This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft File: qFfj-rEefTOV3RA9ap-V2SJV9ks.mft (raw, json) Hash identifier: hQ1p1KI117JEybT9gJRLgU4C9cgPhsGsbVg0ittCkjw= Subject key identifier: A1:8C:DC:A7:35:E0:63:EC:51:4C:46:91:04:95:8B:10:A6:3F:4D:4C Authority key identifier: A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B Certificate issuer: /CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Certificate serial: 019B43929FE821A8CF0DF91150569EB33729 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft Manifest number: 0204 Signing time: Mon 22 Dec 2025 01:00:41 +0000 Manifest this update: Mon 22 Dec 2025 01:00:41 +0000 Manifest next update: Tue 23 Dec 2025 01:00:41 +0000 Files and hashes: 1: fvviGbPo5npX-vV1hPhwUf_r-7c.roa (hash: eyQCmGj4TKUSZ0ZE/WxMauOAdv4sV1qLHbkHR2/Z3eY=) 2: qFfj-rEefTOV3RA9ap-V2SJV9ks.crl (hash: bKumqlYl0wxbl9G5nLXUxENX8hLQ4ieUubqTRLX79rQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 01:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:43:92:9f:e8:21:a8:cf:0d:f9:11:50:56:9e:b3:37:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a857e3fab11e7d3395dd103d6a9f95d92255f64b Validity Not Before: Dec 22 01:00:41 2025 GMT Not After : Dec 23 01:00:41 2025 GMT Subject: CN=a18cdca735e063ec514c469104958b10a63f4d4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:75:99:3b:3a:51:2e:be:0d:1b:2d:19:18:b8: 17:35:aa:c6:68:19:33:99:24:e4:bf:da:14:0f:88: dd:8e:27:d5:40:fc:2d:43:34:64:7d:41:02:f9:6a: 16:ac:22:2b:4e:6c:be:eb:ac:25:a2:28:03:9b:b6: ff:be:4f:14:10:00:79:51:a7:3a:42:e8:0d:87:00: 4a:d8:72:71:02:b7:f5:3c:ba:dc:9e:98:6e:da:8c: 0f:ab:d1:0e:ab:fc:ad:fc:ac:c2:08:a8:c5:b9:14: 34:5c:71:e5:fa:d5:cd:9d:9b:26:45:1c:78:9d:f0: 19:98:23:e4:c8:7a:9d:ba:2c:1b:ec:5d:6a:5f:b9: f2:84:a4:88:14:fd:17:d4:7f:d0:61:e3:71:ec:f6: d0:f3:ac:0c:b6:bc:da:57:80:ff:dd:e7:90:05:c8: 7a:fd:3a:5a:ca:62:cc:90:1c:db:ef:ee:2b:fd:74: ea:2b:9f:e4:d4:fd:f2:86:b6:88:12:12:5d:e9:11: 1b:91:54:c0:66:3e:16:d3:bb:18:a9:e0:78:61:e5: 66:e3:b4:45:93:31:70:c4:4a:6b:8a:9c:89:65:88: ca:ec:8e:50:a0:44:9a:f0:8c:aa:60:d2:17:ea:9a: 67:ba:e8:a6:f7:01:69:65:e2:6b:b4:13:0e:28:49: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:8C:DC:A7:35:E0:63:EC:51:4C:46:91:04:95:8B:10:A6:3F:4D:4C X509v3 Authority Key Identifier: keyid:A8:57:E3:FA:B1:1E:7D:33:95:DD:10:3D:6A:9F:95:D9:22:55:F6:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFfj-rEefTOV3RA9ap-V2SJV9ks.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c522b0-0718-4b77-b8d6-3a6a06e188c3/1/qFfj-rEefTOV3RA9ap-V2SJV9ks.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:c0:2a:9c:a1:63:48:3b:89:8a:33:4e:2b:a5:55:31:7c:9d: e3:fe:b0:e5:13:e4:c4:03:01:10:18:0e:dd:b5:73:81:32:49: 8f:06:15:63:92:b1:c3:8a:ed:d8:15:2a:3e:80:4d:48:6a:77: df:96:d6:aa:77:1e:ca:93:67:7b:f7:58:c5:d6:d5:d9:b8:b4: de:1b:b8:93:ee:1f:0e:41:2e:ad:ba:ed:58:90:be:b5:77:6f: 56:e3:17:69:81:ac:71:d7:58:a9:78:b2:9a:91:1e:bf:dc:35: d3:53:0f:93:c1:61:b7:85:22:d9:9e:82:59:14:37:86:34:3e: 76:4d:bb:b5:4d:86:b0:9d:9c:0a:af:ad:ac:b0:5b:a6:85:a0: 8f:d5:67:33:51:94:51:58:84:be:69:78:97:72:b9:41:31:12: 4f:70:5d:70:fa:33:a6:46:0b:a0:02:5f:3e:58:ee:9d:02:c8: 12:13:42:29:6d:17:df:89:a9:37:7d:14:43:df:6b:6d:66:bb: 6e:7d:19:30:53:a1:1f:91:9e:18:2d:35:74:2c:33:e5:67:7d: 57:7a:fc:4a:c4:ca:fc:68:75:94:dd:b4:7e:99:d0:52:25:7f: 8b:d9:51:e2:44:f2:4d:79:a1:f3:eb:16:6e:0d:e1:1d:1d:6d: 34:bf:eb:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtDkp/oIajPDfkRUFaeszcpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTdlM2ZhYjExZTdkMzM5NWRkMTAzZDZhOWY5NWQ5MjI1 NWY2NGIwHhcNMjUxMjIyMDEwMDQxWhcNMjUxMjIzMDEwMDQxWjAzMTEwLwYDVQQD EyhhMThjZGNhNzM1ZTA2M2VjNTE0YzQ2OTEwNDk1OGIxMGE2M2Y0ZDRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHWZOzpRLr4NGy0ZGLgXNarGaBkz mSTkv9oUD4jdjifVQPwtQzRkfUEC+WoWrCIrTmy+66wloigDm7b/vk8UEAB5Uac6 QugNhwBK2HJxArf1PLrcnphu2owPq9EOq/yt/KzCCKjFuRQ0XHHl+tXNnZsmRRx4 nfAZmCPkyHqduiwb7F1qX7nyhKSIFP0X1H/QYeNx7PbQ86wMtrzaV4D/3eeQBch6 /TpaymLMkBzb7+4r/XTqK5/k1P3yhraIEhJd6REbkVTAZj4W07sYqeB4YeVm47RF kzFwxEpripyJZYjK7I5QoESa8IyqYNIX6ppnuuim9wFpZeJrtBMOKEmchQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGM3Kc14GPsUUxGkQSVixCmP01MMB8GA1UdIwQY MBaAFKhX4/qxHn0zld0QPWqfldkiVfZLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYt M2E2YTA2ZTE4OGMzLzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jNTIyYjAtMDcxOC00Yjc3LWI4ZDYtM2E2YTA2ZTE4OGMz LzEvcUZmai1yRWVmVE9WM1JBOWFwLVYyU0pWOWtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMAqnKFj SDuJijNOK6VVMXyd4/6w5RPkxAMBEBgO3bVzgTJJjwYVY5Kxw4rt2BUqPoBNSGp3 35bWqnceypNne/dYxdbV2bi03hu4k+4fDkEurbrtWJC+tXdvVuMXaYGscddYqXiy mpEev9w101MPk8Fht4Ui2Z6CWRQ3hjQ+dk27tU2GsJ2cCq+trLBbpoWgj9VnM1GU UViEvml4l3K5QTEST3BdcPozpkYLoAJfPljunQLIEhNCKW0X34mpN30UQ99rbWa7 bn0ZMFOhH5GeGC01dCwz5Wd9V3r8SsTK/Gh1lN20fpnQUiV/i9lR4kTyTXmh8+sW bg3hHR1tNL/rmw== -----END CERTIFICATE-----Generated at Mon Dec 22 10:42:43 2025 by rpki-client