This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json) Hash identifier: Qwe/SGCQulxofST8vXeF9ZTNdf4M/gRtvGGXbV7FMoM= Subject key identifier: 03:73:A3:B9:0D:C1:EE:67:DC:1E:4F:CA:1C:5B:7E:7F:E0:0A:BC:3B Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Certificate serial: 019B64673C3ACBD7D68666CA9430E8196C59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft Manifest number: 1321 Signing time: Sun 28 Dec 2025 10:00:45 +0000 Manifest this update: Sun 28 Dec 2025 10:00:45 +0000 Manifest next update: Mon 29 Dec 2025 10:00:45 +0000 Files and hashes: 1: 8mTPFQW3wW-m-Njwc5f28bH9rKw.roa (hash: ycM5ko9FIfkWlLnDoZpXM6ToY3euiLPcPeAx4DLhqfU=) 2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: MCab83WhQXXzm6wi38PyUDmy7Bj5aenTvkGKcZCgYzA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 03:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:64:67:3c:3a:cb:d7:d6:86:66:ca:94:30:e8:19:6c:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239 Validity Not Before: Dec 28 10:00:45 2025 GMT Not After : Dec 29 10:00:45 2025 GMT Subject: CN=0373a3b90dc1ee67dc1e4fca1c5b7e7fe00abc3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:0d:cf:99:65:33:f3:51:96:7b:9f:dd:2a: 58:30:d2:21:f0:39:69:9f:75:0b:7d:c6:fb:9e:ed: 58:f7:af:7d:05:8f:63:e0:ff:43:f8:e1:cb:b8:e6: 7b:33:22:50:b2:0f:48:8b:94:02:fc:e8:11:a3:82: 93:d6:6a:b8:d7:86:b2:42:2e:5d:fc:1a:bb:04:b7: 04:1f:ef:e3:75:46:fe:b8:1e:37:06:b1:d4:f9:f5: 58:c2:5f:8d:46:cf:99:0c:c8:96:a2:f1:6e:fd:db: 90:8e:28:63:6a:f7:30:a8:60:b9:5f:ff:99:94:7f: b3:1f:69:d8:d6:59:96:ef:41:82:09:c9:60:1f:1b: 30:85:0e:5d:96:de:57:b3:ba:52:a0:26:81:35:cf: f5:fc:e0:65:5c:b1:51:18:e5:ce:b6:2d:63:d3:8b: 3e:13:d8:ed:f8:d4:d1:33:96:26:56:45:5f:14:15: bc:5d:84:1a:16:5e:97:2c:60:77:23:91:ec:22:57: 63:f9:7b:ca:86:54:d9:f0:f6:59:92:0f:e0:3a:37: bf:9b:ad:5b:f7:f8:e5:6a:25:b3:2b:b6:1f:7d:5f: 5f:99:85:0f:ae:fa:3e:af:e1:2a:87:bd:a6:5c:33: 03:a4:32:19:4c:6e:ed:d1:46:d9:e0:a9:dd:1e:b5: ba:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:73:A3:B9:0D:C1:EE:67:DC:1E:4F:CA:1C:5B:7E:7F:E0:0A:BC:3B X509v3 Authority Key Identifier: keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b0:0a:09:0e:55:54:c2:23:89:79:1e:9d:d3:07:61:73:9e: 2e:9d:26:04:d5:9c:97:72:85:2f:6f:28:52:12:33:2c:95:3b: 73:0d:a8:c7:64:f8:54:f6:e3:ba:28:a2:3a:94:7d:56:25:4f: bc:1f:dc:fc:4d:d4:bc:a0:95:55:41:82:b4:43:0b:af:69:8b: 18:95:90:9a:55:64:e4:a0:15:8b:a8:b3:0f:1e:59:4c:2d:e1: fe:da:b2:3c:99:c4:7c:0b:cd:c7:7d:f8:79:f8:a3:16:90:e1: 8d:d7:ce:b4:73:98:f7:79:a3:3b:58:37:87:90:7c:04:48:5f: dc:5a:4e:58:a7:7e:6f:56:57:18:0f:a3:bc:96:6e:f8:a9:f8: 61:e4:03:55:23:81:65:e2:8b:87:84:9f:e6:51:53:29:f9:c5: 96:fc:54:04:27:56:d5:db:84:b8:f5:06:86:82:b6:d1:7b:25: ea:b6:49:51:32:9c:4e:56:ca:32:0b:15:00:7a:46:81:f9:07: a6:ec:7d:17:79:22:3d:01:54:01:06:29:7f:39:f1:66:ea:b7: 41:c8:a0:41:f7:de:13:94:60:5a:fa:04:c2:3e:e5:04:ec:0c: be:fd:4c:eb:df:f5:6f:5d:e8:ea:8f:42:d3:a8:7e:cc:f3:d2: 1d:32:34:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtkZzw6y9fWhmbKlDDoGWxZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5 MDgyMzkwHhcNMjUxMjI4MTAwMDQ1WhcNMjUxMjI5MTAwMDQ1WjAzMTEwLwYDVQQD EygwMzczYTNiOTBkYzFlZTY3ZGMxZTRmY2ExYzViN2U3ZmUwMGFiYzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLkNz5llM/NRlnuf3SpYMNIh8Dlp n3ULfcb7nu1Y9699BY9j4P9D+OHLuOZ7MyJQsg9Ii5QC/OgRo4KT1mq414ayQi5d /Bq7BLcEH+/jdUb+uB43BrHU+fVYwl+NRs+ZDMiWovFu/duQjihjavcwqGC5X/+Z lH+zH2nY1lmW70GCCclgHxswhQ5dlt5Xs7pSoCaBNc/1/OBlXLFRGOXOti1j04s+ E9jt+NTRM5YmVkVfFBW8XYQaFl6XLGB3I5HsIldj+XvKhlTZ8PZZkg/gOje/m61b 9/jlaiWzK7YffV9fmYUPrvo+r+Eqh72mXDMDpDIZTG7t0UbZ4KndHrW6TQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFANzo7kNwe5n3B5Pyhxbfn/gCrw7MB8GA1UdIwQY MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5 LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQrAKCQ5V VMIjiXkendMHYXOeLp0mBNWcl3KFL28oUhIzLJU7cw2ox2T4VPbjuiiiOpR9ViVP vB/c/E3UvKCVVUGCtEMLr2mLGJWQmlVk5KAVi6izDx5ZTC3h/tqyPJnEfAvNx334 efijFpDhjdfOtHOY93mjO1g3h5B8BEhf3FpOWKd+b1ZXGA+jvJZu+Kn4YeQDVSOB ZeKLh4Sf5lFTKfnFlvxUBCdW1duEuPUGhoK20Xsl6rZJUTKcTlbKMgsVAHpGgfkH pux9F3kiPQFUAQYpfznxZuq3QcigQffeE5RgWvoEwj7lBOwMvv1M69/1b13o6o9C 06h+zPPSHTI0OA== -----END CERTIFICATE-----Generated at Sun Dec 28 12:30:16 2025 by rpki-client