This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft File: qFOfk1XT63eLG7juJyMyYBGhIps.mft (raw, json) Hash identifier: E9JrWFPu5OCa/Q0YodzdSU2j3mBRRrcPVVerl728wag= Subject key identifier: 9E:CE:D6:40:B7:53:83:04:92:00:E0:BE:D1:77:EB:E4:88:AD:16:33 Authority key identifier: A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B Certificate issuer: /CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Certificate serial: 019AF1D1A9A58401CA92AC6AAD1DC57A0279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 04:00:40 +0000 Manifest this update: Sat 06 Dec 2025 04:00:40 +0000 Manifest next update: Sun 07 Dec 2025 04:00:40 +0000 Files and hashes: 1: ShowtNM2m2UKeBL8F3fZYKX41FQ.roa (hash: fLdZxXolLRuOUGV4tUzHHqmQm+iuYEtRLW2OEHSE+Js=) 2: qFOfk1XT63eLG7juJyMyYBGhIps.crl (hash: yttWCTnsMdHz5DwUCGkrzG3Vms8t5wCVZU64/7ogxBM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:a9:a5:84:01:ca:92:ac:6a:ad:1d:c5:7a:02:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8539f9355d3eb778b1bb8ee2723326011a1229b Validity Not Before: Dec 6 04:00:40 2025 GMT Not After : Dec 7 04:00:40 2025 GMT Subject: CN=9eced640b75383049200e0bed177ebe488ad1633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:56:5b:14:bf:27:66:94:9c:37:02:7b:e2: 51:82:a3:2a:22:39:5e:92:56:5e:eb:6e:6c:28:6d: 98:7b:8c:99:da:84:75:7f:7c:db:0f:e5:7e:f2:9a: d0:85:23:56:a1:64:38:59:a5:f9:ec:fb:9f:de:c9: 06:a2:1a:62:9b:a7:e8:e5:8e:c5:61:5e:ca:f1:c6: 6c:13:e1:b5:a3:3c:55:e6:2b:7c:76:04:34:f4:7b: b7:f6:dd:bb:77:8e:16:98:39:6f:7b:26:55:5b:15: 77:41:ab:6a:fa:5a:08:91:0f:e7:ec:35:2d:3c:92: 9b:fb:27:64:0a:a1:09:b2:1b:ca:8f:23:e5:b2:fd: 63:51:4c:d5:bf:53:db:24:4b:a5:d0:5e:4b:04:72: fa:da:f1:d5:2d:1a:bb:18:ce:a3:28:7e:9e:3b:2e: 0e:80:8e:d7:eb:3c:85:7a:42:68:0a:6d:bb:58:02: b6:e3:29:3d:cd:2a:f6:9c:00:13:2d:ff:30:94:8e: e1:2c:4f:1a:ed:39:9f:db:36:46:2a:61:d3:e5:cc: 07:20:54:59:df:5b:51:97:c9:ac:cf:54:50:18:27: dc:6b:e5:79:88:33:f4:01:40:fb:2c:8a:76:27:93: 85:bc:6f:52:7f:47:ee:fb:70:ee:32:51:03:ec:ce: fb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:CE:D6:40:B7:53:83:04:92:00:E0:BE:D1:77:EB:E4:88:AD:16:33 X509v3 Authority Key Identifier: keyid:A8:53:9F:93:55:D3:EB:77:8B:1B:B8:EE:27:23:32:60:11:A1:22:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFOfk1XT63eLG7juJyMyYBGhIps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/4f8e76-59e5-40d1-a13e-71f4c47f506e/1/qFOfk1XT63eLG7juJyMyYBGhIps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:3d:96:f0:97:0b:b5:2a:88:aa:53:fe:ce:e6:5c:ae:23:2b: df:3c:be:24:93:04:82:a4:cf:09:d0:05:58:32:d6:51:07:40: 6b:70:c6:12:8e:b5:e3:73:43:ac:31:2d:47:da:8e:42:c9:31: c0:39:f3:79:3d:2a:e8:7d:5d:6b:2b:fa:ed:e3:7e:98:2d:f0: 90:37:04:0e:97:95:c1:9a:f8:3d:4d:48:76:3d:f0:5e:7a:af: a0:05:1e:9b:06:70:9f:6c:e4:6b:0b:1e:0e:00:7b:c3:08:93: c3:6b:5b:eb:67:58:c9:47:4c:6e:10:9f:5a:aa:e1:4b:0b:9d: 65:93:a9:12:50:c4:8d:7d:07:bd:dd:d3:2d:50:be:5c:3f:bd: 15:7a:83:f4:b2:49:33:a4:b9:30:be:8f:2d:45:0d:1e:72:56: f7:ad:e5:45:62:23:31:62:06:f9:e5:2c:b1:47:f0:de:2c:4f: fc:28:5d:90:a1:f7:d3:a4:77:0d:46:b1:62:31:9c:49:fe:16: 1f:5f:ee:73:5e:fe:30:95:b9:83:a2:77:22:35:77:a8:75:6f: ea:01:fa:0c:10:a4:5a:d7:8f:a9:3f:d6:42:36:af:4e:db:f7: 3f:f7:10:3d:57:b6:0c:e2:37:a4:12:5f:a1:60:f1:67:14:91: cf:d7:4e:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0amlhAHKkqxqrR3FegJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTM5ZjkzNTVkM2ViNzc4YjFiYjhlZTI3MjMzMjYwMTFh MTIyOWIwHhcNMjUxMjA2MDQwMDQwWhcNMjUxMjA3MDQwMDQwWjAzMTEwLwYDVQQD Eyg5ZWNlZDY0MGI3NTM4MzA0OTIwMGUwYmVkMTc3ZWJlNDg4YWQxNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQZWWxS/J2aUnDcCe+JRgqMqIjle klZe625sKG2Ye4yZ2oR1f3zbD+V+8prQhSNWoWQ4WaX57Puf3skGohpim6fo5Y7F YV7K8cZsE+G1ozxV5it8dgQ09Hu39t27d44WmDlveyZVWxV3Qatq+loIkQ/n7DUt PJKb+ydkCqEJshvKjyPlsv1jUUzVv1PbJEul0F5LBHL62vHVLRq7GM6jKH6eOy4O gI7X6zyFekJoCm27WAK24yk9zSr2nAATLf8wlI7hLE8a7Tmf2zZGKmHT5cwHIFRZ 31tRl8msz1RQGCfca+V5iDP0AUD7LIp2J5OFvG9Sf0fu+3DuMlED7M77OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7O1kC3U4MEkgDgvtF36+SIrRYzMB8GA1UdIwQY MBaAFKhTn5NV0+t3ixu47icjMmARoSKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2Ut NzFmNGM0N2Y1MDZlLzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80ZjhlNzYtNTllNS00MGQxLWExM2UtNzFmNGM0N2Y1MDZl LzEvcUZPZmsxWFQ2M2VMRzdqdUp5TXlZQkdoSXBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbD2W8JcL tSqIqlP+zuZcriMr3zy+JJMEgqTPCdAFWDLWUQdAa3DGEo6143NDrDEtR9qOQskx wDnzeT0q6H1dayv67eN+mC3wkDcEDpeVwZr4PU1Idj3wXnqvoAUemwZwn2zkawse DgB7wwiTw2tb62dYyUdMbhCfWqrhSwudZZOpElDEjX0Hvd3TLVC+XD+9FXqD9LJJ M6S5ML6PLUUNHnJW963lRWIjMWIG+eUssUfw3ixP/ChdkKH306R3DUaxYjGcSf4W H1/uc17+MJW5g6J3IjV3qHVv6gH6DBCkWtePqT/WQjavTtv3P/cQPVe2DOI3pBJf oWDxZxSRz9dOsg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:45 2025 by rpki-client