This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json) Hash identifier: KTKApNG/iqJ3nOuzzJOzsiJh9xnqLfcL2ZRG9rdsBc0= Subject key identifier: AE:90:F8:30:9D:8B:EC:D5:6E:5E:A1:97:C2:D3:7B:BA:7E:5D:7C:86 Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Certificate serial: 019B3CECB225E5235DD6E04EF8961EE66E27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft Manifest number: 046F Signing time: Sat 20 Dec 2025 18:01:43 +0000 Manifest this update: Sat 20 Dec 2025 18:01:43 +0000 Manifest next update: Sun 21 Dec 2025 18:01:43 +0000 Files and hashes: 1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=) 2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: 4ES+grvR86KZYkOUDn2C3WfVtpPG5IUg/jYVi5kC9Kk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 18:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:ec:b2:25:e5:23:5d:d6:e0:4e:f8:96:1e:e6:6e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Validity Not Before: Dec 20 18:01:43 2025 GMT Not After : Dec 21 18:01:43 2025 GMT Subject: CN=ae90f8309d8becd56e5ea197c2d37bba7e5d7c86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c5:bf:ca:66:ad:a1:72:d5:33:3a:4a:88:5f: b9:1d:35:a4:66:ae:c5:77:1c:bc:eb:16:5d:e2:14: 28:5e:58:6c:56:90:ee:e5:e8:00:f5:ad:72:3d:81: 87:57:87:dd:17:f0:92:b6:7f:50:9f:f0:d7:65:28: 60:7e:19:60:79:ef:2c:f7:8a:83:d1:fe:ff:45:30: 38:51:fa:61:a4:5d:d8:89:17:1c:6f:23:0e:a4:a2: c0:34:d1:f8:bd:0c:11:6a:51:81:07:5f:45:c8:a3: a2:ae:eb:ef:fc:dc:bc:c7:84:11:25:0c:61:dc:ec: 21:e1:50:22:e1:43:89:2e:f2:7a:53:78:80:4d:5f: 68:4f:31:56:78:1b:ca:4f:32:cb:4f:5d:9d:08:73: a2:c4:f2:fe:03:03:71:5b:72:7a:8b:6e:d6:3c:a4: 7a:58:40:42:b4:b0:1d:21:62:15:ed:af:0c:be:ae: 01:20:0c:0f:fb:dc:b0:27:72:3f:68:8f:c4:1e:d7: 58:6e:9d:89:9d:72:c7:95:04:70:76:34:5f:75:ac: 91:c0:06:59:d8:39:96:16:6b:ee:b0:7a:bd:62:b4: 50:d6:8e:f2:25:62:4a:2b:7a:55:82:bf:94:91:04: b0:7a:6d:d3:1a:2e:ca:82:48:51:3a:7b:9e:5d:82: 3c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:90:F8:30:9D:8B:EC:D5:6E:5E:A1:97:C2:D3:7B:BA:7E:5D:7C:86 X509v3 Authority Key Identifier: keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:5f:4b:ca:e0:a4:d5:a2:95:f7:8e:d8:dc:8a:62:f0:66:79: a5:99:99:ff:cb:e4:bd:e4:4d:1f:f0:f7:2b:d3:d0:9c:a7:36: 88:b9:b7:e9:09:37:02:13:5e:1b:78:6d:db:50:3c:2c:22:98: 26:27:58:9b:28:24:19:28:fa:ba:fc:5c:c0:5d:cc:65:c5:d8: 0e:89:1c:2d:a2:5f:ed:6d:eb:8c:0f:4b:89:d8:12:4d:db:16: 1b:7d:cd:6f:4b:70:42:13:04:c5:57:fd:89:f8:11:ff:61:2c: 56:e0:b3:91:31:f8:78:e9:82:82:ae:f7:b5:7b:6c:54:15:2f: 7e:34:bf:6a:cf:53:f9:2e:99:d3:cb:07:10:0f:70:22:bb:b0: 8b:21:a9:7c:61:91:29:61:eb:90:21:7c:9e:54:d4:c7:e5:98: 4c:83:bb:6c:9f:ea:70:e7:c4:2a:ce:fc:34:06:54:64:89:40: a6:74:a8:6a:31:b0:88:62:1d:29:61:70:ec:eb:46:dd:a5:b0: 6c:f5:2c:0d:c8:d3:db:05:a4:c6:e8:79:e6:0b:61:f4:a7:fa: ff:c6:67:a4:90:da:36:62:1a:33:7c:6f:a1:8e:39:46:1a:75: f1:44:16:24:c6:ce:a8:f0:3a:95:dd:01:90:98:72:6d:14:a8: c1:f2:b9:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs87LIl5SNd1uBO+JYe5m4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1 N2E5Y2MwHhcNMjUxMjIwMTgwMTQzWhcNMjUxMjIxMTgwMTQzWjAzMTEwLwYDVQQD EyhhZTkwZjgzMDlkOGJlY2Q1NmU1ZWExOTdjMmQzN2JiYTdlNWQ3Yzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsW/ymatoXLVMzpKiF+5HTWkZq7F dxy86xZd4hQoXlhsVpDu5egA9a1yPYGHV4fdF/CStn9Qn/DXZShgfhlgee8s94qD 0f7/RTA4UfphpF3YiRccbyMOpKLANNH4vQwRalGBB19FyKOiruvv/Ny8x4QRJQxh 3Owh4VAi4UOJLvJ6U3iATV9oTzFWeBvKTzLLT12dCHOixPL+AwNxW3J6i27WPKR6 WEBCtLAdIWIV7a8Mvq4BIAwP+9ywJ3I/aI/EHtdYbp2JnXLHlQRwdjRfdayRwAZZ 2DmWFmvusHq9YrRQ1o7yJWJKK3pVgr+UkQSwem3TGi7KgkhROnueXYI8owIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6Q+DCdi+zVbl6hl8LTe7p+XXyGMB8GA1UdIwQY MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARV9LyuCk 1aKV947Y3Ipi8GZ5pZmZ/8vkveRNH/D3K9PQnKc2iLm36Qk3AhNeG3ht21A8LCKY JidYmygkGSj6uvxcwF3MZcXYDokcLaJf7W3rjA9LidgSTdsWG33Nb0twQhMExVf9 ifgR/2EsVuCzkTH4eOmCgq73tXtsVBUvfjS/as9T+S6Z08sHEA9wIruwiyGpfGGR KWHrkCF8nlTUx+WYTIO7bJ/qcOfEKs78NAZUZIlApnSoajGwiGIdKWFw7OtG3aWw bPUsDcjT2wWkxuh55gth9Kf6/8ZnpJDaNmIaM3xvoY45Rhp18UQWJMbOqPA6ld0B kJhybRSowfK5Qg== -----END CERTIFICATE-----Generated at Sun Dec 21 02:25:38 2025 by rpki-client