This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json) Hash identifier: zMPcrk/LCc0+c7CA4WzxhzxmlUPwYcCWxfZ/ltoCFA8= Subject key identifier: 7C:22:29:2A:F8:7C:D1:19:52:A8:E7:F1:5F:ED:F2:3E:83:2F:DB:E5 Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Certificate serial: 019AF19B9798B64C044311F4B479C29FA568 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft Manifest number: 05A8 Signing time: Sat 06 Dec 2025 03:01:37 +0000 Manifest this update: Sat 06 Dec 2025 03:01:37 +0000 Manifest next update: Sun 07 Dec 2025 03:01:37 +0000 Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: T2e3v0hXrG+QGi8LRY7T4PbsniO/6HqQaI1JqMS0GJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:97:98:b6:4c:04:43:11:f4:b4:79:c2:9f:a5:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Validity Not Before: Dec 6 03:01:37 2025 GMT Not After : Dec 7 03:01:37 2025 GMT Subject: CN=7c22292af87cd11952a8e7f15fedf23e832fdbe5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:be:f1:05:d4:ec:09:fd:ea:cb:7e:a5:0b: 1a:23:fc:5d:da:50:0a:9a:b7:db:1b:be:25:1b:20: 9f:4a:bd:9e:e6:d0:84:3d:c3:a5:0f:ea:67:d6:1c: 80:93:53:36:41:cd:11:16:61:9f:13:e3:d9:69:23: dc:67:f5:a0:9c:12:a0:72:73:5f:41:9c:64:79:66: 21:b9:8c:c6:8d:b4:6e:c6:86:51:83:95:3d:b8:63: 92:12:91:1d:a5:3e:d3:1e:1e:ad:b6:7a:1e:b1:a8: 18:dc:09:3c:27:c7:75:b0:3d:3b:64:25:35:74:5a: 03:49:3b:84:2b:99:e3:58:17:6e:ee:8f:17:74:60: 5f:b6:70:ab:5f:f4:f7:db:88:e0:99:2b:e5:ad:41: 78:47:d3:97:c8:66:2e:7a:b5:a2:4c:34:6c:85:cc: b3:e1:3a:3d:49:c6:e2:e1:85:c6:05:67:ce:40:69: ac:1e:99:1a:4c:5e:89:f3:f2:89:e2:69:a9:28:dc: 87:58:e3:e1:42:22:4b:73:24:80:bc:d7:97:97:fb: 83:2a:d0:6c:27:b9:5e:28:b1:fd:5c:f4:be:31:8e: cc:78:49:23:dc:0d:36:b0:5e:5e:f8:11:25:b4:7c: 5b:d6:f2:b1:9b:8d:d3:05:b6:3b:ab:1f:e1:8d:4d: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:22:29:2A:F8:7C:D1:19:52:A8:E7:F1:5F:ED:F2:3E:83:2F:DB:E5 X509v3 Authority Key Identifier: keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:fb:a6:36:0a:93:59:af:1a:5e:ad:dd:bf:2f:99:90:42:0f: 21:c7:94:6b:e0:15:b1:a8:ae:c5:aa:e6:1d:b7:9e:c7:2e:dd: e9:fc:de:24:72:d3:50:3d:ef:d5:25:07:18:f2:d1:b5:1e:28: 86:b7:6c:17:25:58:3a:a3:bf:bf:da:92:00:1d:d4:6e:a0:86: 06:36:b8:88:57:fe:ed:39:97:78:dc:fa:9d:9a:e5:5a:a1:a7: a4:90:55:47:58:5d:a7:e4:73:09:3e:7b:65:19:f8:6a:60:64: 52:1b:ae:ac:f7:18:9b:6d:cb:31:e7:65:c6:54:9c:fd:b6:71: f6:0f:0c:f0:bf:e7:2a:0b:4e:69:94:55:c2:19:87:96:ac:77: cb:97:bf:aa:b8:3f:2d:2b:3d:b6:70:25:58:36:0f:ef:72:96: 02:9f:24:bf:b8:de:83:4f:a5:74:fd:3a:94:b2:68:25:e7:34: 47:57:c0:6f:9b:f7:ca:bf:9f:18:55:61:5d:ab:68:50:e6:69: a1:74:fa:24:f7:36:06:b0:9e:22:fc:8f:b0:f0:1e:e8:26:29: bf:b0:b9:d8:73:bb:4a:ee:a7:0c:cc:66:33:b4:c0:62:57:a4: 11:a3:70:31:6b:ae:c0:83:53:1e:67:4a:ee:13:9e:24:b4:94: 59:97:69:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxm5eYtkwEQxH0tHnCn6VoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTVmZjdlN2UxYWFmMzhlNTk5NjlkNjA5ODA0YTNiM2Yw NWJlODgwHhcNMjUxMjA2MDMwMTM3WhcNMjUxMjA3MDMwMTM3WjAzMTEwLwYDVQQD Eyg3YzIyMjkyYWY4N2NkMTE5NTJhOGU3ZjE1ZmVkZjIzZTgzMmZkYmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJi+8QXU7An96st+pQsaI/xd2lAK mrfbG74lGyCfSr2e5tCEPcOlD+pn1hyAk1M2Qc0RFmGfE+PZaSPcZ/WgnBKgcnNf QZxkeWYhuYzGjbRuxoZRg5U9uGOSEpEdpT7THh6ttnoesagY3Ak8J8d1sD07ZCU1 dFoDSTuEK5njWBdu7o8XdGBftnCrX/T324jgmSvlrUF4R9OXyGYuerWiTDRshcyz 4To9Scbi4YXGBWfOQGmsHpkaTF6J8/KJ4mmpKNyHWOPhQiJLcySAvNeXl/uDKtBs J7leKLH9XPS+MY7MeEkj3A02sF5e+BEltHxb1vKxm43TBbY7qx/hjU3OiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwiKSr4fNEZUqjn8V/t8j6DL9vlMB8GA1UdIwQY MBaAFBal/35+Gq845Zlp1gmASjs/Bb6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2It NjZkYWRlYTI5YzRhLzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2ItNjZkYWRlYTI5YzRh LzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPfumNgqT Wa8aXq3dvy+ZkEIPIceUa+AVsaiuxarmHbeexy7d6fzeJHLTUD3v1SUHGPLRtR4o hrdsFyVYOqO/v9qSAB3UbqCGBja4iFf+7TmXeNz6nZrlWqGnpJBVR1hdp+RzCT57 ZRn4amBkUhuurPcYm23LMedlxlSc/bZx9g8M8L/nKgtOaZRVwhmHlqx3y5e/qrg/ LSs9tnAlWDYP73KWAp8kv7jeg0+ldP06lLJoJec0R1fAb5v3yr+fGFVhXatoUOZp oXT6JPc2BrCeIvyPsPAe6CYpv7C52HO7Su6nDMxmM7TAYlekEaNwMWuuwINTHmdK 7hOeJLSUWZdpcQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:40:19 2025 by rpki-client