba:79:de:da:2c:06:2b:1e:a8:a3:01: 7d:54:09:c7:23:b7:89:b2:3a:d3:f0:73:47:91:74:48:ba:25: b7:1a:73:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2+SNQuYQnTt2rmEOtG58YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRjMTA4YjYwZjQ3YjBkOTc3MjgwOGU1ZmNjMzgxZWFh ODFjNzgwHhcNMjUxMjA3MDQwMTUzWhcNMjUxMjA4MDQwMTUzWjAzMTEwLwYDVQQD Eyg3NzhiMmYyOWZiNGQzNjEyOThkNGNjNGY0MTZmYjNlYTgyM2JhMDdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkLL2V9s3ckmuLkRwQJ4Mmb8g2Fy0 XsT721dG0hX2ejtLKldsbL72c/skawZoW2wCtuTWha1gOg+ECBKZUhDAlkZmXhvE aAcjHlqUjlTyKIpbSeZvEyInzo8D754ogPSFwUUw5iygqRrG5BwecADvTy+BsCZX 6j8sMi4KD5V7JE2tdu82J7z8BUqZ8py0z7yIztzWMi8WRk8QngPMDYkRnAdAGzod 38toaj3JRkR2IA5mW9AKyajjviy63wWuxApbiUhvqUWbzen+HexH4UzclHJ5xdkA 8oAN3D/Em95gTuBrpL3IyBQdmkOQMELB9WyjZSerC1YExUAjbF8deXWqTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHeLLyn7TTYSmNTMT0Fvs+qCO6B6MB8GA1UdIwQY MBaAFK0NwQi2D0ew2XcoCOX8w4HqqBx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUt ZTg0Nzg1ODk0ODM4LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wYjU4NjAtY2Q1Ny00MTgzLWI5YWUtZTg0Nzg1ODk0ODM4 LzEvclEzQkNMWVBSN0RaZHlnSTVmekRnZXFvSEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB//dZaR4 GqZ6lSRIfVuTbnehvWHMj2MOnViYfUmif2gnsI5cL8v1By7Su2nIg9lCoMVE1wLX Es86zBkQ81HsBgbSQV9kwx6M8Uw17CvI9zhujFGALHzvPDkCbRmCEYYNtSBx8E+l labRPF7RqKYcJGrdlF3QYDpgJp3RqJgGVgtehsmyPvtnQ29VT+0BPSG2SL8tZB0/ TNsPopa6DwWBTEr/sjYcu2/JJv+WdBMussPT5LaemYd2SqdykeaGw9cD6ZHwSZ/Q if8fRJFKJPqa4TRf0DVa2Xm7KZ7bUGvu3Lp53tosBiseqKMBfVQJxyO3ibI60/Bz R5F0SLoltxpz2Q== -----END CERTIFICATE-----Generated at Sun Dec 7 09:44:22 2025 by rpki-client