This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft File: FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft (raw, json) Hash identifier: YW5/jdrVBfaVMxpdj889LpPh3I6n037b+/3GvclfGio= Subject key identifier: 7B:28:50:6C:73:0D:43:41:BB:FC:37:48:AB:7C:C9:C1:73:E3:95:6A Authority key identifier: 15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16 Certificate issuer: /CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16 Certificate serial: 019B446E3711FE87F111FBE111FBF3208268 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft Manifest number: 178A Signing time: Mon 22 Dec 2025 05:00:32 +0000 Manifest this update: Mon 22 Dec 2025 05:00:32 +0000 Manifest next update: Tue 23 Dec 2025 05:00:32 +0000 Files and hashes: 1: FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl (hash: tXNh+rFU74tvT+tIfba+9/d3C2JEpAl2iy20/Q3fp+M=) 2: PyQ8fu5pDLbvLBuzcMMxIAkMsmo.roa (hash: mZg5dPb6uDIAF/lQgfs5kl+MW8uT39zjW3CSCFzbS/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 05:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:6e:37:11:fe:87:f1:11:fb:e1:11:fb:f3:20:82:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=150b7ff9bc1962ebcec0be435ccc272d751a1c16 Validity Not Before: Dec 22 05:00:32 2025 GMT Not After : Dec 23 05:00:32 2025 GMT Subject: CN=7b28506c730d4341bbfc3748ab7cc9c173e3956a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:4f:81:7e:65:8b:7e:58:89:01:6b:a8:d5: 18:ee:10:7c:f8:9d:35:88:1e:c7:78:c1:8f:ba:da: 02:3f:c8:77:5e:e9:40:a0:04:8b:50:d5:18:0e:c5: 76:36:f3:dc:aa:6a:e8:cf:1e:91:c1:b0:95:1b:4a: 77:da:fc:ff:3f:24:cf:4c:a7:47:0b:7f:63:97:df: f4:6c:57:3a:b6:e5:b2:54:b9:0f:aa:7c:68:31:c8: 27:76:2b:84:64:2a:74:8f:f4:55:82:33:3b:5f:90: d6:d5:cf:ab:97:bb:94:21:04:5c:45:4e:98:e4:7f: 66:e8:06:ed:5e:ab:da:57:8e:58:84:1a:c5:f7:59: f9:55:89:19:b8:95:40:b4:38:7d:d0:97:3c:0f:90: b1:00:22:9c:22:d9:d0:2d:0c:08:78:1e:2d:d1:32: be:41:71:57:d7:2c:c9:4d:5f:9c:bc:75:4f:66:24: 5c:cf:0a:dc:85:34:ed:c8:be:ac:b1:b5:b2:97:8f: 58:f1:5d:93:e8:5e:3d:ff:7f:0d:bb:3d:43:95:0e: 83:f9:6b:0a:dc:b8:5f:67:d2:21:42:72:4c:6f:59: 5b:ac:6c:6b:0c:1c:43:f2:e2:30:7e:c4:98:a1:f7: d2:6b:88:82:ac:86:9c:7e:b6:92:4c:70:45:a1:07: ca:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:28:50:6C:73:0D:43:41:BB:FC:37:48:AB:7C:C9:C1:73:E3:95:6A X509v3 Authority Key Identifier: keyid:15:0B:7F:F9:BC:19:62:EB:CE:C0:BE:43:5C:CC:27:2D:75:1A:1C:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQt_-bwZYuvOwL5DXMwnLXUaHBY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/76f921-6217-4e95-b445-10cd20fab386/1/FQt_-bwZYuvOwL5DXMwnLXUaHBY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:86:eb:ad:c9:64:08:81:96:a9:d8:bb:6b:9a:70:ed:52:7c: 71:73:05:88:8e:45:2f:6c:04:05:ff:16:99:de:1e:37:2f:c9: a0:cc:d6:b8:f1:e3:0d:98:19:aa:af:6a:c2:23:4b:ce:37:12: e9:75:f4:de:7a:a5:04:c8:d0:b9:ab:6c:52:87:fd:ca:cd:e1: 66:1a:37:6d:21:6f:5e:bf:45:ea:9e:ab:72:a2:40:77:cb:9a: b2:fe:48:c6:84:18:92:d0:f9:30:45:a2:69:d8:a0:1a:48:4a: b2:8f:c8:11:9e:45:d0:a6:36:fc:dc:bf:18:25:fe:73:79:0b: 77:ea:73:34:43:87:df:b1:93:c1:18:c8:9e:a2:8a:d7:80:d8: 41:35:5e:3b:94:4b:ab:37:6d:3a:c2:87:e8:d5:15:ce:5f:4e: 5a:66:fa:97:43:88:13:68:83:2f:5f:80:2f:16:78:e5:14:21: aa:1f:ed:52:b9:0a:bc:53:c1:13:97:f0:eb:aa:10:4b:0e:0c: d1:11:92:2d:b4:a8:66:c9:1e:8c:d6:ff:1e:b1:b8:12:28:e7: a6:72:44:1e:3d:9f:ae:e7:9f:6d:f1:86:23:75:f0:d8:64:fa: cb:09:e4:2c:29:6a:2e:79:63:e4:88:b4:b1:0f:5e:4d:05:8e: 43:f2:3a:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtEbjcR/ofxEfvhEfvzIIJoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MGI3ZmY5YmMxOTYyZWJjZWMwYmU0MzVjY2MyNzJkNzUx YTFjMTYwHhcNMjUxMjIyMDUwMDMyWhcNMjUxMjIzMDUwMDMyWjAzMTEwLwYDVQQD Eyg3YjI4NTA2YzczMGQ0MzQxYmJmYzM3NDhhYjdjYzljMTczZTM5NTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ9PgX5li35YiQFrqNUY7hB8+J01 iB7HeMGPutoCP8h3XulAoASLUNUYDsV2NvPcqmrozx6RwbCVG0p32vz/PyTPTKdH C39jl9/0bFc6tuWyVLkPqnxoMcgndiuEZCp0j/RVgjM7X5DW1c+rl7uUIQRcRU6Y 5H9m6AbtXqvaV45YhBrF91n5VYkZuJVAtDh90Jc8D5CxACKcItnQLQwIeB4t0TK+ QXFX1yzJTV+cvHVPZiRczwrchTTtyL6ssbWyl49Y8V2T6F49/38Nuz1DlQ6D+WsK 3LhfZ9IhQnJMb1lbrGxrDBxD8uIwfsSYoffSa4iCrIacfraSTHBFoQfKAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsoUGxzDUNBu/w3SKt8ycFz45VqMB8GA1UdIwQY MBaAFBULf/m8GWLrzsC+Q1zMJy11GhwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUt MTBjZDIwZmFiMzg2LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS83NmY5MjEtNjIxNy00ZTk1LWI0NDUtMTBjZDIwZmFiMzg2 LzEvRlF0Xy1id1pZdXZPd0w1RFhNd25MWFVhSEJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATobrrclk CIGWqdi7a5pw7VJ8cXMFiI5FL2wEBf8Wmd4eNy/JoMzWuPHjDZgZqq9qwiNLzjcS 6XX03nqlBMjQuatsUof9ys3hZho3bSFvXr9F6p6rcqJAd8uasv5IxoQYktD5MEWi adigGkhKso/IEZ5F0KY2/Ny/GCX+c3kLd+pzNEOH37GTwRjInqKK14DYQTVeO5RL qzdtOsKH6NUVzl9OWmb6l0OIE2iDL1+ALxZ45RQhqh/tUrkKvFPBE5fw66oQSw4M 0RGSLbSoZskejNb/HrG4EijnpnJEHj2fruefbfGGI3Xw2GT6ywnkLClqLnlj5Ii0 sQ9eTQWOQ/I6eQ== -----END CERTIFICATE-----Generated at Mon Dec 22 11:30:40 2025 by rpki-client