This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json) Hash identifier: 5/jEDXSB0zoHkX15HM3XaXvyQnBE5Qa6UxkLpPnnjbw= Subject key identifier: 35:DA:4C:73:6D:F7:9A:9E:E7:DD:86:1A:5C:5C:15:1B:8D:A3:53:E7 Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Certificate serial: 019AF5407D83E4682BD50D824BFE40BE0F1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft Manifest number: 16F5 Signing time: Sat 06 Dec 2025 20:00:35 +0000 Manifest this update: Sat 06 Dec 2025 20:00:35 +0000 Manifest next update: Sun 07 Dec 2025 20:00:35 +0000 Files and hashes: 1: UkqG3VMYAz9uABWF42sKAydGWoA.roa (hash: /dg3EZ5BvktCoE6vyv9z5Q4gql01gT6XeimrmuNAS5k=) 2: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: y7tvVU07K4/yF7Lnkaz48/qY8DcMxbnGTig9JBrKeoU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7d:83:e4:68:2b:d5:0d:82:4b:fe:40:be:0f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c Validity Not Before: Dec 6 20:00:35 2025 GMT Not After : Dec 7 20:00:35 2025 GMT Subject: CN=35da4c736df79a9ee7dd861a5c5c151b8da353e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cd:2a:b1:02:79:b2:26:1c:e9:71:46:9e:87: 85:0f:e2:48:d3:cf:8e:c0:2e:bf:0e:c0:c1:ef:f2: 25:6f:03:a4:71:a5:64:bb:23:c3:2c:11:85:f7:b0: 73:71:4d:70:b6:fe:a3:f1:42:7e:c7:20:58:4a:1e: 2b:ac:79:cd:15:39:ba:12:39:f9:7f:49:6e:28:06: d3:87:a8:f7:a6:7a:f2:d0:bc:33:55:1b:55:b4:83: 93:e9:b4:c5:4a:be:98:dc:bd:61:8d:80:75:86:a9: 4b:08:bf:bc:c4:9d:d9:a3:07:47:73:0d:20:5a:92: 49:fc:70:0a:e7:e5:b8:05:d6:75:52:4b:f3:1f:80: 88:7d:69:26:22:cc:6c:a0:86:96:0f:8b:f2:a3:5c: f0:ce:14:2c:43:28:5f:68:a9:7a:ac:b6:49:17:57: 11:b5:09:78:3d:19:08:a5:9c:be:c8:cf:f4:59:c1: d1:6e:ff:b9:c9:56:ce:78:69:c6:93:2e:93:d2:da: b4:12:72:40:a1:9c:3e:d8:6b:91:69:6c:9f:90:25: db:0f:50:f5:37:52:8e:f4:2c:06:fa:f3:4d:47:1f: 7e:5c:01:4d:15:0f:ea:b3:0a:21:31:cc:e6:a0:51: dd:34:d6:d8:38:9f:4d:d2:7b:cc:63:ef:72:94:e2: 3e:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:DA:4C:73:6D:F7:9A:9E:E7:DD:86:1A:5C:5C:15:1B:8D:A3:53:E7 X509v3 Authority Key Identifier: keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9d:c4:da:82:8e:9c:0a:28:d9:60:c0:24:fd:64:b9:2a:01: 4a:d7:fc:a9:7d:23:6c:b1:de:d6:6e:c4:8f:ea:83:2b:41:c7: 44:25:a9:7d:1f:4c:d4:1d:51:2c:1b:b6:1b:d4:9c:cf:dc:95: 35:2f:88:61:fa:76:8a:4d:d3:28:d9:17:f5:43:fb:d2:fd:b7: 19:dd:8c:54:00:07:a9:8a:2a:c1:c0:a8:93:6e:0a:98:8f:fc: 46:29:29:10:01:19:81:5f:b7:89:1e:ea:5b:b6:c6:a3:98:ce: a8:21:39:93:e7:d1:e9:0c:3d:10:e3:40:f8:40:67:0a:fe:fc: eb:a7:40:4f:7c:42:c6:c3:d7:35:41:a9:cb:0c:33:fa:52:0a: 10:a0:14:45:a8:69:bd:fd:95:5b:57:93:44:15:4c:f5:e2:62: 2e:6b:7e:29:79:d6:dd:92:b5:5a:11:02:02:d1:3c:64:02:cd: b7:29:b9:ee:08:42:4b:bf:99:f2:d8:c2:bb:30:53:8f:de:7f: 0f:f8:1a:8b:ef:72:14:a2:61:38:2e:b9:e8:34:83:6d:c6:90: 40:f1:56:97:d3:79:ce:25:a4:b4:e4:f1:2d:11:50:4c:5c:29: 82:4c:d8:3a:4d:87:b7:4c:cc:1d:06:4e:71:7d:9c:8f:08:79: f6:c0:6b:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QH2D5Ggr1Q2CS/5Avg8cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDFhNWQ5MGRjM2E4MzZjZWI2MzgxZWZjNzUzNGUxMjlm NDNhNGMwHhcNMjUxMjA2MjAwMDM1WhcNMjUxMjA3MjAwMDM1WjAzMTEwLwYDVQQD EygzNWRhNGM3MzZkZjc5YTllZTdkZDg2MWE1YzVjMTUxYjhkYTM1M2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoM0qsQJ5siYc6XFGnoeFD+JI08+O wC6/DsDB7/IlbwOkcaVkuyPDLBGF97BzcU1wtv6j8UJ+xyBYSh4rrHnNFTm6Ejn5 f0luKAbTh6j3pnry0LwzVRtVtIOT6bTFSr6Y3L1hjYB1hqlLCL+8xJ3ZowdHcw0g WpJJ/HAK5+W4BdZ1UkvzH4CIfWkmIsxsoIaWD4vyo1zwzhQsQyhfaKl6rLZJF1cR tQl4PRkIpZy+yM/0WcHRbv+5yVbOeGnGky6T0tq0EnJAoZw+2GuRaWyfkCXbD1D1 N1KO9CwG+vNNRx9+XAFNFQ/qswohMczmoFHdNNbYOJ9N0nvMY+9ylOI+qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXaTHNt95qe592GGlxcFRuNo1PnMB8GA1UdIwQY MBaAFH0BpdkNw6g2zrY4Hvx1NOEp9DpMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMt NjJmNjY2NDczYjIxLzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi8yMWIwMDctYTA4Ni00MzEyLTlkMjMtNjJmNjY2NDczYjIx LzEvZlFHbDJRM0RxRGJPdGpnZV9IVTA0U24wT2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoZ3E2oKO nAoo2WDAJP1kuSoBStf8qX0jbLHe1m7Ej+qDK0HHRCWpfR9M1B1RLBu2G9Scz9yV NS+IYfp2ik3TKNkX9UP70v23Gd2MVAAHqYoqwcCok24KmI/8RikpEAEZgV+3iR7q W7bGo5jOqCE5k+fR6Qw9EONA+EBnCv7866dAT3xCxsPXNUGpywwz+lIKEKAURahp vf2VW1eTRBVM9eJiLmt+KXnW3ZK1WhECAtE8ZALNtym57ghCS7+Z8tjCuzBTj95/ D/gai+9yFKJhOC656DSDbcaQQPFWl9N5ziWktOTxLRFQTFwpgkzYOk2Ht0zMHQZO cX2cjwh59sBrSg== -----END CERTIFICATE-----Generated at Sat Dec 6 22:10:35 2025 by rpki-client