This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft File: QmstdED7eIRM8BNexRgrP294OoY.mft (raw, json) Hash identifier: J/Ysy8z9H3iDKq+E3Fc5+amyoD1eaxmqgZHNBJvXzps= Subject key identifier: C3:DC:8B:79:D7:DE:89:C2:25:B4:88:CE:31:28:DD:A8:9F:34:8B:56 Authority key identifier: 42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 Certificate issuer: /CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Certificate serial: 019AF3C0282DD8950D7F73AF4A19C1BA7679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft Manifest number: 0927 Signing time: Sat 06 Dec 2025 13:00:47 +0000 Manifest this update: Sat 06 Dec 2025 13:00:47 +0000 Manifest next update: Sun 07 Dec 2025 13:00:47 +0000 Files and hashes: 1: QmstdED7eIRM8BNexRgrP294OoY.crl (hash: hxo+PtHsjxwxWSp4Q+SEqKnn4rhmm20IDRrg4zLlixQ=) 2: z1aZ7-bmH6l6J7mLCP5moL6leU0.roa (hash: yKL3bhklKR6G8Kxo3AuOxdxqmVoJuUJSKeF/iJ4ql/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:28:2d:d8:95:0d:7f:73:af:4a:19:c1:ba:76:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=426b2d7440fb78844cf0135ec5182b3f6f783a86 Validity Not Before: Dec 6 13:00:47 2025 GMT Not After : Dec 7 13:00:47 2025 GMT Subject: CN=c3dc8b79d7de89c225b488ce3128dda89f348b56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:22:6c:36:78:30:43:37:bf:dd:93:0c:24:16: 93:14:3a:3c:53:d3:85:2c:5b:1d:d3:43:1a:59:d4: 6c:6d:e8:41:d4:07:ad:90:f0:fa:f5:73:4e:52:3f: de:91:61:cd:f6:3e:f5:6c:eb:5e:01:3e:62:bb:88: ed:ef:63:6b:c0:8b:e7:d9:0a:eb:71:b2:d9:27:2e: bc:61:d4:d2:eb:42:38:10:f8:e4:20:8d:8a:68:75: 7f:e6:e7:e9:64:f4:56:38:99:76:0e:43:a2:75:b3: 23:53:bd:25:56:88:27:d7:e9:8e:d7:12:8f:f5:e0: b8:25:ce:a0:03:ab:fd:c3:ad:97:7e:fc:70:e3:80: 59:71:45:c5:a9:ad:e3:0a:1f:9e:d4:b9:2f:7f:e9: d6:4c:1f:4f:55:43:de:d6:f3:9a:d5:9e:7b:26:a6: 17:06:4c:57:96:8d:8d:b3:7e:86:dc:b7:88:8a:2b: 18:f0:e7:f2:55:3e:fb:1d:17:b4:ca:79:8d:92:d3: 0b:d8:e8:8e:73:87:89:de:2a:39:f1:e8:03:87:b4: 15:a8:65:7d:01:73:d3:d9:5e:7d:b6:ab:b5:97:66: e1:b5:12:f7:3b:93:1d:56:ef:19:19:b0:dd:3e:ca: e7:0a:65:49:d4:01:f2:54:2d:69:c1:a0:e6:8f:d0: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DC:8B:79:D7:DE:89:C2:25:B4:88:CE:31:28:DD:A8:9F:34:8B:56 X509v3 Authority Key Identifier: keyid:42:6B:2D:74:40:FB:78:84:4C:F0:13:5E:C5:18:2B:3F:6F:78:3A:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QmstdED7eIRM8BNexRgrP294OoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1dbd75-981d-46a3-b5c3-2592a1ea6138/1/QmstdED7eIRM8BNexRgrP294OoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a8:6a:b6:6a:f0:3b:24:a0:f2:7d:25:ee:45:5f:aa:a2:07: b2:9a:5f:db:87:9a:9b:b1:e1:26:1f:02:bf:22:83:20:d6:3b: 2f:61:4e:bb:00:47:f9:3e:89:c1:03:2a:38:6e:9a:1b:ee:4a: 87:c1:26:f0:d3:96:64:2d:2f:5e:68:71:00:8c:ff:7f:00:e6: 32:53:4d:35:80:33:b6:96:c4:16:8b:9b:76:89:db:18:27:66: 76:d2:3a:99:f3:24:7b:43:27:92:ec:5a:e1:90:40:16:71:52: 23:5f:41:18:f8:f1:7a:37:6e:14:79:5f:33:c1:9e:54:7c:b7: de:a1:d0:14:99:1a:33:af:1d:0e:d9:23:7d:21:70:66:aa:bf: f7:9a:96:72:77:0c:ed:99:94:2d:57:92:7f:07:19:98:df:e2: 4c:6f:f8:1a:37:fe:af:f8:44:df:17:5b:5e:6a:42:fe:8a:30: 38:0a:b2:d7:31:12:f5:d3:6d:97:d4:c4:90:20:7d:6b:75:f4: 38:f1:77:3a:a1:01:9a:a5:bc:28:20:6a:bb:fb:45:30:54:fc: 17:20:b0:97:55:ae:0d:42:77:16:4e:44:86:53:3f:4b:e9:e9: 5c:a4:3d:7f:d4:01:5f:c1:96:e4:18:7e:20:ed:a9:20:82:c3: b0:fe:b2:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwCgt2JUNf3OvShnBunZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNmIyZDc0NDBmYjc4ODQ0Y2YwMTM1ZWM1MTgyYjNmNmY3 ODNhODYwHhcNMjUxMjA2MTMwMDQ3WhcNMjUxMjA3MTMwMDQ3WjAzMTEwLwYDVQQD EyhjM2RjOGI3OWQ3ZGU4OWMyMjViNDg4Y2UzMTI4ZGRhODlmMzQ4YjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriJsNngwQze/3ZMMJBaTFDo8U9OF LFsd00MaWdRsbehB1AetkPD69XNOUj/ekWHN9j71bOteAT5iu4jt72NrwIvn2Qrr cbLZJy68YdTS60I4EPjkII2KaHV/5ufpZPRWOJl2DkOidbMjU70lVogn1+mO1xKP 9eC4Jc6gA6v9w62Xfvxw44BZcUXFqa3jCh+e1Lkvf+nWTB9PVUPe1vOa1Z57JqYX BkxXlo2Ns36G3LeIiisY8OfyVT77HRe0ynmNktML2OiOc4eJ3io58egDh7QVqGV9 AXPT2V59tqu1l2bhtRL3O5MdVu8ZGbDdPsrnCmVJ1AHyVC1pwaDmj9C1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPci3nX3onCJbSIzjEo3aifNItWMB8GA1UdIwQY MBaAFEJrLXRA+3iETPATXsUYKz9veDqGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMt MjU5MmExZWE2MTM4LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy8xZGJkNzUtOTgxZC00NmEzLWI1YzMtMjU5MmExZWE2MTM4 LzEvUW1zdGRFRDdlSVJNOEJOZXhSZ3JQMjk0T29ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqhqtmrw OySg8n0l7kVfqqIHsppf24eam7HhJh8CvyKDINY7L2FOuwBH+T6JwQMqOG6aG+5K h8Em8NOWZC0vXmhxAIz/fwDmMlNNNYAztpbEFoubdonbGCdmdtI6mfMke0Mnkuxa 4ZBAFnFSI19BGPjxejduFHlfM8GeVHy33qHQFJkaM68dDtkjfSFwZqq/95qWcncM 7ZmULVeSfwcZmN/iTG/4Gjf+r/hE3xdbXmpC/oowOAqy1zES9dNtl9TEkCB9a3X0 OPF3OqEBmqW8KCBqu/tFMFT8FyCwl1WuDUJ3Fk5EhlM/S+npXKQ9f9QBX8GW5Bh+ IO2pIILDsP6yTA== -----END CERTIFICATE-----Generated at Sat Dec 6 16:44:05 2025 by rpki-client