This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json) Hash identifier: +sYDk7Ezu8bXp5eJkHaRIRCt+k+X0r+68HHzGT8uPAI= Subject key identifier: 22:3F:A6:23:69:B3:C0:2C:5F:BE:F4:FC:9F:B0:F2:C4:B6:4F:2F:30 Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Certificate serial: 019B4FCDC5ABD293C6B333A501F658AC84DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft Manifest number: 0661 Signing time: Wed 24 Dec 2025 10:00:44 +0000 Manifest this update: Wed 24 Dec 2025 10:00:44 +0000 Manifest next update: Thu 25 Dec 2025 10:00:44 +0000 Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: Zl7TpncJ/XlVRZtyGC5rR2aWR4G1s0T9HU+A56BdK6U=) 2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Dec 2025 09:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:4f:cd:c5:ab:d2:93:c6:b3:33:a5:01:f6:58:ac:84:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Validity Not Before: Dec 24 10:00:44 2025 GMT Not After : Dec 25 10:00:44 2025 GMT Subject: CN=223fa62369b3c02c5fbef4fc9fb0f2c4b64f2f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6b:87:2f:d5:ea:a6:e6:dc:55:0e:12:8f:1c: b3:51:d6:85:2b:44:e5:e6:66:ee:9a:52:26:3a:a1: dc:bf:0d:cc:b8:36:e7:0a:81:fa:45:54:63:e8:3b: 50:01:cb:df:88:2a:09:9c:86:d3:81:46:5b:55:77: b1:41:4b:f9:cd:bd:c4:77:4f:7c:b0:71:a4:9f:0d: 17:6a:57:9f:7a:8f:ad:ff:3d:22:ab:00:98:87:f1: 86:21:76:75:ee:00:89:7e:cc:63:ba:32:25:b6:8e: 13:b7:e7:34:da:c5:eb:be:04:17:ea:21:c6:98:82: 9c:7e:7f:79:08:3a:32:59:30:00:36:53:6f:f4:cf: 47:05:3b:0b:54:5a:f0:fd:5c:06:36:a6:7e:9f:da: ba:aa:c0:a8:06:fa:c4:fe:1e:4d:ac:da:77:fb:c5: cd:1f:20:d0:7d:77:17:f7:29:11:48:10:11:f9:22: ce:58:72:96:18:b7:8b:10:2b:a4:a3:fd:60:2f:79: 5a:4d:74:89:31:20:bc:a7:cb:b1:ad:b3:d8:15:80: ac:87:44:f3:c4:b1:9a:0d:6b:c7:16:e2:2f:3a:ac: fe:9e:e9:b0:8b:b9:70:04:27:44:7b:c1:72:68:9b: 88:28:9e:11:0f:d3:6a:02:cd:b5:96:7c:fc:aa:47: c9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:3F:A6:23:69:B3:C0:2C:5F:BE:F4:FC:9F:B0:F2:C4:B6:4F:2F:30 X509v3 Authority Key Identifier: keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:c5:8d:58:1d:98:f8:28:60:6c:01:11:8d:e3:a2:e2:a8:1c: 7f:d4:9d:0d:78:79:49:09:45:38:c7:4a:01:7f:fc:f9:c9:81: 91:b5:a9:3c:83:9a:57:24:75:38:e6:1d:86:06:67:cd:dc:9e: 22:e7:3a:43:f0:e1:85:19:b6:9f:f0:10:3a:a7:b6:2d:7e:9e: 88:0b:ef:60:a1:02:b3:62:d3:4b:4a:f2:de:27:02:6d:d4:7e: d0:aa:36:e9:d5:ad:24:26:86:07:22:58:bb:42:ad:90:4d:1d: 81:b2:06:89:00:32:39:e2:a3:50:e8:67:dd:a3:08:01:e5:cd: 1e:a2:f2:94:1f:6b:9d:a9:ad:37:85:a8:de:96:75:c2:d8:ec: ee:cd:9f:83:b8:69:74:6c:67:6b:7e:13:49:fe:09:48:1a:d5: ea:e7:ad:bf:e0:d2:04:90:88:2d:2e:88:13:c7:c4:36:de:b5: 15:81:73:cf:89:65:b1:b4:b6:14:54:f6:41:e7:f5:96:58:bb: b0:3d:42:86:5a:36:5a:4e:67:88:00:c9:1a:a2:ed:41:d5:3c: e2:f6:b3:81:8b:e2:55:b6:32:f2:c6:58:58:f3:e5:84:d3:38: af:e7:fa:c7:c7:f9:c6:5e:86:80:a6:9b:67:12:5c:08:7b:dd: 98:1a:87:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtPzcWr0pPGszOlAfZYrITaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy ZDIxNWYwHhcNMjUxMjI0MTAwMDQ0WhcNMjUxMjI1MTAwMDQ0WjAzMTEwLwYDVQQD EygyMjNmYTYyMzY5YjNjMDJjNWZiZWY0ZmM5ZmIwZjJjNGI2NGYyZjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmuHL9XqpubcVQ4SjxyzUdaFK0Tl 5mbumlImOqHcvw3MuDbnCoH6RVRj6DtQAcvfiCoJnIbTgUZbVXexQUv5zb3Ed098 sHGknw0Xalefeo+t/z0iqwCYh/GGIXZ17gCJfsxjujIlto4Tt+c02sXrvgQX6iHG mIKcfn95CDoyWTAANlNv9M9HBTsLVFrw/VwGNqZ+n9q6qsCoBvrE/h5NrNp3+8XN HyDQfXcX9ykRSBAR+SLOWHKWGLeLECuko/1gL3laTXSJMSC8p8uxrbPYFYCsh0Tz xLGaDWvHFuIvOqz+numwi7lwBCdEe8FyaJuIKJ4RD9NqAs21lnz8qkfJpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCI/piNps8AsX770/J+w8sS2Ty8wMB8GA1UdIwQY MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANsWNWB2Y +ChgbAERjeOi4qgcf9SdDXh5SQlFOMdKAX/8+cmBkbWpPIOaVyR1OOYdhgZnzdye Iuc6Q/DhhRm2n/AQOqe2LX6eiAvvYKECs2LTS0ry3icCbdR+0Ko26dWtJCaGByJY u0KtkE0dgbIGiQAyOeKjUOhn3aMIAeXNHqLylB9rnamtN4Wo3pZ1wtjs7s2fg7hp dGxna34TSf4JSBrV6uetv+DSBJCILS6IE8fENt61FYFzz4llsbS2FFT2Qef1lli7 sD1Chlo2Wk5niADJGqLtQdU84vazgYviVbYy8sZYWPPlhNM4r+f6x8f5xl6GgKab ZxJcCHvdmBqHcw== -----END CERTIFICATE-----Generated at Wed Dec 24 11:41:22 2025 by rpki-client