This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json)
Hash identifier: QgMBixNqWyuWAL9mVdFUJ+Y5HXRL+ihWGaK6lUfJQqo=
Subject key identifier: 0B:F7:FE:E4:C3:0C:86:E6:CD:67:8C:69:5B:43:61:7A:5C:C5:EB:83
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 019AF1D1C33E3E3B986879726814B7D8553F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
Manifest number: 121C
Signing time: Sat 06 Dec 2025 04:00:47 +0000
Manifest this update: Sat 06 Dec 2025 04:00:47 +0000
Manifest next update: Sun 07 Dec 2025 04:00:47 +0000
Files and hashes: 1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=)
2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=)
3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=)
4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=)
5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=)
6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: ZChYawfz6T0SKMHL4LXd+nIEuBLMH72pspTbtcL7XTw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:f1:d1:c3:3e:3e:3b:98:68:79:72:68:14:b7:d8:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Dec 6 04:00:47 2025 GMT
Not After : Dec 7 04:00:47 2025 GMT
Subject: CN=0bf7fee4c30c86e6cd678c695b43617a5cc5eb83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:ab:7f:c8:1a:09:f2:3c:16:39:42:3c:e3:
37:af:6e:9c:85:7e:38:42:dd:7b:22:f0:3a:b8:e9:
4d:99:6a:94:c9:41:7e:08:d3:17:e4:b2:4f:46:77:
51:a7:3a:54:1e:5d:13:a2:4e:3c:9f:aa:5f:a2:41:
3c:d4:50:37:23:2f:b8:83:4f:f9:f3:54:ff:be:15:
ba:86:11:71:02:ae:8b:e8:0a:2a:b2:57:28:61:d4:
25:93:88:eb:66:16:91:5d:d8:ba:e2:b8:c1:c3:4b:
7b:8f:d1:5c:e8:db:bd:e3:09:10:ff:87:39:f8:0c:
d2:ac:53:b2:40:ce:f9:c5:95:ad:0a:82:98:78:01:
4f:fa:1a:f1:67:54:0a:e4:89:ba:61:21:ca:bb:d2:
79:f1:e4:2e:ca:3a:b8:c8:b2:85:2f:72:a9:a0:d4:
97:bb:8e:40:de:8b:f9:f7:47:0d:63:63:24:b1:01:
04:a2:84:c1:0d:08:74:1d:9a:df:23:ed:03:58:99:
af:7e:c9:ff:b0:c7:64:98:8f:27:34:fa:01:d3:fd:
d9:a7:b9:6a:4f:c4:b8:91:00:af:fa:1d:2c:f0:c3:
ff:1d:b7:cf:d0:fb:eb:08:33:aa:cc:da:2e:91:d1:
4f:f8:a4:f3:56:3a:5d:91:a6:b1:bb:f1:b7:95:85:
b1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F7:FE:E4:C3:0C:86:E6:CD:67:8C:69:5B:43:61:7A:5C:C5:EB:83
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:31:97:80:0c:96:d2:eb:41:8a:d0:e3:df:bf:09:92:c9:eb:
91:0f:90:11:33:3e:c2:c4:13:71:af:d6:95:5f:73:89:65:b7:
f9:51:e6:10:e5:c9:0f:5a:31:32:b2:eb:dc:cb:ed:f9:8e:d8:
c7:2a:bb:08:0f:38:fd:60:98:9a:c4:8f:ae:33:05:c8:43:d7:
ca:06:9e:aa:fd:22:82:33:b8:46:a9:70:b2:c2:08:cd:d7:ae:
1e:84:c4:47:77:42:af:6d:d6:6c:04:b4:92:2c:fd:73:b8:93:
57:2e:b9:09:97:ff:95:b6:82:b1:1d:23:ea:e7:c0:a8:0d:41:
37:59:01:cd:a5:50:06:9a:5a:37:06:44:93:79:ac:ca:54:39:
6a:32:b5:d8:a4:4d:57:48:0d:5e:7a:79:82:f3:17:8b:7a:2b:
b2:47:7b:8a:e3:3a:b5:4a:5b:9a:de:71:4e:0b:f9:7f:a0:53:
9c:fc:9f:5d:1e:ef:46:b3:45:b3:49:a0:d4:85:3f:4e:8f:66:
24:3a:4f:6f:81:46:23:ce:1b:92:f7:a1:0d:39:b0:11:32:60:
c0:18:f7:26:49:9b:ea:f6:56:a3:d1:f4:ab:19:81:2f:f6:04:
d9:3c:e6:af:c7:75:bd:41:f6:a7:8d:f9:3f:ee:5d:17:f0:2d:
8a:10:12:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZrx0cM+PjuYaHlyaBS32FU/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl
MTI5ODcwHhcNMjUxMjA2MDQwMDQ3WhcNMjUxMjA3MDQwMDQ3WjAzMTEwLwYDVQQD
EygwYmY3ZmVlNGMzMGM4NmU2Y2Q2NzhjNjk1YjQzNjE3YTVjYzVlYjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJSrf8gaCfI8FjlCPOM3r26chX44
Qt17IvA6uOlNmWqUyUF+CNMX5LJPRndRpzpUHl0Tok48n6pfokE81FA3Iy+4g0/5
81T/vhW6hhFxAq6L6AoqslcoYdQlk4jrZhaRXdi64rjBw0t7j9Fc6Nu94wkQ/4c5
+AzSrFOyQM75xZWtCoKYeAFP+hrxZ1QK5Im6YSHKu9J58eQuyjq4yLKFL3KpoNSX
u45A3ov590cNY2MksQEEooTBDQh0HZrfI+0DWJmvfsn/sMdkmI8nNPoB0/3Zp7lq
T8S4kQCv+h0s8MP/HbfP0PvrCDOqzNoukdFP+KTzVjpdkaaxu/G3lYWxCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAv3/uTDDIbmzWeMaVtDYXpcxeuDMB8GA1UdIwQY
MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt
NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk
LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTGXgAyW
0utBitDj378JksnrkQ+QETM+wsQTca/WlV9ziWW3+VHmEOXJD1oxMrLr3Mvt+Y7Y
xyq7CA84/WCYmsSPrjMFyEPXygaeqv0igjO4RqlwssIIzdeuHoTER3dCr23WbAS0
kiz9c7iTVy65CZf/lbaCsR0j6ufAqA1BN1kBzaVQBppaNwZEk3msylQ5ajK12KRN
V0gNXnp5gvMXi3orskd7iuM6tUpbmt5xTgv5f6BTnPyfXR7vRrNFs0mg1IU/To9m
JDpPb4FGI84bkvehDTmwETJgwBj3Jkmb6vZWo9H0qxmBL/YE2Tzmr8d1vUH2p435
P+5dF/AtihASsQ==
-----END CERTIFICATE-----
Generated at Sat Dec 6 09:59:56 2025 by rpki-client