This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json) Hash identifier: jYQ9yCwVh5RpGEzj8DI7XDEN6W6qfILggFRkMn+dnqU= Subject key identifier: BE:6B:A6:3A:ED:BA:90:41:32:86:C4:38:B3:A4:75:33:85:21:B7:E0 Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Certificate serial: 019B5787B57F8A88DB35FDF42AE3B93C7724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft Manifest number: 0A5D Signing time: Thu 25 Dec 2025 22:01:10 +0000 Manifest this update: Thu 25 Dec 2025 22:01:10 +0000 Manifest next update: Fri 26 Dec 2025 22:01:10 +0000 Files and hashes: 1: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: h8oJeKr6vI5Gq1JV1pqnjaMmsFWmdC9+RDOSERKMYuU=) 2: RmJWhAxRco_E7xVjUFT03f6Xzf4.roa (hash: fQ9hdhF3VEd9Q8e/aZRy085yRuISqh5rUOV7wWDjEP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:57:87:b5:7f:8a:88:db:35:fd:f4:2a:e3:b9:3c:77:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Validity Not Before: Dec 25 22:01:10 2025 GMT Not After : Dec 26 22:01:10 2025 GMT Subject: CN=be6ba63aedba90413286c438b3a475338521b7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:e6:f5:9e:87:b2:16:0f:68:5f:8d:e0:3e: 3d:b0:e9:8b:68:70:e8:32:0d:5b:68:14:78:a5:1a: 4e:d1:b2:31:cb:ed:20:7a:3e:a4:f0:cb:52:0c:44: 42:a0:a7:19:68:81:6e:42:51:6b:1b:b0:68:5a:3a: de:78:75:1e:bb:28:38:84:24:ed:1d:9a:c8:85:b2: 12:a4:96:2f:97:96:82:f8:65:3c:a0:91:46:15:0e: 1a:c8:3f:d1:c8:84:3f:d0:b0:60:cd:dd:ca:a1:f7: 4d:79:4d:17:c6:5f:14:e9:b5:83:e0:fd:60:95:12: 3b:0e:9d:f8:fb:40:ee:86:07:5d:80:ec:ad:b6:a2: aa:c4:d2:57:0f:02:98:eb:6d:b9:0c:bd:36:bf:55: 68:6c:22:d9:aa:6b:0d:5b:02:6a:3d:ce:1b:4f:bf: ed:3e:3d:0a:23:bf:41:fc:46:4e:ca:d1:5b:6a:ce: a7:f3:cc:ea:06:d1:37:ae:0e:9f:80:a4:e5:0a:42: 75:e9:3d:3d:96:33:af:10:07:2d:61:42:b5:80:75: 0e:9d:7d:06:6a:cb:05:25:cd:35:ef:d5:46:bf:f6: f6:04:86:cd:2d:93:55:6a:05:14:1a:3a:ea:87:78: 24:2e:e5:af:80:18:46:3c:1c:0d:55:8a:17:1d:b6: 6b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6B:A6:3A:ED:BA:90:41:32:86:C4:38:B3:A4:75:33:85:21:B7:E0 X509v3 Authority Key Identifier: keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:7d:41:51:1b:7f:46:c3:e8:04:a1:4d:54:d8:c2:5a:7b:98: 56:bd:cd:89:7a:59:65:c0:b0:c4:f0:46:96:61:5d:d7:1f:1e: 9e:31:70:9d:0f:00:6e:71:a5:88:62:87:4f:37:1b:4f:03:74: 03:fa:bc:47:2a:f2:9c:5b:8f:97:4c:81:2e:b2:1c:9e:a5:5d: de:34:80:1b:12:78:ff:ed:7d:24:8a:60:c8:2b:54:c5:92:ac: 7a:4b:8d:8e:03:b2:af:0c:04:bd:7c:ca:89:aa:05:b7:89:15: 55:5c:d2:1a:d2:f5:11:a7:e0:be:38:ec:d3:92:3d:ee:1d:46: c7:09:fc:fc:ed:30:1c:59:0a:31:dd:e7:09:00:fa:1d:5c:01: e7:f6:43:c1:6b:7b:ac:f8:71:b5:a5:37:46:19:6d:69:8e:f3: a8:f5:c7:8d:d9:58:6f:ea:d3:5d:f4:8f:cc:e1:60:1e:b7:73: 8a:61:4f:a0:26:52:47:27:38:40:e2:d5:e7:d6:22:f3:91:26: ba:d2:fb:bb:e4:aa:dd:0d:9c:44:5b:b1:36:b4:6f:13:72:ca: ef:a9:47:45:b8:02:78:37:c7:c4:41:74:b1:e6:2c:97:88:5b: 79:7d:30:66:d9:be:3e:40:09:e3:cf:32:c1:9f:90:59:c3:d9: 0a:11:bf:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtXh7V/iojbNf30KuO5PHckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx ZDA0NzUwHhcNMjUxMjI1MjIwMTEwWhcNMjUxMjI2MjIwMTEwWjAzMTEwLwYDVQQD EyhiZTZiYTYzYWVkYmE5MDQxMzI4NmM0MzhiM2E0NzUzMzg1MjFiN2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2Xm9Z6HshYPaF+N4D49sOmLaHDo Mg1baBR4pRpO0bIxy+0gej6k8MtSDERCoKcZaIFuQlFrG7BoWjreeHUeuyg4hCTt HZrIhbISpJYvl5aC+GU8oJFGFQ4ayD/RyIQ/0LBgzd3KofdNeU0Xxl8U6bWD4P1g lRI7Dp34+0DuhgddgOyttqKqxNJXDwKY6225DL02v1VobCLZqmsNWwJqPc4bT7/t Pj0KI79B/EZOytFbas6n88zqBtE3rg6fgKTlCkJ16T09ljOvEActYUK1gHUOnX0G assFJc0179VGv/b2BIbNLZNVagUUGjrqh3gkLuWvgBhGPBwNVYoXHbZrvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5rpjrtupBBMobEOLOkdTOFIbfgMB8GA1UdIwQY MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhX1BURt/ RsPoBKFNVNjCWnuYVr3NiXpZZcCwxPBGlmFd1x8enjFwnQ8AbnGliGKHTzcbTwN0 A/q8RyrynFuPl0yBLrIcnqVd3jSAGxJ4/+19JIpgyCtUxZKsekuNjgOyrwwEvXzK iaoFt4kVVVzSGtL1Eafgvjjs05I97h1Gxwn8/O0wHFkKMd3nCQD6HVwB5/ZDwWt7 rPhxtaU3RhltaY7zqPXHjdlYb+rTXfSPzOFgHrdzimFPoCZSRyc4QOLV59Yi85Em utL7u+Sq3Q2cRFuxNrRvE3LK76lHRbgCeDfHxEF0seYsl4hbeX0wZtm+PkAJ488y wZ+QWcPZChG/8Q== -----END CERTIFICATE-----Generated at Fri Dec 26 01:30:36 2025 by rpki-client