This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft File: dQ_7ZVLViud0ukJNVSezUGJPqvw.mft (raw, json) Hash identifier: KzmILTOICzPG5l1138PaDoHcy7NmP9kS5KkGfVG6XjU= Subject key identifier: E6:7C:18:5C:66:27:D9:F9:7C:70:D4:EF:CC:11:CE:EA:96:34:D6:2C Authority key identifier: 75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC Certificate issuer: /CN=750ffb6552d58ae774ba424d5527b350624faafc Certificate serial: 019AF0BF368F37402C171AC73540EE3283A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft Manifest number: 1760 Signing time: Fri 05 Dec 2025 23:00:54 +0000 Manifest this update: Fri 05 Dec 2025 23:00:54 +0000 Manifest next update: Sat 06 Dec 2025 23:00:54 +0000 Files and hashes: 1: Bjl5NnXVblzGXrxRvGYoGjhKX1s.roa (hash: YSca3SNn3dbydNzeg1qaUX/HJae1ElZZx6hrF1jVM80=) 2: dQ_7ZVLViud0ukJNVSezUGJPqvw.crl (hash: cmAIdGa1ZEih39/DJARoaOEZmFZH8bmhv4PTQvqyODY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:36:8f:37:40:2c:17:1a:c7:35:40:ee:32:83:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750ffb6552d58ae774ba424d5527b350624faafc Validity Not Before: Dec 5 23:00:54 2025 GMT Not After : Dec 6 23:00:54 2025 GMT Subject: CN=e67c185c6627d9f97c70d4efcc11ceea9634d62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4f:93:da:ea:63:4d:f0:12:2c:4b:e4:67:94: 6f:86:5d:e8:c8:1d:71:7c:15:c5:80:41:a9:b7:37: 2d:3b:9d:7f:e6:c9:65:98:21:8a:10:cd:31:fd:28: 5e:27:ae:de:3f:39:22:ba:90:36:a0:73:ce:a5:f5: f2:6b:19:19:21:fa:44:57:be:07:ab:38:97:ed:ac: ae:74:d0:fa:3d:ff:d0:58:b3:5b:cf:bc:33:cf:ad: 2d:25:30:c9:b0:ab:3e:d1:2a:22:0b:46:60:d5:01: 4f:50:3c:67:43:b8:cd:ee:33:44:39:e9:21:31:8b: 9b:13:a5:d6:78:58:25:ee:19:8f:09:b9:35:1b:54: 47:9e:11:52:dc:19:38:36:92:30:5f:30:54:b2:50: d9:db:dc:ce:7b:55:a1:ca:cf:a9:fb:c1:55:62:e0: 8d:69:04:e0:99:5c:1c:7d:b6:41:75:81:87:05:e5: f9:0f:92:b0:37:95:20:83:c0:93:56:bc:31:0c:f6: 8f:15:95:8c:2a:e5:c0:55:4a:64:f3:c4:90:c0:53: 24:5f:f1:f2:6c:81:fd:94:71:1c:3c:a0:86:5a:93: d9:e9:84:91:a6:ea:06:92:e4:ed:72:2b:52:82:f1: 48:e7:ad:12:6c:c3:0c:fe:eb:11:25:7b:9c:ee:f2: a3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:7C:18:5C:66:27:D9:F9:7C:70:D4:EF:CC:11:CE:EA:96:34:D6:2C X509v3 Authority Key Identifier: keyid:75:0F:FB:65:52:D5:8A:E7:74:BA:42:4D:55:27:B3:50:62:4F:AA:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ_7ZVLViud0ukJNVSezUGJPqvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d3558d-9057-47db-9959-3060b36b8506/1/dQ_7ZVLViud0ukJNVSezUGJPqvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:56:3f:0a:b3:b4:07:32:87:33:66:b2:6f:41:33:1e:ed:c0: cd:23:ac:fd:57:e7:14:7b:e4:30:34:d9:fe:b8:86:25:20:71: 0c:ca:91:14:a1:80:af:76:67:2a:55:4a:63:97:61:fb:71:5b: 36:07:45:58:23:1a:12:64:5c:e0:1a:7c:36:d8:bf:f7:88:73: 61:d1:da:6d:5e:db:68:2c:ab:17:23:5e:b7:5f:22:6e:a7:24: 0d:79:be:12:81:36:db:f3:4b:15:12:88:f7:71:ac:00:eb:21: 26:64:c5:7b:36:90:09:a7:97:8a:2e:de:cf:22:df:cb:0d:75: ed:34:6b:0c:52:f5:79:a2:c0:dd:ff:a7:93:26:20:9c:bd:42: 1d:3f:1f:b1:4a:72:4f:95:7f:d2:ec:9b:b0:ad:41:72:8e:35: 96:e7:4c:4f:08:09:88:6a:91:da:3e:6d:93:e3:b0:6c:d9:dd: 75:b7:89:9c:f6:cf:c2:d8:8d:07:78:01:dc:71:23:be:81:64: e5:44:37:6f:5f:0a:97:ef:30:25:b8:85:26:ef:95:e1:53:bb: 79:61:12:62:7c:2c:59:15:d0:1d:0a:71:e3:34:d4:31:ed:b4: b2:70:a4:65:6a:22:f6:f1:3c:85:3e:a9:ad:8b:3d:f6:ea:2f: 57:80:75:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvzaPN0AsFxrHNUDuMoOkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MGZmYjY1NTJkNThhZTc3NGJhNDI0ZDU1MjdiMzUwNjI0 ZmFhZmMwHhcNMjUxMjA1MjMwMDU0WhcNMjUxMjA2MjMwMDU0WjAzMTEwLwYDVQQD EyhlNjdjMTg1YzY2MjdkOWY5N2M3MGQ0ZWZjYzExY2VlYTk2MzRkNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6k+T2upjTfASLEvkZ5Rvhl3oyB1x fBXFgEGptzctO51/5sllmCGKEM0x/SheJ67ePzkiupA2oHPOpfXyaxkZIfpEV74H qziX7ayudND6Pf/QWLNbz7wzz60tJTDJsKs+0SoiC0Zg1QFPUDxnQ7jN7jNEOekh MYubE6XWeFgl7hmPCbk1G1RHnhFS3Bk4NpIwXzBUslDZ29zOe1Whys+p+8FVYuCN aQTgmVwcfbZBdYGHBeX5D5KwN5Ugg8CTVrwxDPaPFZWMKuXAVUpk88SQwFMkX/Hy bIH9lHEcPKCGWpPZ6YSRpuoGkuTtcitSgvFI560SbMMM/usRJXuc7vKj2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZ8GFxmJ9n5fHDU78wRzuqWNNYsMB8GA1UdIwQY MBaAFHUP+2VS1YrndLpCTVUns1BiT6r8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTkt MzA2MGIzNmI4NTA2LzEvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi9kMzU1OGQtOTA1Ny00N2RiLTk5NTktMzA2MGIzNmI4NTA2 LzEvZFFfN1pWTFZpdWQwdWtKTlZTZXpVR0pQcXZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU1Y/CrO0 BzKHM2ayb0EzHu3AzSOs/VfnFHvkMDTZ/riGJSBxDMqRFKGAr3ZnKlVKY5dh+3Fb NgdFWCMaEmRc4Bp8Nti/94hzYdHabV7baCyrFyNet18ibqckDXm+EoE22/NLFRKI 93GsAOshJmTFezaQCaeXii7ezyLfyw117TRrDFL1eaLA3f+nkyYgnL1CHT8fsUpy T5V/0uybsK1Bco41ludMTwgJiGqR2j5tk+OwbNnddbeJnPbPwtiNB3gB3HEjvoFk 5UQ3b18Kl+8wJbiFJu+V4VO7eWESYnwsWRXQHQpx4zTUMe20snCkZWoi9vE8hT6p rYs99uovV4B14g== -----END CERTIFICATE-----Generated at Sat Dec 6 08:27:55 2025 by rpki-client