This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json) Hash identifier: Esi1j8CRO+cOYUWSozlxJpwC8myxurxpPBcwXtFEJBE= Subject key identifier: 3C:A5:4C:9E:49:C0:81:06:E0:51:ED:AB:09:99:31:63:04:34:00:16 Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0 Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0 Certificate serial: 019B3E6D31C967F1C6F3CCF0E16407ADB127 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft Manifest number: 0345 Signing time: Sun 21 Dec 2025 01:01:42 +0000 Manifest this update: Sun 21 Dec 2025 01:01:42 +0000 Manifest next update: Mon 22 Dec 2025 01:01:42 +0000 Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: HHpBmWcTwMEPt0yIndXRn7xiPOcAyvJjAT6GIIRjtHg=) 2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 19:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3e:6d:31:c9:67:f1:c6:f3:cc:f0:e1:64:07:ad:b1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0 Validity Not Before: Dec 21 01:01:42 2025 GMT Not After : Dec 22 01:01:42 2025 GMT Subject: CN=3ca54c9e49c08106e051edab0999316304340016 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:15:cb:35:b9:bb:7e:2b:cb:bb:9a:56:ca:db: 1c:00:f8:56:55:f1:14:85:ef:2f:e7:12:af:e9:0f: fe:1a:87:a3:6e:05:49:11:73:7b:cf:6f:86:a6:48: 16:49:9d:98:dc:bc:4d:10:ad:77:22:4c:5d:56:ba: e8:23:74:67:97:34:34:df:b1:ce:77:7d:bd:aa:90: 02:49:c4:b1:ff:b4:41:2a:06:a9:51:8e:ec:fa:4d: ab:e9:cf:22:2e:75:88:55:b8:07:41:e6:32:50:5b: 91:9d:0d:f1:5a:a9:92:03:c8:00:8f:78:8e:4a:fb: d0:a2:5c:17:c9:fe:4a:b0:83:5a:23:f0:df:d0:f4: a7:dc:b2:4b:d2:bd:0e:6b:d4:2a:b2:57:50:27:5e: 66:af:8d:09:db:9a:0e:e0:35:2a:06:e3:5b:c4:36: 0c:f3:ba:11:b2:cf:8a:70:59:76:51:d1:68:e2:38: a6:6a:76:03:85:5e:a1:c1:e8:9a:7e:f1:37:89:ee: ba:ac:38:28:34:dd:60:fc:7f:87:c2:38:e7:ca:b4: f1:a5:fa:af:f2:b2:81:47:02:4f:54:1a:35:87:c8: 5a:3e:03:ef:10:29:bd:8e:28:d9:35:96:a1:f6:99: ef:85:00:47:59:eb:e4:cf:c3:45:00:c0:4c:6d:62: a0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:4C:9E:49:C0:81:06:E0:51:ED:AB:09:99:31:63:04:34:00:16 X509v3 Authority Key Identifier: keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:2a:97:57:87:e8:c3:64:3a:60:a3:22:64:c2:e3:64:bd:29: 92:7b:20:87:93:2e:b7:2d:55:3d:4e:40:c0:99:43:e7:23:09: cc:62:64:a0:9f:bc:03:7c:28:64:5e:df:e8:48:f2:40:56:d1: 20:74:d3:ff:7e:90:d2:fb:36:44:59:e9:35:82:99:22:bd:83: dc:73:80:48:a5:71:38:18:51:21:9c:07:12:5c:2e:df:c7:5e: 40:09:33:75:c8:39:7e:b8:13:b4:b9:b7:40:9a:74:77:45:11: 19:8c:8d:56:1d:0a:f2:4e:b5:e5:a5:12:55:3b:05:df:03:b8: 67:a0:b1:d2:82:c0:f6:41:d0:60:4e:8d:e1:7f:0a:6e:2e:39: 57:12:86:67:19:0a:6a:06:7b:b4:98:26:67:69:d3:d2:22:a8: 14:57:e6:7a:ac:fe:3b:6e:e6:0b:2f:a3:ff:d9:1b:1b:2b:b8: 4b:9d:1b:e7:70:fb:fb:63:9f:b2:45:67:da:10:55:c4:96:bd: a0:44:67:8d:93:76:b2:ca:ee:10:28:37:79:a0:ca:eb:d7:bc: 94:5b:ff:d0:8e:fa:7a:f0:06:0a:1b:ea:62:18:06:fe:cf:c9: bc:08:72:8b:ad:70:70:4c:58:5b:e6:af:3d:f1:ea:4a:b7:0d: 93:db:1a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs+bTHJZ/HG88zw4WQHrbEnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YWY4ZmZhNjQ0ZTQwNDFmZGFkMGZjOTZkNjI3MmNiNDAx N2E4YjAwHhcNMjUxMjIxMDEwMTQyWhcNMjUxMjIyMDEwMTQyWjAzMTEwLwYDVQQD EygzY2E1NGM5ZTQ5YzA4MTA2ZTA1MWVkYWIwOTk5MzE2MzA0MzQwMDE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBXLNbm7fivLu5pWytscAPhWVfEU he8v5xKv6Q/+GoejbgVJEXN7z2+GpkgWSZ2Y3LxNEK13IkxdVrroI3RnlzQ037HO d329qpACScSx/7RBKgapUY7s+k2r6c8iLnWIVbgHQeYyUFuRnQ3xWqmSA8gAj3iO SvvQolwXyf5KsINaI/Df0PSn3LJL0r0Oa9QqsldQJ15mr40J25oO4DUqBuNbxDYM 87oRss+KcFl2UdFo4jimanYDhV6hweiafvE3ie66rDgoNN1g/H+HwjjnyrTxpfqv 8rKBRwJPVBo1h8haPgPvECm9jijZNZah9pnvhQBHWevkz8NFAMBMbWKgUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDylTJ5JwIEG4FHtqwmZMWMENAAWMB8GA1UdIwQY MBaAFBavj/pkTkBB/a0PyW1icstAF6iwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2It NWExNDM3MjQ1N2Y1LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2ItNWExNDM3MjQ1N2Y1 LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfyqXV4fo w2Q6YKMiZMLjZL0pknsgh5Muty1VPU5AwJlD5yMJzGJkoJ+8A3woZF7f6EjyQFbR IHTT/36Q0vs2RFnpNYKZIr2D3HOASKVxOBhRIZwHElwu38deQAkzdcg5frgTtLm3 QJp0d0URGYyNVh0K8k615aUSVTsF3wO4Z6Cx0oLA9kHQYE6N4X8Kbi45VxKGZxkK agZ7tJgmZ2nT0iKoFFfmeqz+O27mCy+j/9kbGyu4S50b53D7+2OfskVn2hBVxJa9 oERnjZN2ssruECg3eaDK69e8lFv/0I76evAGChvqYhgG/s/JvAhyi61wcExYW+av PfHqSrcNk9saEQ== -----END CERTIFICATE-----Generated at Sun Dec 21 04:51:59 2025 by rpki-client