This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft File: Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json) Hash identifier: WaMpd/f23M+ICIAYNXuxDP4b8WnRVyYRAHC3y6Ao7aU= Subject key identifier: 5C:5E:0C:AF:73:81:B6:85:4C:DB:FC:53:38:82:ED:CE:46:18:13:E3 Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03 Certificate issuer: /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903 Certificate serial: 019AF12D0F720C17B446114F693B5963D5A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft Manifest number: 1769 Signing time: Sat 06 Dec 2025 01:00:53 +0000 Manifest this update: Sat 06 Dec 2025 01:00:53 +0000 Manifest next update: Sun 07 Dec 2025 01:00:53 +0000 Files and hashes: 1: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: DwFKpgvEsAzW3FSpJXmqU4/ozPILF8yRMoLcZdrNlH4=) 2: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (hash: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=) 3: kJNmbBAcX5VkHV_EqLQCBrY5F0s.roa (hash: qjqDS7zlcVvdFxuRkBahP89SqyWQqIjGQgsXya2h7mY=) 4: nToAqcsYyxwDGsMBzLqBicaltlw.roa (hash: Eac2WLhpsA1YSA5bwyxiOfidCi/tlLgtUwluSQVDo/A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:0f:72:0c:17:b4:46:11:4f:69:3b:59:63:d5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903 Validity Not Before: Dec 6 01:00:53 2025 GMT Not After : Dec 7 01:00:53 2025 GMT Subject: CN=5c5e0caf7381b6854cdbfc533882edce461813e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a3:12:c4:da:82:5f:72:87:49:62:53:5c:27: ca:25:80:5b:fe:d3:00:db:60:97:b1:1d:8c:4d:49: fb:76:e0:f8:ce:cb:fb:2d:98:71:78:5e:65:47:7e: 3c:32:68:70:28:6d:50:91:61:b0:d0:17:b9:0f:9a: f7:93:9f:64:59:c5:cd:16:79:d5:ee:39:1b:9e:1b: 95:d9:79:a9:90:92:14:b4:20:5b:51:e5:b9:56:82: 88:26:00:88:b8:83:cf:20:2e:f0:98:45:a7:d6:8c: a1:3e:de:08:50:1b:15:97:a2:ae:2e:53:58:2a:6b: bb:9e:28:67:9f:14:18:f7:65:ce:d9:2f:75:02:b3: 6d:84:e9:f1:2f:5a:54:7c:90:64:28:a3:82:1e:fe: fc:98:87:a5:11:f1:d2:51:ea:32:ce:f8:19:6a:81: 13:44:d7:fb:f1:47:e9:bb:75:bb:cd:68:ff:9b:03: 02:1f:22:2a:67:1f:3b:d0:26:3c:80:99:ef:48:be: 69:b9:c4:d7:2d:47:c1:64:45:73:87:a7:db:f6:52: a0:c7:88:bf:51:ac:bb:09:ae:0d:81:9e:15:f6:4b: c1:06:56:9a:74:30:f1:bc:b2:ff:73:88:bb:3f:eb: 0c:cf:9f:c6:40:52:66:c1:3a:68:cf:80:0f:f6:dc: 71:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:5E:0C:AF:73:81:B6:85:4C:DB:FC:53:38:82:ED:CE:46:18:13:E3 X509v3 Authority Key Identifier: keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:05:8d:5b:a6:9d:5a:87:8c:72:d9:18:31:f9:bc:d5:f0:56: ee:ab:3a:a4:55:4f:55:b4:13:f1:1a:08:9e:77:5b:08:fb:69: 39:c2:c3:4d:fe:59:da:52:f1:5e:34:43:f2:b9:88:b2:53:3b: 1f:74:34:86:5b:a9:d0:c4:14:80:27:b0:68:8b:13:4d:ee:e7: 71:2b:50:85:3e:9c:41:fc:4c:a8:22:48:77:59:e4:16:1a:3c: 18:79:2e:a6:0d:8f:cc:5f:93:2d:7c:eb:98:da:b9:a0:2f:52: 30:3e:89:c6:70:47:53:2b:94:d3:8e:08:11:8d:dd:4e:10:aa: eb:ab:28:33:80:c8:01:84:a3:3e:20:bf:69:00:33:4d:cd:01: 43:e3:2a:4e:02:05:f0:fc:a0:84:ed:01:94:40:38:0e:69:38: 36:56:e8:fa:9c:83:11:e1:6d:70:df:93:a4:45:ed:56:cb:5d: c3:70:1e:df:71:79:eb:75:3a:07:2c:b2:26:59:5c:9a:ce:c8: 44:2c:5a:fd:44:fb:dd:62:cd:c7:71:28:01:d0:7d:25:58:52: 38:09:92:86:20:62:2a:bf:0c:54:9d:b2:b9:c8:44:cb:05:ba: 06:23:aa:ce:ed:d9:58:7b:b4:e2:45:3f:5c:60:93:2c:3b:10: 7d:29:06:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLQ9yDBe0RhFPaTtZY9WgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTc3NDI3YzAzNzA5YjMzOWE5NWIwYWQ5YTRhYzlkMmM5 MmM5MDMwHhcNMjUxMjA2MDEwMDUzWhcNMjUxMjA3MDEwMDUzWjAzMTEwLwYDVQQD Eyg1YzVlMGNhZjczODFiNjg1NGNkYmZjNTMzODgyZWRjZTQ2MTgxM2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qMSxNqCX3KHSWJTXCfKJYBb/tMA 22CXsR2MTUn7duD4zsv7LZhxeF5lR348MmhwKG1QkWGw0Be5D5r3k59kWcXNFnnV 7jkbnhuV2XmpkJIUtCBbUeW5VoKIJgCIuIPPIC7wmEWn1oyhPt4IUBsVl6KuLlNY Kmu7nihnnxQY92XO2S91ArNthOnxL1pUfJBkKKOCHv78mIelEfHSUeoyzvgZaoET RNf78Ufpu3W7zWj/mwMCHyIqZx870CY8gJnvSL5pucTXLUfBZEVzh6fb9lKgx4i/ Uay7Ca4NgZ4V9kvBBlaadDDxvLL/c4i7P+sMz5/GQFJmwTpoz4AP9txx8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxeDK9zgbaFTNv8UziC7c5GGBPjMB8GA1UdIwQY MBaAFDKndCfANwmzOalbCtmkrJ0skskDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmIt N2Q0MGI3YzhmYjAxLzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMjUxZWQtNTk2Ny00ZGRkLTkzMmItN2Q0MGI3YzhmYjAx LzEvTXFkMEo4QTNDYk01cVZzSzJhU3NuU3lTeVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgWNW6ad WoeMctkYMfm81fBW7qs6pFVPVbQT8RoInndbCPtpOcLDTf5Z2lLxXjRD8rmIslM7 H3Q0hlup0MQUgCewaIsTTe7ncStQhT6cQfxMqCJId1nkFho8GHkupg2PzF+TLXzr mNq5oC9SMD6JxnBHUyuU044IEY3dThCq66soM4DIAYSjPiC/aQAzTc0BQ+MqTgIF 8PyghO0BlEA4Dmk4Nlbo+pyDEeFtcN+TpEXtVstdw3Ae33F563U6ByyyJllcms7I RCxa/UT73WLNx3EoAdB9JVhSOAmShiBiKr8MVJ2yuchEywW6BiOqzu3ZWHu04kU/ XGCTLDsQfSkGvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 09:20:13 2025 by rpki-client