This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json) Hash identifier: wAIbBV0geLssLmS4sCaMtiJ1YOIIx48UQIhqfNXcf1Q= Subject key identifier: DB:BF:A2:3C:58:85:1D:8A:9D:C0:EB:88:BD:6B:3F:5D:F8:CA:97:9D Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0 Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0 Certificate serial: 019AF12D4D91651166EFD667AD03BE8A8591 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft Manifest number: 031D Signing time: Sat 06 Dec 2025 01:01:09 +0000 Manifest this update: Sat 06 Dec 2025 01:01:09 +0000 Manifest next update: Sun 07 Dec 2025 01:01:09 +0000 Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: iYeJ/Izdxa6nvqRdbvKzlgsnzYjFVBHrEoosR7YBu0s=) 2: VjoP5kM-KwhZcj01jM3hl-6r6UA.roa (hash: vqqeCugYqbCnSBb7Wp1fy/fzybkRWWHMWjjnU8HbuEA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2d:4d:91:65:11:66:ef:d6:67:ad:03:be:8a:85:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0 Validity Not Before: Dec 6 01:01:09 2025 GMT Not After : Dec 7 01:01:09 2025 GMT Subject: CN=dbbfa23c58851d8a9dc0eb88bd6b3f5df8ca979d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:af:9f:b5:1f:f7:57:72:7b:cb:80:93:88:79: 47:ec:95:b4:ac:45:e3:90:f6:23:a6:de:20:d3:76: 0a:f1:14:ec:19:5a:29:80:90:4d:33:03:6e:b6:1f: 4f:9c:f2:21:02:84:14:90:97:ef:94:15:d3:7e:83: 92:f8:26:78:16:a9:60:e7:86:81:94:fb:98:ca:34: 14:99:e7:41:86:23:20:8c:09:89:7c:35:f8:cd:c4: ea:78:6e:4a:3d:ae:f9:b4:af:0d:55:c9:a5:42:b0: 95:4a:7e:21:5d:aa:53:99:10:3c:6b:f7:10:bb:ab: 28:39:2b:95:0f:1e:2f:1f:20:16:2c:d8:e0:24:61: 28:61:fd:e3:85:19:a7:c2:52:e3:c8:40:23:96:fb: e1:e8:44:b4:14:08:7c:12:45:a4:12:70:1f:03:f1: 31:40:fc:77:3f:75:e1:18:59:d8:ac:49:f2:eb:05: bd:6c:d8:ea:10:d4:c8:69:57:10:1e:b5:0d:a4:0a: 60:a2:ac:52:98:9f:71:76:50:64:7d:be:b8:e0:a5: 8f:2b:9b:54:3b:25:62:64:b8:81:e7:06:d8:db:fb: 42:89:9e:af:2d:99:70:c8:fc:5d:cf:5f:2c:d7:57: 04:0b:21:86:0e:b8:e2:59:65:0c:a1:13:ad:40:12: 68:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:A2:3C:58:85:1D:8A:9D:C0:EB:88:BD:6B:3F:5D:F8:CA:97:9D X509v3 Authority Key Identifier: keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ec:62:fd:55:93:8b:5b:d0:72:50:be:5e:d0:b6:b3:05:6b: ac:39:fc:a9:49:0e:a9:6d:20:e1:58:23:f2:9b:99:6b:f5:86: 0e:e7:57:57:a4:e7:b2:0f:05:f9:37:87:4c:aa:61:29:22:fa: 43:0a:8e:40:c6:97:68:73:ee:19:f1:b0:27:0c:ba:7e:4a:8b: c8:7f:3d:1c:d9:bd:22:4f:cd:bc:c7:44:96:31:25:4c:ae:0f: 4f:c6:b3:7c:69:87:86:e7:aa:21:1f:4c:80:23:0f:19:55:36: b0:dc:b2:77:91:20:ff:11:27:e3:b4:d1:b2:a8:14:bd:91:ed: b2:a7:fc:62:41:04:9d:2c:cb:57:c6:b9:b9:1c:dc:cf:03:a8: 9a:ba:3a:2c:43:f3:49:8a:44:62:54:71:74:92:cf:83:2b:e6: 65:dc:c6:00:54:c7:43:6c:f4:b0:c1:dd:6c:fb:ab:33:fa:4b: 6c:ed:13:7b:b0:44:79:37:62:20:70:cc:c3:17:dc:9d:a1:c4: 63:5b:88:d5:43:32:c7:b0:0b:55:7b:63:b3:e7:30:ff:da:fe: bc:54:c1:8e:d6:fc:21:be:c0:d4:e5:16:33:70:52:81:49:65: dd:da:43:26:17:63:8a:65:a3:92:85:a7:a0:de:2e:c1:ca:3e: c2:6a:29:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLU2RZRFm79ZnrQO+ioWRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YWY4ZmZhNjQ0ZTQwNDFmZGFkMGZjOTZkNjI3MmNiNDAx N2E4YjAwHhcNMjUxMjA2MDEwMTA5WhcNMjUxMjA3MDEwMTA5WjAzMTEwLwYDVQQD EyhkYmJmYTIzYzU4ODUxZDhhOWRjMGViODhiZDZiM2Y1ZGY4Y2E5NzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAva+ftR/3V3J7y4CTiHlH7JW0rEXj kPYjpt4g03YK8RTsGVopgJBNMwNuth9PnPIhAoQUkJfvlBXTfoOS+CZ4Fqlg54aB lPuYyjQUmedBhiMgjAmJfDX4zcTqeG5KPa75tK8NVcmlQrCVSn4hXapTmRA8a/cQ u6soOSuVDx4vHyAWLNjgJGEoYf3jhRmnwlLjyEAjlvvh6ES0FAh8EkWkEnAfA/Ex QPx3P3XhGFnYrEny6wW9bNjqENTIaVcQHrUNpApgoqxSmJ9xdlBkfb644KWPK5tU OyViZLiB5wbY2/tCiZ6vLZlwyPxdz18s11cECyGGDrjiWWUMoROtQBJooQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNu/ojxYhR2KncDriL1rP134ypedMB8GA1UdIwQY MBaAFBavj/pkTkBB/a0PyW1icstAF6iwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2It NWExNDM3MjQ1N2Y1LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9kYWEwM2QtZDc0Yi00Y2ZjLWEyM2ItNWExNDM3MjQ1N2Y1 LzEvRnEtUC1tUk9RRUg5clFfSmJXSnl5MEFYcUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+xi/VWT i1vQclC+XtC2swVrrDn8qUkOqW0g4Vgj8puZa/WGDudXV6Tnsg8F+TeHTKphKSL6 QwqOQMaXaHPuGfGwJwy6fkqLyH89HNm9Ik/NvMdEljElTK4PT8azfGmHhueqIR9M gCMPGVU2sNyyd5Eg/xEn47TRsqgUvZHtsqf8YkEEnSzLV8a5uRzczwOomro6LEPz SYpEYlRxdJLPgyvmZdzGAFTHQ2z0sMHdbPurM/pLbO0Te7BEeTdiIHDMwxfcnaHE Y1uI1UMyx7ALVXtjs+cw/9r+vFTBjtb8Ib7A1OUWM3BSgUll3dpDJhdjimWjkoWn oN4uwco+wmop0g== -----END CERTIFICATE-----Generated at Sat Dec 6 07:16:18 2025 by rpki-client