This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json) Hash identifier: 7v15CvuFYNPF5mXofKylOGYRpDl3zJGzBFY8nlQztZc= Subject key identifier: 1A:5E:A8:4A:6B:D9:42:AA:A6:B0:07:17:EC:C6:B3:41:22:23:84:CD Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Certificate serial: 019B427FEEBBCC6340B15CAC544E4F0784F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft Manifest number: 171D Signing time: Sun 21 Dec 2025 20:00:39 +0000 Manifest this update: Sun 21 Dec 2025 20:00:39 +0000 Manifest next update: Mon 22 Dec 2025 20:00:39 +0000 Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=) 2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: uvAgm8LXOMbcFN57ca1SsFLoan+U8ZLG079JyLzgTdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 20:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:42:7f:ee:bb:cc:63:40:b1:5c:ac:54:4e:4f:07:84:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Validity Not Before: Dec 21 20:00:39 2025 GMT Not After : Dec 22 20:00:39 2025 GMT Subject: CN=1a5ea84a6bd942aaa6b00717ecc6b341222384cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:5c:95:db:d1:b5:2c:2b:ec:42:a6:80:5b: d7:2c:ba:34:b6:90:b1:6e:09:13:50:75:15:fc:84: 36:e1:4c:e1:cf:52:9c:34:51:be:9e:77:6b:32:df: 5a:f6:a3:d7:37:69:89:4f:12:65:3f:eb:b6:c8:7c: ba:a1:4d:5f:15:9c:30:b3:28:5a:3f:4f:3e:89:a4: f1:eb:a8:88:cb:a3:a3:d9:7a:cc:5c:be:c6:07:4e: e3:95:cc:6b:0a:43:d8:f2:59:3c:5e:d6:d4:3c:61: 1f:a8:be:bb:00:68:42:3a:b8:e9:f8:bb:6c:0d:dd: 74:40:64:83:d9:6c:08:7f:b2:b1:9d:68:04:37:65: aa:cb:9c:f1:19:a8:f3:6b:96:9b:7d:01:ed:58:9a: ab:be:bd:70:6a:cb:d3:78:68:6b:23:0d:07:71:c8: 4c:ca:fb:9a:1f:74:07:33:df:2f:62:88:65:03:ea: 84:e8:ba:89:01:6b:c9:4c:9f:e3:67:70:b8:e8:ae: 43:c0:df:dc:a3:94:ba:9e:19:ed:3a:c2:cd:cc:b2: d1:83:14:70:74:f6:19:8c:40:75:73:a8:4a:b9:1b: cc:84:f2:b2:99:b7:7a:86:a0:14:6f:32:b9:53:d0: 2e:fc:0e:9d:4e:9d:4b:49:e2:27:e6:7f:8a:92:35: fb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:A8:4A:6B:D9:42:AA:A6:B0:07:17:EC:C6:B3:41:22:23:84:CD X509v3 Authority Key Identifier: keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:c3:0d:09:10:5f:32:25:7b:8c:67:bb:fa:7a:ca:99:1a:e7: 89:d5:2e:e1:77:71:57:e1:d2:1d:33:88:16:c9:96:e9:8d:eb: 82:96:6d:f4:89:cf:5f:cb:c5:c7:66:9d:a7:97:7f:52:98:2c: 3e:9e:91:86:fd:24:9a:4a:ec:b8:81:c1:2c:87:e6:14:ec:7a: 7f:72:10:d2:76:39:2b:d5:e2:88:c1:94:60:48:f8:a3:42:02: ec:a0:03:cb:a0:2d:f8:84:b3:5b:d3:50:69:b1:44:1c:7f:06: 7b:ac:ea:44:06:12:a7:06:21:14:e0:b4:82:81:2b:b0:c2:f4: 54:9d:75:18:51:5f:12:99:25:8a:f4:d3:94:6f:54:ff:51:97: 76:e6:45:f5:7b:a9:75:c5:79:2f:79:63:02:a4:3a:ef:cc:3a: 0b:39:73:2b:ff:9c:f2:e8:1d:49:bb:8a:46:94:a1:1c:f9:e7: 2b:78:84:51:00:c4:56:38:bc:8b:a0:e3:c5:90:a6:07:be:a3: 93:e6:f3:3d:0f:eb:75:b4:0e:4b:ce:dc:12:2c:d0:61:95:09: e3:f6:db:5c:33:78:12:1e:81:f6:87:be:86:a2:7d:f0:bd:cf: fe:c2:d1:48:47:a6:38:89:d0:82:46:b8:4c:e6:a4:ac:f3:84: 20:44:53:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtCf+67zGNAsVysVE5PB4T5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm NDNhNGMwHhcNMjUxMjIxMjAwMDM5WhcNMjUxMjIyMjAwMDM5WjAzMTEwLwYDVQQD EygxYTVlYTg0YTZiZDk0MmFhYTZiMDA3MTdlY2M2YjM0MTIyMjM4NGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthVcldvRtSwr7EKmgFvXLLo0tpCx bgkTUHUV/IQ24Uzhz1KcNFG+nndrMt9a9qPXN2mJTxJlP+u2yHy6oU1fFZwwsyha P08+iaTx66iIy6Oj2XrMXL7GB07jlcxrCkPY8lk8XtbUPGEfqL67AGhCOrjp+Lts Dd10QGSD2WwIf7KxnWgEN2Wqy5zxGajza5abfQHtWJqrvr1wasvTeGhrIw0HcchM yvuaH3QHM98vYohlA+qE6LqJAWvJTJ/jZ3C46K5DwN/co5S6nhntOsLNzLLRgxRw dPYZjEB1c6hKuRvMhPKymbd6hqAUbzK5U9Au/A6dTp1LSeIn5n+KkjX7hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpeqEpr2UKqprAHF+zGs0EiI4TNMB8GA1UdIwQY MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcMNCRBf MiV7jGe7+nrKmRrnidUu4XdxV+HSHTOIFsmW6Y3rgpZt9InPX8vFx2adp5d/Upgs Pp6Rhv0kmkrsuIHBLIfmFOx6f3IQ0nY5K9XiiMGUYEj4o0IC7KADy6At+ISzW9NQ abFEHH8Ge6zqRAYSpwYhFOC0goErsML0VJ11GFFfEpklivTTlG9U/1GXduZF9Xup dcV5L3ljAqQ678w6CzlzK/+c8ugdSbuKRpShHPnnK3iEUQDEVji8i6DjxZCmB76j k+bzPQ/rdbQOS87cEizQYZUJ4/bbXDN4Eh6B9oe+hqJ98L3P/sLRSEemOInQgka4 TOakrPOEIERTaA== -----END CERTIFICATE-----Generated at Mon Dec 22 03:26:57 2025 by rpki-client