This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: s902ElVyqdJKafH55f48frliCR3SRCFKygVM5ZylVzI= Subject key identifier: F8:78:CB:00:FD:60:37:F0:A3:16:66:AC:D0:E1:2B:83:C5:C5:F0:99 Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019B4A713C951953E8A8119B941CAA22760B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 093B Signing time: Tue 23 Dec 2025 09:01:33 +0000 Manifest this update: Tue 23 Dec 2025 09:01:33 +0000 Manifest next update: Wed 24 Dec 2025 09:01:33 +0000 Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: cxcEkODdm1/78wU7Mj+GFgvaCB0UFsX22wv7Hit8fHo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 24 Dec 2025 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4a:71:3c:95:19:53:e8:a8:11:9b:94:1c:aa:22:76:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Dec 23 09:01:33 2025 GMT Not After : Dec 24 09:01:33 2025 GMT Subject: CN=f878cb00fd6037f0a31666acd0e12b83c5c5f099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a2:3f:17:1e:0b:65:04:c7:85:bd:e4:92:2b: 6a:af:1a:8d:a0:cc:84:bc:bd:67:12:0c:70:07:c8: 56:d5:3b:e4:fd:e3:d0:37:19:49:7f:71:6d:23:be: 41:c1:20:15:52:81:aa:bb:6c:a8:81:0b:c2:f7:1d: c8:97:0c:db:df:08:c0:fe:7f:75:ee:f8:19:fb:e5: 3f:22:67:9f:e9:a7:b1:54:f9:5a:e9:1e:09:d8:84: e8:95:da:85:12:85:a0:ca:42:8f:b9:3a:d9:3a:49: 42:98:fc:c9:5c:51:3a:09:be:3d:c1:f7:7d:de:4a: 8d:48:97:ac:d2:e5:33:49:df:5c:6c:bf:ec:46:aa: 99:28:99:48:df:99:f0:13:62:3a:cb:48:37:1c:9f: be:3d:2b:dd:9e:8e:f3:a0:9d:27:0e:a7:4f:b6:20: 4d:2d:05:bd:1f:e0:1e:03:bd:a8:ec:7a:d6:09:11: 26:e3:6a:54:83:b4:93:09:0c:a1:07:3e:98:09:04: f2:b9:e7:b3:6d:e3:0a:78:84:12:8b:b6:4e:10:b9: de:e9:a5:22:87:48:88:88:69:e3:70:54:e0:43:06: 83:1a:e7:2c:97:4d:e1:a2:e2:0d:c3:18:41:28:2d: 2f:61:f1:d1:0a:aa:98:2b:ba:b9:04:7e:f6:e2:64: ec:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:78:CB:00:FD:60:37:F0:A3:16:66:AC:D0:E1:2B:83:C5:C5:F0:99 X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bb:eb:16:5c:8f:0a:83:57:34:9e:cb:38:7b:15:f8:68:a9: 6c:8f:61:d6:b7:79:14:2c:45:fc:0d:a9:c3:26:61:bc:cc:9b: 87:e5:e5:e1:ea:7d:7c:75:7e:16:6f:cf:c3:69:e7:49:5f:2d: 0d:97:88:bd:90:fb:fc:68:32:be:b1:f9:73:e4:78:b1:e0:ff: 88:43:8a:66:ba:3d:2d:01:bd:6d:d7:d8:d4:79:b0:02:35:48: d2:f6:2d:16:a6:07:2f:ed:77:9c:72:f2:4c:53:2b:31:91:74: a3:ec:2d:e9:e5:3c:fc:8b:fe:b7:c3:db:c2:4f:d4:1e:90:68: 6e:cb:b7:5c:7d:98:04:5f:31:93:87:9d:d9:b2:13:13:4e:48: 03:30:35:2b:f3:28:20:98:f5:2a:9e:7e:da:1a:96:f2:56:dd: c8:16:66:0a:97:02:40:fa:42:12:bf:90:43:e5:0a:ea:3d:3c: c2:fb:17:0e:02:31:b7:9d:8d:4c:a0:07:75:87:85:74:21:ef: 34:0a:f9:f5:31:73:14:2a:3c:7b:00:68:a4:ec:30:59:19:2a: 20:2a:83:c2:9e:ef:3a:60:a5:ff:ab:50:be:ab:97:dd:7a:25: 9b:10:97:9d:7a:15:78:27:ef:d8:77:36:eb:9f:d1:92:ca:80: 7c:21:db:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtKcTyVGVPoqBGblByqInYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjUxMjIzMDkwMTMzWhcNMjUxMjI0MDkwMTMzWjAzMTEwLwYDVQQD EyhmODc4Y2IwMGZkNjAzN2YwYTMxNjY2YWNkMGUxMmI4M2M1YzVmMDk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKI/Fx4LZQTHhb3kkitqrxqNoMyE vL1nEgxwB8hW1Tvk/ePQNxlJf3FtI75BwSAVUoGqu2yogQvC9x3Ilwzb3wjA/n91 7vgZ++U/Imef6aexVPla6R4J2IToldqFEoWgykKPuTrZOklCmPzJXFE6Cb49wfd9 3kqNSJes0uUzSd9cbL/sRqqZKJlI35nwE2I6y0g3HJ++PSvdno7zoJ0nDqdPtiBN LQW9H+AeA72o7HrWCREm42pUg7STCQyhBz6YCQTyueezbeMKeIQSi7ZOELne6aUi h0iIiGnjcFTgQwaDGucsl03houINwxhBKC0vYfHRCqqYK7q5BH724mTsowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPh4ywD9YDfwoxZmrNDhK4PFxfCZMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7vrFlyP CoNXNJ7LOHsV+GipbI9h1rd5FCxF/A2pwyZhvMybh+Xl4ep9fHV+Fm/Pw2nnSV8t DZeIvZD7/GgyvrH5c+R4seD/iEOKZro9LQG9bdfY1HmwAjVI0vYtFqYHL+13nHLy TFMrMZF0o+wt6eU8/Iv+t8Pbwk/UHpBobsu3XH2YBF8xk4ed2bITE05IAzA1K/Mo IJj1Kp5+2hqW8lbdyBZmCpcCQPpCEr+QQ+UK6j08wvsXDgIxt52NTKAHdYeFdCHv NAr59TFzFCo8ewBopOwwWRkqICqDwp7vOmCl/6tQvquX3XolmxCXnXoVeCfv2Hc2 65/RksqAfCHbrw== -----END CERTIFICATE-----Generated at Tue Dec 23 15:18:02 2025 by rpki-client