This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft File: cQUbDizppMnmEh6YPRZf6rh-w1Q.mft (raw, json) Hash identifier: fMCh6o95k2413MtM7UvddykbF3k+1Nkbk8ypUnOCNtc= Subject key identifier: A2:4D:07:84:FE:31:00:BC:36:8D:1F:A7:42:24:C2:9A:DD:A8:77:C2 Authority key identifier: 71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 Certificate issuer: /CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Certificate serial: 019AF2097917C20C7732869B23568954B392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft Manifest number: 10F7 Signing time: Sat 06 Dec 2025 05:01:38 +0000 Manifest this update: Sat 06 Dec 2025 05:01:38 +0000 Manifest next update: Sun 07 Dec 2025 05:01:38 +0000 Files and hashes: 1: 77c7LwFJ33uk1xUKt1FAfMJrE9U.roa (hash: Xw/VJxGC8Vr3IxfSUZP9dX3SHM7xwIjH1eQJVicfbvU=) 2: cQUbDizppMnmEh6YPRZf6rh-w1Q.crl (hash: EVHc5rfbGi7JfZjl3p1I/sChhIQPbCd24Ncc1ZOpI+M=) 3: ksfUG5eUsSmxI4_eXAlia-83kt8.roa (hash: Ve1sXWpLbI/ytU2pjBhiO6pODt6uVzJVCiwoLnmWH3M=) 4: mQfuYDhcQ_uLiN8TuC8vArT48n0.roa (hash: q6GrLFR9Jvk7SkT0Gz0aQLhMWCRoiLx7tXQ4Qt2xjP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:79:17:c2:0c:77:32:86:9b:23:56:89:54:b3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71051b0e2ce9a4c9e6121e983d165feab87ec354 Validity Not Before: Dec 6 05:01:38 2025 GMT Not After : Dec 7 05:01:38 2025 GMT Subject: CN=a24d0784fe3100bc368d1fa74224c29adda877c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:69:66:01:b0:2f:93:0e:03:42:d0:00:1d:f6: f7:c0:cc:21:ab:b7:a3:65:6e:a7:52:8c:b5:e8:cb: 7b:57:a1:5f:11:ad:cc:02:6e:e6:2e:10:0e:d5:16: 8b:d9:b7:65:ec:13:ca:00:c8:56:66:e1:9a:46:5b: 2c:78:f5:62:3d:8d:b7:af:47:4e:9e:d1:bc:d3:5a: d5:46:2e:f4:84:c9:8a:30:6d:87:eb:f4:61:16:80: 6a:53:38:e5:58:00:84:d6:42:e8:23:99:0e:7e:ad: 3b:fa:aa:ad:90:fc:92:f7:45:e5:be:e0:61:fa:c8: 1a:65:08:6b:67:f9:b6:9c:d4:bb:b3:46:05:ef:75: bb:88:37:15:9c:a4:c3:fc:9a:e5:4d:ae:76:46:d6: 9d:a5:ed:33:3a:57:a1:6f:4a:f7:d3:de:ce:22:2d: cb:3c:a4:62:74:e7:33:1f:1c:41:a6:7d:8b:28:df: e8:94:29:ac:aa:da:3e:d6:be:5d:5f:c7:a6:59:09: 13:25:4e:1b:63:94:df:7a:2d:f7:0d:e3:b3:47:a3: 2d:22:b0:dc:b7:92:b4:6e:64:4b:20:82:3f:31:fb: b1:33:5e:31:8a:74:0b:82:3f:35:5c:89:08:a2:88: 6d:de:43:1b:fe:8d:4a:54:ce:c4:af:ba:bf:ad:1c: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4D:07:84:FE:31:00:BC:36:8D:1F:A7:42:24:C2:9A:DD:A8:77:C2 X509v3 Authority Key Identifier: keyid:71:05:1B:0E:2C:E9:A4:C9:E6:12:1E:98:3D:16:5F:EA:B8:7E:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQUbDizppMnmEh6YPRZf6rh-w1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e51583-f55c-493b-b950-736ab83494ac/1/cQUbDizppMnmEh6YPRZf6rh-w1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:70:e5:67:ba:98:96:e7:4d:be:63:d1:9b:34:26:73:5d:a9: 9b:06:6e:30:a7:53:c1:4e:c5:c3:cb:98:69:bb:2d:ba:4b:30: 34:4c:61:e7:81:1a:af:c0:b7:9a:78:56:4e:9b:f8:f3:88:06: 06:e0:be:c7:ea:31:61:20:83:9a:03:5c:1a:a6:c8:7a:0a:07: 16:e6:73:fb:c5:24:c9:b5:ad:c7:63:86:3c:eb:6d:c6:76:97: ca:67:05:d2:84:93:c8:d2:1e:ce:83:d7:13:ce:4f:9d:d6:7d: 95:ff:da:ae:82:74:94:a8:a0:23:3b:a4:ec:36:e7:bf:55:e9: ec:ac:93:69:77:9b:f0:7c:8e:63:24:3d:6a:e4:3c:16:56:a1: 7c:f1:64:ba:35:dc:d0:65:63:15:95:19:0c:80:53:5e:38:e0: 74:d7:87:a6:a3:67:78:a9:6a:e3:cb:2a:6a:6d:13:ae:b1:f1: 8b:b9:d4:06:27:c1:a4:ec:8f:e9:c9:c1:13:32:c2:b8:1e:e3: ea:dc:06:7f:d6:79:61:98:a3:36:c0:e1:95:c4:7c:72:38:90: 02:58:b1:4d:49:d8:33:30:f5:40:84:f9:dc:1c:2e:73:ad:8e: f4:b2:62:07:26:ee:ba:b3:0e:d4:5b:e3:7a:eb:82:aa:0c:59: 94:58:77:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXkXwgx3MoabI1aJVLOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDUxYjBlMmNlOWE0YzllNjEyMWU5ODNkMTY1ZmVhYjg3 ZWMzNTQwHhcNMjUxMjA2MDUwMTM4WhcNMjUxMjA3MDUwMTM4WjAzMTEwLwYDVQQD EyhhMjRkMDc4NGZlMzEwMGJjMzY4ZDFmYTc0MjI0YzI5YWRkYTg3N2MyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGlmAbAvkw4DQtAAHfb3wMwhq7ej ZW6nUoy16Mt7V6FfEa3MAm7mLhAO1RaL2bdl7BPKAMhWZuGaRlssePViPY23r0dO ntG801rVRi70hMmKMG2H6/RhFoBqUzjlWACE1kLoI5kOfq07+qqtkPyS90XlvuBh +sgaZQhrZ/m2nNS7s0YF73W7iDcVnKTD/JrlTa52Rtadpe0zOlehb0r3097OIi3L PKRidOczHxxBpn2LKN/olCmsqto+1r5dX8emWQkTJU4bY5Tfei33DeOzR6MtIrDc t5K0bmRLIII/MfuxM14xinQLgj81XIkIooht3kMb/o1KVM7Er7q/rRw0OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKJNB4T+MQC8No0fp0IkwprdqHfCMB8GA1UdIwQY MBaAFHEFGw4s6aTJ5hIemD0WX+q4fsNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAt NzM2YWI4MzQ5NGFjLzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9lNTE1ODMtZjU1Yy00OTNiLWI5NTAtNzM2YWI4MzQ5NGFj LzEvY1FVYkRpenBwTW5tRWg2WVBSWmY2cmgtdzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3DlZ7qY ludNvmPRmzQmc12pmwZuMKdTwU7Fw8uYabstukswNExh54Ear8C3mnhWTpv484gG BuC+x+oxYSCDmgNcGqbIegoHFuZz+8UkybWtx2OGPOttxnaXymcF0oSTyNIezoPX E85PndZ9lf/aroJ0lKigIzuk7Dbnv1Xp7KyTaXeb8HyOYyQ9auQ8FlahfPFkujXc 0GVjFZUZDIBTXjjgdNeHpqNneKlq48sqam0TrrHxi7nUBifBpOyP6cnBEzLCuB7j 6twGf9Z5YZijNsDhlcR8cjiQAlixTUnYMzD1QIT53Bwuc62O9LJiBybuurMO1Fvj euuCqgxZlFh3Vw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:25:36 2025 by rpki-client