This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft File: rqruHwkj4UojcfJAVA_dIVSbFKY.mft (raw, json) Hash identifier: TauHpfPfa8h26A5LiRlU72hsCpBwAOhHzOmr3ioNymk= Subject key identifier: FC:54:CD:D2:1C:37:8C:43:DA:B5:D3:E2:F0:7A:C6:48:74:80:C6:7A Authority key identifier: AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6 Certificate issuer: /CN=aeaaee1f0923e14a2371f240540fdd21549b14a6 Certificate serial: 019B2BC1D2ADB58E3C9CB8FF6CBEC74BE096 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft Manifest number: 117A Signing time: Wed 17 Dec 2025 10:01:21 +0000 Manifest this update: Wed 17 Dec 2025 10:01:21 +0000 Manifest next update: Thu 18 Dec 2025 10:01:21 +0000 Files and hashes: 1: Prl9jiIf5yTV5DsYzdlJSoaKLUM.roa (hash: Z5P6WiB+sh7qt8RUQthul2w53RzYUIGwq58APY2ZYXU=) 2: rqruHwkj4UojcfJAVA_dIVSbFKY.crl (hash: IdwCLI34LbwL7DtaP6otObzkcJSj/cYjvKUqDomrnYs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:c1:d2:ad:b5:8e:3c:9c:b8:ff:6c:be:c7:4b:e0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeaaee1f0923e14a2371f240540fdd21549b14a6 Validity Not Before: Dec 17 10:01:21 2025 GMT Not After : Dec 18 10:01:21 2025 GMT Subject: CN=fc54cdd21c378c43dab5d3e2f07ac6487480c67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:54:75:f7:bd:3e:57:16:49:c1:dc:8d:08: 95:7b:87:aa:1b:61:07:12:1b:4e:60:32:31:32:f8: f1:ad:0a:b3:bc:e7:2a:5b:12:a9:89:1f:37:c0:14: 24:59:ba:7f:d4:1d:6f:2e:55:43:4e:9d:71:3e:f5: d0:ae:a4:2b:f7:5d:37:01:ed:84:60:65:ad:8c:53: b8:42:f6:60:d7:45:5a:bb:c6:2c:73:0f:08:7e:ba: 1c:52:ec:02:37:cf:00:ca:5e:7d:4b:6a:56:b2:7d: c9:ff:b0:96:f2:76:9d:d1:d3:2f:aa:fd:4b:9a:be: dd:03:b3:c7:42:1b:a4:a6:39:1b:c9:8a:d3:e3:f4: 15:e6:81:90:62:7a:d8:3e:a1:04:ac:48:ae:8d:25: 90:c7:83:4d:16:db:89:91:8c:12:ac:16:98:b6:b2: 41:c8:5c:aa:1a:ab:bc:4a:c2:93:e7:16:c4:1d:ed: 31:92:e9:d9:58:10:3b:2b:54:ad:dd:bd:70:7e:34: ab:d6:c8:7f:33:d3:46:60:ed:5b:2f:b6:d6:04:aa: 93:87:7a:1c:c3:2f:c1:b2:45:07:37:34:41:0d:d4: 54:34:84:f9:c4:d9:a4:3a:c1:75:15:98:cb:79:88: 00:0c:e1:60:78:60:d0:b2:c8:90:53:b1:8c:1f:56: 5a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:54:CD:D2:1C:37:8C:43:DA:B5:D3:E2:F0:7A:C6:48:74:80:C6:7A X509v3 Authority Key Identifier: keyid:AE:AA:EE:1F:09:23:E1:4A:23:71:F2:40:54:0F:DD:21:54:9B:14:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqruHwkj4UojcfJAVA_dIVSbFKY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/586ab9-1a81-4284-b4b2-cd8b0c4be215/1/rqruHwkj4UojcfJAVA_dIVSbFKY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:79:03:c5:4e:6c:1f:74:ce:af:1e:b8:b5:f5:e7:b2:1a:9e: 4b:d0:e3:cc:1b:17:2d:6b:e5:e7:ae:2f:e8:26:b4:19:4e:17: 3a:6e:1f:e1:27:ef:7b:a3:ff:f0:0b:12:8a:af:80:9c:a6:dd: e6:d5:dc:b4:2a:6e:cb:01:59:88:e2:1f:70:d3:2a:18:57:fe: 34:79:b8:50:e9:f5:59:6e:1b:ce:46:04:2f:68:84:4d:50:c5: a4:75:b5:b5:0b:c2:d8:8f:cf:01:d2:77:a6:36:9f:f9:f2:98: b5:9c:af:1e:8a:4b:0d:53:f7:ff:c8:73:5e:85:68:ab:39:4a: f6:ea:ef:79:21:81:fb:e1:85:7a:8b:6c:c1:7a:0c:b8:12:4f: e8:99:38:0f:56:5a:e1:f7:04:1f:84:52:b9:78:7b:1e:a4:35: 4a:19:8c:87:ca:65:f7:93:97:d5:4e:02:a1:bd:4e:b0:fe:39: dc:e1:6d:9a:a7:66:ef:d9:36:9f:43:c9:c4:f4:09:86:0e:b1: ea:28:f2:82:49:a9:a1:c2:05:f7:7c:89:7f:6c:fb:02:b0:df: 3b:6a:98:53:21:76:2b:e1:bb:02:c5:d4:23:9d:d0:e3:c8:50: 9d:17:ef:5a:b0:92:94:95:67:64:06:31:9f:b0:19:da:3d:5d: 8a:d3:b2:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsrwdKttY48nLj/bL7HS+CWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYWFlZTFmMDkyM2UxNGEyMzcxZjI0MDU0MGZkZDIxNTQ5 YjE0YTYwHhcNMjUxMjE3MTAwMTIxWhcNMjUxMjE4MTAwMTIxWjAzMTEwLwYDVQQD EyhmYzU0Y2RkMjFjMzc4YzQzZGFiNWQzZTJmMDdhYzY0ODc0ODBjNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbZUdfe9PlcWScHcjQiVe4eqG2EH EhtOYDIxMvjxrQqzvOcqWxKpiR83wBQkWbp/1B1vLlVDTp1xPvXQrqQr9103Ae2E YGWtjFO4QvZg10Vau8Yscw8IfrocUuwCN88Ayl59S2pWsn3J/7CW8nad0dMvqv1L mr7dA7PHQhukpjkbyYrT4/QV5oGQYnrYPqEErEiujSWQx4NNFtuJkYwSrBaYtrJB yFyqGqu8SsKT5xbEHe0xkunZWBA7K1St3b1wfjSr1sh/M9NGYO1bL7bWBKqTh3oc wy/BskUHNzRBDdRUNIT5xNmkOsF1FZjLeYgADOFgeGDQssiQU7GMH1ZavwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxUzdIcN4xD2rXT4vB6xkh0gMZ6MB8GA1UdIwQY MBaAFK6q7h8JI+FKI3HyQFQP3SFUmxSmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjIt Y2Q4YjBjNGJlMjE1LzEvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi81ODZhYjktMWE4MS00Mjg0LWI0YjItY2Q4YjBjNGJlMjE1 LzEvcnFydUh3a2o0VW9qY2ZKQVZBX2RJVlNiRktZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3kDxU5s H3TOrx64tfXnshqeS9DjzBsXLWvl564v6Ca0GU4XOm4f4Sfve6P/8AsSiq+AnKbd 5tXctCpuywFZiOIfcNMqGFf+NHm4UOn1WW4bzkYEL2iETVDFpHW1tQvC2I/PAdJ3 pjaf+fKYtZyvHopLDVP3/8hzXoVoqzlK9urveSGB++GFeotswXoMuBJP6Jk4D1Za 4fcEH4RSuXh7HqQ1ShmMh8pl95OX1U4Cob1OsP453OFtmqdm79k2n0PJxPQJhg6x 6ijygkmpocIF93yJf2z7ArDfO2qYUyF2K+G7AsXUI53Q48hQnRfvWrCSlJVnZAYx n7AZ2j1ditOyAg== -----END CERTIFICATE-----Generated at Wed Dec 17 13:46:22 2025 by rpki-client