This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft File: DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft (raw, json) Hash identifier: /blJXo9Cd9bnkXH0niwjZfI/URg99X3TcDY0Yxk787s= Subject key identifier: E1:41:0E:A1:33:68:E2:E8:91:F8:80:2F:74:24:82:14:78:B1:E8:EF Authority key identifier: 0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 Certificate issuer: /CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Certificate serial: 019AF12DDA228D6A226E50AD44D22C3CB404 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft Manifest number: 0522 Signing time: Sat 06 Dec 2025 01:01:45 +0000 Manifest this update: Sat 06 Dec 2025 01:01:45 +0000 Manifest next update: Sun 07 Dec 2025 01:01:45 +0000 Files and hashes: 1: 6JHOG8xlyXcJaJHj1p15ZnjcMvA.roa (hash: 7H9LMcEBkurlEfniM3FZBv4N6xpse9Cfq1J2Hc4Zzrg=) 2: DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl (hash: NNSnCysKEqkqHUIPPXoEERLC/xSA32Mrole5JAwIigQ=) 3: zlURg4ebmdJpRRKJcb6F2eANLUw.roa (hash: d2+6gKcdS2njrjfKwQ9XXY+00MaMzcf8y0Aa2MydLsI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:da:22:8d:6a:22:6e:50:ad:44:d2:2c:3c:b4:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eacc662cebfad9fff9c0f87400cf0cf03f547a2 Validity Not Before: Dec 6 01:01:45 2025 GMT Not After : Dec 7 01:01:45 2025 GMT Subject: CN=e1410ea13368e2e891f8802f7424821478b1e8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:57:ec:f4:66:04:fe:45:cb:5c:04:17:58: 8a:79:3a:48:56:7f:39:46:a0:21:ab:66:17:ff:b8: b3:40:ea:6e:c0:57:26:30:9e:eb:7f:17:84:49:a3: 09:d5:16:bd:8e:f1:71:0c:65:f8:09:7f:0a:16:e3: b3:cf:b9:dd:74:c7:07:6f:b2:62:1d:83:ef:0e:68: bd:aa:48:19:6e:18:5d:df:6e:4c:f2:35:a7:50:57: 92:ac:b3:d6:e6:a3:21:a2:a8:c2:e2:91:53:25:28: ea:35:85:b6:9a:60:00:1f:4b:a7:42:28:6b:f4:ed: 00:e8:91:c9:2d:be:48:6f:a4:0d:1a:71:59:5f:eb: 4b:7d:bd:d2:e4:76:34:b4:f6:3f:6f:9d:3b:cc:5a: 80:75:c0:66:16:be:0b:1e:63:0d:2e:2b:7f:63:89: ce:ea:be:a9:fa:fb:39:35:f0:48:37:62:fb:20:c0: 38:6c:92:31:f7:79:fb:f6:43:05:ad:0c:f3:b7:d1: 71:93:75:81:a6:ce:51:c5:ad:7b:53:57:28:04:84: 94:02:a4:71:dd:77:f0:0d:ee:79:10:3f:92:16:b1: cd:54:c3:67:48:c9:7d:76:b4:6f:6d:92:d8:41:82: 89:ef:a3:81:8f:6d:20:df:53:89:7f:31:df:25:82: e4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:41:0E:A1:33:68:E2:E8:91:F8:80:2F:74:24:82:14:78:B1:E8:EF X509v3 Authority Key Identifier: keyid:0E:AC:C6:62:CE:BF:AD:9F:FF:9C:0F:87:40:0C:F0:CF:03:F5:47:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqzGYs6_rZ__nA-HQAzwzwP1R6I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/12cd13-7f7b-4150-92b8-1880e7ef1db4/1/DqzGYs6_rZ__nA-HQAzwzwP1R6I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:65:29:07:b8:47:f9:bf:9d:d6:59:1b:8d:f7:d9:51:99:08: 43:19:9c:46:50:22:a7:51:95:0e:9e:69:82:11:a0:d8:a7:b4: 44:9f:6b:9a:e9:f3:85:a2:ab:71:8b:8e:0b:2c:aa:28:9d:96: b1:79:9c:7f:b6:77:8c:c4:ff:f4:2b:62:90:9c:b2:2a:4c:bb: c5:74:e5:3f:be:e0:4d:12:4b:7e:70:7b:23:06:81:0c:7b:5f: e9:04:9e:51:6a:54:16:b8:82:e3:d9:ab:4e:b2:41:d1:a8:61: 8d:33:b8:b8:93:d6:7d:8d:09:d2:41:e6:10:84:09:53:4f:3c: 25:1e:49:6b:0e:71:0d:3f:e2:b7:27:19:63:70:4e:95:c9:d3: 12:ea:50:ef:73:3e:a2:3d:a2:7b:75:c8:73:06:01:d2:f9:5d: 7b:a9:7f:8e:ad:ba:82:ac:0f:27:a0:01:06:aa:f7:8b:7d:2e: ef:b5:16:82:5c:b3:f4:ba:7a:66:cf:94:6b:60:7a:78:2c:3a: 08:d6:1f:ee:ce:e5:e1:dd:e9:8e:19:1b:7e:7f:54:3f:e6:30: 38:66:65:c6:b1:5e:f7:78:c1:88:61:79:26:39:cb:d0:15:4a: c8:ef:64:1d:8a:79:09:e9:07:a5:c9:5e:45:fd:03:71:28:9a: 1f:e2:26:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLdoijWoiblCtRNIsPLQEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYWNjNjYyY2ViZmFkOWZmZjljMGY4NzQwMGNmMGNmMDNm NTQ3YTIwHhcNMjUxMjA2MDEwMTQ1WhcNMjUxMjA3MDEwMTQ1WjAzMTEwLwYDVQQD EyhlMTQxMGVhMTMzNjhlMmU4OTFmODgwMmY3NDI0ODIxNDc4YjFlOGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fBX7PRmBP5Fy1wEF1iKeTpIVn85 RqAhq2YX/7izQOpuwFcmMJ7rfxeESaMJ1Ra9jvFxDGX4CX8KFuOzz7nddMcHb7Ji HYPvDmi9qkgZbhhd325M8jWnUFeSrLPW5qMhoqjC4pFTJSjqNYW2mmAAH0unQihr 9O0A6JHJLb5Ib6QNGnFZX+tLfb3S5HY0tPY/b507zFqAdcBmFr4LHmMNLit/Y4nO 6r6p+vs5NfBIN2L7IMA4bJIx93n79kMFrQzzt9Fxk3WBps5Rxa17U1coBISUAqRx 3XfwDe55ED+SFrHNVMNnSMl9drRvbZLYQYKJ76OBj20g31OJfzHfJYLkqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFBDqEzaOLokfiAL3QkghR4sejvMB8GA1UdIwQY MBaAFA6sxmLOv62f/5wPh0AM8M8D9UeiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgt MTg4MGU3ZWYxZGI0LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xMmNkMTMtN2Y3Yi00MTUwLTkyYjgtMTg4MGU3ZWYxZGI0 LzEvRHF6R1lzNl9yWl9fbkEtSFFBend6d1AxUjZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWmUpB7hH +b+d1lkbjffZUZkIQxmcRlAip1GVDp5pghGg2Ke0RJ9rmunzhaKrcYuOCyyqKJ2W sXmcf7Z3jMT/9CtikJyyKky7xXTlP77gTRJLfnB7IwaBDHtf6QSeUWpUFriC49mr TrJB0ahhjTO4uJPWfY0J0kHmEIQJU088JR5Jaw5xDT/itycZY3BOlcnTEupQ73M+ oj2ie3XIcwYB0vlde6l/jq26gqwPJ6ABBqr3i30u77UWglyz9Lp6Zs+Ua2B6eCw6 CNYf7s7l4d3pjhkbfn9UP+YwOGZlxrFe93jBiGF5JjnL0BVKyO9kHYp5CekHpcle Rf0DcSiaH+ImIg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:56:22 2025 by rpki-client