This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json) Hash identifier: 34SPug1ieyxLFYu87sJIJP42Ocm2+58xpI7DVfqQTzk= Subject key identifier: D5:88:A2:12:89:86:74:5B:01:A0:D3:A6:CB:A5:E9:F5:C9:5E:BA:F8 Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Certificate serial: 019AF3F7CD8D6F3B177DBFBC5D01A7B46980 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft Manifest number: 0496 Signing time: Sat 06 Dec 2025 14:01:34 +0000 Manifest this update: Sat 06 Dec 2025 14:01:34 +0000 Manifest next update: Sun 07 Dec 2025 14:01:34 +0000 Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: aV8gdPzme5uOhjG0/DQEMFxvzg0yNm+MqxsxM6Tjarc=) 2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:cd:8d:6f:3b:17:7d:bf:bc:5d:01:a7:b4:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Validity Not Before: Dec 6 14:01:34 2025 GMT Not After : Dec 7 14:01:34 2025 GMT Subject: CN=d588a2128986745b01a0d3a6cba5e9f5c95ebaf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:42:d7:9e:68:fb:1b:17:50:bb:16:9e:b8: 5b:48:9f:5c:8a:e4:a8:1d:7d:30:49:d2:92:d0:a4: cc:81:9c:65:91:11:78:55:6a:32:56:2c:98:f8:04: 05:e1:a6:ba:6d:99:b8:9c:2c:bb:ba:7d:f8:ec:b5: a9:a8:fc:ac:a0:f5:69:67:fc:bf:37:f5:cb:2c:f2: e0:4c:6e:0a:6c:72:d0:01:a1:18:05:83:81:84:8b: 8f:ee:34:2e:ae:eb:78:06:6a:03:89:ae:e5:14:44: 1b:55:9a:42:a6:68:38:4e:af:b5:7b:0a:e6:bd:aa: fb:40:d8:cf:0a:4a:db:45:c2:4e:a1:af:b7:ea:59: cf:40:50:dd:23:d5:1c:da:a6:73:8c:7f:b0:b0:7e: 4b:29:48:62:e7:da:f5:b0:a0:4c:45:63:f6:66:45: f5:80:6f:3b:ed:da:2f:8f:f7:54:4d:49:04:10:11: 82:0c:1d:a2:59:e8:cb:70:d4:14:03:26:4a:00:6d: 80:cf:82:01:96:a3:90:67:f2:f2:cd:03:93:96:c8: a4:75:e7:6e:30:c8:f6:2f:58:5f:66:8e:39:fd:d9: 12:aa:8a:61:d4:0d:b8:e4:28:04:14:df:8e:00:94: 19:b3:99:15:6a:53:84:f7:e8:56:d1:62:03:2f:66: b7:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:88:A2:12:89:86:74:5B:01:A0:D3:A6:CB:A5:E9:F5:C9:5E:BA:F8 X509v3 Authority Key Identifier: keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:0a:cf:6a:92:ed:92:2f:12:53:b9:d9:7b:c1:8b:99:4a:d0: b0:2d:76:0e:f7:74:8f:ae:8b:0a:8a:78:e8:3c:ea:0d:c5:d0: 14:ac:66:6a:34:cd:50:d2:3f:ba:03:b1:cb:56:93:54:f8:1a: 75:fa:36:98:b7:e8:6b:07:bf:8f:b9:53:f7:8e:56:02:f9:31: 5d:45:fb:b4:b8:83:ef:df:b1:38:8b:ea:b5:c9:c1:11:f3:7d: ab:1e:af:a9:01:c9:85:b6:f3:61:1c:da:03:59:a7:1d:26:d3: bf:2e:66:23:e3:65:65:41:94:7f:4e:de:37:e4:d4:75:94:b2: 25:8f:ce:83:9f:12:ca:22:c7:da:c7:7f:c4:20:61:a6:36:4f: ee:01:1a:fc:53:cc:bb:3f:96:28:27:f8:ca:36:38:2b:67:aa: 00:9f:88:a6:b3:2b:b6:cf:9a:75:39:c2:69:36:4c:7f:eb:b3: 31:1b:42:2c:43:4a:57:20:84:7c:6e:9e:63:63:cb:52:8a:74: 76:fc:f8:02:f3:53:5a:68:df:fe:70:55:6d:4e:24:28:52:f9: 3c:66:b0:ff:67:42:ec:56:8a:4c:6d:f2:8c:aa:07:97:24:9b: 1a:06:79:79:52:9e:da:e1:3a:98:a5:6e:7a:cf:fa:fd:46:4b: 82:9a:9a:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz982NbzsXfb+8XQGntGmAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTU0NjM5MzE2ZjVjZDUyODdmODQxZDdmOGNmZjE2NTIx ZDA1NzYwHhcNMjUxMjA2MTQwMTM0WhcNMjUxMjA3MTQwMTM0WjAzMTEwLwYDVQQD EyhkNTg4YTIxMjg5ODY3NDViMDFhMGQzYTZjYmE1ZTlmNWM5NWViYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9hC155o+xsXULsWnrhbSJ9ciuSo HX0wSdKS0KTMgZxlkRF4VWoyViyY+AQF4aa6bZm4nCy7un347LWpqPysoPVpZ/y/ N/XLLPLgTG4KbHLQAaEYBYOBhIuP7jQurut4BmoDia7lFEQbVZpCpmg4Tq+1ewrm var7QNjPCkrbRcJOoa+36lnPQFDdI9Uc2qZzjH+wsH5LKUhi59r1sKBMRWP2ZkX1 gG877dovj/dUTUkEEBGCDB2iWejLcNQUAyZKAG2Az4IBlqOQZ/LyzQOTlsikdedu MMj2L1hfZo45/dkSqoph1A245CgEFN+OAJQZs5kValOE9+hW0WIDL2a3nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNWIohKJhnRbAaDTpsul6fXJXrr4MB8GA1UdIwQY MBaAFA6lRjkxb1zVKH+EHX+M/xZSHQV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1Yjgt NDE3ZjUzZjFhNGEwLzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1YjgtNDE3ZjUzZjFhNGEw LzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYArPapLt ki8SU7nZe8GLmUrQsC12Dvd0j66LCop46DzqDcXQFKxmajTNUNI/ugOxy1aTVPga dfo2mLfoawe/j7lT945WAvkxXUX7tLiD79+xOIvqtcnBEfN9qx6vqQHJhbbzYRza A1mnHSbTvy5mI+NlZUGUf07eN+TUdZSyJY/Og58SyiLH2sd/xCBhpjZP7gEa/FPM uz+WKCf4yjY4K2eqAJ+IprMrts+adTnCaTZMf+uzMRtCLENKVyCEfG6eY2PLUop0 dvz4AvNTWmjf/nBVbU4kKFL5PGaw/2dC7FaKTG3yjKoHlySbGgZ5eVKe2uE6mKVu es/6/UZLgpqaYQ== -----END CERTIFICATE-----Generated at Sat Dec 6 17:36:17 2025 by rpki-client