This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft File: qDBcblgpStDtUWL6hCnaUWVlOTA.mft (raw, json) Hash identifier: dfdp0ux2ydBXpD5g7jh3bUvqninPZP5/OgAnJUpSHno= Subject key identifier: FB:40:02:64:DD:0F:48:D7:0D:66:BB:44:E5:4B:55:7B:D3:08:04:30 Authority key identifier: A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30 Certificate issuer: /CN=a8305c6e58294ad0ed5162fa8429da5165653930 Certificate serial: 019AF163D3C26EE367E3089A6C542C1AB606 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 02:00:42 +0000 Manifest this update: Sat 06 Dec 2025 02:00:42 +0000 Manifest next update: Sun 07 Dec 2025 02:00:42 +0000 Files and hashes: 1: K1hHLihKHxHk06eTdbGXntsm7n0.roa (hash: L22VRHHVigykudQA1GmcYoeypbh6Yu5VUYyqOcGQaXE=) 2: qDBcblgpStDtUWL6hCnaUWVlOTA.crl (hash: lsmCWhePotCrrIRwvWTZRo7j/DHFaWhvMzZkJRkBQ/A=) 3: wPNMxy1HP_1cYFy7utzNj0qnsDA.roa (hash: yEdNFFWb7AqdqiQvhXrarz8nG5eHA1sOBjlHc/SL+pI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:63:d3:c2:6e:e3:67:e3:08:9a:6c:54:2c:1a:b6:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8305c6e58294ad0ed5162fa8429da5165653930 Validity Not Before: Dec 6 02:00:42 2025 GMT Not After : Dec 7 02:00:42 2025 GMT Subject: CN=fb400264dd0f48d70d66bb44e54b557bd3080430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a1:ba:69:16:d9:b8:89:3d:60:20:22:eb:f8: 7a:8e:d7:1e:2d:ad:e9:a1:e2:13:d7:e1:40:f3:c3: d8:e8:8f:2a:2c:ae:e5:73:5b:85:32:ec:9b:f0:cc: 77:b8:e9:1d:e4:5d:06:2b:5f:a4:56:80:9a:0a:0d: e0:8b:2b:63:5d:c6:03:b7:59:44:63:1f:7b:ac:79: 4e:f8:d5:2a:2d:0e:2c:8a:1b:87:69:be:07:bc:86: 36:29:d0:2c:1e:38:ed:69:1f:bc:f0:f7:7f:cf:42: b1:a9:2e:33:e1:f7:cf:f9:fb:be:7e:2b:2e:00:ce: fb:be:b4:a1:ff:c6:d0:3b:cc:fe:e7:9e:3c:f0:c4: 09:2c:30:0c:08:0b:7b:fe:34:51:f1:6f:62:33:1f: d9:06:db:88:5d:c5:5e:ba:42:30:8f:4b:c4:a6:61: ce:3b:84:37:5f:5e:75:15:ee:7a:19:73:27:62:2c: f1:c4:2b:b4:56:e2:89:a1:1f:0a:07:54:d4:40:11: b3:92:f6:b0:ab:e0:9a:28:3b:20:c3:e4:1e:d7:2a: 25:5a:6c:28:7e:47:10:a8:b5:d1:43:ab:61:b0:b1: d3:05:33:11:9f:97:c2:bf:82:e5:83:9c:b3:05:6f: eb:c5:b1:14:a3:0b:fc:98:ff:2c:78:5b:84:48:eb: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:40:02:64:DD:0F:48:D7:0D:66:BB:44:E5:4B:55:7B:D3:08:04:30 X509v3 Authority Key Identifier: keyid:A8:30:5C:6E:58:29:4A:D0:ED:51:62:FA:84:29:DA:51:65:65:39:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qDBcblgpStDtUWL6hCnaUWVlOTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/4c15d9-79e6-452f-aa32-02db8b77d087/1/qDBcblgpStDtUWL6hCnaUWVlOTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:45:32:ce:22:77:07:52:a2:f6:68:99:ad:9b:f0:bf:ef:42: fd:b1:e1:2a:bf:d0:6d:b3:45:93:8a:ce:a3:c6:67:9a:5b:19: ba:05:5b:8c:71:1f:b0:4d:a5:c3:55:e5:eb:20:15:62:87:a7: 7d:50:15:63:af:25:1e:95:7d:3e:5e:41:ec:ba:66:a5:cd:e8: 86:34:e0:2c:54:15:47:48:67:ba:97:1b:19:c0:85:52:4d:7f: dd:a3:65:e0:ce:6c:32:eb:18:a1:c8:f3:48:cc:8b:8e:25:07: 74:ae:a6:a7:73:a3:58:af:8c:04:a9:5b:34:68:55:4a:9d:f9: a0:78:b2:db:f8:8e:ed:1b:1a:1f:d1:63:11:ad:eb:31:b4:b5: cb:c1:81:26:4c:db:4e:9f:2e:eb:1f:b9:03:b9:33:8c:c7:8a: c6:99:39:83:d5:b1:6f:0e:f4:71:f3:19:78:42:19:d4:29:d9: 8c:82:cd:06:53:18:42:23:e3:8b:2d:a2:59:1b:9b:e8:01:0d: da:bd:38:3d:41:c6:13:e2:37:c1:c2:8b:84:b5:9a:8c:23:c3: 5c:27:1f:65:41:c4:7e:b3:83:af:d8:20:6c:56:e9:ba:65:a9: 30:06:d9:a2:19:c6:89:7c:8e:66:dc:a9:30:8d:a7:2a:7e:af: a6:63:5c:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxY9PCbuNn4wiabFQsGrYGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4MzA1YzZlNTgyOTRhZDBlZDUxNjJmYTg0MjlkYTUxNjU2 NTM5MzAwHhcNMjUxMjA2MDIwMDQyWhcNMjUxMjA3MDIwMDQyWjAzMTEwLwYDVQQD EyhmYjQwMDI2NGRkMGY0OGQ3MGQ2NmJiNDRlNTRiNTU3YmQzMDgwNDMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qG6aRbZuIk9YCAi6/h6jtceLa3p oeIT1+FA88PY6I8qLK7lc1uFMuyb8Mx3uOkd5F0GK1+kVoCaCg3giytjXcYDt1lE Yx97rHlO+NUqLQ4sihuHab4HvIY2KdAsHjjtaR+88Pd/z0KxqS4z4ffP+fu+fisu AM77vrSh/8bQO8z+55488MQJLDAMCAt7/jRR8W9iMx/ZBtuIXcVeukIwj0vEpmHO O4Q3X151Fe56GXMnYizxxCu0VuKJoR8KB1TUQBGzkvawq+CaKDsgw+Qe1yolWmwo fkcQqLXRQ6thsLHTBTMRn5fCv4Llg5yzBW/rxbEUowv8mP8seFuESOvk6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPtAAmTdD0jXDWa7ROVLVXvTCAQwMB8GA1UdIwQY MBaAFKgwXG5YKUrQ7VFi+oQp2lFlZTkwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzIt MDJkYjhiNzdkMDg3LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS80YzE1ZDktNzllNi00NTJmLWFhMzItMDJkYjhiNzdkMDg3 LzEvcURCY2JsZ3BTdER0VVdMNmhDbmFVV1ZsT1RBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUUyziJ3 B1Ki9miZrZvwv+9C/bHhKr/QbbNFk4rOo8ZnmlsZugVbjHEfsE2lw1Xl6yAVYoen fVAVY68lHpV9Pl5B7Lpmpc3ohjTgLFQVR0hnupcbGcCFUk1/3aNl4M5sMusYocjz SMyLjiUHdK6mp3OjWK+MBKlbNGhVSp35oHiy2/iO7RsaH9FjEa3rMbS1y8GBJkzb Tp8u6x+5A7kzjMeKxpk5g9Wxbw70cfMZeEIZ1CnZjILNBlMYQiPjiy2iWRub6AEN 2r04PUHGE+I3wcKLhLWajCPDXCcfZUHEfrODr9ggbFbpumWpMAbZohnGiXyOZtyp MI2nKn6vpmNcGA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:10 2025 by rpki-client