This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json) Hash identifier: oZF84miSHGn4BlVh4We0vDtvCdngbZEPljHWHC43DE0= Subject key identifier: CA:A4:B4:DA:01:92:9A:94:DA:FE:B9:BE:30:86:5B:1D:38:C3:94:A6 Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Certificate serial: 019AF208FA3E5C13AA47A6B819DECCA19ED1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft Manifest number: 1551 Signing time: Sat 06 Dec 2025 05:01:05 +0000 Manifest this update: Sat 06 Dec 2025 05:01:05 +0000 Manifest next update: Sun 07 Dec 2025 05:01:05 +0000 Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=) 2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: o5UECVf/7QV6ZTAkVjZ/15ACrQyVfLTq7eyMcqUMobs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:fa:3e:5c:13:aa:47:a6:b8:19:de:cc:a1:9e:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Validity Not Before: Dec 6 05:01:05 2025 GMT Not After : Dec 7 05:01:05 2025 GMT Subject: CN=caa4b4da01929a94dafeb9be30865b1d38c394a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:15:0e:c3:dc:68:42:eb:83:34:14:74:25:40: fc:ac:e7:29:55:e8:0c:22:40:87:ef:b9:1b:0c:07: ed:4d:ed:45:93:bd:1d:d0:28:e3:84:6b:ac:03:d5: 01:72:ed:f1:e1:a0:5a:da:88:7a:22:08:7a:71:0c: 51:e1:f7:56:3c:2f:17:89:e8:b8:95:79:ac:7c:41: 16:99:ad:7b:40:98:19:a9:21:9f:69:f3:dc:90:83: de:44:45:4b:5a:27:c1:22:4e:63:1a:c3:72:01:e6: ff:47:52:ac:2f:3a:02:b8:c3:0e:4a:6a:a7:7f:3e: a1:cf:50:00:2f:25:48:9f:26:f7:2c:68:9f:02:ae: 17:f8:c5:0f:8d:59:1e:89:df:4e:d2:25:39:9e:67: b9:b5:8b:ec:69:74:f0:46:09:1c:bb:ed:97:7c:2d: 55:98:b8:20:8b:58:0e:0b:a4:87:8c:9b:75:ed:5f: e6:ac:37:31:e7:61:67:37:3e:25:b9:90:c1:6d:89: 85:63:89:73:92:3c:e5:bf:93:b6:8c:54:36:ed:1c: d1:36:38:57:9b:0d:3c:2b:0d:01:e0:c8:0d:8d:3c: 55:74:a9:21:7f:9e:e6:16:43:8b:96:6c:d6:99:bf: d9:19:0d:41:5d:20:57:8d:73:50:47:ec:36:7d:58: 20:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A4:B4:DA:01:92:9A:94:DA:FE:B9:BE:30:86:5B:1D:38:C3:94:A6 X509v3 Authority Key Identifier: keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:22:21:79:9f:bc:b8:71:68:01:76:ce:97:1b:82:06:0a:34: e3:f3:0e:0b:25:34:3b:84:4e:28:9f:c6:d6:66:79:38:f8:7c: e4:36:aa:57:90:15:85:e8:98:2e:37:4f:6e:4b:88:8b:19:ba: bd:21:49:c3:e9:d1:bc:70:43:4b:61:61:a9:ab:99:e8:fb:1a: 2b:1b:e8:42:d1:28:b0:b1:ef:8d:bb:58:5d:d2:ad:8d:08:65: 49:8e:e2:75:87:e8:9a:c7:ef:9a:b6:fc:4c:16:52:bf:de:5b: 00:f3:3e:31:11:ee:0b:e4:e7:69:3f:a0:d4:53:16:dc:a0:bb: 82:47:ee:d3:49:c8:ed:03:67:fa:d4:47:ef:c4:9b:b1:2d:04: e3:4a:0d:09:59:1d:e1:86:8d:85:11:0b:be:be:d9:5f:12:7d: 47:1f:3c:37:0c:64:92:50:cf:ea:fa:57:b4:67:95:b0:ea:a3: 9c:73:c2:a5:6f:df:c7:19:ff:dd:47:65:86:c2:15:f7:5b:7b: 5a:74:bc:ec:ec:7e:0a:ea:3a:bb:ec:c9:3e:94:3a:90:df:2e: 3a:72:88:55:0b:9a:6e:c7:21:f7:8f:26:39:55:69:99:3e:c2: c7:e8:c2:2f:dd:15:e0:95:e9:c1:91:28:cf:d3:fb:aa:95:de: a4:2e:9d:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPo+XBOqR6a4Gd7MoZ7RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy YmQ0YmYwHhcNMjUxMjA2MDUwMTA1WhcNMjUxMjA3MDUwMTA1WjAzMTEwLwYDVQQD EyhjYWE0YjRkYTAxOTI5YTk0ZGFmZWI5YmUzMDg2NWIxZDM4YzM5NGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhUOw9xoQuuDNBR0JUD8rOcpVegM IkCH77kbDAftTe1Fk70d0CjjhGusA9UBcu3x4aBa2oh6Igh6cQxR4fdWPC8Xiei4 lXmsfEEWma17QJgZqSGfafPckIPeREVLWifBIk5jGsNyAeb/R1KsLzoCuMMOSmqn fz6hz1AALyVInyb3LGifAq4X+MUPjVkeid9O0iU5nme5tYvsaXTwRgkcu+2XfC1V mLggi1gOC6SHjJt17V/mrDcx52FnNz4luZDBbYmFY4lzkjzlv5O2jFQ27RzRNjhX mw08Kw0B4MgNjTxVdKkhf57mFkOLlmzWmb/ZGQ1BXSBXjXNQR+w2fVggPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMqktNoBkpqU2v65vjCGWx04w5SmMB8GA1UdIwQY MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3 LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcyIheZ+8 uHFoAXbOlxuCBgo04/MOCyU0O4ROKJ/G1mZ5OPh85DaqV5AVheiYLjdPbkuIixm6 vSFJw+nRvHBDS2FhqauZ6PsaKxvoQtEosLHvjbtYXdKtjQhlSY7idYfomsfvmrb8 TBZSv95bAPM+MRHuC+TnaT+g1FMW3KC7gkfu00nI7QNn+tRH78SbsS0E40oNCVkd 4YaNhRELvr7ZXxJ9Rx88NwxkklDP6vpXtGeVsOqjnHPCpW/fxxn/3UdlhsIV91t7 WnS87Ox+Cuo6u+zJPpQ6kN8uOnKIVQuabsch948mOVVpmT7Cx+jCL90V4JXpwZEo z9P7qpXepC6d6g== -----END CERTIFICATE-----Generated at Sat Dec 6 10:56:14 2025 by rpki-client