This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json) Hash identifier: unJ4yFPTc+eZ3S5ni/U+XcCB4Yv+jljZiQhq/jTemxk= Subject key identifier: 75:42:D9:FA:2E:DA:8A:5A:77:A2:B9:7D:97:60:C6:73:C5:F7:C9:8C Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Certificate serial: 019AF38918DD51E165276782A6A27821A979 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft Manifest number: 0736 Signing time: Sat 06 Dec 2025 12:00:39 +0000 Manifest this update: Sat 06 Dec 2025 12:00:39 +0000 Manifest next update: Sun 07 Dec 2025 12:00:39 +0000 Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: Cl2XpHeOqZAtPccnWlxNxPxNASJCslZaSrntXRu4N9A=) 2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:89:18:dd:51:e1:65:27:67:82:a6:a2:78:21:a9:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Validity Not Before: Dec 6 12:00:39 2025 GMT Not After : Dec 7 12:00:39 2025 GMT Subject: CN=7542d9fa2eda8a5a77a2b97d9760c673c5f7c98c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:04:33:70:26:ec:70:58:81:b4:68:29:77: 82:b9:d3:21:16:ff:8e:c3:5b:ef:e6:11:da:ff:d0: 9f:84:c2:ab:6f:1a:57:04:29:81:52:d3:45:b9:ca: 0b:e6:44:ce:ce:58:b5:46:7c:c0:07:c5:6e:3c:b0: 6b:00:ea:41:38:bb:b0:bb:4d:c8:aa:96:c3:a0:74: e1:12:38:db:4c:97:19:ad:2c:3b:4f:c4:8c:2d:6d: f8:67:ed:2b:8e:af:f0:62:2a:fd:70:c7:74:36:8e: 18:7f:0e:26:22:60:ed:7b:47:21:a8:4d:28:5c:2e: 14:9e:0f:e2:78:d4:72:3f:d4:ff:0c:6b:18:e9:5d: eb:d3:7e:c1:d9:c2:a2:a5:21:aa:55:9d:17:77:60: a5:b1:eb:1e:e8:2e:3a:81:5d:f3:f7:6e:96:81:63: 1e:cf:f7:d9:92:4c:49:ef:97:10:cc:41:ee:33:3d: 4d:07:7b:38:e6:80:2c:7f:8b:83:39:99:30:9a:52: 09:9b:66:ef:73:bc:6d:61:da:eb:6c:62:cc:b4:88: b8:a9:40:b8:21:98:f5:13:e3:c3:4f:f9:00:bb:2c: 90:8b:e9:7b:da:c2:6a:5b:80:c9:9a:ea:18:13:48: 9a:fd:c4:4c:81:6d:d5:dd:5d:f9:62:fa:a4:f6:89: 9f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:42:D9:FA:2E:DA:8A:5A:77:A2:B9:7D:97:60:C6:73:C5:F7:C9:8C X509v3 Authority Key Identifier: keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:ff:bd:d1:3f:a3:d1:98:44:57:d2:9a:3b:d3:f7:31:b6:24: 3d:22:f0:95:43:60:53:60:f3:bc:08:94:27:5d:c2:85:b1:22: c3:32:b7:cb:02:64:e0:27:ac:d3:39:b2:c0:24:97:b1:51:ae: f8:50:32:1f:80:0c:53:99:c9:7a:7c:71:70:16:7a:82:9f:1c: 00:45:43:2f:16:7f:44:1f:29:20:d6:31:7d:c1:f1:55:ab:e9: 44:17:b4:5f:af:a0:d7:54:b5:f9:b9:15:97:2b:98:65:af:ed: 5f:62:ac:5c:74:9f:0e:e3:74:0c:39:de:a5:23:e7:3a:93:13: a5:08:46:6f:5a:d2:4c:73:f7:fc:14:e3:c5:e9:15:4e:3e:b0: 64:5e:3e:58:5b:93:cc:14:94:a4:dd:aa:24:cf:d0:4c:81:06: 81:89:26:ea:2c:a6:31:69:28:ee:0a:b1:a4:da:9f:ef:9f:3a: a7:2c:b9:0e:96:5b:35:cc:f2:2b:7a:14:c9:e5:a8:cd:e4:a9: 8a:cc:35:13:41:6c:38:a4:f3:9e:4a:cc:7b:59:4b:0c:ef:b4: 50:ae:14:a6:da:07:df:b3:6b:85:83:c9:50:8c:c4:6f:74:e8: cc:37:89:14:e1:bc:e8:61:87:2a:66:37:8e:17:dd:91:5c:8a: a2:07:75:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrziRjdUeFlJ2eCpqJ4Ial5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3 MGIxZjEwHhcNMjUxMjA2MTIwMDM5WhcNMjUxMjA3MTIwMDM5WjAzMTEwLwYDVQQD Eyg3NTQyZDlmYTJlZGE4YTVhNzdhMmI5N2Q5NzYwYzY3M2M1ZjdjOThjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcoEM3Am7HBYgbRoKXeCudMhFv+O w1vv5hHa/9CfhMKrbxpXBCmBUtNFucoL5kTOzli1RnzAB8VuPLBrAOpBOLuwu03I qpbDoHThEjjbTJcZrSw7T8SMLW34Z+0rjq/wYir9cMd0No4Yfw4mImDte0chqE0o XC4Ung/ieNRyP9T/DGsY6V3r037B2cKipSGqVZ0Xd2Clsese6C46gV3z926WgWMe z/fZkkxJ75cQzEHuMz1NB3s45oAsf4uDOZkwmlIJm2bvc7xtYdrrbGLMtIi4qUC4 IZj1E+PDT/kAuyyQi+l72sJqW4DJmuoYE0ia/cRMgW3V3V35Yvqk9omftQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVC2fou2opad6K5fZdgxnPF98mMMB8GA1UdIwQY MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/+90T+j 0ZhEV9KaO9P3MbYkPSLwlUNgU2DzvAiUJ13ChbEiwzK3ywJk4Ces0zmywCSXsVGu +FAyH4AMU5nJenxxcBZ6gp8cAEVDLxZ/RB8pINYxfcHxVavpRBe0X6+g11S1+bkV lyuYZa/tX2KsXHSfDuN0DDnepSPnOpMTpQhGb1rSTHP3/BTjxekVTj6wZF4+WFuT zBSUpN2qJM/QTIEGgYkm6iymMWko7gqxpNqf7586pyy5DpZbNczyK3oUyeWozeSp isw1E0FsOKTznkrMe1lLDO+0UK4UptoH37NrhYPJUIzEb3TozDeJFOG86GGHKmY3 jhfdkVyKogd1eA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:14:55 2025 by rpki-client