This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json) Hash identifier: MiveFps/YaB/4Xf4PxS5VuuZlAZ160qGZKnav72xBg4= Subject key identifier: F7:0B:22:77:50:A5:04:34:1E:C8:6D:D4:C5:86:80:E7:BE:53:4E:81 Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Certificate serial: 019AF12E24478293479C9871363A075487C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft Manifest number: 036C Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: gPloOjrlyFG5kFFFRKk9+iHTPeGJuHL5g17Dc6hB6zM=) 2: kgTnhPtf5U0Bz8tjOOggGBZkLG8.roa (hash: HNiluWUdkJ/NWqiUVgEDQcdv9s5KKhDvu8H4CNi9wMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:24:47:82:93:47:9c:98:71:36:3a:07:54:87:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=f70b227750a504341ec86dd4c58680e7be534e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:32:dc:19:35:7c:35:25:f8:a6:04:db:e4:00: d3:55:28:10:77:4c:67:fe:2d:50:28:0d:b7:c0:eb: bc:ac:59:7b:b6:39:ad:71:2d:d8:6a:eb:c7:4f:76: a5:93:3c:1c:1d:00:07:0d:ae:53:76:a1:5d:79:04: 86:5f:bf:25:ba:65:98:09:9e:f4:1f:95:02:55:e6: 52:28:75:b3:e8:37:fe:25:09:04:5d:e8:6b:5c:ef: 13:4c:5b:9e:dd:04:20:62:95:0e:d3:3f:5b:03:16: ed:69:47:87:49:fe:82:2f:a7:e5:90:a3:91:4f:78: 13:c4:3d:f6:a2:9a:44:0c:24:e4:86:b2:52:4a:81: 16:5d:01:71:8f:22:c3:dc:b5:c1:34:52:b4:84:b6: 7c:b0:ae:44:f6:29:60:11:5c:dc:86:89:e1:0f:45: 5f:bb:ee:9e:83:24:ce:89:1d:dc:89:76:07:9f:88: 67:af:42:cb:d9:d4:2e:ae:57:71:c0:f4:ad:15:c4: 83:b5:23:36:b1:15:d9:49:12:f9:46:29:d0:d7:e0: 81:92:8a:78:12:4f:0b:0c:a0:cb:de:4e:23:4c:72: dd:94:b9:11:21:a7:1e:9d:5d:7e:ed:36:65:96:8a: 6d:78:97:8c:f0:df:14:a8:11:e3:ff:72:6a:3a:f9: b4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0B:22:77:50:A5:04:34:1E:C8:6D:D4:C5:86:80:E7:BE:53:4E:81 X509v3 Authority Key Identifier: keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:08:e7:4c:c5:cc:4d:e4:98:5b:fb:45:bd:38:a1:c7:ad:72: 6f:37:f5:6a:d5:6b:d8:4f:4a:68:8f:4b:99:a4:c7:fb:97:10: b6:f4:d8:73:95:f0:1a:f1:3f:b6:22:90:88:f2:71:ca:40:b0: 0e:40:c8:aa:e6:0d:26:40:fa:4e:0d:9e:0e:f8:46:85:d7:b1: 9d:c8:07:82:97:cf:e0:07:ee:3e:39:6f:5e:d4:3e:66:ae:a9: 8d:7d:21:38:9c:a5:97:37:71:f6:61:b1:75:27:23:a6:5b:7f: 23:c5:99:16:a4:ec:69:6d:6a:b9:17:d4:95:15:5c:13:fd:8f: 38:19:9c:8d:70:b1:65:85:af:b1:83:80:3b:c0:56:36:27:ab: c7:9e:23:43:60:85:61:67:67:bc:99:bd:c1:f8:ae:9f:07:50: ab:44:c7:64:00:87:0c:1b:51:2d:6e:01:5f:71:3a:7c:ea:e5: 70:d5:60:dc:29:6c:4a:a5:08:e8:00:00:2a:ba:69:e8:2b:cb: 16:1a:62:b7:39:9e:2d:57:77:eb:7a:75:47:64:f6:2c:8e:2e: 02:a6:7d:3f:51:fa:87:2f:85:ba:38:ce:e9:5d:5e:e4:c5:43: 3b:33:c3:d4:db:93:67:c4:08:42:85:62:90:82:df:67:af:17: b0:84:5a:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiRHgpNHnJhxNjoHVIfBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYTY2ZjlkZDZiNzJjNTY3MThjODVjNWUxOGY2Njg1ZjU3 OTVjNzUwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EyhmNzBiMjI3NzUwYTUwNDM0MWVjODZkZDRjNTg2ODBlN2JlNTM0ZTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjLcGTV8NSX4pgTb5ADTVSgQd0xn /i1QKA23wOu8rFl7tjmtcS3YauvHT3alkzwcHQAHDa5TdqFdeQSGX78lumWYCZ70 H5UCVeZSKHWz6Df+JQkEXehrXO8TTFue3QQgYpUO0z9bAxbtaUeHSf6CL6flkKOR T3gTxD32oppEDCTkhrJSSoEWXQFxjyLD3LXBNFK0hLZ8sK5E9ilgEVzchonhD0Vf u+6egyTOiR3ciXYHn4hnr0LL2dQurldxwPStFcSDtSM2sRXZSRL5RinQ1+CBkop4 Ek8LDKDL3k4jTHLdlLkRIacenV1+7TZllopteJeM8N8UqBHj/3JqOvm0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcLIndQpQQ0Hsht1MWGgOe+U06BMB8GA1UdIwQY MBaAFH6mb53WtyxWcYyFxeGPZoX1eVx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMt MWYyZjQ2NGJlYTJhLzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMtMWYyZjQ2NGJlYTJh LzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEwjnTMXM TeSYW/tFvTihx61ybzf1atVr2E9KaI9LmaTH+5cQtvTYc5XwGvE/tiKQiPJxykCw DkDIquYNJkD6Tg2eDvhGhdexncgHgpfP4AfuPjlvXtQ+Zq6pjX0hOJyllzdx9mGx dScjplt/I8WZFqTsaW1quRfUlRVcE/2POBmcjXCxZYWvsYOAO8BWNierx54jQ2CF YWdnvJm9wfiunwdQq0THZACHDBtRLW4BX3E6fOrlcNVg3ClsSqUI6AAAKrpp6CvL FhpitzmeLVd363p1R2T2LI4uAqZ9P1H6hy+FujjO6V1e5MVDOzPD1NuTZ8QIQoVi kILfZ68XsIRaUw== -----END CERTIFICATE-----Generated at Sat Dec 6 06:58:05 2025 by rpki-client