This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft File: fQIT4-fr5hcKNgCo465k7ZYsDjY.mft (raw, json) Hash identifier: tjxoJaoOQYwvNrtjyM4kZCSB3LcmovBgGOGX/UHQIBA= Subject key identifier: 83:24:DC:39:B7:FE:53:B2:C7:57:A3:B6:AD:69:D4:84:1B:38:8D:22 Authority key identifier: 7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 Certificate issuer: /CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Certificate serial: 019B4212060DF30D949F6A88E139926E7131 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft Manifest number: 178A Signing time: Sun 21 Dec 2025 18:00:35 +0000 Manifest this update: Sun 21 Dec 2025 18:00:35 +0000 Manifest next update: Mon 22 Dec 2025 18:00:35 +0000 Files and hashes: 1: NpvTZ_274K1Bhd3fKXlRT4qqEqg.roa (hash: O7U2IilgFNx0uKZ0Sr7mdLoGiE/mqht2K9UbhPNacVM=) 2: P4rhr2yvQsT2Wmsa0d3b9mzRihQ.roa (hash: yJrwkDYUS+18A8gxekBRmTpvchECkoVfjLp8pGWlkB0=) 3: P_efas48rvkeOWLowealn6FM2EU.roa (hash: bHQu5iQgYpW7McRBDPs2F3TVgL2C6692qQjIPdJ6jr0=) 4: fQIT4-fr5hcKNgCo465k7ZYsDjY.crl (hash: q6uzsnxeSx9uEa25g5uJSIEs7IWRTMXwCWYELtv+dhU=) 5: lMnxmNh0WyR-ZyXRmR4VxessOW0.roa (hash: d+d+I0SIA2DkllPKcjDwQF5GfnIiXguhQ7tmZZ0v1io=) 6: xIJo2EuzM_PScXOHUg-DUkxIyEk.roa (hash: DPBdyOvextHK9GmgkjEDN72tHol0hR/S27niPvwBhyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 18:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:12:06:0d:f3:0d:94:9f:6a:88:e1:39:92:6e:71:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0213e3e7ebe6170a3600a8e3ae64ed962c0e36 Validity Not Before: Dec 21 18:00:35 2025 GMT Not After : Dec 22 18:00:35 2025 GMT Subject: CN=8324dc39b7fe53b2c757a3b6ad69d4841b388d22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:41:09:fb:6f:36:8b:e2:c5:64:3e:4a:be:c0: 82:17:b3:5e:0a:87:eb:ae:45:f0:cc:70:e4:a8:e2: f9:40:d9:e0:86:9a:85:c1:5b:32:a2:d0:a2:e0:f1: 7b:62:a8:80:e1:43:1c:dd:69:67:e7:8e:e3:e1:f0: e6:37:a4:82:5e:3e:29:5d:5d:8a:48:0f:67:16:b9: 8a:10:27:07:84:ea:4e:61:44:47:66:04:f5:6c:14: 91:c2:61:d9:af:4b:3b:90:f8:a1:ad:d1:85:e2:13: 28:04:44:be:3b:6a:c4:3b:5c:1e:e8:8e:13:b0:53: fe:a4:be:ad:39:23:7e:77:ee:57:c5:e3:e8:27:4a: 54:3a:36:6f:a5:db:e7:4d:6c:65:fe:97:57:20:d5: 1a:2c:e9:d7:9c:ff:f6:59:8f:64:b8:c9:58:32:e4: 4e:96:b0:19:a2:4c:77:b9:7e:90:aa:3b:7b:d6:38: 35:07:11:2d:19:e3:c7:cf:ea:4d:44:bc:60:2b:6c: a3:d6:26:74:57:c6:bd:48:e2:a1:00:d6:d6:7b:4c: ac:3e:1e:0e:2d:fa:07:9f:d7:c4:e0:4b:86:72:6a: 73:ca:1f:ea:e9:88:6a:8e:3a:e7:11:3a:20:62:8a: b5:68:df:b4:a2:99:9b:ea:fa:19:1d:34:b7:bf:7b: e1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:24:DC:39:B7:FE:53:B2:C7:57:A3:B6:AD:69:D4:84:1B:38:8D:22 X509v3 Authority Key Identifier: keyid:7D:02:13:E3:E7:EB:E6:17:0A:36:00:A8:E3:AE:64:ED:96:2C:0E:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQIT4-fr5hcKNgCo465k7ZYsDjY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/821dc2-6766-4988-b777-03532140ef52/1/fQIT4-fr5hcKNgCo465k7ZYsDjY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a6:9a:52:56:7f:8f:9d:7a:9d:03:34:7e:ed:8f:8e:8d:7d: 6d:f8:39:b6:8f:d1:cd:c8:f1:59:dd:29:c5:b4:c8:36:78:92: 74:ea:8e:e0:02:c3:f5:9a:4e:28:f6:34:00:0b:ac:d9:44:1f: d7:dc:64:5b:05:20:ef:e3:36:74:a6:8d:76:89:52:df:fc:b4: b2:8d:59:c9:54:80:7e:5b:41:df:1a:6b:b3:8b:d7:02:2b:7e: d4:52:4b:c5:bd:a0:22:b4:ef:9d:6f:2b:20:ff:28:25:79:5b: 89:99:f3:63:be:07:37:bc:75:fe:3a:3b:68:38:45:66:c2:e2: b3:c6:a5:71:48:06:bf:48:3b:9c:b2:41:67:2e:fb:da:0d:99: ef:35:81:a7:fb:ca:49:9b:89:d6:0e:92:5e:fb:21:4a:dd:b2: 7a:e7:7b:7b:f7:a5:ad:a6:f3:7e:7f:64:09:27:7f:92:82:46: b2:f0:f2:6c:ad:f9:13:1a:c5:5c:8e:ed:8a:9c:5f:2c:07:d4: 7e:bb:4b:1d:db:37:3e:53:5c:a8:f4:72:45:97:c2:f7:71:30: 1b:b7:20:ed:65:cd:d3:b6:68:38:14:cc:23:e1:e4:c6:5d:38: 95:0e:de:21:61:fd:1f:01:3d:d8:ac:3c:d6:79:99:3f:25:f4: 4a:88:c2:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCEgYN8w2Un2qI4TmSbnExMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDIxM2UzZTdlYmU2MTcwYTM2MDBhOGUzYWU2NGVkOTYy YzBlMzYwHhcNMjUxMjIxMTgwMDM1WhcNMjUxMjIyMTgwMDM1WjAzMTEwLwYDVQQD Eyg4MzI0ZGMzOWI3ZmU1M2IyYzc1N2EzYjZhZDY5ZDQ4NDFiMzg4ZDIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUEJ+282i+LFZD5KvsCCF7NeCofr rkXwzHDkqOL5QNnghpqFwVsyotCi4PF7YqiA4UMc3Wln547j4fDmN6SCXj4pXV2K SA9nFrmKECcHhOpOYURHZgT1bBSRwmHZr0s7kPihrdGF4hMoBES+O2rEO1we6I4T sFP+pL6tOSN+d+5XxePoJ0pUOjZvpdvnTWxl/pdXINUaLOnXnP/2WY9kuMlYMuRO lrAZokx3uX6Qqjt71jg1BxEtGePHz+pNRLxgK2yj1iZ0V8a9SOKhANbWe0ysPh4O LfoHn9fE4EuGcmpzyh/q6YhqjjrnETogYoq1aN+0opmb6voZHTS3v3vhmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIMk3Dm3/lOyx1ejtq1p1IQbOI0iMB8GA1UdIwQY MBaAFH0CE+Pn6+YXCjYAqOOuZO2WLA42MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3Nzct MDM1MzIxNDBlZjUyLzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy84MjFkYzItNjc2Ni00OTg4LWI3NzctMDM1MzIxNDBlZjUy LzEvZlFJVDQtZnI1aGNLTmdDbzQ2NWs3WllzRGpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqaaUlZ/ j516nQM0fu2Pjo19bfg5to/RzcjxWd0pxbTINniSdOqO4ALD9ZpOKPY0AAus2UQf 19xkWwUg7+M2dKaNdolS3/y0so1ZyVSAfltB3xprs4vXAit+1FJLxb2gIrTvnW8r IP8oJXlbiZnzY74HN7x1/jo7aDhFZsLis8alcUgGv0g7nLJBZy772g2Z7zWBp/vK SZuJ1g6SXvshSt2yeud7e/elrabzfn9kCSd/koJGsvDybK35ExrFXI7tipxfLAfU frtLHds3PlNcqPRyRZfC93EwG7cg7WXN07ZoOBTMI+Hkxl04lQ7eIWH9HwE92Kw8 1nmZPyX0SojCBQ== -----END CERTIFICATE-----Generated at Mon Dec 22 03:24:44 2025 by rpki-client