This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft File: dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft (raw, json) Hash identifier: mxTyV/UX4MbLYZZvtxaFi4r9HVEgg8NeZ3wOX/wdBLk= Subject key identifier: E3:36:0C:0F:61:89:1C:48:91:F2:FA:DF:5F:EA:B2:8E:6C:3B:B9:49 Authority key identifier: 76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 Certificate issuer: /CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Certificate serial: 019AF12EEAC3B3817629DD0F559B3498AD7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft Manifest number: 16F3 Signing time: Sat 06 Dec 2025 01:02:54 +0000 Manifest this update: Sat 06 Dec 2025 01:02:54 +0000 Manifest next update: Sun 07 Dec 2025 01:02:54 +0000 Files and hashes: 1: C58mKwVQZDbRnvZ7Z9EpDIFJerE.roa (hash: VYZ3YkpM4rYIEtyFAuIhB+Rv4KcRCxmZuVYERtnotPA=) 2: dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl (hash: SnwQbYsb4EwCjFiL8azsUkku2UACkrQ4gTCna1I0ViM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:ea:c3:b3:81:76:29:dd:0f:55:9b:34:98:ad:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76aa51f2014fa0fd7117069d88a679f1670c32a4 Validity Not Before: Dec 6 01:02:54 2025 GMT Not After : Dec 7 01:02:54 2025 GMT Subject: CN=e3360c0f61891c4891f2fadf5feab28e6c3bb949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:46:67:21:ca:55:3b:b5:59:d3:76:58:00: c7:4c:5c:b4:1d:34:76:34:b2:49:81:7d:e0:1a:d5: e3:87:d0:07:72:60:5a:88:b9:50:dd:38:61:53:69: 38:db:78:4c:16:78:e1:3d:ad:8e:2a:24:5d:e2:38: 4b:72:bd:47:a1:8d:b7:42:ad:6b:10:b2:04:03:71: 88:4a:9c:f9:fa:67:8d:c8:ed:32:4e:d7:5e:d1:74: 9e:0f:14:3b:3f:5e:4d:7e:87:5d:70:68:24:31:bb: 4c:07:f0:b5:cd:63:a6:11:c2:39:94:d6:47:72:13: 10:f8:db:c7:38:ad:3f:a9:dd:66:89:12:32:d3:a4: d8:5d:a7:e4:5d:5b:41:91:af:ca:bc:8d:dc:c8:cd: 6c:d6:3c:aa:cc:bd:65:93:61:19:b5:95:f9:32:41: 84:c0:2c:21:53:6c:75:39:02:67:14:15:d0:3f:5f: 11:75:15:a1:e3:6f:d7:b4:bb:08:48:c1:d4:bd:55: 9e:86:e2:4d:58:a5:c3:b6:30:bd:4a:79:da:ab:6c: 68:0a:42:4e:6e:aa:19:e8:35:75:f3:bb:9f:20:ca: 88:02:74:d1:35:98:96:68:68:9d:81:27:a7:40:e9: 32:05:5a:cd:b9:c7:12:95:b3:98:ee:2d:e1:34:bd: 7b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:36:0C:0F:61:89:1C:48:91:F2:FA:DF:5F:EA:B2:8E:6C:3B:B9:49 X509v3 Authority Key Identifier: keyid:76:AA:51:F2:01:4F:A0:FD:71:17:06:9D:88:A6:79:F1:67:0C:32:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqpR8gFPoP1xFwadiKZ58WcMMqQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5db5a3-a5e6-46c8-aa8e-251f5dce7e4d/1/dqpR8gFPoP1xFwadiKZ58WcMMqQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:be:b5:87:51:bd:73:81:a4:76:41:aa:fc:78:fb:72:6e:4f: a6:07:05:5f:70:e7:e9:b5:da:8f:c7:91:c2:d9:ee:4f:45:2b: db:28:7b:c5:9c:92:b6:0f:0f:0b:31:8e:13:3e:45:08:18:60: 14:0e:4c:cc:ca:91:c7:45:1e:20:f0:91:c0:cc:c1:59:4d:2b: 02:89:96:36:ba:71:2a:3f:86:98:82:19:66:af:ea:35:30:98: 5a:74:e4:06:4d:9a:46:44:7e:94:8a:30:ee:52:5a:12:b7:88: 52:05:70:a3:e4:88:52:54:b6:1e:b4:34:00:28:54:76:fa:90: 22:db:7d:b6:8d:12:04:54:63:05:de:81:02:e1:ed:69:9d:f3: 7a:c4:52:2a:02:4b:d1:c8:09:e2:f6:86:3b:fa:d3:a5:ba:5c: 71:ef:b9:13:51:1e:ce:be:f3:f3:46:c3:34:54:f3:38:24:c6: 76:91:3f:71:04:95:4b:b8:22:fb:6e:e6:78:ec:a9:cc:68:fc: 53:23:d7:10:c2:5c:b2:02:d3:c9:ba:1f:39:bf:cd:c4:89:81: 5b:2a:4c:9b:b9:ed:f1:dc:33:26:9c:cd:f0:6b:e8:fd:f5:7f: 6d:49:2b:05:dc:54:93:8d:82:08:da:63:55:80:c4:58:79:f9: 31:ae:ee:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLurDs4F2Kd0PVZs0mK18MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWE1MWYyMDE0ZmEwZmQ3MTE3MDY5ZDg4YTY3OWYxNjcw YzMyYTQwHhcNMjUxMjA2MDEwMjU0WhcNMjUxMjA3MDEwMjU0WjAzMTEwLwYDVQQD EyhlMzM2MGMwZjYxODkxYzQ4OTFmMmZhZGY1ZmVhYjI4ZTZjM2JiOTQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvFGZyHKVTu1WdN2WADHTFy0HTR2 NLJJgX3gGtXjh9AHcmBaiLlQ3ThhU2k423hMFnjhPa2OKiRd4jhLcr1HoY23Qq1r ELIEA3GISpz5+meNyO0yTtde0XSeDxQ7P15NfoddcGgkMbtMB/C1zWOmEcI5lNZH chMQ+NvHOK0/qd1miRIy06TYXafkXVtBka/KvI3cyM1s1jyqzL1lk2EZtZX5MkGE wCwhU2x1OQJnFBXQP18RdRWh42/XtLsISMHUvVWehuJNWKXDtjC9Snnaq2xoCkJO bqoZ6DV187ufIMqIAnTRNZiWaGidgSenQOkyBVrNuccSlbOY7i3hNL17iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOM2DA9hiRxIkfL631/qso5sO7lJMB8GA1UdIwQY MBaAFHaqUfIBT6D9cRcGnYimefFnDDKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUt MjUxZjVkY2U3ZTRkLzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS81ZGI1YTMtYTVlNi00NmM4LWFhOGUtMjUxZjVkY2U3ZTRk LzEvZHFwUjhnRlBvUDF4RndhZGlLWjU4V2NNTXFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvb61h1G9 c4GkdkGq/Hj7cm5PpgcFX3Dn6bXaj8eRwtnuT0Ur2yh7xZyStg8PCzGOEz5FCBhg FA5MzMqRx0UeIPCRwMzBWU0rAomWNrpxKj+GmIIZZq/qNTCYWnTkBk2aRkR+lIow 7lJaEreIUgVwo+SIUlS2HrQ0AChUdvqQItt9to0SBFRjBd6BAuHtaZ3zesRSKgJL 0cgJ4vaGO/rTpbpcce+5E1Eezr7z80bDNFTzOCTGdpE/cQSVS7gi+27meOypzGj8 UyPXEMJcsgLTybofOb/NxImBWypMm7nt8dwzJpzN8Gvo/fV/bUkrBdxUk42CCNpj VYDEWHn5Ma7uNA== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:42 2025 by rpki-client