This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: 86IidZ0TdVIZeae3fcZX8zIocs4MaFKw5sRIiXYKB/0= Subject key identifier: 34:2C:2B:E3:CE:61:CC:AF:25:3A:89:4B:18:C8:93:84:4A:DC:FB:3C Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019AF3F79843659385FF3B96E48DDDF7D02A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0F5C Signing time: Sat 06 Dec 2025 14:01:20 +0000 Manifest this update: Sat 06 Dec 2025 14:01:20 +0000 Manifest next update: Sun 07 Dec 2025 14:01:20 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: +ABYyd/wzaXmYDr1oWLkktCK1MG7pFavqzh+pQGUFNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:98:43:65:93:85:ff:3b:96:e4:8d:dd:f7:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Dec 6 14:01:20 2025 GMT Not After : Dec 7 14:01:20 2025 GMT Subject: CN=342c2be3ce61ccaf253a894b18c893844adcfb3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:02:8e:09:6f:be:04:f7:bb:9b:2f:9b:ff:41: 8d:52:e6:bb:ad:f3:71:7f:01:cc:61:33:f8:b5:6a: b6:98:18:0f:1a:de:6c:45:28:d7:c7:36:20:82:eb: 29:25:84:52:55:5d:fa:58:f7:ff:21:9f:2b:40:d9: 63:8a:0d:95:c6:3d:20:89:ce:cf:d3:19:0f:e6:89: f7:a3:e5:bf:8d:e4:01:3e:3a:0e:7f:d4:0d:ed:a9: ee:d4:4d:eb:83:3d:4f:75:ea:0d:39:50:04:15:ee: 77:e4:1f:fc:ee:50:94:97:39:e7:3d:e2:ac:01:d3: a7:d8:13:f7:4d:5e:01:d0:3a:b6:3e:30:b3:5b:5c: 94:a8:a2:2a:8e:c4:1b:dd:7c:52:be:26:0f:2e:9a: a7:6f:c8:eb:b8:2c:23:72:ae:ec:88:09:08:f1:13: d4:dd:3c:17:70:43:0b:78:ae:80:f5:f5:6b:a7:2a: 7c:39:0b:5b:e2:aa:28:41:26:01:6f:14:3e:f1:79: b6:ae:a3:19:50:87:27:a5:ff:38:ed:3b:b3:e9:b4: 6d:82:35:7a:01:50:1f:fd:2c:87:f4:b8:e7:e0:e5: 58:bc:ca:c4:06:ce:ce:52:5d:80:de:0c:8f:46:95: 74:ac:12:ba:42:7a:c8:e2:a6:90:37:4f:ba:5b:22: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2C:2B:E3:CE:61:CC:AF:25:3A:89:4B:18:C8:93:84:4A:DC:FB:3C X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:53:b0:2a:8e:d7:e2:3a:66:ef:bf:44:bc:59:07:f7:70:f1: 66:70:a2:4b:16:73:7a:b9:26:75:4d:e5:7b:3c:aa:1d:b7:64: 76:c8:55:2b:bd:44:dc:1b:c7:28:06:a4:e5:54:48:f2:1d:b9: d8:b9:19:95:8f:22:d8:68:0d:78:d9:45:15:3d:44:3f:79:fb: 59:bc:95:43:26:f4:ee:89:16:73:ae:2f:8d:7a:26:2f:fc:de: 29:5c:b9:b1:0a:07:fa:6b:69:ca:7f:21:ac:79:f6:f0:a5:4b: 37:e7:d4:ad:c1:88:3a:f6:e7:4f:fd:d6:12:be:90:3e:9b:7c: b5:f2:60:d0:ac:69:25:de:f7:ba:1f:71:93:e0:c7:9e:a7:2d: 97:1d:64:eb:0e:eb:5f:13:68:63:63:6d:2c:5f:07:98:2d:ca: f9:a9:a1:6c:93:99:fe:22:21:02:1a:e8:56:6e:a1:75:67:3b: e8:38:38:64:ce:06:fd:7b:ef:ee:a1:03:a2:5b:0a:eb:ea:40: ab:d0:94:32:40:bf:84:78:cb:0d:5e:13:eb:fa:4e:2e:e0:1f: 3b:18:87:08:08:61:00:11:2b:5e:0e:58:46:ce:87:86:09:01: 62:8b:63:cd:a9:d5:c7:66:4d:1f:39:83:20:bc:0e:d9:30:6a: 2b:1a:d5:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz95hDZZOF/zuW5I3d99AqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMjA2MTQwMTIwWhcNMjUxMjA3MTQwMTIwWjAzMTEwLwYDVQQD EygzNDJjMmJlM2NlNjFjY2FmMjUzYTg5NGIxOGM4OTM4NDRhZGNmYjNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwKOCW++BPe7my+b/0GNUua7rfNx fwHMYTP4tWq2mBgPGt5sRSjXxzYgguspJYRSVV36WPf/IZ8rQNljig2Vxj0gic7P 0xkP5on3o+W/jeQBPjoOf9QN7anu1E3rgz1PdeoNOVAEFe535B/87lCUlznnPeKs AdOn2BP3TV4B0Dq2PjCzW1yUqKIqjsQb3XxSviYPLpqnb8jruCwjcq7siAkI8RPU 3TwXcEMLeK6A9fVrpyp8OQtb4qooQSYBbxQ+8Xm2rqMZUIcnpf847Tuz6bRtgjV6 AVAf/SyH9Ljn4OVYvMrEBs7OUl2A3gyPRpV0rBK6QnrI4qaQN0+6WyJXIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDQsK+POYcyvJTqJSxjIk4RK3Ps8MB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlFOwKo7X 4jpm779EvFkH93DxZnCiSxZzerkmdU3lezyqHbdkdshVK71E3BvHKAak5VRI8h25 2LkZlY8i2GgNeNlFFT1EP3n7WbyVQyb07okWc64vjXomL/zeKVy5sQoH+mtpyn8h rHn28KVLN+fUrcGIOvbnT/3WEr6QPpt8tfJg0KxpJd73uh9xk+DHnqctlx1k6w7r XxNoY2NtLF8HmC3K+amhbJOZ/iIhAhroVm6hdWc76Dg4ZM4G/Xvv7qEDolsK6+pA q9CUMkC/hHjLDV4T6/pOLuAfOxiHCAhhABErXg5YRs6HhgkBYotjzanVx2ZNHzmD ILwO2TBqKxrVgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 19:16:06 2025 by rpki-client