This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: k2p11G5klQPeIHW2m8JkCployYIMDeGvG8h+e0A+n1o= Subject key identifier: 8A:34:53:D4:06:9A:AB:D5:EF:8B:43:1C:17:DD:70:84:BE:96:C5:FE Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B397D69CCB44AE4F8C9E2A3F4791A7845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0F80 Signing time: Sat 20 Dec 2025 02:01:18 +0000 Manifest this update: Sat 20 Dec 2025 02:01:18 +0000 Manifest next update: Sun 21 Dec 2025 02:01:18 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: Ds4CPkfTin9TJHxUyKsgrq3QgUgpvCszMqrQCE6ovBA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:7d:69:cc:b4:4a:e4:f8:c9:e2:a3:f4:79:1a:78:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Dec 20 02:01:18 2025 GMT Not After : Dec 21 02:01:18 2025 GMT Subject: CN=8a3453d4069aabd5ef8b431c17dd7084be96c5fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7c:a4:36:03:2b:e0:9a:cf:25:77:d6:fa:1b: 5e:ea:ab:eb:1d:05:2d:1c:cc:0b:3d:94:27:88:9d: 72:b1:ac:3e:c0:9a:f9:71:86:93:25:eb:29:59:f2: 85:57:6a:a7:c2:9c:e2:0a:f1:be:5c:02:a4:5c:e7: e0:f4:05:a7:85:a2:53:2f:45:7c:ab:74:cf:45:8b: 99:09:32:74:73:be:e3:87:3e:7c:ff:46:3e:49:73: be:3d:34:ef:3a:8e:d6:31:c7:4c:34:23:7f:69:fd: 9f:80:3d:38:4d:9c:be:a0:8c:96:86:62:58:58:30: 9d:94:0a:88:bf:e6:6e:5d:58:20:d1:70:5c:90:21: 30:ef:67:6d:68:64:73:18:7e:db:c7:89:72:4f:15: 6a:72:63:d1:eb:2b:2c:b0:f7:ac:72:b0:2f:51:f4: e5:b5:77:52:76:15:3b:c1:1c:d8:d6:e5:d7:4b:8b: de:25:4e:84:c1:86:70:5c:95:0b:d7:8f:70:ee:d4: ec:9c:fa:ea:cb:c5:83:27:af:8b:bf:74:3e:1e:b4: cc:8a:89:fd:f7:a2:e3:5e:bc:d8:af:6f:48:0d:bf: d8:a6:9f:f7:90:2d:95:f1:21:9e:10:94:f1:ee:fb: a8:1c:67:18:40:f1:70:af:a3:af:f9:6a:b5:1d:8e: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:34:53:D4:06:9A:AB:D5:EF:8B:43:1C:17:DD:70:84:BE:96:C5:FE X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:dd:20:1f:44:dd:5b:f9:f8:36:80:80:4b:35:10:fc:43:0f: 4a:b5:b9:a0:1c:ca:98:f4:81:00:a4:18:f3:91:64:0f:e5:de: 69:9a:31:5c:b3:6e:36:58:e3:cd:a5:64:f5:dd:1c:5f:a5:ba: 27:29:70:17:01:72:cf:28:b2:2c:4c:3f:52:40:86:ed:dd:83: 78:1d:b0:71:9b:7d:ef:01:75:00:43:1f:46:0f:fc:11:d7:88: d7:88:2e:3f:47:8d:e1:02:6e:e8:d2:42:c7:a5:4b:4e:1e:20: 67:aa:6d:b7:ce:7e:c5:09:ef:05:0f:0c:b3:7f:cf:ad:70:76: 74:20:06:00:83:18:af:41:48:27:04:f4:3a:22:35:85:08:81: 98:f4:4e:1f:11:f9:c2:24:2d:3d:f7:77:9c:a5:14:01:92:9c: f0:51:f6:00:03:b4:9a:2a:b5:10:91:b4:33:18:9f:fa:90:b4: 4f:cd:03:e0:99:99:aa:60:6a:bc:d8:1d:0a:1e:35:2b:24:b1: b1:67:3f:16:e2:88:ad:8c:de:6f:d4:21:a4:7e:6b:18:d9:70: e7:3b:7f:ef:b8:70:c9:33:28:4d:bf:8e:e7:1b:e4:fb:2d:5d: d4:a7:67:26:38:cf:64:65:b1:8a:9e:d2:3c:9d:a1:87:20:c6: e7:f2:ed:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5fWnMtErk+Mnio/R5GnhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMjIwMDIwMTE4WhcNMjUxMjIxMDIwMTE4WjAzMTEwLwYDVQQD Eyg4YTM0NTNkNDA2OWFhYmQ1ZWY4YjQzMWMxN2RkNzA4NGJlOTZjNWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3ykNgMr4JrPJXfW+hte6qvrHQUt HMwLPZQniJ1ysaw+wJr5cYaTJespWfKFV2qnwpziCvG+XAKkXOfg9AWnhaJTL0V8 q3TPRYuZCTJ0c77jhz58/0Y+SXO+PTTvOo7WMcdMNCN/af2fgD04TZy+oIyWhmJY WDCdlAqIv+ZuXVgg0XBckCEw72dtaGRzGH7bx4lyTxVqcmPR6ysssPescrAvUfTl tXdSdhU7wRzY1uXXS4veJU6EwYZwXJUL149w7tTsnPrqy8WDJ6+Lv3Q+HrTMion9 96LjXrzYr29IDb/Ypp/3kC2V8SGeEJTx7vuoHGcYQPFwr6Ov+Wq1HY7YIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIo0U9QGmqvV74tDHBfdcIS+lsX+MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATd0gH0Td W/n4NoCASzUQ/EMPSrW5oBzKmPSBAKQY85FkD+XeaZoxXLNuNljjzaVk9d0cX6W6 JylwFwFyzyiyLEw/UkCG7d2DeB2wcZt97wF1AEMfRg/8EdeI14guP0eN4QJu6NJC x6VLTh4gZ6ptt85+xQnvBQ8Ms3/PrXB2dCAGAIMYr0FIJwT0OiI1hQiBmPROHxH5 wiQtPfd3nKUUAZKc8FH2AAO0miq1EJG0Mxif+pC0T80D4JmZqmBqvNgdCh41KySx sWc/FuKIrYzeb9QhpH5rGNlw5zt/77hwyTMoTb+O5xvk+y1d1KdnJjjPZGWxip7S PJ2hhyDG5/LtrQ== -----END CERTIFICATE-----Generated at Sat Dec 20 10:37:45 2025 by rpki-client