This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft File: fQL6LFuiiSBF581Qpa39VNbbuMI.mft (raw, json) Hash identifier: GuZLKqDy+mt03GB5WA8S8GOX0oCuQRFW9O8BhbAA2Pk= Subject key identifier: A5:5A:9F:ED:BF:FF:6F:86:C5:C1:F9:C1:9A:5F:35:5B:19:0C:C9:4D Authority key identifier: 7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 Certificate issuer: /CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Certificate serial: 019B35A030354BFFC1E2FED01787899BF775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft Manifest number: 1662 Signing time: Fri 19 Dec 2025 08:00:49 +0000 Manifest this update: Fri 19 Dec 2025 08:00:49 +0000 Manifest next update: Sat 20 Dec 2025 08:00:49 +0000 Files and hashes: 1: D0FtQbvZQzXxktB27DUgaEKlwyA.roa (hash: TJTUE8/n7jdIuoCoqw/ggE/DDwa5ne0vVYVe1eoGnag=) 2: RNOXkvXJ_ycI8OmwcuHSmaLAtH4.roa (hash: LUqOAenIf0vYCqR2aBBDyfZ5SWi7hY4GyrNgtlhdeZw=) 3: fQL6LFuiiSBF581Qpa39VNbbuMI.crl (hash: mrIjqZZnyE9EbF+gqvIOxgnNbv5ryw50nawcgT9ZfG0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:a0:30:35:4b:ff:c1:e2:fe:d0:17:87:89:9b:f7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d02fa2c5ba2892045e7cd50a5adfd54d6dbb8c2 Validity Not Before: Dec 19 08:00:49 2025 GMT Not After : Dec 20 08:00:49 2025 GMT Subject: CN=a55a9fedbfff6f86c5c1f9c19a5f355b190cc94d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:93:2b:f0:ea:80:78:87:eb:24:f3:de:8e: 15:77:2b:59:a4:09:43:ae:3a:b2:58:a0:1f:cd:40: 5b:84:50:91:9c:62:a3:ba:93:c3:43:f3:29:9f:04: a1:36:b6:b6:7a:11:f9:04:eb:0c:bd:8c:81:96:d2: 97:f8:03:c2:8b:37:a2:dd:a0:57:b6:44:54:34:69: 21:5e:f8:b3:2d:ea:e1:f0:d0:82:c6:dc:5f:51:38: 4a:69:19:80:57:ae:99:c1:63:8f:e3:05:2e:94:e0: b4:42:d3:e6:28:d9:ab:de:08:09:ab:90:dc:02:c0: 7a:5d:de:16:f9:87:9b:7c:ba:b9:90:1b:9c:9b:1a: 1a:14:33:9a:10:43:33:fc:05:a5:e2:09:6e:1e:82: 3f:6e:9a:d2:72:17:48:db:9b:49:68:c8:79:b2:30: 9f:73:e0:5f:40:bd:d9:14:9a:9b:3f:0f:a4:30:a0: ba:34:5b:89:38:9c:51:70:40:e8:2e:05:09:fb:ed: b2:c1:a9:a0:f3:01:f9:25:39:42:44:53:31:64:d8: c4:12:98:60:e5:e5:f1:eb:5b:fc:ce:8f:be:94:8b: 19:4e:4f:58:4e:75:97:ad:52:24:ee:c0:a7:2f:78: 64:20:e0:9a:18:3f:4d:82:55:97:3e:0b:a7:9d:9f: 6c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:9F:ED:BF:FF:6F:86:C5:C1:F9:C1:9A:5F:35:5B:19:0C:C9:4D X509v3 Authority Key Identifier: keyid:7D:02:FA:2C:5B:A2:89:20:45:E7:CD:50:A5:AD:FD:54:D6:DB:B8:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQL6LFuiiSBF581Qpa39VNbbuMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/cce20b-4d5a-48f8-b88e-81039f3cf3fd/1/fQL6LFuiiSBF581Qpa39VNbbuMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:74:99:7f:9d:11:4f:d5:5c:76:57:5e:05:e8:df:00:41:13: b4:91:2b:e6:7b:30:37:c6:43:1d:d5:67:0c:36:ce:d9:b0:7c: d5:96:e2:df:9a:9a:eb:9e:70:b4:5e:d2:40:e3:27:61:59:c4: af:5b:34:84:cf:5c:4d:e0:1c:de:63:3d:0f:3f:77:47:ab:4a: 0a:8d:5e:12:b6:85:14:50:a5:4e:5a:77:aa:18:e2:5f:9b:8c: a8:83:d8:de:ed:44:3e:59:ba:0c:37:e0:7c:73:e6:f3:b0:a2: cd:c9:07:7f:23:ab:4f:81:d0:11:93:8e:79:8d:b8:ce:1f:b0: 47:4b:ab:91:41:0d:7a:1c:81:de:10:c9:d1:5b:2b:18:88:6a: 8e:0b:41:2a:13:ea:86:27:3f:0e:68:e2:fe:59:d9:1d:ac:92: dc:21:e3:a1:97:e0:fc:fe:d9:29:7e:e3:c5:f4:dd:7f:5a:56: 6a:16:a1:94:0a:cb:56:f9:31:b3:24:25:83:d8:3a:7c:f5:2e: 2f:f1:c3:0c:99:58:6c:41:fa:e0:a2:4c:87:99:61:cb:1b:ef: 7a:f6:d2:0d:03:a8:28:01:2e:79:ac:c2:e6:ae:b5:27:44:0b: 14:ea:0d:09:1f:7d:1e:27:f6:01:8e:3e:40:4d:23:ef:d6:3b: 0a:a3:e2:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1oDA1S//B4v7QF4eJm/d1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDJmYTJjNWJhMjg5MjA0NWU3Y2Q1MGE1YWRmZDU0ZDZk YmI4YzIwHhcNMjUxMjE5MDgwMDQ5WhcNMjUxMjIwMDgwMDQ5WjAzMTEwLwYDVQQD EyhhNTVhOWZlZGJmZmY2Zjg2YzVjMWY5YzE5YTVmMzU1YjE5MGNjOTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur2TK/DqgHiH6yTz3o4VdytZpAlD rjqyWKAfzUBbhFCRnGKjupPDQ/MpnwShNra2ehH5BOsMvYyBltKX+APCizei3aBX tkRUNGkhXvizLerh8NCCxtxfUThKaRmAV66ZwWOP4wUulOC0QtPmKNmr3ggJq5Dc AsB6Xd4W+YebfLq5kBucmxoaFDOaEEMz/AWl4gluHoI/bprSchdI25tJaMh5sjCf c+BfQL3ZFJqbPw+kMKC6NFuJOJxRcEDoLgUJ++2ywamg8wH5JTlCRFMxZNjEEphg 5eXx61v8zo++lIsZTk9YTnWXrVIk7sCnL3hkIOCaGD9NglWXPgunnZ9skQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVan+2//2+GxcH5wZpfNVsZDMlNMB8GA1UdIwQY MBaAFH0C+ixbookgRefNUKWt/VTW27jCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUt ODEwMzlmM2NmM2ZkLzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jY2UyMGItNGQ1YS00OGY4LWI4OGUtODEwMzlmM2NmM2Zk LzEvZlFMNkxGdWlpU0JGNTgxUXBhMzlWTmJidU1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3SZf50R T9VcdldeBejfAEETtJEr5nswN8ZDHdVnDDbO2bB81Zbi35qa655wtF7SQOMnYVnE r1s0hM9cTeAc3mM9Dz93R6tKCo1eEraFFFClTlp3qhjiX5uMqIPY3u1EPlm6DDfg fHPm87CizckHfyOrT4HQEZOOeY24zh+wR0urkUENehyB3hDJ0VsrGIhqjgtBKhPq hic/Dmji/lnZHayS3CHjoZfg/P7ZKX7jxfTdf1pWahahlArLVvkxsyQlg9g6fPUu L/HDDJlYbEH64KJMh5lhyxvvevbSDQOoKAEueazC5q61J0QLFOoNCR99Hif2AY4+ QE0j79Y7CqPi/w== -----END CERTIFICATE-----Generated at Fri Dec 19 15:58:45 2025 by rpki-client