This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json) Hash identifier: pXJlGQW8PzPX+i8Ne3xcu9O9F9/2ekMDSWaXNAvtAvw= Subject key identifier: 28:DC:05:0D:F9:AF:90:AE:14:2D:BE:19:9D:D8:25:18:33:70:5E:D2 Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Certificate serial: 019B5BD1F20058249C502DAED555B6141B87 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft Manifest number: 05DF Signing time: Fri 26 Dec 2025 18:00:44 +0000 Manifest this update: Fri 26 Dec 2025 18:00:44 +0000 Manifest next update: Sat 27 Dec 2025 18:00:44 +0000 Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: 7mbT5dzLAWAEiMSY7FkWmCoshcJEvetMaZ3RMtwgmjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 18:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5b:d1:f2:00:58:24:9c:50:2d:ae:d5:55:b6:14:1b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Validity Not Before: Dec 26 18:00:44 2025 GMT Not After : Dec 27 18:00:44 2025 GMT Subject: CN=28dc050df9af90ae142dbe199dd8251833705ed2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1f:6d:50:9e:3e:df:ef:fd:6e:ee:39:1a:19: c4:0f:5d:e1:8e:5f:8f:3f:ed:c2:d3:3c:ca:c4:77: 4b:2c:0a:d7:d2:81:2f:4f:b5:ac:53:c1:29:ee:3f: 55:e6:90:08:14:05:6f:28:6c:01:32:03:ca:a7:da: 91:41:8e:51:2b:07:f4:46:80:87:e6:c1:c0:f6:a9: c0:1a:6d:4e:56:cc:34:48:a9:80:4d:28:b3:d0:39: 12:83:2b:ee:46:de:eb:47:f6:ed:38:4e:70:54:22: ce:ee:0d:00:d4:c9:92:84:7d:e3:03:4f:88:18:b1: 82:2b:7a:07:04:a7:74:fa:0f:e9:1f:c0:c7:8e:31: 6d:18:77:64:a8:45:8f:22:91:a1:9c:8b:a6:57:ad: 2f:87:d4:21:bc:45:20:81:ce:83:62:93:2a:70:b8: 11:6b:c0:1b:b7:73:88:21:8f:b5:be:0e:85:c0:86: 26:3b:dd:8f:0a:fc:7e:3e:43:fa:47:98:d6:f7:56: 8a:6a:1c:fe:9e:f1:b7:a9:f4:e3:af:c4:c3:26:9a: c1:cf:cc:a1:21:e7:06:8a:c8:60:09:fa:0d:63:a6: ab:69:1a:a6:33:80:82:f4:80:3b:3f:7b:99:17:60: f9:77:c3:ae:62:b2:4a:db:03:b4:a4:58:21:ef:c2: 7b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DC:05:0D:F9:AF:90:AE:14:2D:BE:19:9D:D8:25:18:33:70:5E:D2 X509v3 Authority Key Identifier: keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:bf:76:00:20:83:30:58:fc:e8:f3:e7:dd:21:bf:d0:84:df: 24:65:db:cd:e0:12:2a:6c:ea:67:96:11:83:12:20:9d:b1:63: 8e:f7:01:41:3c:68:43:e9:62:ba:75:af:39:9e:b8:25:87:ea: 47:3b:7a:f0:e5:c9:8d:22:8d:40:25:d4:e8:10:8f:e2:fd:16: dd:ed:fb:79:fb:da:1b:08:2f:fc:9c:b6:c8:a3:0e:89:6f:36: a8:9b:62:b9:71:aa:dc:3f:43:eb:2e:ad:c3:6f:15:57:36:2f: 98:91:f6:ee:49:1a:e2:9d:7b:cb:66:c0:b3:f6:e2:ac:b8:2e: 36:e7:0e:0a:d2:81:75:6c:20:36:9f:32:b5:b1:9c:87:b5:d5: a0:88:5b:a9:b3:a6:7c:83:7d:4f:48:0d:af:ba:e4:ea:f4:9f: 5e:51:1e:d3:78:4c:de:e7:37:ee:39:53:56:99:53:3e:6a:40: 98:81:e3:a3:42:b9:d4:9b:f0:d6:a1:1b:9e:77:41:17:5c:06: 27:39:6e:57:ae:6c:a0:06:ef:ec:31:ca:f3:ad:6c:b6:4b:e8: 03:fe:c3:c8:e9:c8:b6:1a:46:5e:63:f1:e6:6d:3e:d1:b3:c2: a4:31:52:f3:f9:40:76:6a:77:97:1f:20:97:27:ab:b9:5b:a6: 87:0c:5c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtb0fIAWCScUC2u1VW2FBuHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTVmZjdlN2UxYWFmMzhlNTk5NjlkNjA5ODA0YTNiM2Yw NWJlODgwHhcNMjUxMjI2MTgwMDQ0WhcNMjUxMjI3MTgwMDQ0WjAzMTEwLwYDVQQD EygyOGRjMDUwZGY5YWY5MGFlMTQyZGJlMTk5ZGQ4MjUxODMzNzA1ZWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx9tUJ4+3+/9bu45GhnED13hjl+P P+3C0zzKxHdLLArX0oEvT7WsU8Ep7j9V5pAIFAVvKGwBMgPKp9qRQY5RKwf0RoCH 5sHA9qnAGm1OVsw0SKmATSiz0DkSgyvuRt7rR/btOE5wVCLO7g0A1MmShH3jA0+I GLGCK3oHBKd0+g/pH8DHjjFtGHdkqEWPIpGhnIumV60vh9QhvEUggc6DYpMqcLgR a8Abt3OIIY+1vg6FwIYmO92PCvx+PkP6R5jW91aKahz+nvG3qfTjr8TDJprBz8yh IecGishgCfoNY6araRqmM4CC9IA7P3uZF2D5d8OuYrJK2wO0pFgh78J7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjcBQ35r5CuFC2+GZ3YJRgzcF7SMB8GA1UdIwQY MBaAFBal/35+Gq845Zlp1gmASjs/Bb6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2It NjZkYWRlYTI5YzRhLzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2ItNjZkYWRlYTI5YzRh LzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgr92ACCD MFj86PPn3SG/0ITfJGXbzeASKmzqZ5YRgxIgnbFjjvcBQTxoQ+liunWvOZ64JYfq Rzt68OXJjSKNQCXU6BCP4v0W3e37efvaGwgv/Jy2yKMOiW82qJtiuXGq3D9D6y6t w28VVzYvmJH27kka4p17y2bAs/birLguNucOCtKBdWwgNp8ytbGch7XVoIhbqbOm fIN9T0gNr7rk6vSfXlEe03hM3uc37jlTVplTPmpAmIHjo0K51Jvw1qEbnndBF1wG JzluV65soAbv7DHK861stkvoA/7DyOnIthpGXmPx5m0+0bPCpDFS8/lAdmp3lx8g lyeruVumhwxcrA== -----END CERTIFICATE-----Generated at Sat Dec 27 04:07:30 2025 by rpki-client