This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json) Hash identifier: /8/l2HFtETygh+H8B2URY1j1Vbi5SjEMqTt0IGl8fgk= Subject key identifier: 10:B3:49:EF:94:D1:40:2D:03:27:78:33:4C:36:58:56:A9:BC:C3:83 Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B27E47D2AF881D46E6BBEB87FA07EF1AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft Manifest number: 1238 Signing time: Tue 16 Dec 2025 16:00:44 +0000 Manifest this update: Tue 16 Dec 2025 16:00:44 +0000 Manifest next update: Wed 17 Dec 2025 16:00:44 +0000 Files and hashes: 1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=) 2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=) 3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=) 4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=) 5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=) 6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: KH3Y8SQYreqbqkvD4cwWNcnK9p+LW0uy7kA6AFzw0xg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 14:45:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:27:e4:7d:2a:f8:81:d4:6e:6b:be:b8:7f:a0:7e:f1:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Dec 16 16:00:44 2025 GMT Not After : Dec 17 16:00:44 2025 GMT Subject: CN=10b349ef94d1402d032778334c365856a9bcc383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:27:b9:df:04:5a:a9:48:90:11:08:21:20:7a: d6:a6:be:0a:41:84:09:dd:21:f1:c7:f5:b0:75:32: ea:ce:f1:4f:ac:3d:f1:c1:0f:3b:7d:76:e3:da:e8: 94:cd:10:4f:d8:2f:93:9f:72:50:ef:71:20:bf:b4: 8e:2c:83:01:de:8c:66:74:12:0f:fd:4e:98:88:54: ea:c2:25:4f:bf:5a:25:6d:20:9b:69:88:de:c9:75: 25:36:77:9b:d4:c5:ae:70:03:29:7b:c2:a1:84:44: 28:4c:df:df:e3:67:b1:78:84:73:26:a8:33:e7:48: 32:cb:1d:1f:d5:28:26:fe:99:ee:d9:66:28:02:d5: 11:95:9b:0f:b9:dc:3f:6e:fb:18:77:2c:eb:78:d9: f5:d4:93:52:7b:67:82:d1:11:de:6f:b3:39:3e:a6: 82:53:41:e1:b0:2c:f6:b0:b4:e7:66:d8:e5:d0:5e: f9:f0:c6:15:9c:00:d0:7f:a7:8a:2f:6c:7b:99:fc: 43:4d:48:fc:99:d7:aa:a7:ea:b3:12:86:c8:99:42: f9:a0:33:b8:11:36:9f:c2:55:f2:dc:b6:a4:70:c3: 2e:a4:31:73:cc:75:31:03:bd:e6:d0:5e:06:2a:9c: f8:06:60:b3:68:db:7a:4b:e1:80:16:b2:db:63:d7: de:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B3:49:EF:94:D1:40:2D:03:27:78:33:4C:36:58:56:A9:BC:C3:83 X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:91:8c:d3:27:a3:63:3d:4d:51:b2:98:e9:10:0d:b2:bc:0d: c2:7a:18:bd:7a:86:fc:f6:fe:c2:32:98:6d:b9:09:d8:0c:4d: 0f:16:68:ca:32:73:5b:06:c4:d0:e5:67:d5:4a:07:9d:c6:8c: e7:e6:65:4f:35:74:2b:08:34:ff:48:1f:5c:11:18:73:c6:c2: ad:41:40:4c:0a:c7:07:8d:80:a7:7e:66:e0:ca:24:b2:85:b9: 99:d9:69:38:7a:6a:1e:0a:22:63:db:42:c7:bd:f5:e4:f2:c0: e0:ac:d7:1f:1b:14:19:9a:d6:53:63:1a:75:81:70:d6:9e:ef: 98:53:25:09:71:aa:61:ca:f9:ed:b3:46:0d:4e:19:1e:0e:29: e3:88:76:56:32:f6:b1:46:4b:f7:40:f9:a4:7c:a9:12:6d:43: 00:6b:c8:c8:7d:37:65:2b:41:35:d1:ef:e8:6c:b8:92:d7:b2: b3:c8:e7:b9:13:c9:d3:f4:73:6f:ee:1c:f4:47:ff:65:b9:2b: 03:0f:69:11:f7:4c:90:8f:fe:5c:60:d8:3c:e3:dd:35:0d:8a: 03:43:a1:b2:c1:ea:9c:73:68:54:1d:5d:a0:57:ab:97:dd:f0: 50:87:d7:65:1d:4e:71:19:11:1b:71:c3:4b:23:38:db:8e:28: c0:93:f2:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsn5H0q+IHUbmu+uH+gfvGrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjUxMjE2MTYwMDQ0WhcNMjUxMjE3MTYwMDQ0WjAzMTEwLwYDVQQD EygxMGIzNDllZjk0ZDE0MDJkMDMyNzc4MzM0YzM2NTg1NmE5YmNjMzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiye53wRaqUiQEQghIHrWpr4KQYQJ 3SHxx/WwdTLqzvFPrD3xwQ87fXbj2uiUzRBP2C+Tn3JQ73Egv7SOLIMB3oxmdBIP /U6YiFTqwiVPv1olbSCbaYjeyXUlNneb1MWucAMpe8KhhEQoTN/f42exeIRzJqgz 50gyyx0f1Sgm/pnu2WYoAtURlZsPudw/bvsYdyzreNn11JNSe2eC0RHeb7M5PqaC U0HhsCz2sLTnZtjl0F758MYVnADQf6eKL2x7mfxDTUj8mdeqp+qzEobImUL5oDO4 ETafwlXy3LakcMMupDFzzHUxA73m0F4GKpz4BmCzaNt6S+GAFrLbY9feqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCzSe+U0UAtAyd4M0w2WFapvMODMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJGM0yej Yz1NUbKY6RANsrwNwnoYvXqG/Pb+wjKYbbkJ2AxNDxZoyjJzWwbE0OVn1UoHncaM 5+ZlTzV0Kwg0/0gfXBEYc8bCrUFATArHB42Ap35m4MoksoW5mdlpOHpqHgoiY9tC x7315PLA4KzXHxsUGZrWU2MadYFw1p7vmFMlCXGqYcr57bNGDU4ZHg4p44h2VjL2 sUZL90D5pHypEm1DAGvIyH03ZStBNdHv6Gy4kteys8jnuRPJ0/Rzb+4c9Ef/Zbkr Aw9pEfdMkI/+XGDYPOPdNQ2KA0OhssHqnHNoVB1doFerl93wUIfXZR1OcRkRG3HD SyM4244owJPy7A== -----END CERTIFICATE-----Generated at Tue Dec 16 20:54:50 2025 by rpki-client