This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json) Hash identifier: peRnIzFv2XhGQXgcKFwQnwx6+0/8FbpltF3qo1XpToQ= Subject key identifier: 7A:1F:29:80:0E:89:8D:82:31:CA:3A:42:51:FF:20:CC:B0:FD:60:66 Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Certificate serial: 019AF31C7101A192EA7C169D17B78DDDFBDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft Manifest number: 1766 Signing time: Sat 06 Dec 2025 10:01:58 +0000 Manifest this update: Sat 06 Dec 2025 10:01:58 +0000 Manifest next update: Sun 07 Dec 2025 10:01:58 +0000 Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: pOXD4j5zr9JRKsJZUFfMULkD3fuxFrZMd6BTwD4Gj50=) 2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=) 3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:71:01:a1:92:ea:7c:16:9d:17:b7:8d:dd:fb:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68 Validity Not Before: Dec 6 10:01:58 2025 GMT Not After : Dec 7 10:01:58 2025 GMT Subject: CN=7a1f29800e898d8231ca3a4251ff20ccb0fd6066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c4:c3:d7:01:07:1d:15:52:a3:c5:45:b2:75: 86:a8:35:96:96:3b:f3:69:59:d2:b2:44:6b:c1:b8: d2:e9:9a:f8:29:20:55:e8:67:52:72:e8:ea:14:cb: 4f:70:23:71:3b:17:ab:f5:4f:43:b2:ab:9e:57:2d: d7:85:ce:33:48:aa:12:d7:75:15:de:5b:8e:7f:16: 42:a4:1b:de:b0:36:95:8d:bc:19:c5:7e:84:79:0c: 89:42:03:56:62:15:cb:7c:2d:4d:3b:30:fa:59:89: b9:42:87:01:a6:48:b2:dd:a6:75:7f:9d:00:8f:f0: 7c:16:3a:27:6f:54:05:23:92:25:36:e1:d4:e2:e0: a8:76:40:28:78:1a:d6:4d:55:b1:47:dc:91:d1:04: 06:85:29:e4:78:db:ac:b0:61:6c:8a:9e:c6:7f:f6: ae:91:b9:c6:96:71:b6:a5:de:73:65:a8:28:1d:9d: 87:4f:6c:6a:be:04:00:7c:e1:fd:8d:ad:58:63:a8: 61:c1:6f:f1:76:62:25:7f:fc:ee:2e:cb:20:71:70: cc:4a:75:a2:76:f3:28:e2:83:fd:3a:e6:e2:d7:e2: 5b:e1:f5:ca:74:12:38:c7:13:4a:17:39:86:48:1f: 06:8d:a3:ba:a0:af:ca:54:cf:b0:af:b2:27:20:32: d3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:1F:29:80:0E:89:8D:82:31:CA:3A:42:51:FF:20:CC:B0:FD:60:66 X509v3 Authority Key Identifier: keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:cd:6f:1b:aa:14:7e:e0:eb:08:64:dd:92:d0:2f:96:d0:82: 72:71:ed:49:74:0e:a8:74:95:69:0a:93:a0:03:31:bf:66:ef: 9f:11:00:04:1c:94:3b:9a:90:49:5f:ad:60:74:90:d3:7c:22: 59:22:4b:29:5a:e4:6b:34:25:41:04:18:b6:cd:a2:b9:74:67: 11:8d:34:63:11:ad:11:06:88:f3:96:f1:b4:b5:72:c4:59:2c: 9a:b9:e5:cf:dd:20:29:51:c5:6c:14:d5:10:9e:ba:e6:4e:6e: c1:d6:99:d3:bc:59:23:2f:da:57:b4:01:5b:f8:aa:01:40:13: 2c:9b:b2:e4:56:a6:d1:61:e0:2c:f2:37:26:f5:98:20:26:44: c7:44:5a:e9:99:78:a3:9b:cb:b1:9c:fc:b3:bc:79:4f:7b:24: ff:2c:2a:bb:54:3b:6b:6b:a1:96:05:d7:43:b5:60:10:40:b5: 31:ea:2b:8e:84:4c:88:62:d3:5f:75:3a:6c:80:92:60:db:16: c6:30:1b:7b:89:42:0d:70:89:62:98:59:50:a4:1d:a4:85:f6: bd:49:86:b0:f4:35:ff:87:62:d5:e2:82:b8:63:41:2f:5c:22: 26:55:dc:f4:72:c7:22:19:af:92:7c:fc:a1:12:e9:63:1e:09: d1:c8:f4:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHHEBoZLqfBadF7eN3fvdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDJhZjcxM2UzNmU1MmM3MTg2NmM4YTllYmRhY2YzZDg2 MjliNjgwHhcNMjUxMjA2MTAwMTU4WhcNMjUxMjA3MTAwMTU4WjAzMTEwLwYDVQQD Eyg3YTFmMjk4MDBlODk4ZDgyMzFjYTNhNDI1MWZmMjBjY2IwZmQ2MDY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sTD1wEHHRVSo8VFsnWGqDWWljvz aVnSskRrwbjS6Zr4KSBV6GdScujqFMtPcCNxOxer9U9DsqueVy3Xhc4zSKoS13UV 3luOfxZCpBvesDaVjbwZxX6EeQyJQgNWYhXLfC1NOzD6WYm5QocBpkiy3aZ1f50A j/B8Fjonb1QFI5IlNuHU4uCodkAoeBrWTVWxR9yR0QQGhSnkeNussGFsip7Gf/au kbnGlnG2pd5zZagoHZ2HT2xqvgQAfOH9ja1YY6hhwW/xdmIlf/zuLssgcXDMSnWi dvMo4oP9Oubi1+Jb4fXKdBI4xxNKFzmGSB8GjaO6oK/KVM+wr7InIDLTxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHofKYAOiY2CMco6QlH/IMyw/WBmMB8GA1UdIwQY MBaAFBUCr3E+NuUscYZsip69rPPYYptoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDkt NWE4MjMwZTc2NDNhLzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NS85ZGNjMjUtNWIwYS00YzNlLTkxNDktNWE4MjMwZTc2NDNh LzEvRlFLdmNUNDI1U3h4aG15S25yMnM4OWhpbTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACs1vG6oU fuDrCGTdktAvltCCcnHtSXQOqHSVaQqToAMxv2bvnxEABByUO5qQSV+tYHSQ03wi WSJLKVrkazQlQQQYts2iuXRnEY00YxGtEQaI85bxtLVyxFksmrnlz90gKVHFbBTV EJ665k5uwdaZ07xZIy/aV7QBW/iqAUATLJuy5Fam0WHgLPI3JvWYICZEx0Ra6Zl4 o5vLsZz8s7x5T3sk/ywqu1Q7a2uhlgXXQ7VgEEC1MeorjoRMiGLTX3U6bICSYNsW xjAbe4lCDXCJYphZUKQdpIX2vUmGsPQ1/4di1eKCuGNBL1wiJlXc9HLHIhmvknz8 oRLpYx4J0cj0zA== -----END CERTIFICATE-----Generated at Sat Dec 6 15:29:41 2025 by rpki-client