This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json) Hash identifier: YWl5svae8d/dRhMsGApVgDYr9pTLt8VHGEbtRVXW6jE= Subject key identifier: C9:EE:72:18:E3:77:31:DA:4D:87:69:89:F4:A0:C5:CB:AB:B9:9F:9D Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Certificate serial: 019B6D33AC254F863AD0EAC05EDD24BB8652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft Manifest number: 0B6D Signing time: Tue 30 Dec 2025 03:01:01 +0000 Manifest this update: Tue 30 Dec 2025 03:01:01 +0000 Manifest next update: Wed 31 Dec 2025 03:01:01 +0000 Files and hashes: 1: L_XmzwrYuu-3rRY_iMRM0yQHIg4.roa (hash: RmMXdLfBhblx+m1KktkkN/nQ0YOW2Tp0s4LZY86DblA=) 2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: b1NG5fgQld8iIu9dJhDKZmdRdkYVFgiZySac4QUA01k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Dec 2025 23:52:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:6d:33:ac:25:4f:86:3a:d0:ea:c0:5e:dd:24:bb:86:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866 Validity Not Before: Dec 30 03:01:01 2025 GMT Not After : Dec 31 03:01:01 2025 GMT Subject: CN=c9ee7218e37731da4d876989f4a0c5cbabb99f9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:83:35:52:36:7d:f8:28:51:d6:60:7c:15:06: da:28:4f:85:5c:e0:30:8a:da:2a:4e:e0:0d:2a:17: f2:70:7d:88:ad:33:5d:8b:0c:0e:78:59:1e:cf:5f: e7:3a:36:04:33:da:23:fa:ee:c0:69:42:52:a3:5e: db:09:fe:e2:7d:34:40:29:b1:24:1d:e7:2a:89:6c: 80:f5:c8:b5:35:a6:77:46:f7:12:98:e2:39:b6:df: c9:ad:d1:09:3c:a0:aa:bc:fc:9f:fd:f2:c5:61:6f: 0d:92:f8:26:c5:42:fd:61:d1:e7:ac:8d:a0:22:1b: 78:13:f4:1c:86:1f:86:04:aa:14:55:af:e1:29:f9: 41:a6:24:d7:ed:2a:b1:0a:11:71:40:3e:26:ea:c6: 97:ba:cf:3e:1d:c9:c2:de:55:70:d4:62:9a:03:de: 19:d2:5a:2f:ef:d6:15:32:14:ed:05:f2:ec:e0:c2: 45:88:f0:fe:30:32:5b:cd:5c:78:88:31:2e:50:f5: c5:8f:c2:5f:c8:c2:a0:e3:d0:92:91:d0:99:7a:b2: 53:ef:4e:f6:ad:71:be:b7:68:37:9d:13:f8:0a:20: 65:3a:42:30:ad:7f:a1:48:0e:37:96:3e:a6:da:51: e1:67:11:69:17:c9:e5:8a:38:93:3d:30:ca:38:33: 8b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:EE:72:18:E3:77:31:DA:4D:87:69:89:F4:A0:C5:CB:AB:B9:9F:9D X509v3 Authority Key Identifier: keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:17:d1:4d:11:ce:65:6d:56:ba:c7:71:1f:e3:63:68:1b:9b: 9d:b4:0f:b9:b2:24:18:0d:ff:1e:d0:3c:8b:f3:17:fb:02:71: 53:17:b4:6b:cc:50:8f:9a:ed:a3:70:04:93:23:b4:ea:32:e5: 8a:ba:b2:cb:6e:17:5f:84:53:c4:69:05:05:38:7f:d7:b5:8f: 92:53:43:e7:84:11:97:51:06:01:c2:24:a9:c6:fc:2b:b3:42: 4f:66:12:39:0a:fb:76:db:99:bb:8f:e1:bd:1e:df:4d:f8:7c: 35:8b:aa:16:3d:10:6f:79:62:bc:0e:e9:64:8a:74:b3:24:9d: a2:5d:fe:bd:09:38:e1:03:a2:95:c4:d6:d5:93:70:6c:31:30: 4a:12:b4:70:be:ba:fe:3a:9e:23:55:a9:e0:c4:4a:f3:70:4c: 34:f8:2f:4b:2e:a5:96:89:3f:59:f1:9e:c0:28:c7:af:e7:30: c5:6e:d0:6e:6f:06:e6:88:12:1e:a4:a5:5b:8f:5b:09:05:3e: 0f:7b:b8:dd:8d:bf:f6:68:c6:55:fd:07:23:ba:42:57:ae:f6: 31:17:2e:ca:c1:fa:6d:97:f5:5f:25:8b:ed:c6:1f:2a:f3:48: d9:ed:ae:c1:bb:c7:02:55:3c:ce:1d:3d:b1:4a:da:6e:5c:81: 0e:89:c4:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZttM6wlT4Y60OrAXt0ku4ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWZjNTQzNWZjYmJlMzQ4ZDJiNTYwMTZhN2JjN2JjYWNm MWI4NjYwHhcNMjUxMjMwMDMwMTAxWhcNMjUxMjMxMDMwMTAxWjAzMTEwLwYDVQQD EyhjOWVlNzIxOGUzNzczMWRhNGQ4NzY5ODlmNGEwYzVjYmFiYjk5ZjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYM1UjZ9+ChR1mB8FQbaKE+FXOAw itoqTuANKhfycH2IrTNdiwwOeFkez1/nOjYEM9oj+u7AaUJSo17bCf7ifTRAKbEk HecqiWyA9ci1NaZ3RvcSmOI5tt/JrdEJPKCqvPyf/fLFYW8NkvgmxUL9YdHnrI2g Iht4E/Qchh+GBKoUVa/hKflBpiTX7SqxChFxQD4m6saXus8+HcnC3lVw1GKaA94Z 0lov79YVMhTtBfLs4MJFiPD+MDJbzVx4iDEuUPXFj8JfyMKg49CSkdCZerJT7072 rXG+t2g3nRP4CiBlOkIwrX+hSA43lj6m2lHhZxFpF8nlijiTPTDKODOLUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnuchjjdzHaTYdpifSgxcuruZ+dMB8GA1UdIwQY MBaAFKWvxUNfy740jStWAWp7x7ys8bhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYt ZDc0ODRiZjljYTJiLzEvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC80MTlhZjAtY2JkNi00MjMzLWI1MmYtZDc0ODRiZjljYTJi LzEvcGFfRlExX0x2alNOSzFZQmFudkh2S3p4dUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORfRTRHO ZW1WusdxH+NjaBubnbQPubIkGA3/HtA8i/MX+wJxUxe0a8xQj5rto3AEkyO06jLl irqyy24XX4RTxGkFBTh/17WPklND54QRl1EGAcIkqcb8K7NCT2YSOQr7dtuZu4/h vR7fTfh8NYuqFj0Qb3livA7pZIp0sySdol3+vQk44QOilcTW1ZNwbDEwShK0cL66 /jqeI1Wp4MRK83BMNPgvSy6llok/WfGewCjHr+cwxW7Qbm8G5ogSHqSlW49bCQU+ D3u43Y2/9mjGVf0HI7pCV672MRcuysH6bZf1XyWL7cYfKvNI2e2uwbvHAlU8zh09 sUrablyBDonEMQ== -----END CERTIFICATE-----Generated at Tue Dec 30 04:55:03 2025 by rpki-client