This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: W5KLZwXBVZZJxlu7s5pmv2baE/GHMp0J61uAytDzc5M= Subject key identifier: CA:B7:6A:75:CC:2C:A8:E4:A6:29:FB:11:37:48:D6:82:2C:8C:8C:01 Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019B42B78BFE56609747F8E6660C05BAF6EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 0937 Signing time: Sun 21 Dec 2025 21:01:23 +0000 Manifest this update: Sun 21 Dec 2025 21:01:23 +0000 Manifest next update: Mon 22 Dec 2025 21:01:23 +0000 Files and hashes: 1: IAlG_JZnxdKZaAbKbMqU0apa1zM.roa (hash: 6NM8ywaQ4KrTjMahsMkK26ddWwbEVRn9bOmHvEoirEw=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: 2QJku0Ju06hGND8/W3u18ufdgq3HCplSyD2EByHPv4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:b7:8b:fe:56:60:97:47:f8:e6:66:0c:05:ba:f6:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Dec 21 21:01:23 2025 GMT Not After : Dec 22 21:01:23 2025 GMT Subject: CN=cab76a75cc2ca8e4a629fb113748d6822c8c8c01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8d:1f:2d:59:2e:ef:60:de:c5:94:38:c4:7e: dc:c3:bc:6a:d7:90:29:34:9d:ef:a5:bc:64:94:a9: 2e:63:6d:41:b5:c1:26:ae:62:44:97:c8:a7:1f:23: 5d:82:d8:e6:b4:6c:32:94:b0:d9:df:3b:85:04:54: 81:6c:2d:6c:58:30:b8:29:3e:d3:7a:43:f1:ee:f8: 08:0c:90:b0:8d:36:79:67:08:b0:2e:5f:ac:45:8a: aa:39:58:50:fb:2e:60:14:e5:6c:45:cd:41:74:05: d2:42:5a:6b:f4:8c:4f:a8:82:94:a7:f7:48:b7:a8: 2f:a4:9c:65:bf:a6:3b:fd:de:e8:54:2b:67:5c:0c: 6e:17:9a:d7:fe:34:d5:6f:b5:19:39:47:60:17:dd: 2c:a4:be:81:ef:fa:48:2d:45:3a:03:36:23:18:4e: 6f:e0:0d:85:17:b7:93:1a:bb:9f:51:a6:d8:5e:15: 13:f7:85:55:0c:07:cf:15:6c:ea:47:7c:01:ed:87: e1:ff:fd:14:6d:e5:dd:7b:3e:50:c9:74:26:22:ed: ea:f8:d7:0e:a8:af:e5:5b:46:44:58:d5:16:60:89: d6:76:a8:2c:95:16:0f:58:9f:b7:fa:c0:5c:20:fa: c8:04:79:9e:d2:97:e6:7c:da:97:d9:1c:26:1d:08: f3:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B7:6A:75:CC:2C:A8:E4:A6:29:FB:11:37:48:D6:82:2C:8C:8C:01 X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:04:e4:46:76:38:02:f6:b3:1c:e4:f0:cb:2d:a6:38:50:14: 2a:6a:32:b1:46:ce:18:a8:c3:a2:7d:37:45:54:bc:e8:c7:13: 31:da:6a:28:3a:19:dd:51:42:2e:c6:87:fa:2e:1f:85:9d:5d: 0c:40:9a:d2:df:8f:73:c2:c1:3a:8a:4a:84:e0:a5:78:40:11: e1:cf:83:46:05:dd:22:dc:93:4c:fa:ac:32:a5:24:37:38:f5: 8a:4f:15:04:7f:39:5b:66:4f:97:7d:6f:b9:0d:b7:01:93:78: 5e:fe:ad:72:be:2f:bc:16:b8:4a:7e:dc:c6:29:32:2d:c9:22: 63:f6:af:08:0c:7e:c2:f8:21:2b:b6:a8:c6:5e:bc:ba:e7:c2: df:42:b7:99:bf:ea:3c:b9:f9:11:84:de:79:7c:62:f5:90:4e: cf:e0:5b:07:59:aa:4b:e5:35:bb:cb:86:8b:5a:83:03:90:b2: 7e:70:cb:33:d4:e2:21:f7:c1:cd:da:03:d2:4c:58:51:a9:ce: a4:ba:17:7c:f7:22:ae:e6:8d:b3:a9:8f:4c:41:18:d4:1f:5d: 7f:eb:77:69:30:b5:7c:05:d7:a3:ff:38:bd:b2:df:43:1d:e4: 92:9e:56:92:93:4e:83:d9:86:6e:e7:c1:f0:bc:2f:2f:ee:20: ad:41:dc:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCt4v+VmCXR/jmZgwFuvbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjUxMjIxMjEwMTIzWhcNMjUxMjIyMjEwMTIzWjAzMTEwLwYDVQQD EyhjYWI3NmE3NWNjMmNhOGU0YTYyOWZiMTEzNzQ4ZDY4MjJjOGM4YzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt40fLVku72DexZQ4xH7cw7xq15Ap NJ3vpbxklKkuY21BtcEmrmJEl8inHyNdgtjmtGwylLDZ3zuFBFSBbC1sWDC4KT7T ekPx7vgIDJCwjTZ5ZwiwLl+sRYqqOVhQ+y5gFOVsRc1BdAXSQlpr9IxPqIKUp/dI t6gvpJxlv6Y7/d7oVCtnXAxuF5rX/jTVb7UZOUdgF90spL6B7/pILUU6AzYjGE5v 4A2FF7eTGrufUabYXhUT94VVDAfPFWzqR3wB7Yfh//0UbeXdez5QyXQmIu3q+NcO qK/lW0ZEWNUWYInWdqgslRYPWJ+3+sBcIPrIBHme0pfmfNqX2RwmHQjzaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMq3anXMLKjkpin7ETdI1oIsjIwBMB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANQTkRnY4 AvazHOTwyy2mOFAUKmoysUbOGKjDon03RVS86McTMdpqKDoZ3VFCLsaH+i4fhZ1d DECa0t+Pc8LBOopKhOCleEAR4c+DRgXdItyTTPqsMqUkNzj1ik8VBH85W2ZPl31v uQ23AZN4Xv6tcr4vvBa4Sn7cxikyLckiY/avCAx+wvghK7aoxl68uufC30K3mb/q PLn5EYTeeXxi9ZBOz+BbB1mqS+U1u8uGi1qDA5CyfnDLM9TiIffBzdoD0kxYUanO pLoXfPciruaNs6mPTEEY1B9df+t3aTC1fAXXo/84vbLfQx3kkp5WkpNOg9mGbufB 8LwvL+4grUHcSA== -----END CERTIFICATE-----Generated at Mon Dec 22 00:47:47 2025 by rpki-client