This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft File: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json) Hash identifier: aGIqQzTPG87dL6wDa/efxPMg2HYJPn0RPpYxKYZceu8= Subject key identifier: 41:F4:5F:7D:DE:8F:86:BA:23:FF:3B:5E:40:2A:05:48:47:6B:C8:FF Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78 Certificate issuer: /CN=7d014c9a158218eed684ae2fc06d58e5cf671478 Certificate serial: 019AF12EEB15271F84898ED12FA0ADC6B0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft Manifest number: 0FF0 Signing time: Sat 06 Dec 2025 01:02:55 +0000 Manifest this update: Sat 06 Dec 2025 01:02:55 +0000 Manifest next update: Sun 07 Dec 2025 01:02:55 +0000 Files and hashes: 1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=) 2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: iIQ6ZAzRJ+LF8PuRtXG7X6g5QfdiEKT3GFivOqHy1BA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:eb:15:27:1f:84:89:8e:d1:2f:a0:ad:c6:b0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478 Validity Not Before: Dec 6 01:02:55 2025 GMT Not After : Dec 7 01:02:55 2025 GMT Subject: CN=41f45f7dde8f86ba23ff3b5e402a0548476bc8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:47:20:bb:5e:34:be:40:0d:7f:ad:3d:38:d7: 7a:da:1d:1f:2a:5b:4f:01:b4:60:24:68:b6:30:34: 8e:41:eb:25:aa:b9:5b:aa:f4:53:19:42:b3:4f:ef: e4:87:01:fb:87:70:50:47:41:ff:28:4a:e9:81:a4: 5d:3d:f8:7c:8b:87:cb:db:ba:a6:4a:d4:7f:54:82: 67:fb:83:c1:18:04:51:30:0e:4d:b8:dd:2b:79:f9: 88:4e:49:2d:70:7d:d8:0b:cd:ea:d4:45:ce:7a:7b: 9e:1d:69:5c:70:5d:43:4f:c7:4f:2f:0c:55:2a:9e: e8:7a:d0:77:ba:44:92:4f:c7:9d:80:fb:4d:46:18: a4:aa:ff:90:d9:ae:07:4f:6e:e7:c3:f9:fd:fa:f4: 7e:3e:ea:60:88:3a:a5:d4:14:e4:9d:bc:88:83:9c: 1b:30:e8:1e:79:5b:dd:5a:fd:fd:69:ad:34:29:c9: a4:6f:53:80:d7:3c:99:a2:33:3b:10:76:52:fc:0d: f5:48:bd:3b:b3:fa:db:36:15:18:0a:82:2e:76:06: 33:78:13:13:c5:1e:74:0c:1c:a0:3b:8f:9f:ec:42: fd:e4:7b:d9:d1:8f:a5:c6:88:d3:a1:43:fe:e9:7d: d7:72:02:62:60:c8:9e:5a:28:51:45:d7:f0:d3:9c: 51:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:F4:5F:7D:DE:8F:86:BA:23:FF:3B:5E:40:2A:05:48:47:6B:C8:FF X509v3 Authority Key Identifier: keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:14:39:1c:35:0b:73:07:0e:62:b7:d8:09:dd:4d:85:ec:9c: dc:82:3c:ab:43:4f:88:fa:11:de:32:fd:02:33:e4:97:c8:95: 8d:7c:31:6d:bc:67:86:a1:71:6e:02:c4:0e:c5:fd:e3:4b:fc: 98:9f:ff:12:5a:de:38:97:d0:ea:ed:9d:af:93:65:2a:87:38: 21:b7:bf:20:cb:49:d9:6c:67:b0:bc:ae:8f:00:1c:99:51:16: 34:9f:8a:fb:40:98:8d:dd:e4:35:5c:80:8f:54:4c:f4:28:3d: 41:1a:fd:29:56:7a:9e:5d:a3:4d:c5:dc:6a:9c:e5:a1:f4:30: 45:02:1f:54:e2:62:fe:1c:17:f6:de:99:91:82:cb:02:52:03: 9f:6a:7c:69:d3:42:2b:36:f8:33:ea:9e:cb:ba:34:3b:48:1f: f6:70:91:d0:b8:79:d2:5a:2c:1f:a8:6b:06:e3:60:ee:f4:eb: e0:a9:ec:fa:df:3e:d0:c0:9b:0b:1c:b9:22:f5:be:58:94:72: 13:3a:70:96:f9:21:01:21:55:b0:d4:03:43:7e:49:d5:c4:d7: e2:9d:21:ee:5a:a8:79:0c:e8:f2:30:bb:fc:a9:9c:f4:79:39: 3f:ba:09:35:ae:e9:d0:ce:42:81:f7:11:60:c8:97:7e:64:42: 0d:fd:1f:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLusVJx+EiY7RL6CtxrCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDE0YzlhMTU4MjE4ZWVkNjg0YWUyZmMwNmQ1OGU1Y2Y2 NzE0NzgwHhcNMjUxMjA2MDEwMjU1WhcNMjUxMjA3MDEwMjU1WjAzMTEwLwYDVQQD Eyg0MWY0NWY3ZGRlOGY4NmJhMjNmZjNiNWU0MDJhMDU0ODQ3NmJjOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0cgu140vkANf609ONd62h0fKltP AbRgJGi2MDSOQeslqrlbqvRTGUKzT+/khwH7h3BQR0H/KErpgaRdPfh8i4fL27qm StR/VIJn+4PBGARRMA5NuN0refmITkktcH3YC83q1EXOenueHWlccF1DT8dPLwxV Kp7oetB3ukSST8edgPtNRhikqv+Q2a4HT27nw/n9+vR+PupgiDql1BTknbyIg5wb MOgeeVvdWv39aa00Kcmkb1OA1zyZojM7EHZS/A31SL07s/rbNhUYCoIudgYzeBMT xR50DBygO4+f7EL95HvZ0Y+lxojToUP+6X3XcgJiYMieWihRRdfw05xR2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEH0X33ej4a6I/87XkAqBUhHa8j/MB8GA1UdIwQY MBaAFH0BTJoVghju1oSuL8BtWOXPZxR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFGTW1oV0NHTzdXaEs0dndHMVk1YzluRkhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83ODczODYtYjMzZi00NmRiLTljM2Ut OTBlYjJiODg2N2I4LzEvZlFGTW1oV0NHTzdXaEs0dndHMVk1YzluRkhnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83ODczODYtYjMzZi00NmRiLTljM2UtOTBlYjJiODg2N2I4 LzEvZlFGTW1oV0NHTzdXaEs0dndHMVk1YzluRkhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGBQ5HDUL cwcOYrfYCd1Nheyc3II8q0NPiPoR3jL9AjPkl8iVjXwxbbxnhqFxbgLEDsX940v8 mJ//ElreOJfQ6u2dr5NlKoc4Ibe/IMtJ2WxnsLyujwAcmVEWNJ+K+0CYjd3kNVyA j1RM9Cg9QRr9KVZ6nl2jTcXcapzlofQwRQIfVOJi/hwX9t6ZkYLLAlIDn2p8adNC Kzb4M+qey7o0O0gf9nCR0Lh50losH6hrBuNg7vTr4Kns+t8+0MCbCxy5IvW+WJRy EzpwlvkhASFVsNQDQ35J1cTX4p0h7lqoeQzo8jC7/Kmc9Hk5P7oJNa7p0M5CgfcR YMiXfmRCDf0fpw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:32:58 2025 by rpki-client