This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json) Hash identifier: JGN73ZfYbcEbR912Q9rBfRt4f5nXVe3Dm/4lCZMXs30= Subject key identifier: 0B:65:A7:33:40:78:6C:A9:85:9B:26:EB:F1:93:E3:D3:A5:F3:7E:CB Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Certificate serial: 019AF208D92A9A838E8B16262BB524B9AB7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 05:00:57 +0000 Manifest this update: Sat 06 Dec 2025 05:00:57 +0000 Manifest next update: Sun 07 Dec 2025 05:00:57 +0000 Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=) 2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: yiUNaDDYn2zgC9kCVmaBz598CxCw/yigSuQSuNG7+NM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:d9:2a:9a:83:8e:8b:16:26:2b:b5:24:b9:ab:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Validity Not Before: Dec 6 05:00:57 2025 GMT Not After : Dec 7 05:00:57 2025 GMT Subject: CN=0b65a73340786ca9859b26ebf193e3d3a5f37ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3b:51:26:22:46:d9:0e:88:fb:b9:0e:51:bc: 69:96:7e:08:7b:4a:e6:c5:09:e0:0a:1f:f7:16:f6: da:01:ce:c1:9c:61:4e:b3:42:eb:22:e5:66:55:1d: 94:1b:be:e4:5b:73:d7:57:80:59:b0:e2:b8:81:92: c9:4f:2d:7a:70:45:2a:3b:ec:f4:11:07:b8:81:01: 29:51:d4:36:31:fd:aa:c8:66:4a:79:6b:13:80:01: 16:0a:79:ce:71:c2:ef:cf:0b:6b:22:75:c0:fa:2d: 50:c5:b8:1f:4e:b9:7a:13:70:14:56:e1:06:f1:d1: f0:5a:70:c9:37:1d:f0:2a:e2:09:94:19:85:3b:01: 79:83:e0:8d:20:fd:85:97:f7:3a:14:b5:86:52:f4: e5:59:87:85:22:ed:83:d3:1b:21:5b:07:88:ff:f1: 76:6e:11:9f:6a:56:84:01:75:44:9e:c4:f3:f6:c1: 82:37:10:03:a0:88:2f:e8:cc:72:3f:7b:3c:9e:43: 43:57:6f:87:04:0f:95:80:6a:73:e5:27:b1:66:5f: 3c:26:9b:c4:b3:a6:04:07:21:37:83:c1:83:04:a0: d2:25:4e:08:b0:7e:d7:f6:e8:cb:03:d2:6a:a8:b1: 64:2b:7e:cc:de:76:5c:56:a9:34:f4:4a:3b:a1:af: 94:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:65:A7:33:40:78:6C:A9:85:9B:26:EB:F1:93:E3:D3:A5:F3:7E:CB X509v3 Authority Key Identifier: keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:af:66:1c:78:f1:98:79:d0:bd:80:3b:f5:02:f7:ac:32:35: c3:80:27:a9:a6:7c:09:34:40:98:8e:13:53:22:e2:11:ae:80: 07:76:db:98:c5:c2:fe:64:29:78:72:e4:cd:79:fa:0a:31:3f: 54:1a:0e:4a:6b:3a:60:10:5c:df:a4:5e:e6:4c:16:d6:87:a9: 68:65:4f:95:1e:f5:ef:de:ea:30:fb:ea:f7:0d:b1:4c:cb:1c: 7b:c9:a2:47:d9:da:cf:3f:a1:16:35:01:e8:f9:4c:75:94:f4: b3:03:fd:47:86:12:f5:61:a3:f1:f9:85:1c:a7:b7:19:ad:03: 80:1e:66:34:5d:f7:1f:b7:b6:62:3f:55:46:b8:11:4b:d4:95: bd:f6:ff:bd:32:00:b6:b6:ef:40:65:43:f3:80:60:89:34:7a: 0a:a4:5f:6d:22:22:4c:74:4a:df:fb:87:39:c0:c2:ae:69:50: a6:64:70:75:3d:e8:31:1f:b4:59:2a:a6:e9:1f:3d:99:6a:dd: c3:bd:3a:50:3e:50:2e:55:1f:67:94:1c:8e:05:cc:19:4b:c6: e9:a1:39:9b:54:80:d4:ad:b5:4f:30:56:58:24:c9:87:f3:84: 7d:04:53:ec:2f:67:e4:e0:ae:13:01:1b:d4:d9:23:6e:de:21: ce:07:be:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCNkqmoOOixYmK7Ukuat7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGFiMjg2ZGFlOGQ4Y2I1ZjZmYzRlZWMzZjMyMzgxNGM4 N2Y1YmUwHhcNMjUxMjA2MDUwMDU3WhcNMjUxMjA3MDUwMDU3WjAzMTEwLwYDVQQD EygwYjY1YTczMzQwNzg2Y2E5ODU5YjI2ZWJmMTkzZTNkM2E1ZjM3ZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzztRJiJG2Q6I+7kOUbxpln4Ie0rm xQngCh/3FvbaAc7BnGFOs0LrIuVmVR2UG77kW3PXV4BZsOK4gZLJTy16cEUqO+z0 EQe4gQEpUdQ2Mf2qyGZKeWsTgAEWCnnOccLvzwtrInXA+i1QxbgfTrl6E3AUVuEG 8dHwWnDJNx3wKuIJlBmFOwF5g+CNIP2Fl/c6FLWGUvTlWYeFIu2D0xshWweI//F2 bhGfalaEAXVEnsTz9sGCNxADoIgv6MxyP3s8nkNDV2+HBA+VgGpz5SexZl88JpvE s6YEByE3g8GDBKDSJU4IsH7X9ujLA9JqqLFkK37M3nZcVqk09Eo7oa+ULwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtlpzNAeGyphZsm6/GT49Ol837LMB8GA1UdIwQY MBaAFHEKsoba6NjLX2/E7sPzI4FMh/W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2Yjkt N2JmOTY4MzJlMWVhLzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2YjktN2JmOTY4MzJlMWVh LzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAca9mHHjx mHnQvYA79QL3rDI1w4AnqaZ8CTRAmI4TUyLiEa6AB3bbmMXC/mQpeHLkzXn6CjE/ VBoOSms6YBBc36Re5kwW1oepaGVPlR71797qMPvq9w2xTMsce8miR9nazz+hFjUB 6PlMdZT0swP9R4YS9WGj8fmFHKe3Ga0DgB5mNF33H7e2Yj9VRrgRS9SVvfb/vTIA trbvQGVD84BgiTR6CqRfbSIiTHRK3/uHOcDCrmlQpmRwdT3oMR+0WSqm6R89mWrd w706UD5QLlUfZ5QcjgXMGUvG6aE5m1SA1K21TzBWWCTJh/OEfQRT7C9n5OCuEwEb 1Nkjbt4hzge+vg== -----END CERTIFICATE-----Generated at Sat Dec 6 10:22:09 2025 by rpki-client