This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json) Hash identifier: Fj9qN+3wB9dEHwfbDV+suPBCaIKYSNIL55MG1ERDKZM= Subject key identifier: 75:88:E8:13:13:10:6A:26:9C:BC:9B:EA:BF:32:80:90:AE:12:A5:D3 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019AF12EA40950686E2736366570D27AAE8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 01:02:36 +0000 Manifest this update: Sat 06 Dec 2025 01:02:36 +0000 Manifest next update: Sun 07 Dec 2025 01:02:36 +0000 Files and hashes: 1: 6fJjIO572rRtTzs1Q7jirr0rogU.roa (hash: lnfishpwQLE66hzcfQQ47M/+3n4mO6BxT9e3So84HXc=) 2: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=) 3: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=) 4: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: 044Ik0FinjbkZNws+abkoZIDMkEOmvSzJqPXhYHJc6g=) 5: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=) 6: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=) 7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:a4:09:50:68:6e:27:36:36:65:70:d2:7a:ae:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Dec 6 01:02:36 2025 GMT Not After : Dec 7 01:02:36 2025 GMT Subject: CN=7588e81313106a269cbc9beabf328090ae12a5d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:c4:d6:e8:18:12:b1:e3:d7:6b:b5:98:93: 38:a0:db:19:4d:e9:25:49:27:45:87:b1:3b:67:e3: dd:19:3e:7d:bd:70:3d:dd:46:0e:8a:ca:0a:74:86: 05:0d:b5:5f:b8:f1:b1:10:8c:8c:7c:3d:a4:2b:0f: ac:3b:8b:5f:42:0f:7d:8a:9a:8a:90:60:b1:61:10: 63:97:1d:8f:8d:65:a2:56:48:f4:59:bd:9f:af:50: a5:67:1c:6c:c9:d5:39:0c:d5:cf:81:12:f8:59:61: e0:a4:60:07:ff:6a:05:63:f0:1b:8d:f3:3d:4d:d7: 10:c9:69:cd:fa:b1:2f:91:14:e2:89:01:1f:cb:91: 5f:34:73:d4:c9:2a:b8:50:a4:da:fe:dd:60:f7:72: db:2b:62:5d:03:6d:4a:5e:88:80:00:c4:77:a2:18: 40:10:34:4c:eb:d6:f0:bf:da:48:bd:25:6d:d3:72: bf:06:e3:4f:7f:49:87:55:82:de:f8:30:e1:b4:f0: 8d:ef:dd:9c:a5:8d:2e:93:45:15:10:ab:fd:b0:7a: 7e:bf:28:95:b1:23:1a:a8:52:c7:00:5a:8d:26:9c: 53:2d:3e:6c:7c:bc:24:fa:e4:17:31:8a:fb:5b:2b: 23:1d:20:fe:f3:f9:5c:7a:53:79:29:05:15:97:a4: 94:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:88:E8:13:13:10:6A:26:9C:BC:9B:EA:BF:32:80:90:AE:12:A5:D3 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:68:49:ae:d1:60:d5:3f:6b:dd:47:93:04:fb:85:00:58:6d: 44:af:98:d9:d0:e6:f2:e5:4f:15:ed:8b:25:bb:30:58:47:3c: df:1b:6a:28:3a:79:79:14:d7:6a:30:5c:9a:a0:33:c5:c8:51: 29:1c:ab:83:70:72:6f:1b:61:02:1d:9a:83:b0:c1:e3:16:ce: 53:b1:f8:36:fe:16:4f:40:c8:a5:7b:d5:0b:11:46:f9:16:03: e2:da:eb:3a:e7:67:b4:10:a6:91:51:a2:f9:9c:21:7d:b7:db: 47:e2:b7:f0:dc:18:cf:d7:9e:03:83:3e:4a:29:b3:d0:86:03: ae:36:4b:3d:97:59:35:da:e5:81:f9:96:53:3a:e4:2c:d5:bc: 42:e4:d3:54:84:19:6a:68:22:8e:61:3c:51:2f:30:60:53:99: 98:b2:dd:f3:fd:4b:f8:2e:8e:82:e6:aa:0b:31:1e:9a:63:bc: 0c:27:87:ba:0d:68:25:b2:35:2e:53:78:bb:d0:d4:06:3b:7a: 54:02:c9:6a:69:f0:89:27:d8:d8:52:fd:02:12:1a:10:7a:2c: 16:ea:1a:a5:86:96:29:07:a7:71:08:d7:6e:5e:76:c0:46:a5: a1:0f:2c:b0:63:d5:7c:f1:b3:21:d0:2a:60:4f:de:21:25:02: 58:3f:5b:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLqQJUGhuJzY2ZXDSeq6OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjUxMjA2MDEwMjM2WhcNMjUxMjA3MDEwMjM2WjAzMTEwLwYDVQQD Eyg3NTg4ZTgxMzEzMTA2YTI2OWNiYzliZWFiZjMyODA5MGFlMTJhNWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17HE1ugYErHj12u1mJM4oNsZTekl SSdFh7E7Z+PdGT59vXA93UYOisoKdIYFDbVfuPGxEIyMfD2kKw+sO4tfQg99ipqK kGCxYRBjlx2PjWWiVkj0Wb2fr1ClZxxsydU5DNXPgRL4WWHgpGAH/2oFY/AbjfM9 TdcQyWnN+rEvkRTiiQEfy5FfNHPUySq4UKTa/t1g93LbK2JdA21KXoiAAMR3ohhA EDRM69bwv9pIvSVt03K/BuNPf0mHVYLe+DDhtPCN792cpY0uk0UVEKv9sHp+vyiV sSMaqFLHAFqNJpxTLT5sfLwk+uQXMYr7WysjHSD+8/lcelN5KQUVl6SUzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHWI6BMTEGomnLyb6r8ygJCuEqXTMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1mhJrtFg 1T9r3UeTBPuFAFhtRK+Y2dDm8uVPFe2LJbswWEc83xtqKDp5eRTXajBcmqAzxchR KRyrg3BybxthAh2ag7DB4xbOU7H4Nv4WT0DIpXvVCxFG+RYD4trrOudntBCmkVGi +ZwhfbfbR+K38NwYz9eeA4M+Simz0IYDrjZLPZdZNdrlgfmWUzrkLNW8QuTTVIQZ amgijmE8US8wYFOZmLLd8/1L+C6OguaqCzEemmO8DCeHug1oJbI1LlN4u9DUBjt6 VALJamnwiSfY2FL9AhIaEHosFuoapYaWKQencQjXbl52wEaloQ8ssGPVfPGzIdAq YE/eISUCWD9bdA== -----END CERTIFICATE-----Generated at Sat Dec 6 07:23:15 2025 by rpki-client