This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft File: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft (raw, json) Hash identifier: 3w6dwCyZGyxuyZ7KsZDfDuYCjY+TsOyQxG/3jUBryn8= Subject key identifier: 42:3A:46:E0:D0:03:88:33:D0:DE:FD:BB:EB:A7:02:19:1B:B9:75:95 Authority key identifier: 71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE Certificate issuer: /CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Certificate serial: 019B52984BC51D180F3E3AA207A7F484AD5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft Manifest number: 1794 Signing time: Wed 24 Dec 2025 23:01:11 +0000 Manifest this update: Wed 24 Dec 2025 23:01:11 +0000 Manifest next update: Thu 25 Dec 2025 23:01:11 +0000 Files and hashes: 1: MXRY_gWfemtb4d9S12bJTdSx1HE.roa (hash: PGm1ZEfOELutLc4FdNXikN8yLBd24rRaKhDmxZUHdZk=) 2: cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl (hash: utPc1HDsOQUcL3ldsPlkgH650fS87slGlQeJZ6KUlsU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:52:98:4b:c5:1d:18:0f:3e:3a:a2:07:a7:f4:84:ad:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710ab286dae8d8cb5f6fc4eec3f323814c87f5be Validity Not Before: Dec 24 23:01:11 2025 GMT Not After : Dec 25 23:01:11 2025 GMT Subject: CN=423a46e0d0038833d0defdbbeba702191bb97595 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:68:6e:f3:37:44:05:8c:e9:e3:e1:22:dd:71: c4:5d:15:b7:64:d1:42:bf:97:8f:09:09:16:07:09: 7c:b9:95:2c:02:ff:42:24:3f:85:53:b5:ec:ea:c1: 7d:6f:54:b5:73:3f:16:5e:50:0e:20:ac:d5:a7:34: c2:69:79:2e:c1:cf:0f:50:b1:43:56:36:d7:66:43: cf:2c:ad:74:82:49:7d:98:9c:f8:8d:fe:5f:d4:2e: 18:61:cf:64:9e:0f:f3:46:98:88:9c:52:04:af:f0: d9:d3:48:04:15:9b:65:d3:65:bb:15:e8:24:67:df: 1f:15:ef:5b:0f:67:a5:8c:c0:de:5c:7b:79:83:ec: 8d:41:9b:b9:23:3b:80:28:04:6e:75:2a:c2:6b:64: b2:44:70:f6:ca:1e:09:65:39:00:bd:7b:59:d3:9b: af:48:73:58:fb:de:a9:dc:52:ef:e9:1a:95:a1:f0: 8a:cb:86:eb:11:b1:b7:c4:de:8a:69:0c:29:d1:87: 49:25:28:12:3c:7d:e1:b7:9d:d1:e6:0e:57:a1:c5: 85:41:84:14:66:fc:29:1a:cd:61:c8:94:ea:78:2f: 64:0a:65:98:ac:40:57:65:b1:29:f5:3b:83:68:22: d9:37:d1:70:f7:cd:6c:4b:5a:8f:2b:48:bc:44:17: b8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3A:46:E0:D0:03:88:33:D0:DE:FD:BB:EB:A7:02:19:1B:B9:75:95 X509v3 Authority Key Identifier: keyid:71:0A:B2:86:DA:E8:D8:CB:5F:6F:C4:EE:C3:F3:23:81:4C:87:F5:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f12e6b-7f06-4040-86b9-7bf96832e1ea/1/cQqyhtro2Mtfb8Tuw_MjgUyH9b4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:df:47:4c:4f:10:98:b9:4b:e5:e1:98:2f:32:e6:04:39:77: 0d:8b:92:3f:44:eb:f3:73:cc:ab:36:81:03:90:78:6f:de:2c: 6b:2c:f6:6a:88:03:26:db:c6:d5:3b:2a:cb:52:df:eb:87:be: 34:5a:96:18:6c:48:95:a0:9b:2f:39:85:50:b2:56:ff:61:3a: 9a:de:4f:0e:29:4f:9f:99:99:c3:74:90:a7:54:3a:f8:5f:fa: 05:e5:28:a3:01:cc:cb:94:b3:23:34:2f:09:d3:54:ff:9c:4f: 2f:08:a0:f2:45:d6:51:4a:33:1f:f8:70:ae:73:a7:f7:07:fe: 47:7b:18:c5:01:39:81:de:d1:9a:15:98:73:ea:22:a8:1b:2c: 85:f5:66:ac:c1:79:60:68:a3:b2:19:95:32:dd:ea:28:1a:15: 7d:a9:7b:21:7e:32:49:ab:c3:20:59:63:bf:fe:9c:23:3e:74: 48:40:05:50:b9:0d:12:8a:69:72:4d:42:be:1b:04:d8:d4:3f: 2a:db:7d:8b:d3:21:11:1c:04:44:de:0c:6e:39:69:63:0c:63: 77:46:6e:5b:ff:6e:c0:18:d3:60:b3:30:d0:20:e8:91:65:61: 84:2c:45:c7:ff:3d:83:66:f8:91:68:9d:57:0a:6a:18:4d:fe: 75:a4:c4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtSmEvFHRgPPjqiB6f0hK1cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMGFiMjg2ZGFlOGQ4Y2I1ZjZmYzRlZWMzZjMyMzgxNGM4 N2Y1YmUwHhcNMjUxMjI0MjMwMTExWhcNMjUxMjI1MjMwMTExWjAzMTEwLwYDVQQD Eyg0MjNhNDZlMGQwMDM4ODMzZDBkZWZkYmJlYmE3MDIxOTFiYjk3NTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWhu8zdEBYzp4+Ei3XHEXRW3ZNFC v5ePCQkWBwl8uZUsAv9CJD+FU7Xs6sF9b1S1cz8WXlAOIKzVpzTCaXkuwc8PULFD VjbXZkPPLK10gkl9mJz4jf5f1C4YYc9kng/zRpiInFIEr/DZ00gEFZtl02W7Fegk Z98fFe9bD2eljMDeXHt5g+yNQZu5IzuAKARudSrCa2SyRHD2yh4JZTkAvXtZ05uv SHNY+96p3FLv6RqVofCKy4brEbG3xN6KaQwp0YdJJSgSPH3ht53R5g5XocWFQYQU ZvwpGs1hyJTqeC9kCmWYrEBXZbEp9TuDaCLZN9Fw981sS1qPK0i8RBe4yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEI6RuDQA4gz0N79u+unAhkbuXWVMB8GA1UdIwQY MBaAFHEKsoba6NjLX2/E7sPzI4FMh/W+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2Yjkt N2JmOTY4MzJlMWVhLzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9mMTJlNmItN2YwNi00MDQwLTg2YjktN2JmOTY4MzJlMWVh LzEvY1FxeWh0cm8yTXRmYjhUdXdfTWpnVXlIOWI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo99HTE8Q mLlL5eGYLzLmBDl3DYuSP0Tr83PMqzaBA5B4b94sayz2aogDJtvG1Tsqy1Lf64e+ NFqWGGxIlaCbLzmFULJW/2E6mt5PDilPn5mZw3SQp1Q6+F/6BeUoowHMy5SzIzQv CdNU/5xPLwig8kXWUUozH/hwrnOn9wf+R3sYxQE5gd7RmhWYc+oiqBsshfVmrMF5 YGijshmVMt3qKBoVfal7IX4ySavDIFljv/6cIz50SEAFULkNEoppck1CvhsE2NQ/ Ktt9i9MhERwERN4MbjlpYwxjd0ZuW/9uwBjTYLMw0CDokWVhhCxFx/89g2b4kWid VwpqGE3+daTEaw== -----END CERTIFICATE-----Generated at Thu Dec 25 09:15:36 2025 by rpki-client