This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft File: DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft (raw, json) Hash identifier: /YsJX5lixb6XJNXdMXY+lYndDI6trksYUAka3Ye+P4A= Subject key identifier: D1:B1:23:1A:85:82:43:90:E6:02:7F:B3:17:A8:68:82:97:1D:F3:BB Authority key identifier: 0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 Certificate issuer: /CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Certificate serial: 019B6AD6EA01B239737953F3C7DFCE1E0DE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft Manifest number: 17A1 Signing time: Mon 29 Dec 2025 16:00:28 +0000 Manifest this update: Mon 29 Dec 2025 16:00:28 +0000 Manifest next update: Tue 30 Dec 2025 16:00:28 +0000 Files and hashes: 1: 2ut4gcmR75V3_QB4c_0bjHQRV8A.roa (hash: Z/Z7sYO20kciWO7Cd+RFwgDueOu/lt3nwibhugXBGT8=) 2: 8IrzZekkYTKoZhthQz-Ja8OIvRA.roa (hash: 5Ew3dl4XH0P4aPETfurdIQU/EHcW5/rwYQ03Cgm05/8=) 3: DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl (hash: CM7WcSpuf3Oo0rUu/rNdVbatkkSkxYvS84Fn46Y0Vhs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 15:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6a:d6:ea:01:b2:39:73:79:53:f3:c7:df:ce:1e:0d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d04913d043dbb117cf6b9323c8ab247cb52e251 Validity Not Before: Dec 29 16:00:28 2025 GMT Not After : Dec 30 16:00:28 2025 GMT Subject: CN=d1b1231a85824390e6027fb317a86882971df3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:ff:ae:ba:9f:3a:20:aa:de:dc:32:82:ca:fe: be:99:f5:2c:d2:d7:8e:50:40:76:92:40:ff:2c:32: f7:18:a9:0c:a1:c6:63:f4:5b:68:9a:9d:b2:31:f0: 6e:76:82:05:f6:59:34:d9:05:0a:7d:4b:e5:5b:04: ef:76:5d:8c:2f:ee:13:c7:cc:f6:47:f6:bc:ff:1f: 00:1b:b3:74:72:95:06:ea:e6:c0:c6:a9:60:1a:5c: 29:de:82:19:4f:e1:02:7c:7c:6a:85:04:fa:99:dd: 59:a2:ee:5c:17:7b:4f:99:ad:7a:90:8b:7a:c5:94: 0b:b8:a7:4c:c1:2a:b0:93:10:af:5f:c5:be:49:1b: ff:1a:1f:ff:ac:d4:36:93:c7:8e:cc:7c:5d:f8:54: 59:e6:67:c1:15:fa:6f:b5:f8:93:64:96:c2:d7:cd: b1:eb:1c:59:f7:a8:0d:2e:c0:4c:f6:9c:01:ed:b6: 0a:71:65:25:b0:ff:52:08:e2:ad:73:63:83:11:62: 5e:29:e6:92:9f:11:e3:7e:e9:d4:ae:a3:f4:ee:99: fd:b7:91:3f:3f:28:8d:9f:ad:92:aa:e9:6e:20:3d: 40:6c:2c:ba:e6:9e:c5:70:98:ee:1a:0b:cd:05:c9: fa:95:97:f0:7f:2c:62:eb:e5:51:5a:43:f3:1c:5f: 75:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:23:1A:85:82:43:90:E6:02:7F:B3:17:A8:68:82:97:1D:F3:BB X509v3 Authority Key Identifier: keyid:0D:04:91:3D:04:3D:BB:11:7C:F6:B9:32:3C:8A:B2:47:CB:52:E2:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQSRPQQ9uxF89rkyPIqyR8tS4lE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/47dff0-2b11-44bc-b721-96c81fb651a0/1/DQSRPQQ9uxF89rkyPIqyR8tS4lE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:cd:f5:4b:16:50:3d:17:a8:7b:8b:0d:e9:0c:66:73:38:a0: 83:e6:17:b4:37:9e:35:d5:97:44:e9:f8:d7:1e:b1:8a:e5:ae: c6:aa:6e:01:09:1d:0e:75:44:dd:94:f6:b2:6d:1d:60:f9:16: c0:64:75:14:f5:5b:ae:8b:b0:d1:93:6d:8e:f6:67:d8:55:f0: ac:92:2f:c1:db:98:9b:12:fa:ba:28:30:15:d1:7d:33:64:04: f8:7d:78:aa:b7:52:60:10:bc:39:2b:76:f0:20:fd:d8:03:2f: 96:57:f7:3e:69:08:81:3b:01:6b:bc:42:60:ca:30:fb:99:78: dc:17:48:50:dd:b3:5a:a9:1a:9a:c3:d6:88:8c:98:b8:37:19: fb:6d:fc:ba:12:63:00:b7:a7:79:bb:2a:57:0a:94:8c:e8:9e: ba:13:57:15:c0:a2:4f:d2:b6:a9:eb:da:f5:da:66:1e:37:44: 93:7d:40:4c:5b:c3:3c:d7:dd:bc:68:55:e9:d5:7d:cc:e3:c9: fe:ad:ea:3f:dd:3f:42:65:ff:1e:b4:cb:7e:6d:87:95:a9:66: 77:70:7c:09:6f:ba:d4:1f:2f:92:dc:5f:a3:91:06:c4:1c:ef: 42:9c:00:3d:b9:02:e5:c6:e6:01:2b:a6:31:f9:5e:44:ff:2a: c2:7a:82:9f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtq1uoBsjlzeVPzx9/OHg3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDQ5MTNkMDQzZGJiMTE3Y2Y2YjkzMjNjOGFiMjQ3Y2I1 MmUyNTEwHhcNMjUxMjI5MTYwMDI4WhcNMjUxMjMwMTYwMDI4WjAzMTEwLwYDVQQD EyhkMWIxMjMxYTg1ODI0MzkwZTYwMjdmYjMxN2E4Njg4Mjk3MWRmM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9f+uup86IKre3DKCyv6+mfUs0teO UEB2kkD/LDL3GKkMocZj9Ftomp2yMfBudoIF9lk02QUKfUvlWwTvdl2ML+4Tx8z2 R/a8/x8AG7N0cpUG6ubAxqlgGlwp3oIZT+ECfHxqhQT6md1Zou5cF3tPma16kIt6 xZQLuKdMwSqwkxCvX8W+SRv/Gh//rNQ2k8eOzHxd+FRZ5mfBFfpvtfiTZJbC182x 6xxZ96gNLsBM9pwB7bYKcWUlsP9SCOKtc2ODEWJeKeaSnxHjfunUrqP07pn9t5E/ PyiNn62SquluID1AbCy65p7FcJjuGgvNBcn6lZfwfyxi6+VRWkPzHF91UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGxIxqFgkOQ5gJ/sxeoaIKXHfO7MB8GA1UdIwQY MBaAFA0EkT0EPbsRfPa5MjyKskfLUuJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEt OTZjODFmYjY1MWEwLzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS80N2RmZjAtMmIxMS00NGJjLWI3MjEtOTZjODFmYjY1MWEw LzEvRFFTUlBRUTl1eEY4OXJreVBJcXlSOHRTNGxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT831SxZQ PReoe4sN6Qxmczigg+YXtDeeNdWXROn41x6xiuWuxqpuAQkdDnVE3ZT2sm0dYPkW wGR1FPVbrouw0ZNtjvZn2FXwrJIvwduYmxL6uigwFdF9M2QE+H14qrdSYBC8OSt2 8CD92AMvllf3PmkIgTsBa7xCYMow+5l43BdIUN2zWqkamsPWiIyYuDcZ+238uhJj ALenebsqVwqUjOieuhNXFcCiT9K2qeva9dpmHjdEk31ATFvDPNfdvGhV6dV9zOPJ /q3qP90/QmX/HrTLfm2Hlalmd3B8CW+61B8vktxfo5EGxBzvQpwAPbkC5cbmASum MfleRP8qwnqCnw== -----END CERTIFICATE-----Generated at Mon Dec 29 23:47:36 2025 by rpki-client