This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft File: dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft (raw, json) Hash identifier: CXRZizplWcuGtijP2qBR9DEQvMwsabiV8o6FNOIgtl8= Subject key identifier: B3:E9:D9:C5:16:2A:41:A3:93:CC:E5:2B:9E:F0:ED:9D:B3:08:B1:CB Authority key identifier: 76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F Certificate issuer: /CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Certificate serial: 019AF1D226D916F3DC41366556938AF65549 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft Manifest number: 0EBD Signing time: Sat 06 Dec 2025 04:01:12 +0000 Manifest this update: Sat 06 Dec 2025 04:01:12 +0000 Manifest next update: Sun 07 Dec 2025 04:01:12 +0000 Files and hashes: 1: AU4ugvV5IAEAhCk8GTQf9WBLDKg.roa (hash: g9W79I4Y+ZlSbr/hHfWCFarDN4OLUZ4qhEZ6t7xBiw0=) 2: dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl (hash: Y+JdDprg5kVfS5SXOgvonDYmpUYvjCz7H5xfvNHSthM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:26:d9:16:f3:dc:41:36:65:56:93:8a:f6:55:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa33e7e1c2394c663be85d73b9ee34b769495f Validity Not Before: Dec 6 04:01:12 2025 GMT Not After : Dec 7 04:01:12 2025 GMT Subject: CN=b3e9d9c5162a41a393cce52b9ef0ed9db308b1cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:9f:be:b1:f6:7c:84:03:8c:3d:12:26:09: 9b:94:8f:ab:0f:a8:2e:96:f1:51:34:5f:9e:54:aa: 6f:d8:a2:be:fa:2f:f0:8b:da:ce:56:69:e5:a0:c2: 4d:54:95:92:28:d2:c6:a3:a4:a3:97:6e:9d:51:08: 71:7e:eb:54:86:42:22:33:ca:ac:1b:d4:0e:3f:8c: 5c:23:38:c7:82:cf:f8:8b:fd:1b:83:6d:0a:86:87: 18:f8:fd:d7:77:a9:fa:27:2b:9e:08:fd:96:cc:2a: 88:08:5e:33:08:72:5c:69:f0:bd:1a:c4:18:19:cb: 5b:9d:eb:62:21:47:17:e4:16:bf:e3:cf:dc:e6:6a: 53:c4:79:e1:f8:2e:4f:ad:ae:ad:1b:c3:34:22:52: 4b:93:ec:69:da:e2:31:56:d7:c7:38:bf:5b:eb:70: f2:8c:8f:60:c6:e9:dc:88:41:82:2e:2a:c0:c8:63: 84:af:75:3c:38:4d:af:e0:d2:11:9b:e7:75:28:7e: f3:6f:85:8c:c9:2b:00:f1:f0:0f:11:58:ce:e5:91: 75:c7:43:3b:0a:cf:09:f1:72:bd:6a:48:af:17:d0: 6b:92:7a:98:3c:80:8a:01:94:cb:78:44:0b:fa:56: ab:74:11:e8:9c:06:5a:38:16:e7:8a:43:b4:b6:3b: 24:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E9:D9:C5:16:2A:41:A3:93:CC:E5:2B:9E:F0:ED:9D:B3:08:B1:CB X509v3 Authority Key Identifier: keyid:76:AA:33:E7:E1:C2:39:4C:66:3B:E8:5D:73:B9:EE:34:B7:69:49:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqoz5-HCOUxmO-hdc7nuNLdpSV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/0bc9e6-4198-4067-9597-74d4c2c5b694/1/dqoz5-HCOUxmO-hdc7nuNLdpSV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7c:6c:d6:83:71:5d:c5:3d:6c:be:06:33:3e:9d:bd:53:0e: 2c:e9:f0:a0:63:e9:e9:b5:40:eb:d7:df:6f:22:67:a8:3b:27: e4:48:93:53:b6:0a:65:9b:cb:4d:fb:07:cb:e8:81:75:9b:75: 7a:40:0a:1e:81:ed:14:2a:3e:31:46:17:f1:95:38:10:a3:8c: 0e:e9:47:eb:cb:81:3b:85:a3:b6:ff:46:f2:15:2f:35:24:63: 23:c0:a6:bd:09:34:32:4f:1f:68:35:58:02:da:c1:23:1b:f0: da:3c:ad:e2:35:1b:00:58:1d:7e:d7:e5:49:39:de:1f:d5:90: f3:a3:1b:06:e2:3e:e0:5b:ad:9f:6c:b7:cd:8f:99:0c:3a:2a: 6f:45:a6:c8:11:d9:cb:79:d6:ed:65:4e:36:00:43:f7:8b:b3: 21:a8:c2:eb:29:04:04:93:43:9a:59:fd:55:b3:d5:cf:ea:cf: 04:ab:0b:f5:67:5a:be:03:32:d8:02:f3:c1:72:26:4e:47:8b: cf:df:b2:31:93:f2:ab:68:a6:3d:a6:88:bb:83:81:b1:65:61: b8:c2:a4:1a:a2:21:81:d6:cd:85:77:5d:26:1c:7e:b2:25:a1: 80:07:c1:01:39:ff:d8:30:8d:3d:66:e1:9a:3c:65:7f:81:22: 92:c0:91:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ibZFvPcQTZlVpOK9lVJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWEzM2U3ZTFjMjM5NGM2NjNiZTg1ZDczYjllZTM0Yjc2 OTQ5NWYwHhcNMjUxMjA2MDQwMTEyWhcNMjUxMjA3MDQwMTEyWjAzMTEwLwYDVQQD EyhiM2U5ZDljNTE2MmE0MWEzOTNjY2U1MmI5ZWYwZWQ5ZGIzMDhiMWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4+fvrH2fIQDjD0SJgmblI+rD6gu lvFRNF+eVKpv2KK++i/wi9rOVmnloMJNVJWSKNLGo6Sjl26dUQhxfutUhkIiM8qs G9QOP4xcIzjHgs/4i/0bg20KhocY+P3Xd6n6JyueCP2WzCqICF4zCHJcafC9GsQY GctbnetiIUcX5Ba/48/c5mpTxHnh+C5Pra6tG8M0IlJLk+xp2uIxVtfHOL9b63Dy jI9gxunciEGCLirAyGOEr3U8OE2v4NIRm+d1KH7zb4WMySsA8fAPEVjO5ZF1x0M7 Cs8J8XK9akivF9BrknqYPICKAZTLeEQL+lardBHonAZaOBbnikO0tjskWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPp2cUWKkGjk8zlK57w7Z2zCLHLMB8GA1UdIwQY MBaAFHaqM+fhwjlMZjvoXXO57jS3aUlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTct NzRkNGMyYzViNjk0LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi8wYmM5ZTYtNDE5OC00MDY3LTk1OTctNzRkNGMyYzViNjk0 LzEvZHFvejUtSENPVXhtTy1oZGM3bnVOTGRwU1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH3xs1oNx XcU9bL4GMz6dvVMOLOnwoGPp6bVA69ffbyJnqDsn5EiTU7YKZZvLTfsHy+iBdZt1 ekAKHoHtFCo+MUYX8ZU4EKOMDulH68uBO4Wjtv9G8hUvNSRjI8CmvQk0Mk8faDVY AtrBIxvw2jyt4jUbAFgdftflSTneH9WQ86MbBuI+4Futn2y3zY+ZDDoqb0WmyBHZ y3nW7WVONgBD94uzIajC6ykEBJNDmln9VbPVz+rPBKsL9WdavgMy2ALzwXImTkeL z9+yMZPyq2imPaaIu4OBsWVhuMKkGqIhgdbNhXddJhx+siWhgAfBATn/2DCNPWbh mjxlf4EiksCR3A== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:12 2025 by rpki-client