This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json) Hash identifier: NNVog5b1zrweQzsSZzj5G+bFo3S/ui2WAvwoYpmAJj8= Subject key identifier: FD:E5:32:4F:DC:7A:24:66:0B:60:D9:4C:A4:3F:E6:F0:25:9C:67:40 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B3D231E0F82F7F867DF4A837A1DBA3EC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft Manifest number: 1243 Signing time: Sat 20 Dec 2025 19:01:10 +0000 Manifest this update: Sat 20 Dec 2025 19:01:10 +0000 Manifest next update: Sun 21 Dec 2025 19:01:10 +0000 Files and hashes: 1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=) 2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=) 3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=) 4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=) 5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=) 6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: puirVgc+g4b9hkD3YSqoM6cKrbxc7lZINC6hFwPS1dU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:1e:0f:82:f7:f8:67:df:4a:83:7a:1d:ba:3e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Dec 20 19:01:10 2025 GMT Not After : Dec 21 19:01:10 2025 GMT Subject: CN=fde5324fdc7a24660b60d94ca43fe6f0259c6740 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1c:81:fd:29:04:ed:c7:3a:52:65:2f:7d:cb: 47:db:19:81:14:cc:d6:63:4e:5d:9c:fd:b9:c0:b6: c9:8d:b3:ad:0c:60:ed:e7:c7:ab:57:0c:59:fc:44: ca:96:dd:44:da:42:1e:da:c4:9f:f9:71:6d:b2:eb: 49:84:1f:eb:bd:08:ef:7c:ca:cc:c1:67:c4:4e:d7: ca:0d:ca:58:f9:4f:af:c6:b5:13:ac:36:a6:4c:4d: 98:1d:16:c0:6a:08:c1:77:7e:fb:23:a3:c7:42:80: d1:77:05:a9:fb:b5:09:29:62:0a:0f:62:5c:e3:ce: 45:44:31:b9:7d:23:4e:f5:ae:46:c2:01:0f:50:51: 92:ee:1b:7d:a3:21:21:d7:66:dd:f7:a1:0d:fc:34: 6c:95:92:16:58:5b:f4:bd:d9:f0:5c:ec:3e:f3:f2: e1:39:87:3f:38:65:cb:4c:35:da:13:34:12:6c:16: df:b6:bd:e2:1d:34:67:bf:87:72:36:33:27:f5:9c: 61:da:d3:cf:3e:e4:8a:ec:d7:c1:f2:6c:96:47:25: d1:c7:71:f1:46:61:ae:5e:b5:87:c3:a4:da:0b:06: 31:f7:3b:03:18:1f:fe:40:5f:f7:3e:43:36:5c:7f: 29:e3:75:2d:7a:5c:7a:4b:4f:b8:c3:6f:b8:a2:af: 21:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:E5:32:4F:DC:7A:24:66:0B:60:D9:4C:A4:3F:E6:F0:25:9C:67:40 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:d5:0b:4a:66:fb:fa:39:e7:35:36:68:d7:fa:20:19:48:c0: d9:65:7d:81:f0:19:e8:06:b1:e9:9c:8d:51:38:8d:c3:4d:c6: 9c:9e:bf:30:bf:01:e5:2a:fa:5e:e3:7e:57:10:46:54:a6:5d: ff:e0:57:da:7c:6f:2b:6f:a3:1b:1f:7e:fa:8a:01:53:3c:ce: d9:85:77:70:88:da:ae:2e:84:ed:8e:17:6b:ea:c6:28:24:42: 11:34:92:c5:78:10:aa:59:94:5f:b0:f2:75:37:59:11:81:51: 60:77:9b:72:86:76:33:fe:34:d8:5d:65:6a:c5:44:a6:f2:78: 74:c8:ce:a6:57:7f:bf:98:fa:37:37:61:30:db:a6:3f:e6:26: 67:12:f1:e4:67:c5:be:73:cc:c2:17:40:56:52:73:27:fc:52: d8:46:e9:4a:d3:44:7f:9a:4a:fb:64:0c:68:8c:dd:81:60:e6: 5b:82:1f:c3:11:62:b1:26:24:d5:6f:02:c5:0e:e7:a9:a0:92: 13:1b:1f:07:56:b2:6f:b4:7c:c0:ba:11:4e:98:db:73:9a:26: 29:89:db:20:2a:bc:a5:da:f0:00:cc:fc:b4:98:b9:64:0c:f7: 2f:8b:74:2c:38:60:9a:d0:fc:d4:18:71:7e:3c:37:8c:fc:a9: 0b:b7:b3:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9Ix4Pgvf4Z99Kg3oduj7JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjUxMjIwMTkwMTEwWhcNMjUxMjIxMTkwMTEwWjAzMTEwLwYDVQQD EyhmZGU1MzI0ZmRjN2EyNDY2MGI2MGQ5NGNhNDNmZTZmMDI1OWM2NzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApByB/SkE7cc6UmUvfctH2xmBFMzW Y05dnP25wLbJjbOtDGDt58erVwxZ/ETKlt1E2kIe2sSf+XFtsutJhB/rvQjvfMrM wWfETtfKDcpY+U+vxrUTrDamTE2YHRbAagjBd377I6PHQoDRdwWp+7UJKWIKD2Jc 485FRDG5fSNO9a5GwgEPUFGS7ht9oyEh12bd96EN/DRslZIWWFv0vdnwXOw+8/Lh OYc/OGXLTDXaEzQSbBbftr3iHTRnv4dyNjMn9Zxh2tPPPuSK7NfB8myWRyXRx3Hx RmGuXrWHw6TaCwYx9zsDGB/+QF/3PkM2XH8p43Utelx6S0+4w2+4oq8hmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3lMk/ceiRmC2DZTKQ/5vAlnGdAMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJtULSmb7 +jnnNTZo1/ogGUjA2WV9gfAZ6Aax6ZyNUTiNw03GnJ6/ML8B5Sr6XuN+VxBGVKZd /+BX2nxvK2+jGx9++ooBUzzO2YV3cIjari6E7Y4Xa+rGKCRCETSSxXgQqlmUX7Dy dTdZEYFRYHebcoZ2M/402F1lasVEpvJ4dMjOpld/v5j6NzdhMNumP+YmZxLx5GfF vnPMwhdAVlJzJ/xS2EbpStNEf5pK+2QMaIzdgWDmW4IfwxFisSYk1W8CxQ7nqaCS ExsfB1ayb7R8wLoRTpjbc5omKYnbICq8pdrwAMz8tJi5ZAz3L4t0LDhgmtD81Bhx fjw3jPypC7ezPg== -----END CERTIFICATE-----Generated at Sat Dec 20 21:05:00 2025 by rpki-client