This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft File: dqIj-utMXd95nTyiqWDAbB1tHZY.mft (raw, json) Hash identifier: IQw3mnt+pQ7gJqmWQ9Ir41V9IxToGfpHzqlaImlLL7A= Subject key identifier: 05:FF:83:4F:B5:3C:A3:13:E3:B3:4A:55:33:DA:DA:82:07:DC:92:53 Authority key identifier: 76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96 Certificate issuer: /CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96 Certificate serial: 019B6BE99DD6FCA8CFA0E089D0AE3068EF92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft Manifest number: 0D4F Signing time: Mon 29 Dec 2025 21:00:30 +0000 Manifest this update: Mon 29 Dec 2025 21:00:30 +0000 Manifest next update: Tue 30 Dec 2025 21:00:30 +0000 Files and hashes: 1: dqIj-utMXd95nTyiqWDAbB1tHZY.crl (hash: RA++edhwghFvUkJfaadc+W/b2X6+dhnmqqCPL0E8rR0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6b:e9:9d:d6:fc:a8:cf:a0:e0:89:d0:ae:30:68:ef:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96 Validity Not Before: Dec 29 21:00:30 2025 GMT Not After : Dec 30 21:00:30 2025 GMT Subject: CN=05ff834fb53ca313e3b34a5533dada8207dc9253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:71:09:80:d7:b0:3f:e8:34:df:3a:84:2f:fd: 21:c7:33:55:f8:f5:75:76:0f:9a:f9:e4:e4:96:0b: 0a:eb:6a:9e:b7:9d:06:f5:7e:20:50:f9:31:c6:ed: be:1f:0b:07:83:8b:23:29:01:31:ed:dd:6b:16:b9: 19:cf:f2:b6:9b:7e:9b:1c:1b:7f:f8:42:56:20:d1: ba:cb:09:41:be:6e:7a:1b:dd:6e:1b:9a:bc:ce:9a: 53:6c:55:db:b7:f2:6a:9c:81:7e:d9:ab:fa:24:84: bf:2a:d9:7e:0e:e8:48:a0:0e:21:29:9a:90:76:11: a1:77:75:80:f3:7d:d7:e0:b7:84:91:70:b8:46:a1: c3:cb:f3:0b:99:72:2e:0c:fa:4e:6e:a1:85:ff:53: aa:d3:4f:b3:20:d7:29:6a:64:da:90:f0:14:bf:6f: c7:b8:eb:56:48:13:0e:5e:fc:67:ea:fc:b7:c2:76: 59:5a:2a:b0:a5:e5:4c:4e:80:81:2f:52:93:8b:7b: 0b:c0:08:ba:76:cf:2e:db:bb:55:40:2e:0d:21:3c: fe:2d:8b:5d:c1:93:1e:8d:5c:67:8d:d1:a4:7d:51: 7b:48:b5:ca:bd:ff:96:34:49:39:07:94:06:4d:f5: 97:45:1a:5e:90:c5:16:90:e8:ec:58:7f:7c:a6:cb: 83:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:FF:83:4F:B5:3C:A3:13:E3:B3:4A:55:33:DA:DA:82:07:DC:92:53 X509v3 Authority Key Identifier: keyid:76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:00:50:8b:3d:1c:db:f6:ce:21:8e:a7:6b:8e:c2:fe:67:85: 2f:fc:24:ff:ad:32:22:b6:22:a3:82:fd:20:de:7e:30:32:db: c4:47:bc:1c:bb:dc:ab:7c:ae:cb:69:37:4c:7e:b4:30:08:98: 3c:a5:d5:45:e6:0c:1f:04:f1:94:3c:89:22:b6:14:63:8a:0d: 45:b6:ff:84:64:15:40:fc:e3:34:f0:75:fc:d0:29:79:63:fb: 6e:ff:d6:ca:b2:ab:8a:ad:f2:0b:46:4c:4f:48:7b:91:08:db: ab:17:eb:85:d7:7e:e7:04:20:56:66:6f:f0:dc:b1:27:c1:ad: 0c:1c:5c:6e:ef:cf:20:55:0a:93:40:5e:ef:ad:62:f8:91:6d: 0b:90:6c:d3:e0:93:c9:2e:a8:84:a2:70:b4:66:99:cb:ff:91: 51:e6:aa:c1:4b:fe:58:2a:8a:70:4c:93:b3:d2:55:01:f8:54: a7:7f:a4:5d:d6:f2:0d:8f:99:81:73:cb:b9:33:6c:23:f0:8a: 6d:e9:e9:ed:a7:04:70:b7:40:aa:e0:78:38:72:28:b5:46:b9: 76:f1:fa:bf:0d:2e:8f:83:2c:2b:fb:3a:ff:9b:27:d9:e8:67: 84:f4:ac:c2:65:9e:a3:dd:3c:7b:de:d2:ca:36:e5:b5:c2:23: 3d:34:86:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtr6Z3W/KjPoOCJ0K4waO+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YTIyM2ZhZWI0YzVkZGY3OTlkM2NhMmE5NjBjMDZjMWQ2 ZDFkOTYwHhcNMjUxMjI5MjEwMDMwWhcNMjUxMjMwMjEwMDMwWjAzMTEwLwYDVQQD EygwNWZmODM0ZmI1M2NhMzEzZTNiMzRhNTUzM2RhZGE4MjA3ZGM5MjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HEJgNewP+g03zqEL/0hxzNV+PV1 dg+a+eTklgsK62qet50G9X4gUPkxxu2+HwsHg4sjKQEx7d1rFrkZz/K2m36bHBt/ +EJWING6ywlBvm56G91uG5q8zppTbFXbt/JqnIF+2av6JIS/Ktl+DuhIoA4hKZqQ dhGhd3WA833X4LeEkXC4RqHDy/MLmXIuDPpObqGF/1Oq00+zINcpamTakPAUv2/H uOtWSBMOXvxn6vy3wnZZWiqwpeVMToCBL1KTi3sLwAi6ds8u27tVQC4NITz+LYtd wZMejVxnjdGkfVF7SLXKvf+WNEk5B5QGTfWXRRpekMUWkOjsWH98psuDhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAX/g0+1PKMT47NKVTPa2oIH3JJTMB8GA1UdIwQY MBaAFHaiI/rrTF3feZ08oqlgwGwdbR2WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHFJai11dE1YZDk1blR5aXFXREFiQjF0SFpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZjBhYjEtMjM1Yy00Y2RhLWI1Mzgt MWRkZWU4NTVjZGY4LzEvZHFJai11dE1YZDk1blR5aXFXREFiQjF0SFpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS81ZjBhYjEtMjM1Yy00Y2RhLWI1MzgtMWRkZWU4NTVjZGY4 LzEvZHFJai11dE1YZDk1blR5aXFXREFiQjF0SFpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfQBQiz0c 2/bOIY6na47C/meFL/wk/60yIrYio4L9IN5+MDLbxEe8HLvcq3yuy2k3TH60MAiY PKXVReYMHwTxlDyJIrYUY4oNRbb/hGQVQPzjNPB1/NApeWP7bv/WyrKriq3yC0ZM T0h7kQjbqxfrhdd+5wQgVmZv8NyxJ8GtDBxcbu/PIFUKk0Be761i+JFtC5Bs0+CT yS6ohKJwtGaZy/+RUeaqwUv+WCqKcEyTs9JVAfhUp3+kXdbyDY+ZgXPLuTNsI/CK benp7acEcLdAquB4OHIotUa5dvH6vw0uj4MsK/s6/5sn2ehnhPSswmWeo908e97S yjbltcIjPTSGbQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:34:34 2025 by rpki-client