This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json) Hash identifier: QG0DA8yd/2x98cVoY7y3slECz5Aqgt0xqCtmeN5ay30= Subject key identifier: 07:16:F5:2C:8B:7D:C4:02:49:89:7F:01:B7:CC:93:7B:50:B0:6D:86 Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Certificate serial: 019B44378C97292668C253C1E52EDFDF208C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft Manifest number: 065B Signing time: Mon 22 Dec 2025 04:00:49 +0000 Manifest this update: Mon 22 Dec 2025 04:00:49 +0000 Manifest next update: Tue 23 Dec 2025 04:00:49 +0000 Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: qwxzwtIEvx0lkkTHG53MtrqMULQYIFeSifHLWaKi1Uo=) 2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 04:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:37:8c:97:29:26:68:c2:53:c1:e5:2e:df:df:20:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Validity Not Before: Dec 22 04:00:49 2025 GMT Not After : Dec 23 04:00:49 2025 GMT Subject: CN=0716f52c8b7dc40249897f01b7cc937b50b06d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:59:8d:76:4c:7a:42:03:f9:3d:03:ca:16: 20:cd:0a:ac:11:a5:38:bb:89:bf:a3:89:a0:b0:36: b8:8c:c2:22:61:2e:a8:76:33:ed:33:b5:89:53:bf: 93:d8:5f:c9:79:42:ca:9d:79:7d:00:a3:87:35:e4: 96:f9:fd:e9:e3:92:e8:45:14:78:18:8d:06:cc:39: d7:21:3e:1c:ff:a6:db:90:f4:00:f3:bf:07:fa:8e: 17:b3:8f:34:55:8b:4f:ae:92:95:0e:63:8c:ff:cd: 2e:c0:75:33:77:6c:61:4e:c6:9b:41:e8:5f:94:3f: 5d:e8:70:be:3f:ae:85:78:9a:c5:78:b2:83:2d:5b: b4:a3:da:03:81:fd:17:ed:5b:23:94:7c:fd:6f:8b: cc:bf:30:e9:ee:d8:bb:42:71:d4:1a:e9:22:61:4b: 92:f1:dc:90:bc:5d:f1:18:d0:cd:e1:53:53:7b:a6: d1:91:b0:d2:d5:4c:f6:cc:b0:fe:3c:aa:20:83:1d: 63:20:7a:df:b1:5f:fc:4d:77:18:9c:97:03:e3:95: c4:fc:5b:e4:c8:09:b9:5f:bb:e3:be:e3:52:5f:cd: 5f:f5:0a:cd:c1:cc:56:04:9e:bb:a2:85:11:7f:e9: 01:28:e2:5e:94:48:76:ef:51:c7:e3:66:c5:45:e1: 43:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:16:F5:2C:8B:7D:C4:02:49:89:7F:01:B7:CC:93:7B:50:B0:6D:86 X509v3 Authority Key Identifier: keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:29:92:1b:09:56:cf:4c:bd:50:d0:5d:4f:1a:a0:f1:d0:ec: 59:f5:32:1f:cd:98:d6:95:af:87:af:d5:4f:c4:2e:ba:91:d1: df:9d:e3:5b:41:54:5c:dc:a6:e5:5f:d2:ac:f9:b3:f1:df:dd: ac:0d:c2:a1:20:17:b4:22:31:48:b8:30:22:a5:a1:ad:50:e7: 39:ea:c2:5a:9d:87:f4:f4:87:c9:8a:20:e4:04:74:7b:36:1e: 4d:cb:83:08:96:cf:23:dc:13:4c:14:ee:d6:e4:06:9c:e6:74: 54:22:8e:1f:ae:92:a4:19:d6:86:94:db:fc:ab:49:22:72:7e: c5:0f:32:82:10:fb:77:8f:a1:41:6f:e4:1a:bb:e8:d9:54:13: 11:ac:e3:c1:46:49:7c:4a:14:42:13:df:3a:9e:e6:2e:49:a9: 04:52:fd:89:1f:1c:a1:32:bd:e3:3f:56:25:37:c0:d3:d2:a2: f8:fd:29:49:17:fb:5b:aa:6d:dc:79:55:4f:f5:36:64:26:41: 18:83:7b:a8:c2:95:4d:45:a0:11:be:b0:0a:6a:f9:35:6e:3f: 16:d0:d4:f9:33:b8:4c:23:61:c1:ea:e1:2a:c3:9a:fe:03:39: 26:65:8a:d6:6a:91:c1:ec:52:2e:bd:da:4f:7e:90:26:b1:8a: e7:3b:f2:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEN4yXKSZowlPB5S7f3yCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy ZDIxNWYwHhcNMjUxMjIyMDQwMDQ5WhcNMjUxMjIzMDQwMDQ5WjAzMTEwLwYDVQQD EygwNzE2ZjUyYzhiN2RjNDAyNDk4OTdmMDFiN2NjOTM3YjUwYjA2ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZpZjXZMekID+T0DyhYgzQqsEaU4 u4m/o4mgsDa4jMIiYS6odjPtM7WJU7+T2F/JeULKnXl9AKOHNeSW+f3p45LoRRR4 GI0GzDnXIT4c/6bbkPQA878H+o4Xs480VYtPrpKVDmOM/80uwHUzd2xhTsabQehf lD9d6HC+P66FeJrFeLKDLVu0o9oDgf0X7VsjlHz9b4vMvzDp7ti7QnHUGukiYUuS 8dyQvF3xGNDN4VNTe6bRkbDS1Uz2zLD+PKoggx1jIHrfsV/8TXcYnJcD45XE/Fvk yAm5X7vjvuNSX81f9QrNwcxWBJ67ooURf+kBKOJelEh271HH42bFReFD5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcW9SyLfcQCSYl/AbfMk3tQsG2GMB8GA1UdIwQY MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjymSGwlW z0y9UNBdTxqg8dDsWfUyH82Y1pWvh6/VT8QuupHR353jW0FUXNym5V/SrPmz8d/d rA3CoSAXtCIxSLgwIqWhrVDnOerCWp2H9PSHyYog5AR0ezYeTcuDCJbPI9wTTBTu 1uQGnOZ0VCKOH66SpBnWhpTb/KtJInJ+xQ8yghD7d4+hQW/kGrvo2VQTEazjwUZJ fEoUQhPfOp7mLkmpBFL9iR8coTK94z9WJTfA09Ki+P0pSRf7W6pt3HlVT/U2ZCZB GIN7qMKVTUWgEb6wCmr5NW4/FtDU+TO4TCNhwerhKsOa/gM5JmWK1mqRwexSLr3a T36QJrGK5zvyeA== -----END CERTIFICATE-----Generated at Mon Dec 22 13:56:35 2025 by rpki-client