This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json) Hash identifier: hqKAidpngOwXSySGdjA2j8xG6UQA4+kfGkmRPfXmLeQ= Subject key identifier: 7E:5F:4A:2A:20:3F:CD:05:BD:C4:B8:F1:B9:D8:F8:EC:0D:31:07:58 Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Certificate serial: 019AF31B413EF28A6DFA952F4211A9B2038F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft Manifest number: 0631 Signing time: Sat 06 Dec 2025 10:00:40 +0000 Manifest this update: Sat 06 Dec 2025 10:00:40 +0000 Manifest next update: Sun 07 Dec 2025 10:00:40 +0000 Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: CKMHlPE/ThZUP+hDvUJ0lZeTqxBAu5vYJdZ+3EO+h08=) 2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:41:3e:f2:8a:6d:fa:95:2f:42:11:a9:b2:03:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Validity Not Before: Dec 6 10:00:40 2025 GMT Not After : Dec 7 10:00:40 2025 GMT Subject: CN=7e5f4a2a203fcd05bdc4b8f1b9d8f8ec0d310758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:6a:21:b5:53:b1:5f:3a:77:57:a5:39:e1: 50:40:78:70:04:fb:d4:1e:84:b8:a2:33:0e:2c:a2: 7f:e6:59:b8:66:ce:ea:87:16:6f:75:2f:0d:d8:9a: be:c0:39:20:1b:f0:b9:04:cc:a1:20:8d:64:67:2f: b1:8f:24:06:68:9a:19:f0:b4:80:8b:ad:8a:a1:4f: 94:b4:d3:23:16:cb:f1:e5:f4:df:44:ce:80:90:20: db:65:2a:cf:33:f5:8e:9a:36:9a:75:1c:30:a7:c1: d1:de:31:74:ca:47:e5:43:27:e9:46:34:16:47:c6: 90:7d:9b:24:04:29:50:87:73:28:9c:2d:d7:53:db: 78:2e:4b:70:6c:f2:39:84:8f:ce:01:f9:ea:ba:e5: 46:09:35:ba:7f:99:40:79:6e:93:50:cb:db:b3:1e: b0:af:aa:9d:80:96:48:10:b2:10:e3:d2:e6:ec:71: 05:29:99:4c:64:e7:35:d7:8c:8f:58:c9:57:fc:05: 08:40:82:ce:f2:23:28:04:ab:a3:87:3d:c0:01:5e: 76:6a:30:71:84:2f:28:a9:c3:67:57:6b:37:37:17: 26:11:01:a3:0c:ec:28:9d:58:73:ac:87:15:1a:4d: 95:d1:42:c3:20:55:7b:cd:89:3e:51:6e:1d:be:8c: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:5F:4A:2A:20:3F:CD:05:BD:C4:B8:F1:B9:D8:F8:EC:0D:31:07:58 X509v3 Authority Key Identifier: keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:23:0b:07:79:1a:83:5f:1f:6f:a5:ff:59:41:3f:d2:c1:81: f2:74:b7:06:eb:8b:2b:05:83:7b:ec:76:49:cd:1a:b4:69:25: be:18:2a:a4:43:e8:75:4b:44:0e:4e:ee:51:bc:da:63:a2:51: 9d:1e:b6:cc:04:69:39:ad:f9:95:e2:1d:b6:43:9b:ee:0d:88: 7d:77:66:42:9b:2a:59:74:ef:55:7b:52:a3:2c:19:9a:15:3a: 3b:03:d1:32:94:15:ad:6b:b1:32:d3:26:4d:fa:2c:54:91:52: 33:8e:cd:5a:db:5c:59:3c:7e:32:2f:59:97:31:90:f0:54:60: 6c:93:83:82:da:0b:e5:7d:da:fa:de:48:31:32:d7:51:9a:8c: ac:8d:a1:01:7f:6c:6d:a1:2e:28:ef:da:11:dc:38:cc:d5:e6: b8:00:c4:79:b8:3e:b1:5d:25:70:d4:22:80:dc:ed:2c:64:64: e1:b6:cf:5b:40:42:70:f9:a7:bc:0d:0a:51:c4:5b:71:6d:07: 56:9c:dc:61:1a:ed:d4:30:23:c4:f2:f5:91:f8:0b:26:51:54: c2:8e:0f:91:c8:c4:02:9f:91:3a:b2:5f:9f:53:b4:70:c7:c8: b5:78:3e:87:b3:31:03:05:81:a8:56:d4:fe:4e:3e:ec:16:af: f1:e3:b6:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG0E+8opt+pUvQhGpsgOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy ZDIxNWYwHhcNMjUxMjA2MTAwMDQwWhcNMjUxMjA3MTAwMDQwWjAzMTEwLwYDVQQD Eyg3ZTVmNGEyYTIwM2ZjZDA1YmRjNGI4ZjFiOWQ4ZjhlYzBkMzEwNzU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA075qIbVTsV86d1elOeFQQHhwBPvU HoS4ojMOLKJ/5lm4Zs7qhxZvdS8N2Jq+wDkgG/C5BMyhII1kZy+xjyQGaJoZ8LSA i62KoU+UtNMjFsvx5fTfRM6AkCDbZSrPM/WOmjaadRwwp8HR3jF0ykflQyfpRjQW R8aQfZskBClQh3MonC3XU9t4LktwbPI5hI/OAfnquuVGCTW6f5lAeW6TUMvbsx6w r6qdgJZIELIQ49Lm7HEFKZlMZOc114yPWMlX/AUIQILO8iMoBKujhz3AAV52ajBx hC8oqcNnV2s3NxcmEQGjDOwonVhzrIcVGk2V0ULDIFV7zYk+UW4dvoxAAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5fSiogP80FvcS48bnY+OwNMQdYMB8GA1UdIwQY MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyMLB3ka g18fb6X/WUE/0sGB8nS3BuuLKwWDe+x2Sc0atGklvhgqpEPodUtEDk7uUbzaY6JR nR62zARpOa35leIdtkOb7g2IfXdmQpsqWXTvVXtSoywZmhU6OwPRMpQVrWuxMtMm TfosVJFSM47NWttcWTx+Mi9ZlzGQ8FRgbJODgtoL5X3a+t5IMTLXUZqMrI2hAX9s baEuKO/aEdw4zNXmuADEebg+sV0lcNQigNztLGRk4bbPW0BCcPmnvA0KUcRbcW0H VpzcYRrt1DAjxPL1kfgLJlFUwo4PkcjEAp+ROrJfn1O0cMfItXg+h7MxAwWBqFbU /k4+7Bav8eO2Kw== -----END CERTIFICATE-----Generated at Sat Dec 6 18:13:13 2025 by rpki-client