This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft File: DQMTeXANNd0Akr0GHGA-bLJWGnU.mft (raw, json) Hash identifier: xbkT5E+v2TR0B3sz71FTXpvzGFYeCy5IuAAguE0DkI8= Subject key identifier: 45:6C:19:8F:27:93:B0:E2:84:C3:0D:0D:84:07:22:CC:17:FE:EE:92 Authority key identifier: 0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75 Certificate issuer: /CN=0d031379700d35dd0092bd061c603e6cb2561a75 Certificate serial: 019B4627533ADCBB613D6FCDC695ECC89466 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft Manifest number: 021B Signing time: Mon 22 Dec 2025 13:02:20 +0000 Manifest this update: Mon 22 Dec 2025 13:02:20 +0000 Manifest next update: Tue 23 Dec 2025 13:02:20 +0000 Files and hashes: 1: DQMTeXANNd0Akr0GHGA-bLJWGnU.crl (hash: pthEnBzqypsqOF75KaDXJk3eWn9H4ZQFLdKhv8QXnXU=) 2: iuZqfYD0hiTIvYqwWHAL_dTt-d8.roa (hash: TADQbHhC3NVuwnA1AHCcNT5GSSVPXnhWpWfVu/iqF94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 10:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:27:53:3a:dc:bb:61:3d:6f:cd:c6:95:ec:c8:94:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d031379700d35dd0092bd061c603e6cb2561a75 Validity Not Before: Dec 22 13:02:20 2025 GMT Not After : Dec 23 13:02:20 2025 GMT Subject: CN=456c198f2793b0e284c30d0d840722cc17feee92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e4:0d:3d:6c:9c:16:b3:b1:53:c2:c9:bc:c6: f7:c4:05:96:2f:b8:99:8a:4e:49:fe:41:68:5f:bf: 90:eb:8e:54:8b:15:65:cf:1a:ca:81:eb:17:f4:45: 06:1c:38:89:00:29:ef:39:5e:a6:7b:83:2c:53:f2: 68:90:aa:67:92:cc:bd:b9:4b:a0:f3:9d:ff:4f:7e: 8e:af:2b:cf:85:c1:16:63:b7:8f:d7:35:99:e2:2b: f4:7b:cb:d3:34:ac:48:d5:4c:f4:5d:54:04:65:5c: 5f:88:0f:52:b7:3d:33:0a:93:40:a7:8b:e9:32:0e: f0:c4:ef:33:cd:5f:15:9d:05:41:73:d3:fe:fb:15: e6:a6:c2:aa:f1:02:93:4f:07:fd:f6:46:77:33:56: e8:49:67:80:fe:a9:23:a0:74:2a:79:fc:0e:55:6c: f2:56:8a:1c:f8:81:b5:7c:b2:a4:99:dd:10:bf:8c: a3:d9:2c:3e:31:a4:45:47:af:09:98:1e:8f:5a:68: 09:64:17:42:08:34:c8:2e:a0:de:28:07:6b:48:ea: 57:6f:ee:09:51:97:0e:23:bc:72:77:fb:e1:64:4a: 98:77:b2:58:d7:27:c8:d0:de:0c:80:7a:8a:cc:37: fa:0a:64:f8:3b:95:11:99:37:9c:26:b5:85:f2:cd: c3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6C:19:8F:27:93:B0:E2:84:C3:0D:0D:84:07:22:CC:17:FE:EE:92 X509v3 Authority Key Identifier: keyid:0D:03:13:79:70:0D:35:DD:00:92:BD:06:1C:60:3E:6C:B2:56:1A:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQMTeXANNd0Akr0GHGA-bLJWGnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/409752-9d8c-40f5-9125-9c06737979d1/1/DQMTeXANNd0Akr0GHGA-bLJWGnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:a8:30:75:0b:67:45:67:c0:2f:1d:c4:f6:9a:28:79:fc:5c: cd:ff:6d:15:6c:1d:ea:fa:f6:88:db:18:2c:a0:90:0c:67:93: 63:98:d6:46:d2:c8:f6:26:86:fd:b2:bf:9c:43:77:5d:47:f0: 50:9d:9e:45:3d:4a:59:7a:9d:5b:74:71:00:d7:9d:c7:e9:ea: 80:88:f9:38:d9:24:74:89:34:2e:7f:c2:5c:bc:bb:3a:b0:e7: 0f:2f:99:0e:71:55:e0:86:ef:e5:ae:a3:04:ac:6c:9c:98:bc: 82:83:46:ea:6c:64:fb:17:cc:ab:96:a9:0a:56:8a:03:35:51: e5:c7:0b:54:21:11:cd:32:ef:a3:fb:ec:ae:68:a1:37:31:68: b6:50:82:2a:29:99:f8:8e:7f:51:5b:6c:75:f9:39:06:98:95: 9c:f2:b1:e0:06:f2:9a:fc:9f:4f:61:2f:94:61:ab:22:5d:e8: 24:dc:c2:5c:1b:c4:05:2b:7f:92:43:d5:80:8e:d6:70:d8:7f: 7b:43:39:bc:fb:1a:cc:35:37:11:9f:dc:c0:c6:97:60:86:82: 12:c0:5d:70:92:b1:3b:5f:58:57:6f:90:2d:d8:4e:f5:12:64: f5:af:4b:f9:69:16:b2:65:7f:2f:02:b1:7a:a8:03:ee:fb:fe: 17:1a:6c:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGJ1M63LthPW/NxpXsyJRmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDMxMzc5NzAwZDM1ZGQwMDkyYmQwNjFjNjAzZTZjYjI1 NjFhNzUwHhcNMjUxMjIyMTMwMjIwWhcNMjUxMjIzMTMwMjIwWjAzMTEwLwYDVQQD Eyg0NTZjMTk4ZjI3OTNiMGUyODRjMzBkMGQ4NDA3MjJjYzE3ZmVlZTkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+QNPWycFrOxU8LJvMb3xAWWL7iZ ik5J/kFoX7+Q645UixVlzxrKgesX9EUGHDiJACnvOV6me4MsU/JokKpnksy9uUug 853/T36OryvPhcEWY7eP1zWZ4iv0e8vTNKxI1Uz0XVQEZVxfiA9Stz0zCpNAp4vp Mg7wxO8zzV8VnQVBc9P++xXmpsKq8QKTTwf99kZ3M1boSWeA/qkjoHQqefwOVWzy Vooc+IG1fLKkmd0Qv4yj2Sw+MaRFR68JmB6PWmgJZBdCCDTILqDeKAdrSOpXb+4J UZcOI7xyd/vhZEqYd7JY1yfI0N4MgHqKzDf6CmT4O5URmTecJrWF8s3DOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVsGY8nk7DihMMNDYQHIswX/u6SMB8GA1UdIwQY MBaAFA0DE3lwDTXdAJK9BhxgPmyyVhp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MDk3NTItOWQ4Yy00MGY1LTkxMjUt OWMwNjczNzk3OWQxLzEvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MDk3NTItOWQ4Yy00MGY1LTkxMjUtOWMwNjczNzk3OWQx LzEvRFFNVGVYQU5OZDBBa3IwR0hHQS1iTEpXR25VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAagwdQtn RWfALx3E9pooefxczf9tFWwd6vr2iNsYLKCQDGeTY5jWRtLI9iaG/bK/nEN3XUfw UJ2eRT1KWXqdW3RxANedx+nqgIj5ONkkdIk0Ln/CXLy7OrDnDy+ZDnFV4Ibv5a6j BKxsnJi8goNG6mxk+xfMq5apClaKAzVR5ccLVCERzTLvo/vsrmihNzFotlCCKimZ +I5/UVtsdfk5BpiVnPKx4AbymvyfT2EvlGGrIl3oJNzCXBvEBSt/kkPVgI7WcNh/ e0M5vPsazDU3EZ/cwMaXYIaCEsBdcJKxO19YV2+QLdhO9RJk9a9L+WkWsmV/LwKx eqgD7vv+FxpsKQ== -----END CERTIFICATE-----Generated at Mon Dec 22 16:01:37 2025 by rpki-client