This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft File: MDquN78-v5XxS62GR9PVjvbng7I.mft (raw, json) Hash identifier: FYDB10WSixyk5CBOcK0HU0oQ0mwDGfHcd0opQI6fO1A= Subject key identifier: FD:31:D1:DE:6A:50:F3:E3:A7:65:7D:35:15:1B:98:2D:FF:4D:FA:9A Authority key identifier: 30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 Certificate issuer: /CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Certificate serial: 019B342040A2F048C0F988BE7F0589B5754B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 01:01:27 +0000 Manifest this update: Fri 19 Dec 2025 01:01:27 +0000 Manifest next update: Sat 20 Dec 2025 01:01:27 +0000 Files and hashes: 1: MDquN78-v5XxS62GR9PVjvbng7I.crl (hash: fgw+We6ZjAm8KmNl2SK1A16bJmEGMfeVAW/eLlCu960=) 2: OvLZjS7E5MX30NZkLK9jxh8KFhU.roa (hash: cImSpb6PHoLXLcMRtEaZwDR7QJdikTFbgChlslLA778=) 3: SoN9k2cqGxyy_rsm3ydDmcCibzo.roa (hash: ajQGIB+pruVAaKn9625joYHZDBPfoDRUv7Hz6Vm4jnw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 01:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:34:20:40:a2:f0:48:c0:f9:88:be:7f:05:89:b5:75:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=303aae37bf3ebf95f14bad8647d3d58ef6e783b2 Validity Not Before: Dec 19 01:01:27 2025 GMT Not After : Dec 20 01:01:27 2025 GMT Subject: CN=fd31d1de6a50f3e3a7657d35151b982dff4dfa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:54:15:0b:6f:9a:42:4a:c6:8c:51:e3:17:5f: 7c:0b:92:a4:ee:fc:23:1f:d9:be:0d:1f:80:c2:db: b2:86:d3:97:21:54:c0:f9:a1:b4:83:ea:82:c2:10: 5c:05:6a:a8:6f:b9:2a:8b:c8:f3:e9:27:3c:c1:b1: 17:a6:c1:7a:07:8f:ef:fd:08:7d:f3:11:ff:be:e7: 9e:87:c1:ef:00:11:d6:88:f1:5d:45:9a:8f:ae:b3: 03:e0:3f:8c:61:10:1f:9c:eb:cd:15:44:ca:86:48: 13:2d:43:c1:f6:18:0c:09:ea:61:14:3e:8e:b3:9c: 63:35:7d:af:fd:3e:93:87:d3:ae:0c:31:a3:c7:09: 56:7f:8c:f8:32:4b:bf:44:5b:7f:6d:17:24:10:b2: 37:2f:29:7a:52:54:16:79:39:cc:d5:ba:78:59:d5: 4b:2a:76:a3:bd:88:69:e2:56:ef:9c:0e:d9:6d:13: fb:80:0e:4d:11:bc:e2:ba:f3:12:7a:e1:d4:89:e3: 50:4e:cb:e0:78:54:16:68:52:e2:a2:5b:19:6e:f1: 3b:84:c3:a4:07:00:6b:3e:4a:8d:f0:49:84:03:08: 8a:40:84:10:10:96:ac:a8:ab:3a:85:50:e3:ab:00: f8:85:66:d8:cd:4f:a1:1f:6c:57:f0:7e:94:f1:fd: 4e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:31:D1:DE:6A:50:F3:E3:A7:65:7D:35:15:1B:98:2D:FF:4D:FA:9A X509v3 Authority Key Identifier: keyid:30:3A:AE:37:BF:3E:BF:95:F1:4B:AD:86:47:D3:D5:8E:F6:E7:83:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDquN78-v5XxS62GR9PVjvbng7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/3bd7d2-2415-431c-b97d-d85853688b43/1/MDquN78-v5XxS62GR9PVjvbng7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:83:2b:db:0b:ba:e9:72:d1:b7:89:66:39:6e:d6:52:47:b1: 68:01:5f:4a:b6:f2:c8:72:39:19:20:a0:f8:50:70:8e:ba:c5: 10:36:8a:39:f9:c4:cd:15:66:26:67:df:9d:85:74:fe:55:3d: 0c:e0:59:ee:eb:54:f4:8c:b3:05:55:27:8c:81:de:55:72:6c: 68:92:d4:c6:cd:1b:6f:44:ef:b4:fd:a0:36:38:eb:62:d9:1d: 33:23:cd:77:e4:9a:34:9d:9a:75:17:ca:5a:57:c0:3a:df:23: 9b:1a:1b:b8:9e:9a:4d:14:71:45:60:74:36:21:8b:d9:d4:d1: c0:9d:f4:1c:f7:17:fc:c7:56:03:86:ea:41:2c:24:70:fb:e1: 4b:b7:5d:2c:70:53:fe:60:4a:48:f0:fb:1d:02:47:2e:fa:38: 9d:6e:10:d1:7a:68:4f:d3:c5:48:fc:e2:97:70:95:85:05:70: 45:c7:a3:ce:68:8e:eb:57:3d:7f:0c:3c:b6:16:07:6e:36:20: 1a:0b:f5:5f:68:51:d0:f3:ea:61:6b:d4:56:17:79:a8:55:f7: 4c:13:78:3d:7c:14:86:e0:f5:70:f2:9d:79:54:93:86:ed:84: af:69:f5:e4:75:25:f0:a6:4a:9b:ab:44:07:78:ec:a5:8f:45: f1:f3:4b:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs0IECi8EjA+Yi+fwWJtXVLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwM2FhZTM3YmYzZWJmOTVmMTRiYWQ4NjQ3ZDNkNThlZjZl NzgzYjIwHhcNMjUxMjE5MDEwMTI3WhcNMjUxMjIwMDEwMTI3WjAzMTEwLwYDVQQD EyhmZDMxZDFkZTZhNTBmM2UzYTc2NTdkMzUxNTFiOTgyZGZmNGRmYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1QVC2+aQkrGjFHjF198C5Kk7vwj H9m+DR+AwtuyhtOXIVTA+aG0g+qCwhBcBWqob7kqi8jz6Sc8wbEXpsF6B4/v/Qh9 8xH/vueeh8HvABHWiPFdRZqPrrMD4D+MYRAfnOvNFUTKhkgTLUPB9hgMCephFD6O s5xjNX2v/T6Th9OuDDGjxwlWf4z4Mku/RFt/bRckELI3Lyl6UlQWeTnM1bp4WdVL KnajvYhp4lbvnA7ZbRP7gA5NEbziuvMSeuHUieNQTsvgeFQWaFLiolsZbvE7hMOk BwBrPkqN8EmEAwiKQIQQEJasqKs6hVDjqwD4hWbYzU+hH2xX8H6U8f1OEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0x0d5qUPPjp2V9NRUbmC3/TfqaMB8GA1UdIwQY MBaAFDA6rje/Pr+V8UuthkfT1Y7254OyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2Qt ZDg1ODUzNjg4YjQzLzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8zYmQ3ZDItMjQxNS00MzFjLWI5N2QtZDg1ODUzNjg4YjQz LzEvTURxdU43OC12NVh4UzYyR1I5UFZqdmJuZzdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVoMr2wu6 6XLRt4lmOW7WUkexaAFfSrbyyHI5GSCg+FBwjrrFEDaKOfnEzRVmJmffnYV0/lU9 DOBZ7utU9IyzBVUnjIHeVXJsaJLUxs0bb0TvtP2gNjjrYtkdMyPNd+SaNJ2adRfK WlfAOt8jmxobuJ6aTRRxRWB0NiGL2dTRwJ30HPcX/MdWA4bqQSwkcPvhS7ddLHBT /mBKSPD7HQJHLvo4nW4Q0XpoT9PFSPzil3CVhQVwRcejzmiO61c9fww8thYHbjYg Ggv1X2hR0PPqYWvUVhd5qFX3TBN4PXwUhuD1cPKdeVSThu2Er2n15HUl8KZKm6tE B3jspY9F8fNLPQ== -----END CERTIFICATE-----Generated at Fri Dec 19 08:54:50 2025 by rpki-client