This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft File: 1qcbToaUQX67vPYmi5yPljFwsfE.mft (raw, json) Hash identifier: AyLJEYP8u3yBYsxN5hRuN3WC59tpUEQBQ+ODJ8L0Ri8= Subject key identifier: 2F:DA:CE:7B:A9:29:B8:54:1B:EB:A3:81:79:2C:74:02:89:8D:35:5B Authority key identifier: D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 Certificate issuer: /CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Certificate serial: 019B6B44D40CDE45E71F4D69E014AAC561D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft Manifest number: 0774 Signing time: Mon 29 Dec 2025 18:00:31 +0000 Manifest this update: Mon 29 Dec 2025 18:00:31 +0000 Manifest next update: Tue 30 Dec 2025 18:00:31 +0000 Files and hashes: 1: 1qcbToaUQX67vPYmi5yPljFwsfE.crl (hash: g/luJyxVbEW6Adu0yvSKSbhjUFCzTvgYSk1IwFUCW/w=) 2: cPWanhkOF5JFf7ndWQEsgDaOym4.roa (hash: hNMT1d2ZHlvJJQiGYjNYvL4LotmJH6VgqTxIxCqCmaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 18:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:44:d4:0c:de:45:e7:1f:4d:69:e0:14:aa:c5:61:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6a71b4e8694417ebbbcf6268b9c8f963170b1f1 Validity Not Before: Dec 29 18:00:31 2025 GMT Not After : Dec 30 18:00:31 2025 GMT Subject: CN=2fdace7ba929b8541beba381792c7402898d355b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:bf:cb:db:ad:a1:b2:f1:b9:f0:1f:11:76: 18:f9:1c:bc:82:a8:dc:1d:3c:a0:51:b2:98:09:a3: ab:db:89:e6:bc:69:39:d1:37:10:aa:22:68:d9:82: e8:6f:c1:95:37:44:0b:c8:ca:51:48:28:ad:2b:d1: 83:21:e6:4e:15:ac:93:d6:ab:1e:d5:09:cf:a7:4b: de:18:51:65:2a:40:6f:c6:9c:e0:ea:c3:78:fd:b4: 9c:d4:42:e6:9a:81:24:8f:a6:9d:f4:c6:18:08:b3: 01:74:97:ee:59:c5:ab:7f:22:11:1d:46:e5:26:80: 47:66:6e:91:0e:9e:fa:d2:ed:48:8a:d8:27:34:51: f1:8e:e5:9d:1d:a7:c0:f1:1e:4f:06:83:d8:4e:c6: d4:28:3d:99:27:74:85:4f:fc:99:db:47:66:62:98: 34:29:e4:ca:34:87:6b:8e:86:0c:49:f3:55:44:f2: a6:6b:79:e4:c4:78:90:f0:26:f4:1d:75:3a:f7:bf: 31:87:25:67:f2:78:36:eb:1e:8d:f8:4b:72:0c:fc: da:47:af:41:51:cf:be:e2:3e:2a:da:10:c9:6f:6d: c9:e0:d0:8d:44:44:4a:da:ab:7e:e4:f5:dd:f9:6d: 6d:6e:bf:dd:e2:77:5a:1e:65:93:11:41:37:d9:7a: 1b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DA:CE:7B:A9:29:B8:54:1B:EB:A3:81:79:2C:74:02:89:8D:35:5B X509v3 Authority Key Identifier: keyid:D6:A7:1B:4E:86:94:41:7E:BB:BC:F6:26:8B:9C:8F:96:31:70:B1:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qcbToaUQX67vPYmi5yPljFwsfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/76a463-0732-497a-948d-2931104c5f7a/1/1qcbToaUQX67vPYmi5yPljFwsfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:25:9c:e2:37:b8:4d:52:26:c2:9e:88:2a:e3:99:0e:b1:90: 8b:41:57:60:90:64:32:15:0f:82:7f:b5:b2:2f:38:be:7f:94: e6:90:b2:06:65:57:a7:f9:e4:4e:f9:0c:29:ce:1b:64:2d:de: 05:c9:4c:a5:19:bd:94:02:91:bb:e9:9a:23:1f:7f:53:3e:a8: c0:ae:78:14:e1:b3:02:47:c3:e0:11:b5:a7:8a:b9:bb:70:37: 4e:5c:57:c0:4b:c6:c8:16:d4:71:47:3d:33:90:d6:85:15:91: 71:5d:e0:90:4a:ee:55:05:a3:4b:8e:d0:12:07:3f:9c:0c:1c: 14:9a:6a:c7:5b:03:99:49:83:b1:de:52:86:cd:fd:a5:a8:7d: 9a:12:3c:ea:35:fa:c4:dd:35:85:29:eb:35:0f:c9:10:15:cb: 2c:0a:af:fe:0f:04:3e:31:3b:46:ec:75:90:3c:8e:d3:11:cc: 4e:35:b7:83:b3:21:b9:4d:ad:0e:79:1e:9e:7c:58:24:e1:4a: ce:6f:ca:c2:ef:48:f1:33:f2:d7:ac:1c:ad:5d:aa:4e:6c:dc: f4:7c:f3:61:2e:af:da:d7:d2:4d:c4:09:59:a7:fa:75:30:2e: fe:ed:9a:93:7d:a0:f7:1e:4d:1a:79:31:73:bd:07:27:7b:f9: 9f:10:39:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtrRNQM3kXnH01p4BSqxWHXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2YTcxYjRlODY5NDQxN2ViYmJjZjYyNjhiOWM4Zjk2MzE3 MGIxZjEwHhcNMjUxMjI5MTgwMDMxWhcNMjUxMjMwMTgwMDMxWjAzMTEwLwYDVQQD EygyZmRhY2U3YmE5MjliODU0MWJlYmEzODE3OTJjNzQwMjg5OGQzNTViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD+/y9utobLxufAfEXYY+Ry8gqjc HTygUbKYCaOr24nmvGk50TcQqiJo2YLob8GVN0QLyMpRSCitK9GDIeZOFayT1qse 1QnPp0veGFFlKkBvxpzg6sN4/bSc1ELmmoEkj6ad9MYYCLMBdJfuWcWrfyIRHUbl JoBHZm6RDp760u1IitgnNFHxjuWdHafA8R5PBoPYTsbUKD2ZJ3SFT/yZ20dmYpg0 KeTKNIdrjoYMSfNVRPKma3nkxHiQ8Cb0HXU6978xhyVn8ng26x6N+EtyDPzaR69B Uc++4j4q2hDJb23J4NCNRERK2qt+5PXd+W1tbr/d4ndaHmWTEUE32XobHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC/aznupKbhUG+ujgXksdAKJjTVbMB8GA1UdIwQY MBaAFNanG06GlEF+u7z2Joucj5YxcLHxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQt MjkzMTEwNGM1ZjdhLzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy83NmE0NjMtMDczMi00OTdhLTk0OGQtMjkzMTEwNGM1Zjdh LzEvMXFjYlRvYVVRWDY3dlBZbWk1eVBsakZ3c2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxyWc4je4 TVImwp6IKuOZDrGQi0FXYJBkMhUPgn+1si84vn+U5pCyBmVXp/nkTvkMKc4bZC3e BclMpRm9lAKRu+maIx9/Uz6owK54FOGzAkfD4BG1p4q5u3A3TlxXwEvGyBbUcUc9 M5DWhRWRcV3gkEruVQWjS47QEgc/nAwcFJpqx1sDmUmDsd5Shs39pah9mhI86jX6 xN01hSnrNQ/JEBXLLAqv/g8EPjE7Rux1kDyO0xHMTjW3g7MhuU2tDnkennxYJOFK zm/Kwu9I8TPy16wcrV2qTmzc9HzzYS6v2tfSTcQJWaf6dTAu/u2ak32g9x5NGnkx c70HJ3v5nxA5bw== -----END CERTIFICATE-----Generated at Tue Dec 30 01:31:44 2025 by rpki-client