This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json) Hash identifier: M6bstpqkxT4QS5JxjW0R50vrwEDVCY/K/uGi9gBsDL4= Subject key identifier: 6A:FD:B9:D7:F5:F1:08:33:04:0C:C0:C3:40:0D:D9:4D:1C:DA:64:E9 Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Certificate serial: 019B71100062E6D1C462DB5D63A2975975B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft Manifest number: 0777 Signing time: Tue 30 Dec 2025 21:00:32 +0000 Manifest this update: Tue 30 Dec 2025 21:00:32 +0000 Manifest next update: Wed 31 Dec 2025 21:00:32 +0000 Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: P8Q1VyC8MY7XKeBp0k2kjKdfzRWJPelI6s+5INaFBK8=) 2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 31 Dec 2025 21:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:71:10:00:62:e6:d1:c4:62:db:5d:63:a2:97:59:75:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Validity Not Before: Dec 30 21:00:32 2025 GMT Not After : Dec 31 21:00:32 2025 GMT Subject: CN=6afdb9d7f5f10833040cc0c3400dd94d1cda64e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:57:82:39:c4:d2:72:ff:9a:ec:b3:3a:4b: 09:9c:71:03:0a:93:58:75:4f:d3:8d:69:42:02:85: a0:16:8b:06:9f:6e:dc:75:12:d6:ba:8a:ad:a6:51: 84:ad:bd:e3:9e:ac:10:1c:17:61:ad:a4:38:dc:ef: 6b:e1:6c:9d:96:65:6c:a7:79:54:c5:b9:f4:c9:6a: b6:5f:8f:69:3b:2a:69:cd:2f:77:3b:42:b8:9b:e9: ae:c0:3b:20:0c:47:75:1a:89:44:e6:7e:bd:da:61: 9c:af:e5:05:dc:18:b1:8b:3a:2b:dc:29:ce:cc:96: 13:ee:a2:c9:a1:5f:45:97:ac:2d:ba:a7:4d:f2:65: 90:b4:b8:55:c6:77:5d:61:fb:87:26:0f:2c:dd:e8: 9b:6b:d7:cd:6c:77:44:2f:69:64:42:32:2d:be:83: 28:d0:06:d2:4e:08:a5:11:ad:c8:4b:4e:5f:da:45: 72:19:5b:26:e0:92:1e:7e:e7:2f:78:40:a9:94:21: 0e:13:a5:71:90:26:ae:b1:94:00:ef:94:4f:72:24: 30:9f:5e:ca:9a:52:a0:c5:f0:86:38:ee:1f:78:2a: 23:1e:8f:82:a1:c3:7a:bd:82:a5:0e:1f:e8:41:37: c4:0a:8d:cb:85:ee:26:23:da:c8:48:2c:76:5a:15: ba:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:FD:B9:D7:F5:F1:08:33:04:0C:C0:C3:40:0D:D9:4D:1C:DA:64:E9 X509v3 Authority Key Identifier: keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:d8:58:0e:30:bf:7f:6c:94:11:19:5b:9c:c3:93:96:a3:60: c8:c0:29:b6:ff:ce:23:c0:9b:3c:93:45:33:9b:1f:85:56:92: 47:df:24:1d:84:d8:0e:42:1c:9f:bb:0c:96:29:f3:8a:96:99: 09:fb:16:02:3d:e3:54:39:aa:ae:b3:68:b5:9f:ac:65:6a:9a: 72:e3:7e:71:1e:31:50:76:19:0c:30:f8:0b:81:b6:bd:8e:81: ce:c9:67:fa:56:11:05:27:64:2d:1e:d3:f1:24:e6:83:35:aa: d4:1c:72:63:74:e1:50:cb:bf:05:23:92:68:fa:9a:99:38:e3: bd:3b:85:09:a2:4f:08:7a:04:82:93:14:47:87:57:72:6b:62: c9:87:59:38:e4:4e:d4:7e:b8:8e:1b:74:fc:8d:b0:4a:85:9f: d9:17:b9:2b:7c:82:6f:40:82:5b:b7:9e:f6:03:c2:3d:28:a7: 6e:cd:ac:ca:05:56:86:24:d3:a0:a2:a2:68:3c:37:57:ce:86: f2:ee:2d:61:08:0f:ab:fb:f1:fa:20:db:a0:15:ea:7b:62:50: 8b:36:10:1a:70:48:02:74:f7:42:31:0c:2d:4d:33:9a:24:7e: 0c:d9:c6:f3:d3:b6:0b:f6:e5:58:e2:c1:3f:7d:b3:81:74:ad: 87:a2:41:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtxEABi5tHEYttdY6KXWXW1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3 MGIxZjEwHhcNMjUxMjMwMjEwMDMyWhcNMjUxMjMxMjEwMDMyWjAzMTEwLwYDVQQD Eyg2YWZkYjlkN2Y1ZjEwODMzMDQwY2MwYzM0MDBkZDk0ZDFjZGE2NGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5xXgjnE0nL/muyzOksJnHEDCpNY dU/TjWlCAoWgFosGn27cdRLWuoqtplGErb3jnqwQHBdhraQ43O9r4WydlmVsp3lU xbn0yWq2X49pOyppzS93O0K4m+muwDsgDEd1GolE5n692mGcr+UF3Bixizor3CnO zJYT7qLJoV9Fl6wtuqdN8mWQtLhVxnddYfuHJg8s3eiba9fNbHdEL2lkQjItvoMo 0AbSTgilEa3IS05f2kVyGVsm4JIefucveECplCEOE6VxkCausZQA75RPciQwn17K mlKgxfCGOO4feCojHo+CocN6vYKlDh/oQTfECo3Lhe4mI9rISCx2WhW6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGr9udf18QgzBAzAw0AN2U0c2mTpMB8GA1UdIwQY MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdhYDjC/ f2yUERlbnMOTlqNgyMAptv/OI8CbPJNFM5sfhVaSR98kHYTYDkIcn7sMlinzipaZ CfsWAj3jVDmqrrNotZ+sZWqacuN+cR4xUHYZDDD4C4G2vY6Bzsln+lYRBSdkLR7T 8STmgzWq1BxyY3ThUMu/BSOSaPqamTjjvTuFCaJPCHoEgpMUR4dXcmtiyYdZOORO 1H64jht0/I2wSoWf2Re5K3yCb0CCW7ee9gPCPSinbs2sygVWhiTToKKiaDw3V86G 8u4tYQgPq/vx+iDboBXqe2JQizYQGnBIAnT3QjEMLU0zmiR+DNnG89O2C/blWOLB P32zgXSth6JB+Q== -----END CERTIFICATE-----Generated at Wed Dec 31 07:25:20 2025 by rpki-client