This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json) Hash identifier: XmaWf6yWzlYy23jRZ8l8oZCd0gbozYTIn4Svx1CWYLc= Subject key identifier: 3B:1C:4A:17:1D:43:8A:9A:1C:89:02:92:D2:43:C9:49:CE:D0:C0:79 Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Certificate serial: 019AF2AD60EE19EA475D9821F8842A473A7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 08:00:40 +0000 Manifest this update: Sat 06 Dec 2025 08:00:40 +0000 Manifest next update: Sun 07 Dec 2025 08:00:40 +0000 Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: I+v1obHyk7MMbZElObGPxkiIlR49m3w0CaX8KOOGT8w=) 2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:60:ee:19:ea:47:5d:98:21:f8:84:2a:47:3a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Validity Not Before: Dec 6 08:00:40 2025 GMT Not After : Dec 7 08:00:40 2025 GMT Subject: CN=3b1c4a171d438a9a1c890292d243c949ced0c079 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d5:79:04:30:c1:be:33:eb:df:7e:83:f7:cd: c7:61:38:29:08:16:9e:23:51:a0:3b:70:a9:83:12: 7f:b8:3c:ea:d8:d6:8e:d5:4b:94:69:29:22:97:5a: 4a:47:3a:98:a6:18:15:c4:75:c5:34:75:22:a3:52: 74:c1:e5:d0:b5:0c:39:6a:47:ec:5c:dc:b9:9a:1b: 72:93:34:ca:f6:da:e8:e2:17:69:51:cc:66:ad:59: 27:da:7c:19:3d:ae:c1:30:ed:30:eb:00:22:5f:e9: 2e:a0:4c:9f:77:82:1b:f7:aa:0c:1d:26:27:2b:40: 44:7d:31:06:cd:04:de:88:4d:7c:9b:fb:03:a4:40: b3:ac:19:e4:d7:2e:ca:04:6e:7e:e4:c1:d3:07:4f: 6a:f2:e9:56:ee:c6:d6:77:f6:47:37:37:62:e7:87: 4d:05:5f:63:1f:e5:a9:ea:b2:48:fb:eb:e9:b8:44: 1f:df:6b:c7:d1:13:b5:e6:12:df:48:05:d5:1c:32: 2c:eb:79:6e:9a:5d:83:30:2b:30:13:ae:2f:35:95: e7:54:62:12:44:55:8f:85:fd:ca:ab:18:17:d0:1f: 66:d4:ae:fd:31:68:13:1c:62:e8:0d:fe:08:e6:9e: ce:15:86:3b:05:6f:c6:55:de:54:51:59:21:55:6c: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:1C:4A:17:1D:43:8A:9A:1C:89:02:92:D2:43:C9:49:CE:D0:C0:79 X509v3 Authority Key Identifier: keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:93:4f:03:92:4d:c4:21:0a:39:24:e5:a9:d8:8e:98:b5:37: 5c:68:4e:eb:75:e7:2a:5a:a9:9e:45:32:d8:c9:dd:fa:37:71: 7b:28:17:21:9c:ca:9d:30:ce:c9:d1:c1:39:c7:8b:d4:13:9d: 7c:c8:64:2a:06:d3:7c:0c:32:1b:fc:76:71:0b:52:ca:a2:71: 0c:fe:19:5b:be:f0:94:6a:89:45:1d:7b:e7:68:da:68:7d:9d: b3:ac:ed:7a:05:78:0c:7b:17:b0:42:1d:fa:df:7f:4d:97:49: 7b:3b:5c:66:6a:fb:86:71:07:b0:6b:9b:a1:11:d5:9a:8e:eb: 47:91:52:6e:57:a2:96:72:4f:71:67:71:5b:9a:61:ec:05:65: 15:0c:b7:ab:7a:3b:cd:94:a9:32:05:55:6d:76:c4:11:b5:2e: f7:36:67:02:65:4f:b9:56:a1:9f:1e:e5:cd:2c:cc:95:36:8a: 5f:28:62:06:26:a1:ae:20:df:d3:78:b1:c5:89:e1:23:8f:38: ce:f5:d7:73:47:2c:ef:80:1f:85:99:60:65:ad:64:ed:e8:a9: 4f:ca:51:19:3a:3b:5a:c9:33:0d:fb:cd:73:39:54:66:ed:02: 4e:d1:74:21:d9:6c:b5:72:2c:c5:37:0e:05:68:9a:37:1a:9c: 0d:b8:7a:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrWDuGepHXZgh+IQqRzp6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGFjMzM0NDM4YTUzZDE4YWU0MGVmYzkzNjg3NjhiOTMx Y2ZhYzIwHhcNMjUxMjA2MDgwMDQwWhcNMjUxMjA3MDgwMDQwWjAzMTEwLwYDVQQD EygzYjFjNGExNzFkNDM4YTlhMWM4OTAyOTJkMjQzYzk0OWNlZDBjMDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltV5BDDBvjPr336D983HYTgpCBae I1GgO3CpgxJ/uDzq2NaO1UuUaSkil1pKRzqYphgVxHXFNHUio1J0weXQtQw5akfs XNy5mhtykzTK9tro4hdpUcxmrVkn2nwZPa7BMO0w6wAiX+kuoEyfd4Ib96oMHSYn K0BEfTEGzQTeiE18m/sDpECzrBnk1y7KBG5+5MHTB09q8ulW7sbWd/ZHNzdi54dN BV9jH+Wp6rJI++vpuEQf32vH0RO15hLfSAXVHDIs63luml2DMCswE64vNZXnVGIS RFWPhf3KqxgX0B9m1K79MWgTHGLoDf4I5p7OFYY7BW/GVd5UUVkhVWzXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDscShcdQ4qaHIkCktJDyUnO0MB5MB8GA1UdIwQY MBaAFH0KwzRDilPRiuQO/JNodouTHPrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzkt YjUxOWIxMzFiZjg1LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzktYjUxOWIxMzFiZjg1 LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5NPA5JN xCEKOSTlqdiOmLU3XGhO63XnKlqpnkUy2Mnd+jdxeygXIZzKnTDOydHBOceL1BOd fMhkKgbTfAwyG/x2cQtSyqJxDP4ZW77wlGqJRR1752jaaH2ds6ztegV4DHsXsEId +t9/TZdJeztcZmr7hnEHsGuboRHVmo7rR5FSbleilnJPcWdxW5ph7AVlFQy3q3o7 zZSpMgVVbXbEEbUu9zZnAmVPuVahnx7lzSzMlTaKXyhiBiahriDf03ixxYnhI484 zvXXc0cs74AfhZlgZa1k7eipT8pRGTo7WskzDfvNczlUZu0CTtF0IdlstXIsxTcO BWiaNxqcDbh6wA== -----END CERTIFICATE-----Generated at Sat Dec 6 09:30:29 2025 by rpki-client