This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json) Hash identifier: YTS1Yob4qZBMOffX7+arjQeKfz3sihWG+TfGgUz49NU= Subject key identifier: AD:D4:7D:BC:22:D4:C9:5B:A1:31:B2:FE:18:39:D1:32:F5:C2:12:54 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019B405C834AB93C123DEEDBE5D98E4A66F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft Manifest number: 178D Signing time: Sun 21 Dec 2025 10:02:43 +0000 Manifest this update: Sun 21 Dec 2025 10:02:43 +0000 Manifest next update: Mon 22 Dec 2025 10:02:43 +0000 Files and hashes: 1: 6fJjIO572rRtTzs1Q7jirr0rogU.roa (hash: lnfishpwQLE66hzcfQQ47M/+3n4mO6BxT9e3So84HXc=) 2: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=) 3: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=) 4: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: W30sJjCgOkbmqoVPa7RpdbAnS6YR5XXHDebt5ej9p/c=) 5: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=) 6: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=) 7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:83:4a:b9:3c:12:3d:ee:db:e5:d9:8e:4a:66:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Dec 21 10:02:43 2025 GMT Not After : Dec 22 10:02:43 2025 GMT Subject: CN=add47dbc22d4c95ba131b2fe1839d132f5c21254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f9:b1:3b:96:ef:11:d8:22:68:8b:c7:19:9c: 4f:aa:de:4a:2a:4f:1e:e7:9c:4b:09:22:71:bd:9b: 87:47:4f:23:71:c6:aa:d5:eb:2f:23:f4:3b:ff:a4: 4e:e0:28:fc:2c:f7:26:de:ea:97:7c:52:62:b4:f3: a7:a9:c4:23:37:b5:9d:9c:ac:ef:95:5b:c2:d0:c5: b6:87:ed:8b:cb:90:ad:27:44:9f:21:83:ae:ef:3d: 9f:20:14:cf:dd:61:a0:fd:00:a9:df:15:ff:54:93: 8f:73:81:8a:92:57:a5:78:de:07:b9:fc:e0:4a:70: af:e5:fc:2c:be:02:34:bb:ba:1a:b6:28:36:b0:14: 02:e2:96:ef:35:12:d8:21:c5:e6:b3:d9:c8:06:2d: 7f:2a:c4:e9:43:f0:8f:08:16:81:0e:66:9d:10:34: 15:eb:3a:2c:cb:45:a2:89:c3:29:40:b3:48:b3:d1: ac:3a:2e:b0:c0:b6:bb:8a:fc:fc:38:e8:5a:25:25: f2:62:d1:50:a8:61:1e:b4:38:15:c0:8a:ae:93:48: 3b:0c:9f:01:45:87:b9:b2:e9:17:c2:9f:74:73:dc: a9:f6:16:ff:37:b2:87:97:62:c7:a3:25:f5:9b:e2: 05:4f:66:7d:7d:f2:83:ce:41:cd:f4:b5:e7:6e:fa: b6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:7D:BC:22:D4:C9:5B:A1:31:B2:FE:18:39:D1:32:F5:C2:12:54 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:e0:8d:f3:c2:dc:d5:1b:7b:66:64:64:d4:6b:a6:11:d3:73: 9e:f3:47:36:67:dd:d2:6f:cf:50:67:e2:6f:87:d2:5f:00:88: 07:64:90:40:8e:4e:d7:e2:29:48:cd:19:3c:95:38:48:57:46: d3:70:c0:8f:51:6e:6a:e7:12:9d:a7:5b:b3:78:a7:c1:45:8e: bf:85:bf:b6:6d:c6:0a:01:0b:1e:f6:76:00:64:9e:ce:ef:80: 76:d6:4d:2a:0d:7a:ad:41:0b:65:0d:b4:15:25:e0:4c:ac:da: c8:a7:40:6a:3f:2e:0b:ef:8b:15:77:4e:2d:77:96:85:94:0c: d6:c2:ad:a6:d7:37:38:0d:b4:84:c4:b2:bb:0e:9f:23:23:5b: 7b:8a:c8:0d:56:d8:0c:7e:33:97:40:bf:81:6e:2e:57:72:40: 78:51:9b:61:a3:c6:1e:bd:78:75:fb:09:23:ed:f8:03:6d:03: 06:c6:f1:4a:a9:45:e4:7a:99:9f:e2:f1:fb:2c:0b:f1:b3:6e: 78:3b:34:71:78:a1:f0:1c:b4:f7:56:06:d3:65:a2:b8:df:58: dc:64:a2:5c:4e:c0:0f:5f:07:38:b5:29:97:2b:40:52:98:82: ce:a9:a0:68:3e:93:dc:81:45:64:d5:4a:26:52:a6:8b:ef:6f: e5:28:60:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXINKuTwSPe7b5dmOSmbwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjUxMjIxMTAwMjQzWhcNMjUxMjIyMTAwMjQzWjAzMTEwLwYDVQQD EyhhZGQ0N2RiYzIyZDRjOTViYTEzMWIyZmUxODM5ZDEzMmY1YzIxMjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fmxO5bvEdgiaIvHGZxPqt5KKk8e 55xLCSJxvZuHR08jccaq1esvI/Q7/6RO4Cj8LPcm3uqXfFJitPOnqcQjN7WdnKzv lVvC0MW2h+2Ly5CtJ0SfIYOu7z2fIBTP3WGg/QCp3xX/VJOPc4GKkleleN4Hufzg SnCv5fwsvgI0u7oatig2sBQC4pbvNRLYIcXms9nIBi1/KsTpQ/CPCBaBDmadEDQV 6zosy0WiicMpQLNIs9GsOi6wwLa7ivz8OOhaJSXyYtFQqGEetDgVwIquk0g7DJ8B RYe5sukXwp90c9yp9hb/N7KHl2LHoyX1m+IFT2Z9ffKDzkHN9LXnbvq2aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3Ufbwi1MlboTGy/hg50TL1whJUMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+CN88Lc 1Rt7ZmRk1GumEdNznvNHNmfd0m/PUGfib4fSXwCIB2SQQI5O1+IpSM0ZPJU4SFdG 03DAj1FuaucSnadbs3inwUWOv4W/tm3GCgELHvZ2AGSezu+AdtZNKg16rUELZQ20 FSXgTKzayKdAaj8uC++LFXdOLXeWhZQM1sKtptc3OA20hMSyuw6fIyNbe4rIDVbY DH4zl0C/gW4uV3JAeFGbYaPGHr14dfsJI+34A20DBsbxSqlF5HqZn+Lx+ywL8bNu eDs0cXih8By091YG02WiuN9Y3GSiXE7AD18HOLUplytAUpiCzqmgaD6T3IFFZNVK JlKmi+9v5Shgrw== -----END CERTIFICATE-----Generated at Sun Dec 21 13:03:53 2025 by rpki-client