This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft File: FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json) Hash identifier: l1o8wcmmrs9ohpB00ZUSOdnteC2e3EaiNopvlTJz9mM= Subject key identifier: EC:0B:65:EF:56:D0:2E:18:F3:64:4F:7B:9A:86:E2:E5:85:B4:2B:02 Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Certificate serial: 019B35699A4414C2ACF001A9740D8D311A7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft Manifest number: 1783 Signing time: Fri 19 Dec 2025 07:01:11 +0000 Manifest this update: Fri 19 Dec 2025 07:01:11 +0000 Manifest next update: Sat 20 Dec 2025 07:01:11 +0000 Files and hashes: 1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: k6pjj1uZbFdhLNlDUaAlMYPTqe/NOc7XrcdlCH4A1oU=) 2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 07:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:35:69:9a:44:14:c2:ac:f0:01:a9:74:0d:8d:31:1a:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0 Validity Not Before: Dec 19 07:01:11 2025 GMT Not After : Dec 20 07:01:11 2025 GMT Subject: CN=ec0b65ef56d02e18f3644f7b9a86e2e585b42b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:91:28:7e:43:12:5a:6d:16:c0:c4:5f:7c:60: da:05:67:18:d1:6c:ac:33:23:b4:bb:17:b8:7b:c0: 84:a7:5e:d9:81:83:c0:41:da:d8:da:51:25:dd:eb: df:ae:4c:a8:df:a7:35:fb:9a:a4:8d:83:a9:13:f2: cb:22:a1:90:39:7c:51:6e:06:cb:5d:a0:4e:2c:2e: 66:67:95:0d:6d:63:e9:ec:78:70:38:1a:1f:b5:d6: 22:fe:17:df:e1:34:d5:07:62:d3:0d:a0:e4:57:df: ab:ff:a6:e6:fe:c5:89:69:56:0a:a5:97:51:b2:80: 31:9c:00:3a:2b:5c:a6:6a:e4:5e:5e:8a:2d:5f:c4: b5:0a:98:53:8f:31:39:4e:f9:d6:f4:39:22:34:11: 43:bb:95:9f:84:55:d3:fd:24:fb:4e:b4:9d:c7:a9: a8:19:b5:42:95:b8:37:aa:be:2f:79:ed:04:a6:b2: 6b:37:a8:6b:dc:32:3b:41:cf:dd:2a:05:ff:37:71: 60:0a:a2:e0:49:66:94:d0:5f:ca:c8:9f:58:3a:e1: e0:d5:26:93:98:94:26:76:3e:9e:c0:9f:0f:b0:56: 5f:54:6a:bd:4f:3e:94:a4:a5:66:41:dd:00:03:1c: 08:b2:d2:b5:8b:19:be:a1:a2:94:75:e8:1e:7c:d8: 54:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:0B:65:EF:56:D0:2E:18:F3:64:4F:7B:9A:86:E2:E5:85:B4:2B:02 X509v3 Authority Key Identifier: keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:b3:ef:18:a9:35:c2:39:7f:ad:c1:10:7d:a1:e8:6d:e4:b7: 93:1f:ed:1d:ca:53:3a:9c:26:cc:44:19:46:95:ea:a3:ec:97: e5:d2:05:7e:d7:50:98:86:d0:21:62:ef:4b:5f:29:31:60:00: ae:7d:ce:26:c8:cc:81:a8:dc:74:02:a6:2f:3c:50:02:8c:28: e1:bb:2c:64:08:e0:69:54:dc:f6:62:ca:37:e9:5e:aa:f8:58: e2:5d:1c:36:16:09:38:66:1b:f9:e3:6a:48:82:71:2a:d5:c1: 94:f8:43:bb:1f:8c:2c:80:6b:ad:db:c6:3e:b4:23:29:7c:77: 7f:16:a3:33:ef:d6:f9:28:fd:92:df:45:e2:25:1d:84:7f:0d: 27:ae:6c:8b:72:b5:96:c1:fd:ba:70:62:a4:08:0e:13:a3:f7: 78:3c:70:83:2f:ac:9f:38:e5:f5:30:07:65:85:fb:73:b8:41: 3e:89:b2:d4:5a:c5:4d:57:b4:41:ef:49:3b:fc:08:6b:cd:be: d0:d2:90:98:d5:71:eb:96:ad:c4:57:fa:9c:98:67:48:c0:b2: 03:66:7d:fb:8f:2c:6a:87:58:83:8e:2f:7e:41:65:e4:aa:39: 46:f9:06:5c:90:2b:0b:3c:88:69:44:ed:f3:9c:cd:a2:df:33: 61:4a:c9:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs1aZpEFMKs8AGpdA2NMRp9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2 YzI2YzAwHhcNMjUxMjE5MDcwMTExWhcNMjUxMjIwMDcwMTExWjAzMTEwLwYDVQQD EyhlYzBiNjVlZjU2ZDAyZTE4ZjM2NDRmN2I5YTg2ZTJlNTg1YjQyYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZEofkMSWm0WwMRffGDaBWcY0Wys MyO0uxe4e8CEp17ZgYPAQdrY2lEl3evfrkyo36c1+5qkjYOpE/LLIqGQOXxRbgbL XaBOLC5mZ5UNbWPp7HhwOBoftdYi/hff4TTVB2LTDaDkV9+r/6bm/sWJaVYKpZdR soAxnAA6K1ymauReXootX8S1CphTjzE5TvnW9DkiNBFDu5WfhFXT/ST7TrSdx6mo GbVClbg3qr4vee0EprJrN6hr3DI7Qc/dKgX/N3FgCqLgSWaU0F/KyJ9YOuHg1SaT mJQmdj6ewJ8PsFZfVGq9Tz6UpKVmQd0AAxwIstK1ixm+oaKUdegefNhUkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOwLZe9W0C4Y82RPe5qG4uWFtCsCMB8GA1UdIwQY MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0 LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo7PvGKk1 wjl/rcEQfaHobeS3kx/tHcpTOpwmzEQZRpXqo+yX5dIFftdQmIbQIWLvS18pMWAA rn3OJsjMgajcdAKmLzxQAowo4bssZAjgaVTc9mLKN+leqvhY4l0cNhYJOGYb+eNq SIJxKtXBlPhDux+MLIBrrdvGPrQjKXx3fxajM+/W+Sj9kt9F4iUdhH8NJ65si3K1 lsH9unBipAgOE6P3eDxwgy+snzjl9TAHZYX7c7hBPomy1FrFTVe0Qe9JO/wIa82+ 0NKQmNVx65atxFf6nJhnSMCyA2Z9+48saodYg44vfkFl5Ko5RvkGXJArCzyIaUTt 85zNot8zYUrJIw== -----END CERTIFICATE-----Generated at Fri Dec 19 13:28:37 2025 by rpki-client