This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft File: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft (raw, json) Hash identifier: hAbinhTSa71ILYSXK+ATWnl/if/h2qt1AL79qHYG4/s= Subject key identifier: 10:16:24:EA:64:28:FC:99:A3:8B:15:3B:8E:CF:04:18:41:A8:0A:76 Authority key identifier: 98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 Certificate issuer: /CN=985b50a10d2d58c67503eaaa701e510915dd5192 Certificate serial: 019AF19B0E7830AB4DF9758AE204D3FCB91F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft Manifest number: 06BD Signing time: Sat 06 Dec 2025 03:01:02 +0000 Manifest this update: Sat 06 Dec 2025 03:01:02 +0000 Manifest next update: Sun 07 Dec 2025 03:01:02 +0000 Files and hashes: 1: mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl (hash: FOUc6DsvMCzF6Rw2V6lvYaspuNJAoSF+O0B5204NNy0=) 2: yN69dqz--m8dWXCMtbZ1dGzJo1k.roa (hash: pNrNwHsIk6sG4oFCvOY8zkn+qIXflJs47/VLFYzRdxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:0e:78:30:ab:4d:f9:75:8a:e2:04:d3:fc:b9:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=985b50a10d2d58c67503eaaa701e510915dd5192 Validity Not Before: Dec 6 03:01:02 2025 GMT Not After : Dec 7 03:01:02 2025 GMT Subject: CN=101624ea6428fc99a38b153b8ecf041841a80a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:74:52:d1:2d:da:e5:61:3c:bf:4f:7f:58: 42:24:79:01:40:47:55:23:33:d0:a5:65:0f:7a:27: 8d:77:eb:c0:be:40:2b:55:e4:05:18:df:75:66:23: f6:53:2d:4f:3f:78:c4:29:f1:80:e9:1e:b9:83:39: dc:3a:1c:8c:20:e5:80:20:4a:98:5e:21:bb:58:cd: f8:1a:2a:db:4a:92:e0:7b:ad:fc:b9:28:7e:c4:6f: 45:81:c1:80:88:e3:08:3b:c5:1b:21:30:f0:c5:b6: 00:91:bc:e3:cc:3b:85:ab:06:81:65:12:5a:85:02: 0e:a3:f9:7c:62:79:92:9d:86:12:70:94:7e:ae:86: 22:d1:f7:af:45:60:2f:60:af:42:bc:7f:f7:d8:45: d9:d2:21:ee:2b:64:c1:8b:9a:c3:29:bd:56:09:24: 36:e5:50:74:53:0c:5e:a4:48:f8:2d:67:33:06:07: 03:57:d5:3c:50:40:d2:82:f0:f3:54:3d:dd:b9:ad: f6:18:37:27:4c:54:1a:e1:3f:21:ca:26:ff:ef:d2: c7:f0:22:88:c1:3d:fb:e2:9a:76:9c:d7:d0:ef:11: 0c:82:ea:c8:50:03:3e:af:e4:a8:36:59:26:66:0d: 38:d6:3c:84:00:f5:a3:bf:64:6c:24:2f:ec:fd:fb: 27:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:16:24:EA:64:28:FC:99:A3:8B:15:3B:8E:CF:04:18:41:A8:0A:76 X509v3 Authority Key Identifier: keyid:98:5B:50:A1:0D:2D:58:C6:75:03:EA:AA:70:1E:51:09:15:DD:51:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5689b0-af6d-4381-8992-90f6719e67b9/1/mFtQoQ0tWMZ1A-qqcB5RCRXdUZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:98:3a:02:d2:b4:25:d8:81:0c:ab:73:55:cf:f1:75:15:a9: 73:92:b5:f6:43:a4:51:e6:eb:48:c3:fc:19:12:e6:53:66:f6: cf:55:20:5c:77:b7:58:7a:e2:81:94:bb:d3:65:70:79:bb:03: f3:76:a4:69:d4:56:62:41:f0:91:c8:0e:75:71:e3:88:46:0b: fc:b1:db:47:91:b6:84:c6:e5:f6:a5:12:fa:19:64:64:63:87: da:ea:be:95:7d:09:1a:20:45:51:b0:7f:39:21:75:7f:8e:63: 32:d2:1a:20:9e:ff:e9:b5:16:33:cd:41:67:64:d0:48:32:8e: 15:ad:20:9a:18:71:fc:7c:60:00:73:9c:3d:4c:db:94:48:23: f9:2f:8e:eb:d2:81:3b:fd:1f:0a:9b:a4:d1:71:a8:2f:ee:08: 24:ab:dc:d6:55:f8:95:fc:74:d0:a1:c9:e1:77:24:d6:0c:8e: 5e:62:89:95:4f:8e:39:3d:6f:d8:c0:6f:24:5a:0b:97:4f:c6: 7a:4b:5a:b3:10:51:67:21:dd:9a:7a:54:77:0e:b3:cb:b9:9e: 5f:fe:0c:c3:24:2f:a9:bf:a4:cc:c3:a5:54:07:1d:a3:84:1a: b8:e7:5b:9b:24:31:78:41:6f:15:1d:f8:d4:90:6a:76:70:7c: 77:40:1b:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmw54MKtN+XWK4gTT/LkfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NWI1MGExMGQyZDU4YzY3NTAzZWFhYTcwMWU1MTA5MTVk ZDUxOTIwHhcNMjUxMjA2MDMwMTAyWhcNMjUxMjA3MDMwMTAyWjAzMTEwLwYDVQQD EygxMDE2MjRlYTY0MjhmYzk5YTM4YjE1M2I4ZWNmMDQxODQxYTgwYTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUh0UtEt2uVhPL9Pf1hCJHkBQEdV IzPQpWUPeieNd+vAvkArVeQFGN91ZiP2Uy1PP3jEKfGA6R65gzncOhyMIOWAIEqY XiG7WM34GirbSpLge638uSh+xG9FgcGAiOMIO8UbITDwxbYAkbzjzDuFqwaBZRJa hQIOo/l8YnmSnYYScJR+roYi0fevRWAvYK9CvH/32EXZ0iHuK2TBi5rDKb1WCSQ2 5VB0UwxepEj4LWczBgcDV9U8UEDSgvDzVD3dua32GDcnTFQa4T8hyib/79LH8CKI wT374pp2nNfQ7xEMgurIUAM+r+SoNlkmZg041jyEAPWjv2RsJC/s/fsnlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAWJOpkKPyZo4sVO47PBBhBqAp2MB8GA1UdIwQY MBaAFJhbUKENLVjGdQPqqnAeUQkV3VGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTIt OTBmNjcxOWU2N2I5LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yy81Njg5YjAtYWY2ZC00MzgxLTg5OTItOTBmNjcxOWU2N2I5 LzEvbUZ0UW9RMHRXTVoxQS1xcWNCNVJDUlhkVVpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJg6AtK0 JdiBDKtzVc/xdRWpc5K19kOkUebrSMP8GRLmU2b2z1UgXHe3WHrigZS702VwebsD 83akadRWYkHwkcgOdXHjiEYL/LHbR5G2hMbl9qUS+hlkZGOH2uq+lX0JGiBFUbB/ OSF1f45jMtIaIJ7/6bUWM81BZ2TQSDKOFa0gmhhx/HxgAHOcPUzblEgj+S+O69KB O/0fCpuk0XGoL+4IJKvc1lX4lfx00KHJ4Xck1gyOXmKJlU+OOT1v2MBvJFoLl0/G ektasxBRZyHdmnpUdw6zy7meX/4MwyQvqb+kzMOlVAcdo4QauOdbmyQxeEFvFR34 1JBqdnB8d0Ab5g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:21:35 2025 by rpki-client