This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json) Hash identifier: BjJEvSOxvtZXcfWdh34eJA2F3Ayxp3BYFEeTPQ7Ctpk= Subject key identifier: 00:DF:04:98:07:23:0E:42:F8:D6:F8:1D:08:52:4D:9C:17:47:05:1A Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01 Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01 Certificate serial: 019AF12EE52C015B3AE182DC7CF9B76321B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 01:02:53 +0000 Manifest this update: Sat 06 Dec 2025 01:02:53 +0000 Manifest next update: Sun 07 Dec 2025 01:02:53 +0000 Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: qwbArJsjVRLrFzOfwhG4GUoRzRDEEorCciWj2dRUL3k=) 2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:e5:2c:01:5b:3a:e1:82:dc:7c:f9:b7:63:21:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01 Validity Not Before: Dec 6 01:02:53 2025 GMT Not After : Dec 7 01:02:53 2025 GMT Subject: CN=00df049807230e42f8d6f81d08524d9c1747051a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:63:33:af:1e:d9:16:70:24:ac:11:76:81:b6: 14:53:c9:ba:fe:5a:90:83:2b:d7:ae:52:1d:ff:99: f0:73:8c:77:35:c7:60:ca:34:2d:0e:f1:b0:50:87: 2f:84:d0:52:d2:9b:28:23:4a:2c:34:73:a1:58:15: 89:8b:59:83:04:f3:c0:e2:e1:49:1a:67:82:7d:69: 51:0a:62:44:14:72:57:d3:01:4c:c8:a5:7f:57:9f: 10:08:26:77:6f:73:ed:d7:7e:6f:d0:7e:66:7e:89: 53:c8:eb:f2:ea:b5:e2:a0:79:5b:e1:54:d1:b4:26: 18:5d:c2:6f:c6:7d:ba:c2:1d:4f:6d:13:20:6b:8c: fa:ff:71:4e:46:84:20:e4:6c:78:b1:08:f1:e1:b0: bf:72:85:4b:aa:91:da:83:b8:a1:6e:dd:33:13:44: 92:bf:dd:62:a4:db:a7:9e:89:54:7f:4c:17:9a:03: 4a:b2:49:e0:f8:ff:14:50:50:58:29:7b:35:27:bf: bc:e3:a4:6f:07:05:c6:95:b5:f4:c7:70:12:05:8d: c0:0f:8e:03:44:31:e0:27:3e:b5:b8:98:d0:aa:9a: 49:4a:1c:26:a6:82:8f:ef:3b:9a:c3:48:15:4b:2a: d7:82:9b:08:1e:9a:2e:cf:62:e0:f8:66:f6:6c:a8: 9f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DF:04:98:07:23:0E:42:F8:D6:F8:1D:08:52:4D:9C:17:47:05:1A X509v3 Authority Key Identifier: keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:a6:71:26:80:e7:10:1e:ba:4e:d8:98:87:43:24:7a:aa:8b: 17:d1:40:67:32:a5:54:c0:b3:b6:9f:5d:0f:2f:e0:d1:cc:24: c0:57:aa:3a:06:da:eb:28:2d:7f:2f:7c:e0:3d:c4:5f:29:0d: 0d:74:80:a9:58:a0:62:3b:ee:5b:9a:1f:02:d1:8f:12:36:33: 35:0e:83:a1:d4:83:72:c4:75:66:bd:9c:84:d0:57:4b:2e:a3: ed:cd:7a:5a:d1:76:b6:82:35:b5:73:1e:38:c1:64:d7:ff:94: 69:59:b4:04:ae:22:1d:4f:6c:73:e6:fd:49:15:47:09:57:9c: 01:a9:eb:25:f7:19:4b:02:42:2c:9e:6e:b6:21:a2:7d:95:bc: f4:09:ec:7b:2e:40:38:e8:b6:61:54:8d:f4:5b:6b:a2:d4:61: 71:84:a6:7b:36:20:80:67:21:0f:b2:96:38:f0:e6:af:58:04: 3e:f2:d9:d1:39:25:92:c0:98:7b:4d:2e:76:7e:c3:ea:35:9c: a0:3e:f7:80:92:ea:e5:00:95:6d:f8:82:12:36:f1:a6:28:46: 82:64:11:f9:0e:95:1f:b0:bd:f8:6e:e3:0e:0b:d6:ea:2b:53: de:82:92:2a:ac:e8:8d:e6:76:24:f9:9a:3c:75:4b:b0:d2:30: cc:27:98:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLuUsAVs64YLcfPm3YyGyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYWZkZmZhY2Y5YzM2OThlZjdhMzZiMmU2MGJlNzdiODBl NjJkMDEwHhcNMjUxMjA2MDEwMjUzWhcNMjUxMjA3MDEwMjUzWjAzMTEwLwYDVQQD EygwMGRmMDQ5ODA3MjMwZTQyZjhkNmY4MWQwODUyNGQ5YzE3NDcwNTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmMzrx7ZFnAkrBF2gbYUU8m6/lqQ gyvXrlId/5nwc4x3NcdgyjQtDvGwUIcvhNBS0psoI0osNHOhWBWJi1mDBPPA4uFJ GmeCfWlRCmJEFHJX0wFMyKV/V58QCCZ3b3Pt135v0H5mfolTyOvy6rXioHlb4VTR tCYYXcJvxn26wh1PbRMga4z6/3FORoQg5Gx4sQjx4bC/coVLqpHag7ihbt0zE0SS v91ipNunnolUf0wXmgNKskng+P8UUFBYKXs1J7+846RvBwXGlbX0x3ASBY3AD44D RDHgJz61uJjQqppJShwmpoKP7zuaw0gVSyrXgpsIHpouz2Lg+Gb2bKifJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFADfBJgHIw5C+Nb4HQhSTZwXRwUaMB8GA1UdIwQY MBaAFDKv3/rPnDaY73o2suYL53uA5i0BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQt MjVkMzBlYmNmY2FkLzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9lYWViODMtYTIwYy00ZmQ4LTkzMTQtMjVkMzBlYmNmY2Fk LzEvTXFfZi1zLWNOcGp2ZWpheTVndm5lNERtTFFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaZxJoDn EB66TtiYh0MkeqqLF9FAZzKlVMCztp9dDy/g0cwkwFeqOgba6ygtfy984D3EXykN DXSAqVigYjvuW5ofAtGPEjYzNQ6DodSDcsR1Zr2chNBXSy6j7c16WtF2toI1tXMe OMFk1/+UaVm0BK4iHU9sc+b9SRVHCVecAanrJfcZSwJCLJ5utiGifZW89Ansey5A OOi2YVSN9FtrotRhcYSmezYggGchD7KWOPDmr1gEPvLZ0TklksCYe00udn7D6jWc oD73gJLq5QCVbfiCEjbxpihGgmQR+Q6VH7C9+G7jDgvW6itT3oKSKqzojeZ2JPma PHVLsNIwzCeY9A== -----END CERTIFICATE-----Generated at Sat Dec 6 07:19:32 2025 by rpki-client