This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: 1Hlg+5ffhKqWfXDbUzvu6VzK0oR7pX9sdm6qXyUm2oQ= Subject key identifier: 1F:BA:E4:C2:76:0F:99:0F:AD:67:2B:A8:5C:C9:C8:E4:05:B4:55:A0 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B292F40B715EA8F9B335C8AA359473C8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1791 Signing time: Tue 16 Dec 2025 22:02:01 +0000 Manifest this update: Tue 16 Dec 2025 22:02:01 +0000 Manifest next update: Wed 17 Dec 2025 22:02:01 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: xEmtRKI0at4WiDK0E2y7gm6JkKFi1bJ69aT7db7t7p8=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:29:2f:40:b7:15:ea:8f:9b:33:5c:8a:a3:59:47:3c:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Dec 16 22:02:01 2025 GMT Not After : Dec 17 22:02:01 2025 GMT Subject: CN=1fbae4c2760f990fad672ba85cc9c8e405b455a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:12:3f:17:9b:b5:6d:05:3e:35:76:4f:92:dc: c9:31:bd:70:2e:aa:f4:6e:a2:c9:f6:11:27:30:39: f6:8c:7d:50:ae:e6:45:e4:6d:68:73:6d:d4:ae:70: 3a:0c:c9:02:a6:68:09:51:9f:e5:ba:b4:d4:4b:16: 0e:4f:7a:1e:83:ba:04:e8:11:c0:ed:09:7d:26:ce: 8e:34:8e:9d:fc:98:33:91:a6:0a:40:af:fe:12:27: df:2a:db:f8:d8:7f:2e:bd:92:bf:9b:46:07:52:3d: 77:41:c2:b6:fe:dd:75:21:6e:84:21:67:73:4d:08: 7e:85:48:9e:fb:c3:51:a9:a5:5f:d5:24:d0:f7:27: 10:22:ca:ba:7d:44:fc:db:70:4e:20:4c:97:b6:86: 55:6f:50:92:a2:b5:68:d5:d8:9f:be:17:5a:78:79: 03:10:72:f3:cc:0d:cb:df:6f:ed:64:c2:15:12:a2: 14:ab:4c:e4:65:93:b9:ff:50:a4:6c:18:08:24:5c: e5:f8:eb:40:f4:4d:ae:32:33:fe:37:2e:05:04:97: 40:1e:86:48:b7:06:b0:cc:7c:d7:2e:b4:b3:c0:6b: 5d:dc:ec:54:3c:8a:a5:b4:a5:dd:ec:49:3c:5c:dc: ac:0d:43:e0:16:df:ed:6d:c5:f3:0d:be:3e:cc:a7: 3b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BA:E4:C2:76:0F:99:0F:AD:67:2B:A8:5C:C9:C8:E4:05:B4:55:A0 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c2:d0:b9:1e:54:9e:53:7e:e7:e2:2e:ef:77:c3:cc:ec:d5: e2:be:2d:29:53:6a:42:8c:3f:fc:67:39:9b:ce:9e:44:03:00: c0:9a:90:12:dc:41:73:27:90:9e:8d:52:80:1a:f8:bc:69:88: 7b:73:bf:80:9f:5e:bd:66:b2:f1:2c:24:c7:0e:d8:68:6b:1d: 03:16:db:4b:d7:8c:9b:2e:57:73:ae:d6:a9:cf:28:12:85:ea: 26:ee:28:7a:18:21:52:9d:09:c5:97:52:d0:bd:e5:d7:48:ca: 3f:9b:9b:33:63:f3:09:43:4f:33:89:6e:53:85:36:4d:1f:b5: 8c:86:8e:1d:a3:7a:6d:61:00:5c:dc:51:ae:58:77:de:1e:10: 4a:b0:1e:77:9e:66:77:49:9f:c4:e7:4e:aa:41:2c:25:0f:a5: 08:0b:8a:e9:fb:79:60:76:c9:83:31:ba:06:3f:ef:53:77:c1: 26:9b:cb:d0:fe:83:41:83:ae:21:70:27:47:0e:81:fa:f4:19: cb:49:d4:33:30:1b:7a:a1:93:df:eb:90:8b:e5:16:14:fc:25: cb:4a:ae:90:6c:4e:36:11:94:3b:e2:6b:86:9d:4a:18:f2:79: ac:fc:fd:93:7b:7e:67:7a:45:ca:57:d6:6f:3a:9e:a6:8e:4a: a5:c9:f8:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZspL0C3FeqPmzNciqNZRzyKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMjE2MjIwMjAxWhcNMjUxMjE3MjIwMjAxWjAzMTEwLwYDVQQD EygxZmJhZTRjMjc2MGY5OTBmYWQ2NzJiYTg1Y2M5YzhlNDA1YjQ1NWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxI/F5u1bQU+NXZPktzJMb1wLqr0 bqLJ9hEnMDn2jH1QruZF5G1oc23UrnA6DMkCpmgJUZ/lurTUSxYOT3oeg7oE6BHA 7Ql9Js6ONI6d/JgzkaYKQK/+EiffKtv42H8uvZK/m0YHUj13QcK2/t11IW6EIWdz TQh+hUie+8NRqaVf1STQ9ycQIsq6fUT823BOIEyXtoZVb1CSorVo1difvhdaeHkD EHLzzA3L32/tZMIVEqIUq0zkZZO5/1CkbBgIJFzl+OtA9E2uMjP+Ny4FBJdAHoZI twawzHzXLrSzwGtd3OxUPIqltKXd7Ek8XNysDUPgFt/tbcXzDb4+zKc7uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB+65MJ2D5kPrWcrqFzJyOQFtFWgMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMLQuR5U nlN+5+Iu73fDzOzV4r4tKVNqQow//Gc5m86eRAMAwJqQEtxBcyeQno1SgBr4vGmI e3O/gJ9evWay8Swkxw7YaGsdAxbbS9eMmy5Xc67Wqc8oEoXqJu4oehghUp0JxZdS 0L3l10jKP5ubM2PzCUNPM4luU4U2TR+1jIaOHaN6bWEAXNxRrlh33h4QSrAed55m d0mfxOdOqkEsJQ+lCAuK6ft5YHbJgzG6Bj/vU3fBJpvL0P6DQYOuIXAnRw6B+vQZ y0nUMzAbeqGT3+uQi+UWFPwly0qukGxONhGUO+Jrhp1KGPJ5rPz9k3t+Z3pFylfW bzqepo5Kpcn4zw== -----END CERTIFICATE-----Generated at Wed Dec 17 00:31:49 2025 by rpki-client