This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json) Hash identifier: HX3e5nO1RDOlcHH4NL8Jey7lowFbK0ZCReIFrU73q9E= Subject key identifier: 42:CE:74:59:86:F4:92:EA:D5:79:09:23:B3:C8:73:58:D3:5D:3E:A1 Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d Certificate serial: 019B33B227943F836AAC1132F98E27DD76BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft Manifest number: 0FB0 Signing time: Thu 18 Dec 2025 23:01:12 +0000 Manifest this update: Thu 18 Dec 2025 23:01:12 +0000 Manifest next update: Fri 19 Dec 2025 23:01:12 +0000 Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: tk55k2mzS+xbQB+oQFUDJdIlqA1vKJGxUE6lTg51wdk=) 2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=) 3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 22:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:33:b2:27:94:3f:83:6a:ac:11:32:f9:8e:27:dd:76:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d Validity Not Before: Dec 18 23:01:12 2025 GMT Not After : Dec 19 23:01:12 2025 GMT Subject: CN=42ce745986f492ead5790923b3c87358d35d3ea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:7d:5e:1d:79:43:75:77:c6:ff:52:04:89:c4: 3c:48:8a:ea:4c:d1:24:b8:4a:cb:cc:f2:2e:6b:f3: 5c:59:01:f8:b5:f7:12:5d:80:12:95:bc:ad:01:1e: a7:e8:7a:4e:c5:57:54:b5:70:1a:33:76:bc:f8:83: 3d:9a:de:9f:fe:22:2c:bf:3b:4a:fb:23:da:d0:7d: f0:52:98:c0:95:81:76:c9:28:74:fc:34:ad:8c:6a: f3:b8:65:d4:06:85:a7:c1:b0:79:01:1b:6d:60:ea: be:a9:cd:e8:f8:64:9c:99:02:1c:f2:aa:51:6b:7c: a3:12:d8:6a:72:65:dd:cf:12:cc:f0:11:af:f9:a5: 2d:1b:e1:d5:93:58:ed:c7:82:ac:be:29:a5:ff:5b: 42:95:80:63:8b:cf:7a:9f:84:49:09:93:61:bc:d1: 07:2a:9d:c3:47:eb:37:13:da:3d:ac:66:cb:a7:92: ab:85:b0:dd:f7:ce:63:45:41:25:20:18:aa:b1:d7: f5:ba:19:1b:50:32:77:9a:03:a0:fc:bb:75:1a:d4: c2:a7:4c:d3:e6:5b:c5:1b:b6:aa:aa:ff:a6:17:06: ec:f9:1b:4e:82:7c:20:7e:9f:6b:1d:3c:01:df:32: 86:4a:51:30:09:91:e1:ae:dd:e6:4e:65:ef:20:86: f5:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CE:74:59:86:F4:92:EA:D5:79:09:23:B3:C8:73:58:D3:5D:3E:A1 X509v3 Authority Key Identifier: keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:53:c7:34:c7:2e:78:70:52:10:c7:93:78:1d:83:a8:c3:e0: e5:59:39:12:87:42:ce:01:bc:a1:f3:d1:b0:39:5a:60:ef:8b: 51:cd:d6:83:58:49:fe:8b:d3:4a:a8:52:58:26:e8:43:a9:63: 5a:44:92:ec:33:80:a5:25:d5:65:a5:b3:df:25:39:f8:5a:0b: 6a:4d:01:cc:90:bd:e8:22:ac:97:a1:a1:2f:41:a2:17:1c:d8: 20:c5:db:80:67:a7:dc:6e:a9:a9:1f:b7:86:f8:b6:7c:a2:54: 8f:b8:04:b7:b2:8e:1d:a9:e6:5f:4f:48:31:af:f1:22:c2:f9: a1:1f:da:72:57:4f:fa:b9:23:3f:6e:2d:68:be:c3:8c:91:9a: 96:1e:40:81:be:c7:28:8f:46:06:45:d9:22:6d:2c:5a:16:de: 4d:0c:b3:27:87:56:1e:d7:82:96:bb:aa:f0:c6:ed:39:bb:40: 0d:be:87:86:3f:50:58:b4:68:ca:18:3b:7a:58:c0:fa:d2:48: a4:cd:8e:a4:96:ab:cf:1b:fa:a3:06:06:45:87:23:db:55:e7: 35:84:aa:7e:ee:9f:92:fe:62:a2:b3:e2:4d:f8:c7:cc:ee:45: 89:5b:2c:e4:46:f7:71:96:db:0b:10:8b:77:ca:f6:d2:9f:83: 68:a1:11:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZszsieUP4NqrBEy+Y4n3Xa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDA2OGQ1YmYxYmZmZDc5MTc0ZTM3NTAxYmZhMTdmOTE3 YjMxM2QwHhcNMjUxMjE4MjMwMTEyWhcNMjUxMjE5MjMwMTEyWjAzMTEwLwYDVQQD Eyg0MmNlNzQ1OTg2ZjQ5MmVhZDU3OTA5MjNiM2M4NzM1OGQzNWQzZWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH1eHXlDdXfG/1IEicQ8SIrqTNEk uErLzPIua/NcWQH4tfcSXYASlbytAR6n6HpOxVdUtXAaM3a8+IM9mt6f/iIsvztK +yPa0H3wUpjAlYF2ySh0/DStjGrzuGXUBoWnwbB5ARttYOq+qc3o+GScmQIc8qpR a3yjEthqcmXdzxLM8BGv+aUtG+HVk1jtx4Ksviml/1tClYBji896n4RJCZNhvNEH Kp3DR+s3E9o9rGbLp5KrhbDd985jRUElIBiqsdf1uhkbUDJ3mgOg/Lt1GtTCp0zT 5lvFG7aqqv+mFwbs+RtOgnwgfp9rHTwB3zKGSlEwCZHhrt3mTmXvIIb1HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFELOdFmG9JLq1XkJI7PIc1jTXT6hMB8GA1UdIwQY MBaAFHEAaNW/G//XkXTjdQG/oX+RezE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDkt ODIwNDNiOWU0ZjcxLzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDktODIwNDNiOWU0Zjcx LzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUVPHNMcu eHBSEMeTeB2DqMPg5Vk5EodCzgG8ofPRsDlaYO+LUc3Wg1hJ/ovTSqhSWCboQ6lj WkSS7DOApSXVZaWz3yU5+FoLak0BzJC96CKsl6GhL0GiFxzYIMXbgGen3G6pqR+3 hvi2fKJUj7gEt7KOHanmX09IMa/xIsL5oR/acldP+rkjP24taL7DjJGalh5Agb7H KI9GBkXZIm0sWhbeTQyzJ4dWHteClruq8MbtObtADb6Hhj9QWLRoyhg7eljA+tJI pM2OpJarzxv6owYGRYcj21XnNYSqfu6fkv5iorPiTfjHzO5FiVss5Eb3cZbbCxCL d8r20p+DaKERWw== -----END CERTIFICATE-----Generated at Fri Dec 19 07:16:09 2025 by rpki-client