This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft File: dqNyt1TkkgjWRqp4WeNItHXlJtI.mft (raw, json) Hash identifier: RSvP+JX7TpdmRuW1vXiaT4wVdkhZm4kbBmLwcbrkHjI= Subject key identifier: B6:93:57:60:BD:78:78:A2:C7:47:DA:8A:CE:60:56:3F:5A:34:1D:AD Authority key identifier: 76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 Certificate issuer: /CN=76a372b754e49208d646aa7859e348b475e526d2 Certificate serial: 019B3C7F1D8D90A16044E54AAF6F268A7F34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft Manifest number: 1787 Signing time: Sat 20 Dec 2025 16:02:02 +0000 Manifest this update: Sat 20 Dec 2025 16:02:02 +0000 Manifest next update: Sun 21 Dec 2025 16:02:02 +0000 Files and hashes: 1: dqNyt1TkkgjWRqp4WeNItHXlJtI.crl (hash: fQ6kqC46/AFF+qH8Zx1U7NkasU8X0m7LXx2Zy9Jze6M=) 2: jNyaGdXh72CU4r0BXdX9NFKAwCI.roa (hash: KWU48qyL5wzO3wv8boVqiKFZ7+HfPReZF5Tc1JfbGeU=) 3: rU-a1L62W9yvQkesfV9xmSsuDH0.roa (hash: TGk/DUYw8VVmGx/evhfxGKscBfdKDMhClJqHTZwdFIQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:1d:8d:90:a1:60:44:e5:4a:af:6f:26:8a:7f:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a372b754e49208d646aa7859e348b475e526d2 Validity Not Before: Dec 20 16:02:02 2025 GMT Not After : Dec 21 16:02:02 2025 GMT Subject: CN=b6935760bd7878a2c747da8ace60563f5a341dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:41:8d:b1:fc:f6:9d:b6:5e:5c:00:70:a8: de:0f:6a:07:3f:60:54:99:e7:8d:fd:45:fe:4b:c3: 3d:0c:12:da:f7:fc:bf:77:0d:4a:4c:0a:97:91:19: 8a:89:84:80:4d:55:f8:d6:98:b1:41:cd:53:f9:47: 7d:33:00:d6:43:7e:cd:65:fd:dd:2f:41:59:7b:70: 90:c3:2d:a4:1e:86:80:e1:41:62:6a:c2:0e:01:cb: 33:c1:d6:a8:6e:b8:70:89:06:61:31:a4:82:66:56: 49:ae:1f:54:ba:48:c0:c1:72:fc:9f:9c:bc:ca:5b: e1:64:c6:95:05:9b:38:ac:89:f2:87:fa:0c:e6:42: 5d:e2:25:a3:14:65:69:ea:85:83:49:c2:26:c6:8b: ec:a8:fc:f7:37:ea:74:c8:dc:a9:ab:0a:1b:98:b5: 02:52:4b:fe:51:a5:1a:5f:75:cd:f0:cc:56:1c:4f: c3:ad:0f:0d:ba:b0:fa:31:6e:bc:f5:03:09:55:68: c2:a9:8f:05:a4:94:76:84:49:a6:9a:1c:1b:50:39: d3:f3:8a:92:af:5e:a5:2b:7a:d9:27:30:15:6c:8a: 7e:65:dd:70:83:05:13:e6:aa:53:fb:ee:44:6e:29: 5a:eb:96:90:d7:37:cf:53:f0:0f:6c:02:41:20:1a: e4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:93:57:60:BD:78:78:A2:C7:47:DA:8A:CE:60:56:3F:5A:34:1D:AD X509v3 Authority Key Identifier: keyid:76:A3:72:B7:54:E4:92:08:D6:46:AA:78:59:E3:48:B4:75:E5:26:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqNyt1TkkgjWRqp4WeNItHXlJtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/235fec-afc9-4d2f-8b59-a99ea91cb5b9/1/dqNyt1TkkgjWRqp4WeNItHXlJtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:0f:15:af:f1:a8:b7:2e:16:bd:e9:58:2f:00:66:9c:9e:15: c8:d8:ec:24:42:b5:c8:b2:70:7f:30:75:08:9e:b2:23:b1:6a: ad:d1:6c:2c:0b:6b:db:c6:75:b5:58:b6:b8:bb:12:7e:f1:3e: 82:f2:6f:87:ad:8e:9d:b6:24:b0:4b:6b:cb:54:ab:d0:18:4d: 96:27:7a:4f:f5:25:1a:a5:8e:b9:32:a9:57:cf:53:4a:30:47: dc:98:48:6d:25:ad:ad:2a:0c:94:71:56:61:94:54:03:3c:15: d5:7b:7c:91:74:45:61:f4:d7:8f:fa:79:96:42:75:4f:ce:b5: c1:25:4e:a8:b6:a0:b1:c5:c2:9f:f6:ab:b0:96:3d:1b:30:7a: 9c:bd:d4:c3:fe:e3:2e:04:9c:b5:6a:76:4c:e9:15:cb:ef:b3: 1c:a2:ff:b7:0a:47:b7:31:98:71:2f:a9:de:e3:0e:73:81:be: c8:c6:81:18:13:60:0a:4a:9d:1d:a7:93:39:6b:96:aa:18:ec: 7b:96:04:bb:9a:d3:7a:40:4c:da:0a:3a:5e:47:3e:f1:ef:f3: 5f:e4:ba:09:14:22:b5:d9:dc:c8:c2:08:d5:e8:63:37:4c:8e: 88:b0:4d:0c:3e:39:cf:70:7f:5a:c2:fb:2e:32:00:68:5b:eb: c7:f5:64:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fx2NkKFgROVKr28min80MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTM3MmI3NTRlNDkyMDhkNjQ2YWE3ODU5ZTM0OGI0NzVl NTI2ZDIwHhcNMjUxMjIwMTYwMjAyWhcNMjUxMjIxMTYwMjAyWjAzMTEwLwYDVQQD EyhiNjkzNTc2MGJkNzg3OGEyYzc0N2RhOGFjZTYwNTYzZjVhMzQxZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArntBjbH89p22XlwAcKjeD2oHP2BU meeN/UX+S8M9DBLa9/y/dw1KTAqXkRmKiYSATVX41pixQc1T+Ud9MwDWQ37NZf3d L0FZe3CQwy2kHoaA4UFiasIOAcszwdaobrhwiQZhMaSCZlZJrh9UukjAwXL8n5y8 ylvhZMaVBZs4rInyh/oM5kJd4iWjFGVp6oWDScImxovsqPz3N+p0yNypqwobmLUC Ukv+UaUaX3XN8MxWHE/DrQ8NurD6MW689QMJVWjCqY8FpJR2hEmmmhwbUDnT84qS r16lK3rZJzAVbIp+Zd1wgwUT5qpT++5Ebila65aQ1zfPU/APbAJBIBrkLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLaTV2C9eHiix0fais5gVj9aNB2tMB8GA1UdIwQY MBaAFHajcrdU5JII1kaqeFnjSLR15SbSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTkt YTk5ZWE5MWNiNWI5LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8yMzVmZWMtYWZjOS00ZDJmLThiNTktYTk5ZWE5MWNiNWI5 LzEvZHFOeXQxVGtrZ2pXUnFwNFdlTkl0SFhsSnRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASA8Vr/Go ty4WvelYLwBmnJ4VyNjsJEK1yLJwfzB1CJ6yI7FqrdFsLAtr28Z1tVi2uLsSfvE+ gvJvh62OnbYksEtry1Sr0BhNlid6T/UlGqWOuTKpV89TSjBH3JhIbSWtrSoMlHFW YZRUAzwV1Xt8kXRFYfTXj/p5lkJ1T861wSVOqLagscXCn/arsJY9GzB6nL3Uw/7j LgSctWp2TOkVy++zHKL/twpHtzGYcS+p3uMOc4G+yMaBGBNgCkqdHaeTOWuWqhjs e5YEu5rTekBM2go6Xkc+8e/zX+S6CRQitdncyMII1ehjN0yOiLBNDD45z3B/WsL7 LjIAaFvrx/VkBg== -----END CERTIFICATE-----Generated at Sat Dec 20 17:53:38 2025 by rpki-client