This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json) Hash identifier: A5BhGn4bahcsUsxHvtHIock9vNbzouImLO26HfD2nIM= Subject key identifier: B2:01:21:EE:47:12:45:12:00:F8:3B:9F:C4:7A:AC:0B:03:B8:4B:1B Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Certificate serial: 019B3D59BF88B738CCB7389B90294949C803 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft Manifest number: 1578 Signing time: Sat 20 Dec 2025 20:00:50 +0000 Manifest this update: Sat 20 Dec 2025 20:00:50 +0000 Manifest next update: Sun 21 Dec 2025 20:00:50 +0000 Files and hashes: 1: 28XK2LntrxapfWOiuemErSbP0S4.roa (hash: sgkhd13yQAtGGrSC01wHgB/gMMTuEmwDtGIbpMD74NM=) 2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: WffrapcRubB3L1h7dyXbCDwn1gsaA/bUHnN4A3sbeAE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:59:bf:88:b7:38:cc:b7:38:9b:90:29:49:49:c8:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Validity Not Before: Dec 20 20:00:50 2025 GMT Not After : Dec 21 20:00:50 2025 GMT Subject: CN=b20121ee4712451200f83b9fc47aac0b03b84b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:27:7e:10:b7:04:68:ef:f8:6d:d1:4c:43:ff: 63:f5:95:c5:93:05:31:c0:c5:69:e6:0b:1d:8a:30: 22:cb:7c:80:b9:e8:6f:47:c7:01:28:c5:f5:0c:ef: 9a:2c:72:8d:b4:35:5a:ca:bd:00:7c:3f:93:91:22: 50:b2:bf:20:73:96:3c:c5:13:ba:fe:73:6e:58:44: b7:88:af:81:d2:e2:76:25:75:b2:d9:44:28:38:ca: 8f:c0:45:9d:c5:3b:01:dc:63:33:a9:bf:58:2f:11: 6b:60:72:65:46:b6:56:35:b4:80:52:0b:35:7a:e9: 09:54:a0:88:06:f3:22:c0:b8:94:2f:53:21:e9:ef: ca:e1:48:a3:50:85:ed:fa:41:49:c9:72:f6:5d:5c: 51:f6:16:35:02:46:3e:e6:89:a2:da:fb:3c:0a:bb: 04:37:b8:d5:77:77:e4:4a:45:43:a6:08:52:86:52: 3c:81:aa:7e:51:35:cd:28:6a:da:73:44:89:4a:67: 14:63:ea:5a:99:a7:81:a4:ee:1e:6a:22:20:77:39: 44:14:c9:9a:9f:e5:c7:87:93:f6:9f:cb:5e:16:24: d0:6c:79:2b:7b:f3:60:88:8f:6f:72:71:08:c5:f5: e0:9d:16:90:01:b0:76:e6:b2:42:ba:b4:b3:b8:e3: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:01:21:EE:47:12:45:12:00:F8:3B:9F:C4:7A:AC:0B:03:B8:4B:1B X509v3 Authority Key Identifier: keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:24:2e:77:23:60:9f:e7:ae:37:af:0e:8b:65:8e:fa:ba:30: 9e:3f:77:2f:af:a3:74:43:96:89:9b:5c:76:d6:f9:d0:1b:04: 28:74:9d:6a:4e:7f:90:f5:82:43:e1:3e:e8:bc:90:83:ff:ac: f5:70:e6:0b:8d:5a:15:d3:05:95:5e:a1:59:2f:e6:ee:66:91: ff:80:f5:25:e9:db:b0:9b:e8:05:48:f1:4c:79:a0:4d:81:2f: 31:b8:30:66:5e:d5:af:67:38:0c:87:68:3b:36:ed:5c:93:e3: 57:21:a9:b6:a7:10:b5:6b:75:98:c6:08:b6:93:67:43:54:79: c1:03:e3:6a:4f:51:55:99:40:55:f2:d4:ba:44:3e:cd:2e:57: 9b:c1:1e:77:e9:9d:bf:f6:6c:2d:d0:aa:e4:38:cd:9d:53:8b: a3:5d:c3:80:cb:2c:43:ed:e1:54:a6:95:46:5e:3f:e1:1b:2b: fc:46:3c:6c:28:bf:49:e1:51:ad:c1:6b:8f:15:66:ed:f1:a5: 16:b8:7a:98:78:83:e0:0b:18:92:06:66:65:3b:2c:0a:51:b0: e6:1a:af:6c:57:ba:ae:b7:07:82:00:03:99:f5:29:69:13:61: fe:0d:5e:1a:63:81:32:d9:9c:20:83:df:45:46:93:14:ad:9b: 07:0f:c1:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Wb+ItzjMtzibkClJScgDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy YmQ0YmYwHhcNMjUxMjIwMjAwMDUwWhcNMjUxMjIxMjAwMDUwWjAzMTEwLwYDVQQD EyhiMjAxMjFlZTQ3MTI0NTEyMDBmODNiOWZjNDdhYWMwYjAzYjg0YjFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSd+ELcEaO/4bdFMQ/9j9ZXFkwUx wMVp5gsdijAiy3yAuehvR8cBKMX1DO+aLHKNtDVayr0AfD+TkSJQsr8gc5Y8xRO6 /nNuWES3iK+B0uJ2JXWy2UQoOMqPwEWdxTsB3GMzqb9YLxFrYHJlRrZWNbSAUgs1 eukJVKCIBvMiwLiUL1Mh6e/K4UijUIXt+kFJyXL2XVxR9hY1AkY+5omi2vs8CrsE N7jVd3fkSkVDpghShlI8gap+UTXNKGrac0SJSmcUY+pamaeBpO4eaiIgdzlEFMma n+XHh5P2n8teFiTQbHkre/NgiI9vcnEIxfXgnRaQAbB25rJCurSzuOOBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLIBIe5HEkUSAPg7n8R6rAsDuEsbMB8GA1UdIwQY MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3 LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHyQudyNg n+euN68Oi2WO+rownj93L6+jdEOWiZtcdtb50BsEKHSdak5/kPWCQ+E+6LyQg/+s 9XDmC41aFdMFlV6hWS/m7maR/4D1JenbsJvoBUjxTHmgTYEvMbgwZl7Vr2c4DIdo OzbtXJPjVyGptqcQtWt1mMYItpNnQ1R5wQPjak9RVZlAVfLUukQ+zS5Xm8Eed+md v/ZsLdCq5DjNnVOLo13DgMssQ+3hVKaVRl4/4Rsr/EY8bCi/SeFRrcFrjxVm7fGl Frh6mHiD4AsYkgZmZTssClGw5hqvbFe6rrcHggADmfUpaRNh/g1eGmOBMtmcIIPf RUaTFK2bBw/BFw== -----END CERTIFICATE-----Generated at Sun Dec 21 04:04:09 2025 by rpki-client