This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft File: DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft (raw, json) Hash identifier: FB7NbUqBYknqXihwjeUfOQvXLAWkhI+2jU9TPhMvXNs= Subject key identifier: AF:19:33:D2:67:2E:55:3A:14:F9:63:26:31:0B:D4:E9:B2:24:14:75 Authority key identifier: 0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 Certificate issuer: /CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Certificate serial: 019B3B6BD0FEE9FD7187BD0742E10BDCFAFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft Manifest number: 04BB Signing time: Sat 20 Dec 2025 11:01:20 +0000 Manifest this update: Sat 20 Dec 2025 11:01:20 +0000 Manifest next update: Sun 21 Dec 2025 11:01:20 +0000 Files and hashes: 1: DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl (hash: FJr0WzVppqi2TsF7ulFAC1WCZ+mjw/RvCce5YUUvIFw=) 2: abGEnkiRCC-QdoOIOJ74wLOfNK4.roa (hash: xQuRCd3BN/tXelIZ1CEEcNjDIYPDQbZRMsaEZajsFYM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 09:56:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:6b:d0:fe:e9:fd:71:87:bd:07:42:e1:0b:dc:fa:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea54639316f5cd5287f841d7f8cff16521d0576 Validity Not Before: Dec 20 11:01:20 2025 GMT Not After : Dec 21 11:01:20 2025 GMT Subject: CN=af1933d2672e553a14f96326310bd4e9b2241475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b2:43:e0:41:e5:c9:af:2e:eb:bd:e7:54:b0: 28:35:2f:44:81:9d:7b:58:7f:63:63:ac:14:22:de: 5f:bd:f3:67:91:bf:da:33:e3:ff:cf:3e:7e:c5:94: c9:9e:58:0b:07:01:a8:b9:88:61:e2:6a:19:e6:b6: 99:9c:f0:45:7e:bc:f9:33:6e:38:18:15:d4:e9:b5: bc:0b:b0:94:4c:5f:40:ff:8e:cc:31:63:c3:3c:90: bd:f7:4c:22:68:cb:ea:27:dd:37:62:4f:f5:ac:95: ee:bd:11:b2:b6:d4:a6:2e:a1:5a:24:74:6a:49:55: 31:ab:04:96:db:65:3e:07:53:70:04:da:de:0f:af: 29:1f:5a:87:50:35:ed:1b:1d:c5:0d:67:01:23:74: c1:27:76:92:32:45:2d:d2:42:85:fb:bd:5c:42:73: 06:cc:89:f8:1b:a0:40:a0:f4:2c:d6:0e:4a:e0:2c: 4e:fe:51:3b:9f:50:29:5b:18:25:62:cc:c6:33:89: ef:ce:ff:7a:61:45:0d:6d:ff:04:8e:d3:87:8e:de: 6c:b7:06:30:1f:83:87:2c:a1:d6:5c:35:74:0d:93: 95:6f:d2:63:35:ac:12:9a:4f:15:95:05:94:d1:dd: ab:55:da:bf:f6:d2:c6:9a:d3:7c:7e:63:04:da:56: c3:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:19:33:D2:67:2E:55:3A:14:F9:63:26:31:0B:D4:E9:B2:24:14:75 X509v3 Authority Key Identifier: keyid:0E:A5:46:39:31:6F:5C:D5:28:7F:84:1D:7F:8C:FF:16:52:1D:05:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqVGOTFvXNUof4Qdf4z_FlIdBXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc30c-c1b1-47fb-85b8-417f53f1a4a0/1/DqVGOTFvXNUof4Qdf4z_FlIdBXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b0:70:8b:1b:b7:b6:e1:df:38:32:b8:26:57:10:33:ff:f5: 36:77:65:90:40:dc:34:7f:c5:a5:56:74:44:d9:44:9e:fd:0a: c7:7e:52:92:5a:5b:bf:a8:5b:b8:80:25:a9:43:95:a7:a4:02: ee:ea:f8:71:4c:fc:dd:b3:49:23:b1:d6:79:f6:43:94:3d:5c: 3c:fd:83:fa:3a:98:96:70:6d:0b:6b:fe:80:6c:a1:a6:df:29: 83:24:cf:34:a0:4c:69:cc:64:1b:22:4e:ab:d2:5d:5c:b7:ed: d8:66:86:2d:54:93:26:a9:38:6c:4a:54:2c:2c:9a:fa:63:6c: 2f:22:3a:19:fd:f2:5f:23:e7:63:ea:e3:75:66:b2:8f:3a:cd: 6b:72:df:0c:db:89:84:62:42:39:60:4e:74:ab:90:d4:d9:83: f8:8b:f1:bc:31:f8:ad:6c:02:80:71:e4:6b:49:3c:8a:13:4d: e2:0c:b6:5d:07:2b:4a:6e:68:88:eb:54:1f:21:e6:18:0f:f5: d5:f2:48:57:1e:d2:a6:b4:40:e7:e6:b0:30:ee:14:fe:67:35: e2:81:4b:31:e7:14:a7:f9:dd:26:46:fa:ea:97:3f:0f:41:fb: cc:84:63:59:38:cb:2a:97:9c:ea:85:29:02:ce:78:08:8d:08: f1:bc:1f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7a9D+6f1xh70HQuEL3Pr+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTU0NjM5MzE2ZjVjZDUyODdmODQxZDdmOGNmZjE2NTIx ZDA1NzYwHhcNMjUxMjIwMTEwMTIwWhcNMjUxMjIxMTEwMTIwWjAzMTEwLwYDVQQD EyhhZjE5MzNkMjY3MmU1NTNhMTRmOTYzMjYzMTBiZDRlOWIyMjQxNDc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LJD4EHlya8u673nVLAoNS9EgZ17 WH9jY6wUIt5fvfNnkb/aM+P/zz5+xZTJnlgLBwGouYhh4moZ5raZnPBFfrz5M244 GBXU6bW8C7CUTF9A/47MMWPDPJC990wiaMvqJ903Yk/1rJXuvRGyttSmLqFaJHRq SVUxqwSW22U+B1NwBNreD68pH1qHUDXtGx3FDWcBI3TBJ3aSMkUt0kKF+71cQnMG zIn4G6BAoPQs1g5K4CxO/lE7n1ApWxglYszGM4nvzv96YUUNbf8EjtOHjt5stwYw H4OHLKHWXDV0DZOVb9JjNawSmk8VlQWU0d2rVdq/9tLGmtN8fmME2lbDVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8ZM9JnLlU6FPljJjEL1OmyJBR1MB8GA1UdIwQY MBaAFA6lRjkxb1zVKH+EHX+M/xZSHQV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1Yjgt NDE3ZjUzZjFhNGEwLzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy84ZmMzMGMtYzFiMS00N2ZiLTg1YjgtNDE3ZjUzZjFhNGEw LzEvRHFWR09URnZYTlVvZjRRZGY0el9GbElkQlhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLBwixu3 tuHfODK4JlcQM//1NndlkEDcNH/FpVZ0RNlEnv0Kx35Sklpbv6hbuIAlqUOVp6QC 7ur4cUz83bNJI7HWefZDlD1cPP2D+jqYlnBtC2v+gGyhpt8pgyTPNKBMacxkGyJO q9JdXLft2GaGLVSTJqk4bEpULCya+mNsLyI6Gf3yXyPnY+rjdWayjzrNa3LfDNuJ hGJCOWBOdKuQ1NmD+IvxvDH4rWwCgHHka0k8ihNN4gy2XQcrSm5oiOtUHyHmGA/1 1fJIVx7SprRA5+awMO4U/mc14oFLMecUp/ndJkb66pc/D0H7zIRjWTjLKpec6oUp As54CI0I8bwfvg== -----END CERTIFICATE-----Generated at Sat Dec 20 15:25:13 2025 by rpki-client