This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft File: MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft (raw, json) Hash identifier: wz5/5Opdw2OSss0hQJO89vk1HYwfYfdmzvuDHBBcFwE= Subject key identifier: 35:FB:7A:66:B7:17:97:02:01:6F:01:B9:6A:85:9C:24:B4:90:26:87 Authority key identifier: 32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 Certificate issuer: /CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Certificate serial: 019B3946BBB7720D896ECF3E76D0136C466F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft Manifest number: 0EE3 Signing time: Sat 20 Dec 2025 01:01:35 +0000 Manifest this update: Sat 20 Dec 2025 01:01:35 +0000 Manifest next update: Sun 21 Dec 2025 01:01:35 +0000 Files and hashes: 1: MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl (hash: WMnMEOd4B6WrVpjKbsdaj+pFvJ0b27S6WMP9ALlT0KA=) 2: n7xOAF9JLEuxF4PJQhQbDSl7UJE.roa (hash: aqnlDGIUWDjeSw56rbOxl68/tZN2XXXLT/oEGZEp9F4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:bb:b7:72:0d:89:6e:cf:3e:76:d0:13:6c:46:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32a03fed5dc7a0c34e4d85774ff7005d33e6ef13 Validity Not Before: Dec 20 01:01:35 2025 GMT Not After : Dec 21 01:01:35 2025 GMT Subject: CN=35fb7a66b7179702016f01b96a859c24b4902687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a7:dc:18:c7:63:49:f0:68:00:9f:72:79:7b: 67:f6:2c:8b:88:55:9a:dc:d5:9f:de:4b:01:e2:cf: 7c:46:dd:1c:04:d1:90:e2:88:c0:6d:b1:cb:e2:1f: c8:33:02:93:15:6b:9e:66:ca:54:cc:23:69:3c:c9: 12:6f:f2:3c:1a:3f:9e:a3:6d:08:66:07:6f:76:b1: cd:70:a8:7b:7d:84:b5:2e:13:70:2a:a7:92:da:79: f3:7a:b8:5a:bc:9c:20:62:1f:67:fc:fe:23:09:64: 69:86:7b:23:e7:93:b9:dc:52:79:00:ce:40:c1:50: 6a:08:d3:4c:12:8c:3d:86:32:9c:44:3f:d8:71:0a: 73:06:3f:8c:25:51:3e:41:45:c8:b6:c4:c7:c0:af: 7f:89:a0:18:00:d5:17:e1:ab:b7:05:1a:72:e9:57: d8:6e:11:ba:0e:f3:a0:bb:72:55:41:c1:b5:23:80: 46:d7:1f:c6:9d:64:58:2d:b5:2a:d5:07:0c:9a:87: 40:e6:0d:b5:6d:cf:2e:cc:d4:82:96:09:80:61:49: 2d:32:52:88:d1:d5:79:2e:7b:ea:c0:95:9c:84:64: 90:b9:55:ce:fe:c5:9a:18:a4:6c:2d:f7:e0:41:76: 8a:49:f2:ab:7a:db:65:bd:13:75:5b:6f:fe:01:27: 9f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FB:7A:66:B7:17:97:02:01:6F:01:B9:6A:85:9C:24:B4:90:26:87 X509v3 Authority Key Identifier: keyid:32:A0:3F:ED:5D:C7:A0:C3:4E:4D:85:77:4F:F7:00:5D:33:E6:EF:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqA_7V3HoMNOTYV3T_cAXTPm7xM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/122129-2226-4e97-b0a7-1aa500b9948a/1/MqA_7V3HoMNOTYV3T_cAXTPm7xM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:03:c1:db:24:ce:1d:d7:f6:32:88:93:09:ab:6d:5b:a4:b0: 10:6d:e8:f1:88:45:20:a0:7a:4e:5d:3b:99:e1:f9:61:be:45: 17:0c:75:56:73:e0:b1:ea:79:f6:11:90:c9:55:ca:e0:f7:0c: 95:72:50:ee:a1:9c:5e:a1:b6:aa:29:36:cd:23:7e:1a:14:9e: ce:99:6b:86:47:73:0e:80:46:f9:7e:41:7a:e9:66:af:e2:73: 6c:b2:bb:6a:bb:21:e8:fa:38:38:5d:f4:e8:43:ae:03:ca:62: bb:00:de:93:65:62:19:6f:1a:d1:f8:2a:ee:ef:28:02:f6:77: 2c:74:18:27:a1:8f:8b:5c:22:e9:05:75:fc:24:65:50:e3:8d: 4a:50:f8:bb:e7:21:8b:f4:a7:38:c1:71:00:32:57:de:fd:a9: 9d:81:3c:10:be:85:09:4b:d2:85:1b:3e:94:15:5a:9c:bf:e7: e6:9d:58:a9:4a:45:64:01:0f:0c:95:ed:94:86:49:56:99:4d: 1f:a7:5b:4b:ca:34:49:96:93:ce:cd:d3:27:34:fc:10:3c:36: 13:8d:88:e1:75:78:aa:a2:04:8e:99:72:ae:a2:4b:b7:6a:a8: 99:b2:60:d8:7c:e9:0a:41:a2:d1:73:05:19:19:94:5e:99:f0: c1:3c:27:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5Rru3cg2Jbs8+dtATbEZvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyYTAzZmVkNWRjN2EwYzM0ZTRkODU3NzRmZjcwMDVkMzNl NmVmMTMwHhcNMjUxMjIwMDEwMTM1WhcNMjUxMjIxMDEwMTM1WjAzMTEwLwYDVQQD EygzNWZiN2E2NmI3MTc5NzAyMDE2ZjAxYjk2YTg1OWMyNGI0OTAyNjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KfcGMdjSfBoAJ9yeXtn9iyLiFWa 3NWf3ksB4s98Rt0cBNGQ4ojAbbHL4h/IMwKTFWueZspUzCNpPMkSb/I8Gj+eo20I ZgdvdrHNcKh7fYS1LhNwKqeS2nnzerhavJwgYh9n/P4jCWRphnsj55O53FJ5AM5A wVBqCNNMEow9hjKcRD/YcQpzBj+MJVE+QUXItsTHwK9/iaAYANUX4au3BRpy6VfY bhG6DvOgu3JVQcG1I4BG1x/GnWRYLbUq1QcMmodA5g21bc8uzNSClgmAYUktMlKI 0dV5LnvqwJWchGSQuVXO/sWaGKRsLffgQXaKSfKrettlvRN1W2/+ASefxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDX7ema3F5cCAW8BuWqFnCS0kCaHMB8GA1UdIwQY MBaAFDKgP+1dx6DDTk2Fd0/3AF0z5u8TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTct MWFhNTAwYjk5NDhhLzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8xMjIxMjktMjIyNi00ZTk3LWIwYTctMWFhNTAwYjk5NDhh LzEvTXFBXzdWM0hvTU5PVFlWM1RfY0FYVFBtN3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwPB2yTO Hdf2MoiTCattW6SwEG3o8YhFIKB6Tl07meH5Yb5FFwx1VnPgsep59hGQyVXK4PcM lXJQ7qGcXqG2qik2zSN+GhSezplrhkdzDoBG+X5Beulmr+JzbLK7arsh6Po4OF30 6EOuA8piuwDek2ViGW8a0fgq7u8oAvZ3LHQYJ6GPi1wi6QV1/CRlUOONSlD4u+ch i/SnOMFxADJX3v2pnYE8EL6FCUvShRs+lBVanL/n5p1YqUpFZAEPDJXtlIZJVplN H6dbS8o0SZaTzs3TJzT8EDw2E42I4XV4qqIEjplyrqJLt2qombJg2HzpCkGi0XMF GRmUXpnwwTwnmw== -----END CERTIFICATE-----Generated at Sat Dec 20 10:51:37 2025 by rpki-client