This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft File: cqpTdXQ1Dyam82tD3DA7njOefuw.mft (raw, json) Hash identifier: 9nYX+BKhxSGYgVDgn4iszUELvVeDq96gickM5Jb7vG4= Subject key identifier: 44:2F:52:AD:21:11:13:61:D4:F5:91:52:C5:87:2D:1F:7E:F5:A8:95 Authority key identifier: 72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC Certificate issuer: /CN=72aa537574350f26a6f36b43dc303b9e339e7eec Certificate serial: 019AF2094AE4513A4ED8085B327F463A3774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft Manifest number: D6 Signing time: Sat 06 Dec 2025 05:01:26 +0000 Manifest this update: Sat 06 Dec 2025 05:01:26 +0000 Manifest next update: Sun 07 Dec 2025 05:01:26 +0000 Files and hashes: 1: OdQoZmUeQxbjQw9Xd3JcS6O4ZB0.roa (hash: h6gBIhto95GvAYtKF7Qysg2Pvm4JnUu8RgX7IrQ7D+s=) 2: cqpTdXQ1Dyam82tD3DA7njOefuw.crl (hash: MlhtnxCZQJ/howsk2C0rLjBg98/a+5wg4/Mk88pyX/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:4a:e4:51:3a:4e:d8:08:5b:32:7f:46:3a:37:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72aa537574350f26a6f36b43dc303b9e339e7eec Validity Not Before: Dec 6 05:01:26 2025 GMT Not After : Dec 7 05:01:26 2025 GMT Subject: CN=442f52ad21111361d4f59152c5872d1f7ef5a895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:39:bf:50:18:a2:87:5b:36:eb:8f:1e:ce:f2: 25:05:33:c5:c5:e0:ee:2d:ee:fa:af:d5:01:78:e4: 62:17:98:32:23:9c:5c:4e:fd:d8:ff:9a:c0:b7:33: f5:e7:aa:77:5b:44:ab:85:c9:48:b2:41:e4:27:dc: 32:26:04:87:84:0d:21:4a:d9:17:c7:e5:d9:90:f0: 7d:ea:ba:ad:70:a9:79:de:b2:b6:86:d1:db:80:3a: 80:cd:ac:83:63:b4:e9:0e:3f:62:2d:6f:6c:5c:96: d8:08:9b:fb:ed:a6:56:41:37:80:07:fb:cf:b2:52: e0:5c:d3:b6:c6:c2:72:ea:a1:60:4a:ae:2e:b6:bf: 5d:0f:8c:66:b5:d0:e6:c2:78:f6:bc:a2:f3:ba:25: 15:81:bc:b2:4c:b0:da:1e:02:a0:b5:d1:3d:c1:f6: de:79:3f:eb:67:7c:c8:49:de:4c:d9:7c:86:43:51: 44:a9:88:7a:65:8e:71:5b:4b:d3:7d:91:c7:d1:2f: 2e:83:4b:01:00:f9:78:95:37:2f:b6:2f:eb:7b:53: ba:88:ff:37:7f:84:04:e6:17:8a:8b:39:a4:88:b9: ac:a5:4e:14:bd:83:9f:e0:64:c7:bc:4e:c3:c3:3e: e6:fe:2e:6b:3b:3a:9d:56:f0:be:72:0f:8e:61:10: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:52:AD:21:11:13:61:D4:F5:91:52:C5:87:2D:1F:7E:F5:A8:95 X509v3 Authority Key Identifier: keyid:72:AA:53:75:74:35:0F:26:A6:F3:6B:43:DC:30:3B:9E:33:9E:7E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqpTdXQ1Dyam82tD3DA7njOefuw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0f4383-726c-4ab8-9b25-96fd02bce764/1/cqpTdXQ1Dyam82tD3DA7njOefuw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:44:e8:a8:fa:e1:4e:dc:5b:8a:b5:b2:30:82:59:f9:61:ba: ea:4d:05:30:6f:bd:73:51:d3:89:bf:ee:b7:d0:65:51:08:53: e4:c1:9d:3c:ed:b3:bd:d9:3e:e0:d7:83:ab:04:de:8f:ea:d1: 7a:b0:19:bb:e3:51:3c:67:c5:f0:15:33:fe:b6:df:28:85:98: 69:fe:6a:40:39:bd:7a:16:4b:a8:3b:37:61:d4:5f:97:39:cf: 59:83:56:30:fe:e9:e4:ec:85:83:45:4b:04:81:5d:69:db:75: 5a:71:d3:81:b5:2c:d5:ed:d5:ae:e6:83:fb:c6:84:03:bd:7d: 6a:ee:ea:86:1b:80:3d:bc:25:68:ae:ff:e5:a7:16:de:ae:aa: 4c:a9:c7:be:74:5c:7b:fa:eb:a6:4d:5c:c0:c8:18:ec:fa:32: c0:a1:73:50:7c:73:4f:4a:ed:62:5b:3b:48:06:25:a4:62:ba: a3:e6:19:e8:d2:ab:8f:05:08:9a:5e:a5:19:d6:95:47:c5:bd: d8:ce:4a:3d:b8:ab:9d:25:24:d6:f1:96:52:c2:72:9c:29:91: 2b:a7:5c:0c:d2:8c:54:22:43:68:23:ac:a0:68:bb:4d:c3:4a: cc:d1:d8:d9:7a:3c:8d:8a:79:63:22:7d:e4:6d:d4:2f:da:db: d3:95:5e:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCUrkUTpO2AhbMn9GOjd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYWE1Mzc1NzQzNTBmMjZhNmYzNmI0M2RjMzAzYjllMzM5 ZTdlZWMwHhcNMjUxMjA2MDUwMTI2WhcNMjUxMjA3MDUwMTI2WjAzMTEwLwYDVQQD Eyg0NDJmNTJhZDIxMTExMzYxZDRmNTkxNTJjNTg3MmQxZjdlZjVhODk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tm/UBiih1s2648ezvIlBTPFxeDu Le76r9UBeORiF5gyI5xcTv3Y/5rAtzP156p3W0SrhclIskHkJ9wyJgSHhA0hStkX x+XZkPB96rqtcKl53rK2htHbgDqAzayDY7TpDj9iLW9sXJbYCJv77aZWQTeAB/vP slLgXNO2xsJy6qFgSq4utr9dD4xmtdDmwnj2vKLzuiUVgbyyTLDaHgKgtdE9wfbe eT/rZ3zISd5M2XyGQ1FEqYh6ZY5xW0vTfZHH0S8ug0sBAPl4lTcvti/re1O6iP83 f4QE5heKizmkiLmspU4UvYOf4GTHvE7Dwz7m/i5rOzqdVvC+cg+OYRCE3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQvUq0hERNh1PWRUsWHLR9+9aiVMB8GA1UdIwQY MBaAFHKqU3V0NQ8mpvNrQ9wwO54znn7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wZjQzODMtNzI2Yy00YWI4LTliMjUt OTZmZDAyYmNlNzY0LzEvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wZjQzODMtNzI2Yy00YWI4LTliMjUtOTZmZDAyYmNlNzY0 LzEvY3FwVGRYUTFEeWFtODJ0RDNEQTduak9lZnV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUToqPrh TtxbirWyMIJZ+WG66k0FMG+9c1HTib/ut9BlUQhT5MGdPO2zvdk+4NeDqwTej+rR erAZu+NRPGfF8BUz/rbfKIWYaf5qQDm9ehZLqDs3YdRflznPWYNWMP7p5OyFg0VL BIFdadt1WnHTgbUs1e3VruaD+8aEA719au7qhhuAPbwlaK7/5acW3q6qTKnHvnRc e/rrpk1cwMgY7PoywKFzUHxzT0rtYls7SAYlpGK6o+YZ6NKrjwUIml6lGdaVR8W9 2M5KPbirnSUk1vGWUsJynCmRK6dcDNKMVCJDaCOsoGi7TcNKzNHY2Xo8jYp5YyJ9 5G3UL9rb05VeRA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:23:28 2025 by rpki-client