This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft File: dHquXSSwyXpCAx81EKFOL5W72Dg.mft (raw, json) Hash identifier: MsuTjil5wdL1RnHjgs8r+O80BnQqZU3xmBgHIU3oTig= Subject key identifier: F9:CF:79:35:E2:15:D9:83:81:5B:D5:82:D9:E2:63:79:14:8E:6F:08 Authority key identifier: 74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 Certificate issuer: /CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Certificate serial: 019B3BA26CD9B6EF659C0D38F31A916D7207 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft Manifest number: 091D Signing time: Sat 20 Dec 2025 12:00:58 +0000 Manifest this update: Sat 20 Dec 2025 12:00:58 +0000 Manifest next update: Sun 21 Dec 2025 12:00:58 +0000 Files and hashes: 1: dHquXSSwyXpCAx81EKFOL5W72Dg.crl (hash: nGM07jTIaRvaT8TOIbcDCePKcu1MjkZlsbcOCJA4+aU=) 2: zQKrXmW9bWHdUqBWvY33a8SbMCE.roa (hash: HT0Uv7b54sK7sP7mnHeROBQjHCb1P8YG6jJ1hRPnfL8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:a2:6c:d9:b6:ef:65:9c:0d:38:f3:1a:91:6d:72:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=747aae5d24b0c97a42031f3510a14e2f95bbd838 Validity Not Before: Dec 20 12:00:58 2025 GMT Not After : Dec 21 12:00:58 2025 GMT Subject: CN=f9cf7935e215d983815bd582d9e26379148e6f08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6d:7b:5e:93:1e:7e:41:5f:36:d4:98:aa:5f: a3:e7:2f:af:36:75:0e:e9:d0:d9:b9:46:f2:15:c2: ad:86:43:85:cb:7e:3b:42:b4:83:88:37:6d:b5:b4: 07:1f:c8:fb:a0:07:d6:aa:c7:2f:57:52:7a:42:4c: ed:05:9b:9d:de:33:c6:bd:1a:af:a7:b7:99:77:50: bf:52:0f:a4:16:9d:ed:3e:e2:03:12:ca:1b:b2:03: f9:5e:f0:c6:71:b1:36:bb:7f:c2:d0:9c:48:d4:a7: 69:cc:29:ad:1c:0f:21:1a:d4:59:cd:a4:37:89:b8: 5c:b9:f8:14:2b:62:fb:89:cc:48:1e:b6:9c:66:2c: 35:22:4a:d0:c8:31:64:ab:c4:c4:c8:6a:98:89:05: 68:7f:05:78:b0:65:98:70:2f:cb:98:06:d2:21:04: dd:23:f8:02:eb:3a:44:09:e7:cf:bc:5a:ea:10:f2: 93:db:d9:c9:bd:d1:ab:6b:c7:6d:e4:c6:16:ad:cd: 93:2a:08:bd:56:e1:da:bd:43:db:d8:94:0e:0b:9e: 33:1d:b0:bf:ff:ef:8a:26:8a:e8:a1:11:a9:c6:c3: 12:34:5b:44:cd:38:29:1a:b3:b1:47:5b:e2:c8:d7: 98:1a:74:09:ed:59:0d:f8:53:02:ae:9a:f3:20:1c: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:79:35:E2:15:D9:83:81:5B:D5:82:D9:E2:63:79:14:8E:6F:08 X509v3 Authority Key Identifier: keyid:74:7A:AE:5D:24:B0:C9:7A:42:03:1F:35:10:A1:4E:2F:95:BB:D8:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHquXSSwyXpCAx81EKFOL5W72Dg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/f41fbf-4e8d-4aaa-9db1-626bbfee0b31/1/dHquXSSwyXpCAx81EKFOL5W72Dg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:65:7d:33:ae:e6:ab:3b:0a:4a:ba:f3:92:b4:b1:f8:92:a9: c8:af:05:65:5d:c6:64:9d:d1:6b:79:61:5b:e3:0c:73:9d:d2: 24:11:ad:73:d7:bf:38:7d:09:3c:c2:cd:79:2f:8e:45:d1:30: 82:ed:ba:c7:3f:26:cb:1c:98:d9:17:bd:a0:c2:83:6c:aa:4d: 36:30:fd:2b:8d:52:88:10:27:04:d0:97:33:9c:89:3d:7c:66: f1:05:5c:24:f9:46:79:cb:fc:58:83:25:ff:e7:58:44:3e:17: d0:38:f0:3b:49:d9:21:45:10:d9:7e:24:a0:57:94:f4:bd:95: de:97:b6:cb:20:aa:02:d7:85:a2:a4:5c:6f:94:0e:7c:f5:5a: 32:ce:c3:8e:11:63:8a:72:b5:15:27:ae:4f:bc:c8:b1:5f:f5: 66:d8:14:d2:27:03:d1:4a:63:75:bd:90:f6:e3:1a:f3:e7:f3: f9:e1:c2:dd:f1:c2:16:e2:23:94:80:96:70:88:a8:d4:95:19: 48:00:80:39:6a:9f:ba:75:48:5f:e7:92:b9:48:99:ba:93:49: b4:f8:56:a7:d5:b5:7c:69:68:53:df:01:2a:a4:36:b3:e3:95: b5:ba:33:45:dd:2b:1e:9a:e6:0f:03:bb:2d:1d:62:65:d4:ed: ca:45:dd:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7omzZtu9lnA048xqRbXIHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0N2FhZTVkMjRiMGM5N2E0MjAzMWYzNTEwYTE0ZTJmOTVi YmQ4MzgwHhcNMjUxMjIwMTIwMDU4WhcNMjUxMjIxMTIwMDU4WjAzMTEwLwYDVQQD EyhmOWNmNzkzNWUyMTVkOTgzODE1YmQ1ODJkOWUyNjM3OTE0OGU2ZjA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW17XpMefkFfNtSYql+j5y+vNnUO 6dDZuUbyFcKthkOFy347QrSDiDdttbQHH8j7oAfWqscvV1J6QkztBZud3jPGvRqv p7eZd1C/Ug+kFp3tPuIDEsobsgP5XvDGcbE2u3/C0JxI1KdpzCmtHA8hGtRZzaQ3 ibhcufgUK2L7icxIHracZiw1IkrQyDFkq8TEyGqYiQVofwV4sGWYcC/LmAbSIQTd I/gC6zpECefPvFrqEPKT29nJvdGra8dt5MYWrc2TKgi9VuHavUPb2JQOC54zHbC/ /++KJorooRGpxsMSNFtEzTgpGrOxR1viyNeYGnQJ7VkN+FMCrprzIByq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnPeTXiFdmDgVvVgtniY3kUjm8IMB8GA1UdIwQY MBaAFHR6rl0ksMl6QgMfNRChTi+Vu9g4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEt NjI2YmJmZWUwYjMxLzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9mNDFmYmYtNGU4ZC00YWFhLTlkYjEtNjI2YmJmZWUwYjMx LzEvZEhxdVhTU3d5WHBDQXg4MUVLRk9MNVc3MkRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO2V9M67m qzsKSrrzkrSx+JKpyK8FZV3GZJ3Ra3lhW+MMc53SJBGtc9e/OH0JPMLNeS+ORdEw gu26xz8myxyY2Re9oMKDbKpNNjD9K41SiBAnBNCXM5yJPXxm8QVcJPlGecv8WIMl /+dYRD4X0DjwO0nZIUUQ2X4koFeU9L2V3pe2yyCqAteFoqRcb5QOfPVaMs7DjhFj inK1FSeuT7zIsV/1ZtgU0icD0Upjdb2Q9uMa8+fz+eHC3fHCFuIjlICWcIio1JUZ SACAOWqfunVIX+eSuUiZupNJtPhWp9W1fGloU98BKqQ2s+OVtbozRd0rHprmDwO7 LR1iZdTtykXdoQ== -----END CERTIFICATE-----Generated at Sat Dec 20 20:09:55 2025 by rpki-client