This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft File: fQtE5JJUnht9pTLIDDSIUMWkToA.mft (raw, json) Hash identifier: igFxYdkWgQF6DrXxdsoYGekEUZg9twJIRpdZw3foER8= Subject key identifier: 2F:2C:43:AB:6B:63:60:AE:C5:8E:5E:6A:C6:B4:AB:5B:2E:31:DA:3E Authority key identifier: 7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80 Certificate issuer: /CN=7d0b44e492549e1b7da532c80c348850c5a44e80 Certificate serial: 019AF088ED5295A2B3992F588598DD166C4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft Manifest number: 1762 Signing time: Fri 05 Dec 2025 22:01:36 +0000 Manifest this update: Fri 05 Dec 2025 22:01:36 +0000 Manifest next update: Sat 06 Dec 2025 22:01:36 +0000 Files and hashes: 1: Vh9zdU6UPXBw1wsGMQVn_pjjotw.roa (hash: RHQ7Mk9Ul2niP+vY1weS4xjGH8dOqLq3Efjab5Bc1HU=) 2: fQtE5JJUnht9pTLIDDSIUMWkToA.crl (hash: tkp/meL2Okg4G/RD8s75cfaoCqES9o3/J9/BjA0h2oU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 22:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:88:ed:52:95:a2:b3:99:2f:58:85:98:dd:16:6c:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0b44e492549e1b7da532c80c348850c5a44e80 Validity Not Before: Dec 5 22:01:36 2025 GMT Not After : Dec 6 22:01:36 2025 GMT Subject: CN=2f2c43ab6b6360aec58e5e6ac6b4ab5b2e31da3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d3:95:7d:b0:85:f2:06:7e:b7:c9:8c:f4:e4: 6d:6b:dd:c2:6d:fd:8e:04:02:9b:f9:a6:7f:c1:d7: dd:5c:1c:b9:27:2c:bf:8e:ac:78:63:3f:17:48:b5: 39:56:94:99:5e:1a:c8:e6:a3:75:35:e7:ca:90:b8: 8b:a1:f0:2a:e8:ce:f7:a3:2d:19:cb:11:00:63:48: a1:5f:0d:38:24:b1:6b:e6:d2:29:35:e7:5c:f5:26: 76:9e:df:fc:f4:54:2f:58:5b:05:fc:92:cc:d0:ab: 00:24:5b:4d:aa:1c:a3:72:f2:9a:2a:6f:86:3c:27: fd:85:8d:b9:a0:7a:48:36:b2:51:fe:60:32:4c:a7: d2:17:c8:f2:cb:c6:59:6f:99:6f:50:cf:9b:fe:08: 7d:bb:93:6b:58:c0:8d:84:38:26:25:06:eb:ac:e4: f9:7f:72:38:51:06:6a:67:dd:51:a8:44:af:e4:7a: 01:1e:f8:2c:47:ce:33:5c:8a:db:3d:01:81:36:f2: 14:fb:aa:09:03:ee:20:95:b0:6f:47:60:b0:39:61: bd:5a:a5:7b:80:5e:ae:f0:80:1f:23:d1:37:f0:9c: 33:d5:86:77:ed:43:6a:fc:5f:d1:19:92:17:c6:07: 28:bf:cb:90:87:e7:7a:ad:5e:37:c2:1b:e4:32:47: c9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2C:43:AB:6B:63:60:AE:C5:8E:5E:6A:C6:B4:AB:5B:2E:31:DA:3E X509v3 Authority Key Identifier: keyid:7D:0B:44:E4:92:54:9E:1B:7D:A5:32:C8:0C:34:88:50:C5:A4:4E:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQtE5JJUnht9pTLIDDSIUMWkToA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/b9231f-b3df-4012-96d7-7204b811250f/1/fQtE5JJUnht9pTLIDDSIUMWkToA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:bd:67:05:a6:9e:46:8b:e3:34:40:5f:62:00:21:9f:a1:cd: c3:af:be:4b:b6:9e:55:4d:5c:f3:07:d9:8c:f1:68:37:24:50: 85:56:09:18:1e:e7:fe:e7:ad:b6:49:ca:54:c2:77:3c:61:a5: 15:d3:7a:5a:a6:e7:55:6d:c8:e6:13:d1:b1:5f:ee:97:d6:05: d0:d0:b5:03:65:64:ab:ce:73:39:3e:25:e6:90:76:aa:7d:87: 03:38:2b:57:cf:f7:26:d6:d5:18:fb:47:0e:ae:51:6a:44:b5: 2b:5c:58:59:fb:3b:3c:d1:4f:92:6e:04:11:20:6b:cd:73:f3: 87:76:22:f5:f5:7e:3d:4b:eb:04:e1:81:89:af:e9:14:d9:e7: fa:27:3e:44:65:63:dc:ef:d9:26:61:8d:8b:a6:f4:7b:ce:89: 6d:33:56:23:aa:3d:4c:2e:c9:7d:2c:76:fa:ea:98:f6:15:dd: bd:d8:15:a3:dc:07:99:8c:bf:47:41:79:a2:d1:42:66:73:a8: 59:50:15:fa:31:d5:a3:58:de:4e:55:18:95:ef:6b:3d:8e:80: 14:9d:96:8c:1e:99:f0:47:a6:02:3c:9a:d0:59:54:76:98:5a: 52:59:f6:b4:94:de:1b:7a:7e:a9:cf:be:81:76:02:4e:97:4d: 5d:f1:b0:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwiO1SlaKzmS9YhZjdFmxMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGI0NGU0OTI1NDllMWI3ZGE1MzJjODBjMzQ4ODUwYzVh NDRlODAwHhcNMjUxMjA1MjIwMTM2WhcNMjUxMjA2MjIwMTM2WjAzMTEwLwYDVQQD EygyZjJjNDNhYjZiNjM2MGFlYzU4ZTVlNmFjNmI0YWI1YjJlMzFkYTNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9OVfbCF8gZ+t8mM9ORta93Cbf2O BAKb+aZ/wdfdXBy5Jyy/jqx4Yz8XSLU5VpSZXhrI5qN1NefKkLiLofAq6M73oy0Z yxEAY0ihXw04JLFr5tIpNedc9SZ2nt/89FQvWFsF/JLM0KsAJFtNqhyjcvKaKm+G PCf9hY25oHpINrJR/mAyTKfSF8jyy8ZZb5lvUM+b/gh9u5NrWMCNhDgmJQbrrOT5 f3I4UQZqZ91RqESv5HoBHvgsR84zXIrbPQGBNvIU+6oJA+4glbBvR2CwOWG9WqV7 gF6u8IAfI9E38Jwz1YZ37UNq/F/RGZIXxgcov8uQh+d6rV43whvkMkfJzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC8sQ6trY2CuxY5easa0q1suMdo+MB8GA1UdIwQY MBaAFH0LROSSVJ4bfaUyyAw0iFDFpE6AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDct NzIwNGI4MTEyNTBmLzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9iOTIzMWYtYjNkZi00MDEyLTk2ZDctNzIwNGI4MTEyNTBm LzEvZlF0RTVKSlVuaHQ5cFRMSUREU0lVTVdrVG9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARb1nBaae RovjNEBfYgAhn6HNw6++S7aeVU1c8wfZjPFoNyRQhVYJGB7n/uettknKVMJ3PGGl FdN6WqbnVW3I5hPRsV/ul9YF0NC1A2Vkq85zOT4l5pB2qn2HAzgrV8/3JtbVGPtH Dq5RakS1K1xYWfs7PNFPkm4EESBrzXPzh3Yi9fV+PUvrBOGBia/pFNnn+ic+RGVj 3O/ZJmGNi6b0e86JbTNWI6o9TC7JfSx2+uqY9hXdvdgVo9wHmYy/R0F5otFCZnOo WVAV+jHVo1jeTlUYle9rPY6AFJ2WjB6Z8EemAjya0FlUdphaUln2tJTeG3p+qc++ gXYCTpdNXfGw4w== -----END CERTIFICATE-----Generated at Sat Dec 6 06:57:44 2025 by rpki-client