This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json) Hash identifier: Ii9XhPDpik9WR3eRfbC5lo7YI19xLRcfuCYd0qvVbwk= Subject key identifier: 65:62:96:9E:C3:2F:26:5C:35:12:C0:7D:0A:44:98:A1:C4:A1:BF:C6 Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Certificate serial: 019AF1D22C69D688DBFF968D17595834E8BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft Manifest number: 0EBE Signing time: Sat 06 Dec 2025 04:01:14 +0000 Manifest this update: Sat 06 Dec 2025 04:01:14 +0000 Manifest next update: Sun 07 Dec 2025 04:01:14 +0000 Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: uIG5OmMeUJ/Isz+AcWEhFTtNVSyHNMWy04GCur9ncks=) 2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:2c:69:d6:88:db:ff:96:8d:17:59:58:34:e8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Validity Not Before: Dec 6 04:01:14 2025 GMT Not After : Dec 7 04:01:14 2025 GMT Subject: CN=6562969ec32f265c3512c07d0a4498a1c4a1bfc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:24:3c:2f:7c:bf:1d:f0:e7:09:95:44:8a: 32:39:fe:23:db:76:0f:12:59:df:cf:ed:9e:f6:83: 34:a1:a8:78:5c:11:e8:cd:c2:71:17:0a:09:71:01: 5a:4d:4b:d3:22:ce:b9:35:e8:96:76:41:1f:de:f4: 2e:7d:fc:7c:c9:53:6a:38:f6:be:fa:d4:95:69:30: a3:c0:54:77:3d:0e:bf:77:3c:85:5c:d2:c7:3d:3d: 11:33:ed:b0:b3:34:df:6d:0a:bd:cd:71:ec:ca:3c: 0a:d5:ae:13:7e:25:55:c1:d6:0a:ef:d8:8f:e2:bc: ca:ec:1d:79:b5:9e:0f:97:a4:03:19:a5:dc:4f:ac: 53:96:c0:6f:8f:77:f8:bd:69:19:06:70:2e:21:18: 9b:d1:7b:f2:79:54:20:54:b4:55:7f:e2:f6:4d:04: 9e:2d:fa:0f:27:c0:f3:14:27:1d:5e:b9:88:53:fe: 9e:9c:38:66:5b:e6:be:a4:d7:e3:20:d3:f8:9c:ac: 2f:bd:74:9d:69:9b:58:5c:e5:91:e8:b9:12:e9:4a: 02:c1:a9:12:a4:fa:03:41:69:77:81:b8:9d:48:cc: c3:bc:19:44:fe:7c:6e:27:40:b7:d9:6c:12:cd:ac: d5:ea:6e:5c:f1:3d:10:15:2d:b9:81:39:4c:24:e9: 36:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:96:9E:C3:2F:26:5C:35:12:C0:7D:0A:44:98:A1:C4:A1:BF:C6 X509v3 Authority Key Identifier: keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e4:40:1f:6d:d7:be:32:89:24:e9:2c:bb:42:c6:c1:da:40: 23:a1:49:12:2e:39:40:de:9e:f4:49:a5:67:bb:5a:64:67:9b: de:0f:19:09:fb:90:b9:7a:b8:03:3a:9a:cb:a1:7a:8f:dc:fc: 97:cb:ea:8c:e8:40:9c:08:24:e6:45:a1:05:4e:ab:3d:19:1e: 0d:08:fd:41:ea:e7:df:76:79:4e:ff:dc:54:1d:04:bb:1b:af: 8f:23:44:64:b5:35:31:18:b6:15:9d:d4:1d:97:37:8a:81:97: c0:fe:88:a8:1a:f2:16:71:67:26:7b:5d:c9:f4:32:e8:28:94: ce:53:54:9a:f1:5b:b0:a8:8e:e8:d5:03:50:c7:2a:30:46:3d: d7:89:3f:0c:a3:d7:3b:3e:59:65:2d:e9:58:d7:f5:a7:1a:f3: b8:a7:07:01:93:55:8d:a5:05:37:27:8d:c6:b3:3d:47:0b:ef: 11:92:ae:4c:92:fe:72:32:55:53:0c:33:45:fe:0d:18:77:8f: 26:8b:b8:9c:94:81:77:60:ea:a9:6f:30:b9:00:8b:07:ac:0a: 5e:93:e9:f0:78:ae:85:ee:c3:c6:e2:84:89:87:24:d8:35:06: f7:8f:d9:5c:6b:e1:10:d0:79:7d:87:2d:95:42:38:10:ad:28: e1:fe:24:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0ixp1ojb/5aNF1lYNOi9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl NmVmMTMwHhcNMjUxMjA2MDQwMTE0WhcNMjUxMjA3MDQwMTE0WjAzMTEwLwYDVQQD Eyg2NTYyOTY5ZWMzMmYyNjVjMzUxMmMwN2QwYTQ0OThhMWM0YTFiZmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6YkPC98vx3w5wmVRIoyOf4j23YP Elnfz+2e9oM0oah4XBHozcJxFwoJcQFaTUvTIs65NeiWdkEf3vQuffx8yVNqOPa+ +tSVaTCjwFR3PQ6/dzyFXNLHPT0RM+2wszTfbQq9zXHsyjwK1a4TfiVVwdYK79iP 4rzK7B15tZ4Pl6QDGaXcT6xTlsBvj3f4vWkZBnAuIRib0XvyeVQgVLRVf+L2TQSe LfoPJ8DzFCcdXrmIU/6enDhmW+a+pNfjINP4nKwvvXSdaZtYXOWR6LkS6UoCwakS pPoDQWl3gbidSMzDvBlE/nxuJ0C32WwSzazV6m5c8T0QFS25gTlMJOk2VwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGVilp7DLyZcNRLAfQpEmKHEob/GMB8GA1UdIwQY MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuRAH23X vjKJJOksu0LGwdpAI6FJEi45QN6e9EmlZ7taZGeb3g8ZCfuQuXq4Azqay6F6j9z8 l8vqjOhAnAgk5kWhBU6rPRkeDQj9Qern33Z5Tv/cVB0EuxuvjyNEZLU1MRi2FZ3U HZc3ioGXwP6IqBryFnFnJntdyfQy6CiUzlNUmvFbsKiO6NUDUMcqMEY914k/DKPX Oz5ZZS3pWNf1pxrzuKcHAZNVjaUFNyeNxrM9RwvvEZKuTJL+cjJVUwwzRf4NGHeP Jou4nJSBd2DqqW8wuQCLB6wKXpPp8Hiuhe7DxuKEiYck2DUG94/ZXGvhENB5fYct lUI4EK0o4f4kGg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:45:39 2025 by rpki-client