This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json) Hash identifier: lTS2tA58aHtJ8Wzo72Is19DXHYxO7vLkh9n5L3Bd8rc= Subject key identifier: 99:5D:8E:8F:7E:DF:D0:CD:01:70:18:B8:37:28:7B:DF:E4:0F:F9:60 Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Certificate serial: 019AF2ADD0C7DDD6317846A005C9CFF41ECE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft Manifest number: 1534 Signing time: Sat 06 Dec 2025 08:01:08 +0000 Manifest this update: Sat 06 Dec 2025 08:01:08 +0000 Manifest next update: Sun 07 Dec 2025 08:01:08 +0000 Files and hashes: 1: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: +QZ1Eb3EcN8gn/eQB0es9w0Uiy7/O52bNAYHaw7Zmhk=) 2: xjZ1XJhW_cFPR3oT-Y__-eT7BLU.roa (hash: iqLiaW6nsbh481RYQHU8cc/w97YkMP9DpENBWhWu8os=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:d0:c7:dd:d6:31:78:46:a0:05:c9:cf:f4:1e:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Validity Not Before: Dec 6 08:01:08 2025 GMT Not After : Dec 7 08:01:08 2025 GMT Subject: CN=995d8e8f7edfd0cd017018b837287bdfe40ff960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:26:b0:cc:f7:57:82:60:32:80:22:f3:d8: fa:41:03:ec:72:75:43:21:5d:13:9f:27:50:9e:39: 59:81:82:78:e0:38:ba:35:10:b0:a9:20:86:78:aa: c6:00:8d:21:2a:b2:be:69:65:b6:3d:eb:c8:54:a2: 0c:ac:ab:24:4b:12:1d:42:68:38:7f:4e:23:ef:1f: 7e:2e:11:b3:cc:84:4f:0b:98:60:0a:24:83:21:dd: ab:a6:c3:7a:c5:7e:99:42:3e:7c:fb:18:4a:3b:d1: 4d:56:d0:a3:2c:4f:90:5f:fd:37:72:09:bd:a0:6e: bc:85:9e:27:cf:9c:65:5d:84:8e:b9:1f:90:3d:e2: c8:29:b9:15:0b:06:e1:08:00:d2:12:99:6a:f5:b9: 9d:0b:69:b9:85:fa:0b:dd:95:98:53:50:ba:fa:ff: d7:5d:82:06:f8:be:4c:09:4b:ef:1e:9b:b3:c3:6e: 3a:25:6e:30:e8:96:39:4c:e6:50:ac:8e:b3:7a:e5: 37:e4:dd:7f:0b:08:de:09:df:6e:a9:2b:8a:40:be: d4:b5:b6:83:8e:a1:08:5b:3e:56:0a:e0:af:27:55: 19:17:39:0e:21:9d:a3:fc:2d:5f:69:64:91:b8:ad: 61:46:50:93:9b:cf:f6:4d:26:08:49:5e:86:54:62: 1d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:5D:8E:8F:7E:DF:D0:CD:01:70:18:B8:37:28:7B:DF:E4:0F:F9:60 X509v3 Authority Key Identifier: keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:55:7f:37:7e:32:e0:e9:08:1a:7a:2d:83:48:fb:05:f2:a3: d9:4b:46:90:e0:4b:26:d3:5f:29:89:f9:03:0e:1e:77:23:b0: ea:ff:8e:29:14:1b:70:b6:86:ce:25:89:ff:7e:61:24:c1:49: 98:21:fa:5e:3e:6b:94:9f:0d:b8:10:50:84:51:29:1e:e5:dd: 98:45:16:87:6c:0d:a2:b7:db:57:53:21:8a:d4:25:0d:8c:ab: bf:15:2f:dc:90:a3:5b:d0:e4:9f:d4:73:52:22:93:f9:67:4e: 6c:17:44:ac:6b:b9:79:4e:4b:7b:26:43:85:e5:d7:f0:f6:ac: cc:06:fe:5d:57:45:cb:03:c0:ea:8a:24:fa:6f:0a:e8:0c:39: 71:1d:46:37:ee:74:d1:a7:52:28:e7:57:6d:6d:41:a7:36:4b: 26:d1:6e:21:70:ba:d2:e4:c2:fd:77:8f:40:8e:24:29:71:44: 2f:9d:90:e1:86:29:cd:21:f9:89:0c:78:c3:01:1b:78:e6:92: 26:8b:dd:4e:34:1c:b1:09:47:25:a0:ed:d7:8a:45:5f:66:08: 37:39:07:45:e8:5a:d3:5e:a6:d7:08:7a:e5:00:9c:cc:01:05: 14:70:29:77:46:83:9e:88:86:57:47:23:c5:b7:7b:25:d9:15: e4:3a:81:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrdDH3dYxeEagBcnP9B7OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk MjFjNzAwHhcNMjUxMjA2MDgwMTA4WhcNMjUxMjA3MDgwMTA4WjAzMTEwLwYDVQQD Eyg5OTVkOGU4ZjdlZGZkMGNkMDE3MDE4YjgzNzI4N2JkZmU0MGZmOTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/4msMz3V4JgMoAi89j6QQPscnVD IV0TnydQnjlZgYJ44Di6NRCwqSCGeKrGAI0hKrK+aWW2PevIVKIMrKskSxIdQmg4 f04j7x9+LhGzzIRPC5hgCiSDId2rpsN6xX6ZQj58+xhKO9FNVtCjLE+QX/03cgm9 oG68hZ4nz5xlXYSOuR+QPeLIKbkVCwbhCADSEplq9bmdC2m5hfoL3ZWYU1C6+v/X XYIG+L5MCUvvHpuzw246JW4w6JY5TOZQrI6zeuU35N1/CwjeCd9uqSuKQL7UtbaD jqEIWz5WCuCvJ1UZFzkOIZ2j/C1faWSRuK1hRlCTm8/2TSYISV6GVGIdOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJldjo9+39DNAXAYuDcoe9/kD/lgMB8GA1UdIwQY MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3 LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYlV/N34y 4OkIGnotg0j7BfKj2UtGkOBLJtNfKYn5Aw4edyOw6v+OKRQbcLaGziWJ/35hJMFJ mCH6Xj5rlJ8NuBBQhFEpHuXdmEUWh2wNorfbV1MhitQlDYyrvxUv3JCjW9Dkn9Rz UiKT+WdObBdErGu5eU5LeyZDheXX8PaszAb+XVdFywPA6ook+m8K6Aw5cR1GN+50 0adSKOdXbW1BpzZLJtFuIXC60uTC/XePQI4kKXFEL52Q4YYpzSH5iQx4wwEbeOaS JovdTjQcsQlHJaDt14pFX2YINzkHReha016m1wh65QCczAEFFHApd0aDnoiGV0cj xbd7JdkV5DqB7Q== -----END CERTIFICATE-----Generated at Sat Dec 6 11:42:44 2025 by rpki-client