This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft File: q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft (raw, json) Hash identifier: ThVyBBvU4QtfyenATxCYVJWPUYVTakvTtbCf+S1Q9Ko= Subject key identifier: E5:DC:0E:EE:0E:8E:6E:11:B9:15:42:E3:42:7F:85:B8:51:1C:31:66 Authority key identifier: AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 Certificate issuer: /CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Certificate serial: 019AF49C2E4418DD8352BB240D08A3F84A33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 17:01:07 +0000 Manifest this update: Sat 06 Dec 2025 17:01:07 +0000 Manifest next update: Sun 07 Dec 2025 17:01:07 +0000 Files and hashes: 1: MvXI14tDwVTEk5R-D7-LraqIO4w.roa (hash: 3BHAzhEhaXiTqmDVNfIXzHzlk0Nw0qhzvKzpdNvcPCU=) 2: q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl (hash: CNTGaLQlVSZ6YAl5shaOIJdNZc1zQ4UNuZiWXN6+/q4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 17:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:2e:44:18:dd:83:52:bb:24:0d:08:a3:f8:4a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab53ec0e9a053cbbe0e9a071bcad9e68a99ccfa8 Validity Not Before: Dec 6 17:01:07 2025 GMT Not After : Dec 7 17:01:07 2025 GMT Subject: CN=e5dc0eee0e8e6e11b91542e3427f85b8511c3166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:d1:f8:b2:fe:20:1e:60:44:8b:f1:ae:42: aa:c2:94:78:38:18:38:08:f2:53:67:34:c5:67:67: f8:ef:19:fc:90:7b:6f:19:67:62:38:be:8f:53:13: 1c:bd:20:f1:39:78:27:de:be:27:0c:b7:c0:5e:2e: e1:f1:82:46:95:cb:ca:55:61:84:96:4b:7c:0e:78: bc:84:0e:79:c3:e9:6a:f2:f4:5c:4e:59:9d:41:ca: 02:f7:d9:d3:af:3f:d2:6d:62:9b:3e:6c:fc:c4:60: 36:3f:93:59:4a:e8:0c:b8:3e:cb:38:2a:5b:e7:b1: 53:0c:24:63:aa:d6:22:b9:55:63:a5:16:9d:a0:08: ac:fe:93:85:f6:37:b3:df:ed:c8:98:73:95:f1:41: 56:44:22:e3:ed:2d:7a:1e:f5:ed:92:66:ec:8e:03: 8e:bc:57:c5:8a:e5:ba:f3:75:f0:90:33:00:10:fb: 68:84:01:18:7c:f5:32:46:d1:70:47:c2:67:3c:68: 67:b2:d5:fd:2c:60:4a:41:02:bf:6d:96:06:c0:d9: ba:fd:8b:23:28:ec:f2:5c:ad:dd:f4:b0:fb:cc:86: 8a:c1:e4:fa:1b:d0:b3:70:9d:fa:48:09:33:7a:e1: 48:b8:21:56:14:a4:f8:a4:3b:79:4b:6d:28:a2:98: c6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:DC:0E:EE:0E:8E:6E:11:B9:15:42:E3:42:7F:85:B8:51:1C:31:66 X509v3 Authority Key Identifier: keyid:AB:53:EC:0E:9A:05:3C:BB:E0:E9:A0:71:BC:AD:9E:68:A9:9C:CF:A8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1PsDpoFPLvg6aBxvK2eaKmcz6g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/61f398-94f6-4468-85f3-63fcaac31ca3/1/q1PsDpoFPLvg6aBxvK2eaKmcz6g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a5:7e:c2:49:47:b0:8d:72:db:31:d7:ff:2d:2b:fc:4a:25: d0:ac:65:c0:ee:e0:69:00:e2:29:27:65:01:67:3d:cf:be:20: 30:a1:9c:b1:4c:5a:6d:7c:6f:b7:e8:60:98:1a:74:4a:72:da: ee:65:c1:30:d6:4b:d6:21:a9:8a:0c:3b:fa:88:f5:54:3b:1c: 61:28:34:cb:8b:c5:88:67:f5:70:c6:5d:1d:95:fe:d7:d4:5b: fc:f9:e8:a4:43:46:74:69:42:09:2b:76:63:81:5f:cc:9e:8a: 05:46:27:b2:aa:3a:08:59:ae:bb:80:6c:fd:b9:a3:f1:48:78: 28:ae:e4:b6:1f:94:91:f8:01:67:eb:a5:5e:4d:91:0f:b8:d5: 7d:2b:32:62:d9:68:97:21:72:5d:ac:3d:88:f1:df:9e:af:96: d7:32:2f:30:f5:3c:d4:05:a5:05:f7:1f:fb:31:16:d6:0b:84: d3:22:82:8b:fd:20:69:65:a5:e1:79:1c:b8:75:81:46:9e:0c: 71:4c:86:97:db:1c:55:c8:d3:66:49:bf:e1:b0:e4:a5:39:b7: 56:6f:db:2a:8b:6e:2a:9e:ba:83:76:37:6e:e3:cf:47:6c:e2: c0:43:ee:9a:94:13:b8:89:7b:5b:06:04:05:76:ee:3d:35:af: 2e:5f:84:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nC5EGN2DUrskDQij+EozMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiNTNlYzBlOWEwNTNjYmJlMGU5YTA3MWJjYWQ5ZTY4YTk5 Y2NmYTgwHhcNMjUxMjA2MTcwMTA3WhcNMjUxMjA3MTcwMTA3WjAzMTEwLwYDVQQD EyhlNWRjMGVlZTBlOGU2ZTExYjkxNTQyZTM0MjdmODViODUxMWMzMTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XjR+LL+IB5gRIvxrkKqwpR4OBg4 CPJTZzTFZ2f47xn8kHtvGWdiOL6PUxMcvSDxOXgn3r4nDLfAXi7h8YJGlcvKVWGE lkt8Dni8hA55w+lq8vRcTlmdQcoC99nTrz/SbWKbPmz8xGA2P5NZSugMuD7LOCpb 57FTDCRjqtYiuVVjpRadoAis/pOF9jez3+3ImHOV8UFWRCLj7S16HvXtkmbsjgOO vFfFiuW683XwkDMAEPtohAEYfPUyRtFwR8JnPGhnstX9LGBKQQK/bZYGwNm6/Ysj KOzyXK3d9LD7zIaKweT6G9CzcJ36SAkzeuFIuCFWFKT4pDt5S20oopjGhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXcDu4Ojm4RuRVC40J/hbhRHDFmMB8GA1UdIwQY MBaAFKtT7A6aBTy74OmgcbytnmipnM+oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMt NjNmY2FhYzMxY2EzLzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82MWYzOTgtOTRmNi00NDY4LTg1ZjMtNjNmY2FhYzMxY2Ez LzEvcTFQc0Rwb0ZQTHZnNmFCeHZLMmVhS21jejZnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6V+wklH sI1y2zHX/y0r/Eol0KxlwO7gaQDiKSdlAWc9z74gMKGcsUxabXxvt+hgmBp0SnLa 7mXBMNZL1iGpigw7+oj1VDscYSg0y4vFiGf1cMZdHZX+19Rb/PnopENGdGlCCSt2 Y4FfzJ6KBUYnsqo6CFmuu4Bs/bmj8Uh4KK7kth+UkfgBZ+ulXk2RD7jVfSsyYtlo lyFyXaw9iPHfnq+W1zIvMPU81AWlBfcf+zEW1guE0yKCi/0gaWWl4XkcuHWBRp4M cUyGl9scVcjTZkm/4bDkpTm3Vm/bKotuKp66g3Y3buPPR2ziwEPumpQTuIl7WwYE BXbuPTWvLl+EFQ== -----END CERTIFICATE-----Generated at Sun Dec 7 01:30:29 2025 by rpki-client