This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: ggnmwJvlR2+YZwM7mToJGyxFa2yZ/oSTWFCY0e3Hywg= Subject key identifier: 8F:94:9D:10:10:60:FE:05:27:76:11:49:85:22:AD:59:B4:DF:C5:A3 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019AF31C6B440E90C891AD5465642594B53A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1775 Signing time: Sat 06 Dec 2025 10:01:57 +0000 Manifest this update: Sat 06 Dec 2025 10:01:57 +0000 Manifest next update: Sun 07 Dec 2025 10:01:57 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: Z8ni21CvfFZK2iLO9Hirw+HblqqxNPb8ETGTiedK5Vs=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:6b:44:0e:90:c8:91:ad:54:65:64:25:94:b5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Dec 6 10:01:57 2025 GMT Not After : Dec 7 10:01:57 2025 GMT Subject: CN=8f949d101060fe05277611498522ad59b4dfc5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:42:85:fe:57:f4:ec:9b:07:b4:c7:33:2d:7b: 5f:c0:f0:ed:ba:95:db:18:76:37:7d:d7:5b:65:cb: c9:e1:3f:d2:8b:01:d4:a6:9b:d2:9a:19:4b:b3:00: 46:c8:1c:44:75:a4:56:10:12:09:18:09:6f:a8:56: a1:e9:80:b3:1b:1d:89:c7:89:c2:85:b9:7e:cc:bc: 01:e7:38:6b:cf:42:25:c8:14:d8:1c:2c:aa:82:a1: 0c:50:c0:7d:5d:ad:26:0b:eb:69:1d:68:1c:c3:3c: 21:ff:06:d2:96:f5:f4:5d:24:02:f3:4e:a3:d8:5a: 6b:e9:43:fb:d2:08:f8:ff:2c:8e:88:91:e7:17:4a: 6e:6a:a8:69:5f:98:ce:03:6f:a1:de:85:49:4b:cf: 9c:d2:2e:80:a6:10:38:2f:cf:81:01:73:e2:b8:3b: b0:aa:ea:1a:9f:a8:3f:a8:a8:26:97:14:a9:55:37: 8a:72:e1:1d:4f:b9:f2:15:99:54:b3:f2:d8:68:80: a6:66:d1:da:a9:ea:d8:80:ae:bc:e8:2d:c3:64:9d: 7b:36:da:46:48:42:58:be:62:a0:c5:ae:7a:57:b9: 90:55:7c:b7:ce:e1:e4:37:63:93:81:ca:95:fa:39: 35:ac:e3:e2:01:34:3e:05:37:50:cf:32:7e:1a:a4: a4:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:94:9D:10:10:60:FE:05:27:76:11:49:85:22:AD:59:B4:DF:C5:A3 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:40:c0:f3:0b:18:cd:68:88:99:0b:2b:44:8f:41:97:cf:8b: 38:76:52:8b:7c:de:2f:4f:88:55:e5:41:d0:99:7f:d5:71:c4: 12:16:3f:f4:1f:65:69:67:5d:a7:42:d3:80:77:d8:23:3d:48: 22:4e:ff:be:2c:ce:87:fb:3b:65:cb:7d:65:6a:87:b9:22:86: e6:ac:17:a5:e6:c0:85:db:be:7a:7d:1c:2e:4a:17:6a:27:f5: 3f:fd:91:df:18:d8:fc:70:e6:0f:f6:f8:88:67:1f:ed:e0:e5: 70:68:53:a5:21:62:7b:3f:ea:9c:0f:b0:72:71:2a:9f:36:64: 56:bf:59:30:e0:66:ff:5c:67:78:0b:61:2d:8e:6c:03:5a:04: 18:9d:09:e8:fa:a3:6c:01:47:ae:ad:bc:81:74:a5:f1:a5:dd: c6:1d:8a:31:fb:5f:65:d5:35:51:78:c6:ab:2c:32:81:39:ac: 15:14:6c:6a:48:df:6d:d5:14:03:69:fb:04:83:80:ca:f2:e3: bd:16:57:f4:43:c6:28:ea:b8:09:df:53:5e:75:5d:9f:84:f3: 54:cb:b5:3b:72:0e:63:70:ed:db:2b:1d:68:33:69:23:bf:b1: dc:93:23:b9:94:d5:e0:a3:e8:65:7e:ef:20:af:be:31:ec:d9: e4:a6:75:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHGtEDpDIka1UZWQllLU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMjA2MTAwMTU3WhcNMjUxMjA3MTAwMTU3WjAzMTEwLwYDVQQD Eyg4Zjk0OWQxMDEwNjBmZTA1Mjc3NjExNDk4NTIyYWQ1OWI0ZGZjNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4UKF/lf07JsHtMczLXtfwPDtupXb GHY3fddbZcvJ4T/SiwHUppvSmhlLswBGyBxEdaRWEBIJGAlvqFah6YCzGx2Jx4nC hbl+zLwB5zhrz0IlyBTYHCyqgqEMUMB9Xa0mC+tpHWgcwzwh/wbSlvX0XSQC806j 2Fpr6UP70gj4/yyOiJHnF0puaqhpX5jOA2+h3oVJS8+c0i6AphA4L8+BAXPiuDuw quoan6g/qKgmlxSpVTeKcuEdT7nyFZlUs/LYaICmZtHaqerYgK686C3DZJ17NtpG SEJYvmKgxa56V7mQVXy3zuHkN2OTgcqV+jk1rOPiATQ+BTdQzzJ+GqSkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI+UnRAQYP4FJ3YRSYUirVm038WjMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0DA8wsY zWiImQsrRI9Bl8+LOHZSi3zeL0+IVeVB0Jl/1XHEEhY/9B9laWddp0LTgHfYIz1I Ik7/vizOh/s7Zct9ZWqHuSKG5qwXpebAhdu+en0cLkoXaif1P/2R3xjY/HDmD/b4 iGcf7eDlcGhTpSFiez/qnA+wcnEqnzZkVr9ZMOBm/1xneAthLY5sA1oEGJ0J6Pqj bAFHrq28gXSl8aXdxh2KMftfZdU1UXjGqywygTmsFRRsakjfbdUUA2n7BIOAyvLj vRZX9EPGKOq4Cd9TXnVdn4TzVMu1O3IOY3Dt2ysdaDNpI7+x3JMjuZTV4KPoZX7v IK++MezZ5KZ1FA== -----END CERTIFICATE-----Generated at Sat Dec 6 20:21:13 2025 by rpki-client