This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json) Hash identifier: W+f9fmNhI2+Kq6MLGjn4uRCdeUuxbAPaqY/fuBtL5No= Subject key identifier: ED:BD:2C:BA:3B:1B:AD:54:58:53:96:FE:42:DB:EF:EE:5A:83:63:41 Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Certificate serial: 019AF352B5BEF8C2B75DF5CDBB400AC3B6E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft Manifest number: 16F4 Signing time: Sat 06 Dec 2025 11:01:15 +0000 Manifest this update: Sat 06 Dec 2025 11:01:15 +0000 Manifest next update: Sun 07 Dec 2025 11:01:15 +0000 Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=) 2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: AvzhN88zUKL99GRM+RITvvQMbYGlK7DWAAAmq1UDrng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:52:b5:be:f8:c2:b7:5d:f5:cd:bb:40:0a:c3:b6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Validity Not Before: Dec 6 11:01:15 2025 GMT Not After : Dec 7 11:01:15 2025 GMT Subject: CN=edbd2cba3b1bad54585396fe42dbefee5a836341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ed:2e:e2:8d:4b:b3:d1:d6:1e:9b:36:b9:67: 6b:0c:f2:c9:8a:86:c0:b3:ce:54:65:db:a8:f9:4d: 3e:1c:40:b7:9b:9a:42:7f:1d:1c:af:98:36:1d:a7: 66:7e:61:11:67:90:dd:46:0d:4f:29:8f:21:9a:a6: 02:ca:13:64:b3:ef:da:43:58:34:4f:c1:8b:be:20: c2:d1:3c:47:28:93:14:5f:ff:bc:8d:a7:d6:74:f4: 3b:80:5f:c7:e5:9f:4d:f4:65:20:8b:ee:97:8f:91: 86:5a:0f:41:77:2b:66:25:2e:58:be:2f:47:e6:76: 0a:09:08:a9:ce:c8:cf:86:8a:f7:f4:d1:e2:20:85: f3:4a:5e:29:47:13:07:ac:d6:24:8b:1a:c8:19:e8: 73:ca:d1:ee:5b:b4:be:34:9c:c5:cb:0c:f9:eb:ab: 45:41:6a:79:3c:b0:3c:cf:1d:f8:c0:05:1c:06:2d: 65:0f:14:c5:ad:e7:42:ea:85:ec:60:ef:08:84:9f: 62:18:67:0e:21:7e:c1:bf:60:c2:ad:df:63:21:15: 31:bd:62:ff:33:00:e3:a8:3a:f8:fd:dd:28:f6:43: 92:57:7c:e4:7f:60:a6:1f:9a:f1:0d:f1:c5:a1:d4: 1d:fe:b8:ab:05:1d:5b:44:a9:27:f2:f0:c7:a5:07: 16:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:BD:2C:BA:3B:1B:AD:54:58:53:96:FE:42:DB:EF:EE:5A:83:63:41 X509v3 Authority Key Identifier: keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a6:54:99:b0:59:b3:66:10:bb:c0:5b:05:22:47:c7:bc:2e: 12:17:5d:8b:bd:f9:2c:c7:e4:1c:6d:09:94:fc:56:27:f5:ca: 62:fc:46:e3:4d:e9:eb:92:23:c2:86:24:f7:44:2a:fb:dd:10: 63:0e:b3:65:d4:58:c7:d7:71:b8:24:fb:12:72:6b:b9:05:2d: 42:5f:93:42:69:0f:b4:af:c3:15:4f:af:e0:37:75:b1:70:30: f7:d5:b2:32:dc:a5:af:53:fa:fb:d5:d7:3c:36:6f:b2:b6:4c: 0e:9e:e0:b7:5a:33:8a:9f:ae:c1:13:14:a1:3a:4a:56:eb:71: a9:2b:89:de:40:27:40:3b:d3:9b:cb:4b:35:c2:d7:29:33:71: 08:8c:35:64:4f:c1:37:dc:d3:56:e3:3b:ef:43:6b:17:4b:cf: df:3e:0b:b9:10:f4:c6:3b:31:df:a4:8b:c5:db:77:e5:8a:82: 44:e6:55:90:4f:38:c5:58:a5:b3:67:52:7d:ed:69:16:6a:f1: f1:79:88:b2:d1:46:b7:f5:6c:20:a7:c2:ac:50:67:35:28:db: dd:2a:a4:81:7d:47:45:c0:7b:3c:3c:9b:e0:57:fe:d7:76:03: c3:09:d7:1f:42:91:cb:09:1d:3f:77:fc:8c:35:d1:db:42:a0: 28:32:62:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzUrW++MK3XfXNu0AKw7boMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm NDNhNGMwHhcNMjUxMjA2MTEwMTE1WhcNMjUxMjA3MTEwMTE1WjAzMTEwLwYDVQQD EyhlZGJkMmNiYTNiMWJhZDU0NTg1Mzk2ZmU0MmRiZWZlZTVhODM2MzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxu0u4o1Ls9HWHps2uWdrDPLJiobA s85UZduo+U0+HEC3m5pCfx0cr5g2HadmfmERZ5DdRg1PKY8hmqYCyhNks+/aQ1g0 T8GLviDC0TxHKJMUX/+8jafWdPQ7gF/H5Z9N9GUgi+6Xj5GGWg9BdytmJS5Yvi9H 5nYKCQipzsjPhor39NHiIIXzSl4pRxMHrNYkixrIGehzytHuW7S+NJzFywz566tF QWp5PLA8zx34wAUcBi1lDxTFredC6oXsYO8IhJ9iGGcOIX7Bv2DCrd9jIRUxvWL/ MwDjqDr4/d0o9kOSV3zkf2CmH5rxDfHFodQd/rirBR1bRKkn8vDHpQcWrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO29LLo7G61UWFOW/kLb7+5ag2NBMB8GA1UdIwQY MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHKZUmbBZ s2YQu8BbBSJHx7wuEhddi735LMfkHG0JlPxWJ/XKYvxG403p65IjwoYk90Qq+90Q Yw6zZdRYx9dxuCT7EnJruQUtQl+TQmkPtK/DFU+v4Dd1sXAw99WyMtylr1P6+9XX PDZvsrZMDp7gt1ozip+uwRMUoTpKVutxqSuJ3kAnQDvTm8tLNcLXKTNxCIw1ZE/B N9zTVuM770NrF0vP3z4LuRD0xjsx36SLxdt35YqCROZVkE84xVils2dSfe1pFmrx 8XmIstFGt/VsIKfCrFBnNSjb3SqkgX1HRcB7PDyb4Ff+13YDwwnXH0KRywkdP3f8 jDXR20KgKDJibQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:17:24 2025 by rpki-client