This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json) Hash identifier: CHBjKBGjXBtGR0aEhWIUD/5cPnFk5O/zWifBUQqZbfg= Subject key identifier: AF:74:DB:68:16:FE:5C:FD:D1:D2:9A:2B:6A:E4:CD:5B:63:D4:10:CF Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Certificate serial: 019B552B62D05792AA7EC9EBCAC5BB34BDEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft Manifest number: 1798 Signing time: Thu 25 Dec 2025 11:01:05 +0000 Manifest this update: Thu 25 Dec 2025 11:01:05 +0000 Manifest next update: Fri 26 Dec 2025 11:01:05 +0000 Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: cTlNNo6F62Cg9AVwrl42Ec+3K4+vkLDlyzbb6ryoSmw=) 2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 10:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:2b:62:d0:57:92:aa:7e:c9:eb:ca:c5:bb:34:bd:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Validity Not Before: Dec 25 11:01:05 2025 GMT Not After : Dec 26 11:01:05 2025 GMT Subject: CN=af74db6816fe5cfdd1d29a2b6ae4cd5b63d410cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7d:30:5f:26:70:a4:84:1c:57:e5:a6:1b:cf: 43:be:52:e3:b3:2d:28:35:91:e1:bd:30:d2:e1:a2: 7b:b1:f8:78:4b:d6:66:b7:e9:55:e9:a2:fb:4d:87: 26:74:1c:f4:99:75:0f:92:78:a8:5c:ac:a0:99:d6: 55:07:60:a4:25:44:e3:89:0d:1d:6f:34:c6:30:d4: d0:6f:4c:2a:99:15:3c:df:10:73:de:49:2a:d5:39: 5f:54:19:b4:5b:ef:c9:bc:fa:15:14:81:6e:a6:b9: 7b:bc:c1:aa:26:ff:a4:57:71:d1:d3:45:85:42:de: 8d:6d:29:01:ab:83:a5:4d:c3:67:d5:86:58:ee:6c: 0a:fb:f6:77:61:95:12:4b:0a:cc:11:67:18:82:f3: c3:1f:27:fc:4d:2e:0d:6c:0e:99:71:90:37:c3:6b: f4:4a:79:29:9e:b9:f2:5e:de:f4:a4:d2:b3:cf:69: d0:4c:ed:ff:73:41:80:2d:59:31:66:ec:20:8f:9f: b9:23:b6:18:ba:a2:04:d3:f4:fa:21:70:df:8d:6f: 87:19:11:ca:5b:1f:3e:aa:4b:7e:a3:c7:36:8a:81: 71:fe:90:79:02:7e:6f:ec:33:74:c5:19:99:88:01: 6e:be:eb:ef:b6:80:4b:54:d5:6a:ae:98:5b:9c:7a: 0f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:74:DB:68:16:FE:5C:FD:D1:D2:9A:2B:6A:E4:CD:5B:63:D4:10:CF X509v3 Authority Key Identifier: keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:2a:0b:41:d9:f8:ee:83:a3:6a:0a:7c:26:cc:58:e5:a5:ab: ab:78:f2:f5:9e:41:a8:63:84:a2:13:af:06:18:f0:bd:0d:ba: 18:ee:a1:72:81:b8:da:0c:66:46:43:2b:a8:2d:66:29:24:71: 72:23:fd:9a:64:22:4a:f4:8b:49:36:c2:32:6a:1e:e9:5d:95: dd:53:7d:1c:8b:be:b1:e0:2a:d7:70:eb:45:58:a9:da:6b:ee: cc:fe:07:7f:7f:45:3b:03:38:a5:97:dd:c8:89:ae:70:cd:d0: a6:90:71:3c:f7:d2:77:2c:57:6c:fc:81:31:aa:3c:39:a2:86: 48:5b:9b:e8:02:be:99:38:42:bc:45:6f:bb:62:3b:c9:57:4a: fc:b6:92:34:59:62:3b:17:03:b6:09:90:92:04:71:ef:6d:d5: ee:85:fa:fe:e4:b4:a2:a4:ec:b9:95:17:ce:29:66:59:83:52: 2b:c7:65:4b:57:72:86:99:08:41:e8:d0:0f:80:7e:92:4e:58: c7:0d:06:21:04:01:55:de:1e:e3:9c:43:52:52:f9:39:7a:2e: c3:ac:8c:22:c4:ab:c6:f5:05:a6:0c:2b:b5:eb:bb:3c:58:8d: f2:98:23:c4:ae:25:f3:ca:14:5d:90:7b:15:92:22:71:c5:9d: 2d:17:ac:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtVK2LQV5KqfsnrysW7NL3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGFjMzM0NDM4YTUzZDE4YWU0MGVmYzkzNjg3NjhiOTMx Y2ZhYzIwHhcNMjUxMjI1MTEwMTA1WhcNMjUxMjI2MTEwMTA1WjAzMTEwLwYDVQQD EyhhZjc0ZGI2ODE2ZmU1Y2ZkZDFkMjlhMmI2YWU0Y2Q1YjYzZDQxMGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX0wXyZwpIQcV+WmG89DvlLjsy0o NZHhvTDS4aJ7sfh4S9Zmt+lV6aL7TYcmdBz0mXUPknioXKygmdZVB2CkJUTjiQ0d bzTGMNTQb0wqmRU83xBz3kkq1TlfVBm0W+/JvPoVFIFuprl7vMGqJv+kV3HR00WF Qt6NbSkBq4OlTcNn1YZY7mwK+/Z3YZUSSwrMEWcYgvPDHyf8TS4NbA6ZcZA3w2v0 SnkpnrnyXt70pNKzz2nQTO3/c0GALVkxZuwgj5+5I7YYuqIE0/T6IXDfjW+HGRHK Wx8+qkt+o8c2ioFx/pB5An5v7DN0xRmZiAFuvuvvtoBLVNVqrphbnHoPywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9022gW/lz90dKaK2rkzVtj1BDPMB8GA1UdIwQY MBaAFH0KwzRDilPRiuQO/JNodouTHPrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzkt YjUxOWIxMzFiZjg1LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzktYjUxOWIxMzFiZjg1 LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkSoLQdn4 7oOjagp8JsxY5aWrq3jy9Z5BqGOEohOvBhjwvQ26GO6hcoG42gxmRkMrqC1mKSRx ciP9mmQiSvSLSTbCMmoe6V2V3VN9HIu+seAq13DrRVip2mvuzP4Hf39FOwM4pZfd yImucM3QppBxPPfSdyxXbPyBMao8OaKGSFub6AK+mThCvEVvu2I7yVdK/LaSNFli OxcDtgmQkgRx723V7oX6/uS0oqTsuZUXzilmWYNSK8dlS1dyhpkIQejQD4B+kk5Y xw0GIQQBVd4e45xDUlL5OXouw6yMIsSrxvUFpgwrteu7PFiN8pgjxK4l88oUXZB7 FZIiccWdLResXg== -----END CERTIFICATE-----Generated at Thu Dec 25 16:02:06 2025 by rpki-client