This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json) Hash identifier: VxYqBRG3duKHgU8DJKQJDBOGbQCL4gEv4n24OHsDUNo= Subject key identifier: C4:7E:51:96:6A:D0:7A:EB:A1:47:A3:53:93:91:7E:75:D7:78:B7:C5 Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Certificate serial: 019AF0F5E4BDBC2785D997707AA87D467EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 00:00:37 +0000 Manifest this update: Sat 06 Dec 2025 00:00:37 +0000 Manifest next update: Sun 07 Dec 2025 00:00:37 +0000 Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=) 2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=) 3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=) 4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: lbmWSM+nhvTjMb+CVAUgXqKazqQgVQ9N8b6VNAZGW0Y=) 5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=) 6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:e4:bd:bc:27:85:d9:97:70:7a:a8:7d:46:7e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Validity Not Before: Dec 6 00:00:37 2025 GMT Not After : Dec 7 00:00:37 2025 GMT Subject: CN=c47e51966ad07aeba147a35393917e75d778b7c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:5b:ed:c1:3b:d2:40:98:04:6a:f3:4d:5b:0b: 93:de:1e:58:c7:8a:83:00:e4:66:6d:73:b1:71:3b: 56:89:81:6f:8f:b4:e2:30:90:bc:a0:40:dd:5c:c1: 25:05:13:90:ad:d7:75:74:be:cd:7c:9a:10:4f:5f: 18:a7:ae:82:79:df:32:7f:d1:f2:8e:95:95:4e:18: 8f:03:fc:18:16:19:8e:1c:fd:67:4e:bc:03:aa:7a: be:27:b7:3d:55:f2:50:bf:59:92:6e:bb:1c:63:e9: de:23:57:8c:9e:cf:10:be:73:fe:36:b1:38:d9:64: 23:1d:f0:ae:63:19:e7:2c:c7:71:c5:8b:8e:fc:2c: b6:9a:7d:31:18:69:1d:18:fa:0a:77:af:12:34:ba: a9:7c:0d:2d:45:c0:40:91:49:c5:fe:d5:44:7d:d8: 35:5b:d7:6f:7c:03:64:91:f1:8d:6f:14:0c:82:f4: a5:fb:c6:88:36:dd:63:1a:c4:86:29:97:d9:b8:01: 89:a9:c1:76:37:70:4c:90:78:0d:2b:71:2f:4e:88: 2c:4f:d9:18:56:f9:af:d0:9f:9f:d2:c1:25:7f:e8: 98:bd:c4:cc:c6:79:f5:24:0b:34:7b:bf:51:59:ed: b2:90:34:a7:bb:56:ce:1e:8a:5e:a4:3b:68:4d:15: 51:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7E:51:96:6A:D0:7A:EB:A1:47:A3:53:93:91:7E:75:D7:78:B7:C5 X509v3 Authority Key Identifier: keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:6b:15:4c:aa:0b:fd:21:41:5b:ba:4b:d9:66:fb:4b:49:d4: 50:cf:84:5a:94:c8:49:8d:82:84:a4:cb:ea:03:de:ab:49:c5: 42:58:ba:a5:a0:8b:50:7a:17:64:77:41:ea:69:dc:67:00:5d: 05:ce:68:db:9f:ff:d6:79:20:cf:1d:a7:af:4f:51:80:f1:18: de:25:ea:b3:8d:da:9f:f2:76:d9:95:6a:0a:96:43:ed:fb:99: 83:ef:cc:0b:dd:64:ca:19:65:77:d5:d4:f5:bd:58:04:19:28: 6e:69:2d:99:97:ab:c7:e6:d5:86:c6:50:9e:3c:c5:f8:cb:e3: 9e:c8:33:e2:c1:ff:0e:f6:55:bd:df:39:be:28:f2:11:54:d6: 04:ff:73:89:90:12:eb:44:b0:27:92:c7:0f:d8:92:8f:33:8a: 35:e0:74:c4:8a:07:1e:36:29:62:25:8d:e8:ac:c2:50:9f:fe: d7:24:ee:10:31:85:c0:71:ac:2f:20:41:65:ae:fb:5c:46:81: 0a:90:6b:6d:13:9a:0b:a6:cf:7b:7e:6e:33:ba:d4:1b:9d:69: 46:54:d8:88:40:31:99:28:18:ad:7f:b9:0e:ff:51:d8:de:24: e0:53:17:f0:61:c7:87:f8:6d:83:d3:76:43:70:81:f7:e3:ef: ad:9e:93:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9eS9vCeF2Zdweqh9Rn6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy YzBlMzYwHhcNMjUxMjA2MDAwMDM3WhcNMjUxMjA3MDAwMDM3WjAzMTEwLwYDVQQD EyhjNDdlNTE5NjZhZDA3YWViYTE0N2EzNTM5MzkxN2U3NWQ3NzhiN2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VvtwTvSQJgEavNNWwuT3h5Yx4qD AORmbXOxcTtWiYFvj7TiMJC8oEDdXMElBROQrdd1dL7NfJoQT18Yp66Ced8yf9Hy jpWVThiPA/wYFhmOHP1nTrwDqnq+J7c9VfJQv1mSbrscY+neI1eMns8QvnP+NrE4 2WQjHfCuYxnnLMdxxYuO/Cy2mn0xGGkdGPoKd68SNLqpfA0tRcBAkUnF/tVEfdg1 W9dvfANkkfGNbxQMgvSl+8aINt1jGsSGKZfZuAGJqcF2N3BMkHgNK3EvTogsT9kY Vvmv0J+f0sElf+iYvcTMxnn1JAs0e79RWe2ykDSnu1bOHopepDtoTRVRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMR+UZZq0HrroUejU5ORfnXXeLfFMB8GA1UdIwQY MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct MDM1MzIxNDBlZjUyLzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWsVTKoL /SFBW7pL2Wb7S0nUUM+EWpTISY2ChKTL6gPeq0nFQli6paCLUHoXZHdB6mncZwBd Bc5o25//1nkgzx2nr09RgPEY3iXqs43an/J22ZVqCpZD7fuZg+/MC91kyhlld9XU 9b1YBBkobmktmZerx+bVhsZQnjzF+Mvjnsgz4sH/DvZVvd85vijyEVTWBP9ziZAS 60SwJ5LHD9iSjzOKNeB0xIoHHjYpYiWN6KzCUJ/+1yTuEDGFwHGsLyBBZa77XEaB CpBrbROaC6bPe35uM7rUG51pRlTYiEAxmSgYrX+5Dv9R2N4k4FMX8GHHh/htg9N2 Q3CB9+PvrZ6Ttw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:29:01 2025 by rpki-client