This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json) Hash identifier: ac8mC7yAjk2ai72YXocyAZ+yR1oo0vZlKUrZ59Lwg/A= Subject key identifier: F7:B1:23:8F:20:51:34:62:25:40:34:5D:3A:30:64:C3:2A:CA:31:95 Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Certificate serial: 019AF1D23FB04873EC0BA2F778B02A338731 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft Manifest number: 1760 Signing time: Sat 06 Dec 2025 04:01:19 +0000 Manifest this update: Sat 06 Dec 2025 04:01:19 +0000 Manifest next update: Sun 07 Dec 2025 04:01:19 +0000 Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: bhs3pr9XRle+8It0Lbwrqp4uiLscYF/fgNbg+ymBbkw=) 2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:3f:b0:48:73:ec:0b:a2:f7:78:b0:2a:33:87:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Validity Not Before: Dec 6 04:01:19 2025 GMT Not After : Dec 7 04:01:19 2025 GMT Subject: CN=f7b1238f205134622540345d3a3064c32aca3195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3a:0f:bc:95:f0:58:e7:47:78:00:66:a0:5b: 30:aa:92:30:4b:2e:d1:da:b1:a1:99:da:34:06:f0: 8e:31:44:5e:af:d7:60:c6:78:d6:4d:19:a6:84:68: 47:ea:ff:dc:60:21:34:95:f6:bf:33:fd:38:1f:2d: 2f:98:fa:04:0f:7a:f0:15:fc:2d:57:70:28:8b:ca: cb:47:3e:c9:bd:40:0a:70:9f:9e:97:41:5f:ba:2e: e3:3c:dc:19:c6:76:52:9c:75:3e:c8:d7:a3:cf:b4: d3:a4:16:b3:61:dc:f3:74:47:94:a5:a3:93:73:53: b0:d2:2a:bc:d2:94:77:24:ef:58:c8:5c:4f:95:d8: 14:a2:e8:65:e9:d9:3b:2a:12:c3:af:ff:62:93:3a: 7a:c3:03:f0:b0:57:01:95:47:12:c8:8c:f0:94:0b: d6:2c:b8:bf:ba:b0:cf:bf:68:31:a6:32:81:ea:eb: 08:64:d6:4f:07:b3:45:3d:0a:b6:86:46:85:e8:b9: 00:7c:87:c2:6b:91:02:ea:d6:5a:8a:0f:d7:85:a5: dc:11:fc:3c:d1:36:96:e9:ed:89:8b:6b:ec:16:69: 35:96:d4:cd:3b:01:cb:e3:63:94:20:ee:f0:01:74: 2d:b4:9c:cc:20:0c:db:a1:c6:1f:01:6b:76:d6:5e: 08:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B1:23:8F:20:51:34:62:25:40:34:5D:3A:30:64:C3:2A:CA:31:95 X509v3 Authority Key Identifier: keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:5e:37:79:fc:bb:9e:06:c0:63:d2:94:72:1b:70:b4:4d:53: 22:0b:af:6e:ca:89:22:2d:70:fb:00:6c:9a:17:43:1e:02:63: 7e:8f:2a:eb:5f:8f:fe:0f:27:c4:43:56:1d:4d:6a:77:d3:af: 74:45:ab:43:1e:33:9c:02:cd:cf:8c:58:06:5e:b9:26:88:c5: 18:bf:06:a1:7e:5f:5d:6b:75:cf:41:bf:70:30:b1:91:c9:ac: 05:1c:3d:1c:f3:77:65:2b:48:06:30:00:be:1f:9a:d6:67:57: cd:43:db:c3:0a:ee:1d:c0:f3:11:00:80:0e:e2:09:bc:6b:a9: cd:17:cd:7a:69:ed:47:76:29:59:99:83:91:a4:51:46:43:f9: 78:56:b4:cf:3c:14:44:8f:6c:71:91:c3:4f:8e:c5:aa:28:5e: 7e:3b:f0:40:87:27:28:92:e5:32:04:b5:e0:9c:61:20:65:c1: d2:9d:7e:bc:9a:b4:02:a8:b8:12:3d:2b:8b:ba:35:86:f6:a1: d5:71:3a:0c:71:6e:52:56:97:48:37:9b:d8:f2:60:be:0b:6e: 82:8b:4c:5c:d4:7d:df:9c:27:f7:5c:f2:af:17:b0:0c:d4:df: 9b:80:db:16:32:61:18:81:2b:fd:47:81:2b:4d:d1:a8:20:bf: 0b:45:0d:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0j+wSHPsC6L3eLAqM4cxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2 YzI2YzAwHhcNMjUxMjA2MDQwMTE5WhcNMjUxMjA3MDQwMTE5WjAzMTEwLwYDVQQD EyhmN2IxMjM4ZjIwNTEzNDYyMjU0MDM0NWQzYTMwNjRjMzJhY2EzMTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7joPvJXwWOdHeABmoFswqpIwSy7R 2rGhmdo0BvCOMURer9dgxnjWTRmmhGhH6v/cYCE0lfa/M/04Hy0vmPoED3rwFfwt V3Aoi8rLRz7JvUAKcJ+el0Ffui7jPNwZxnZSnHU+yNejz7TTpBazYdzzdEeUpaOT c1Ow0iq80pR3JO9YyFxPldgUouhl6dk7KhLDr/9ikzp6wwPwsFcBlUcSyIzwlAvW LLi/urDPv2gxpjKB6usIZNZPB7NFPQq2hkaF6LkAfIfCa5EC6tZaig/XhaXcEfw8 0TaW6e2Ji2vsFmk1ltTNOwHL42OUIO7wAXQttJzMIAzbocYfAWt21l4I6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPexI48gUTRiJUA0XTowZMMqyjGVMB8GA1UdIwQY MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0 LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHl43efy7 ngbAY9KUchtwtE1TIguvbsqJIi1w+wBsmhdDHgJjfo8q61+P/g8nxENWHU1qd9Ov dEWrQx4znALNz4xYBl65JojFGL8GoX5fXWt1z0G/cDCxkcmsBRw9HPN3ZStIBjAA vh+a1mdXzUPbwwruHcDzEQCADuIJvGupzRfNemntR3YpWZmDkaRRRkP5eFa0zzwU RI9scZHDT47FqihefjvwQIcnKJLlMgS14JxhIGXB0p1+vJq0Aqi4Ej0ri7o1hvah 1XE6DHFuUlaXSDeb2PJgvgtugotMXNR935wn91zyrxewDNTfm4DbFjJhGIEr/UeB K03RqCC/C0UNSA== -----END CERTIFICATE-----Generated at Sat Dec 6 13:43:37 2025 by rpki-client