This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft File: n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft (raw, json) Hash identifier: 0cmJYxdmY4JXo2b9RcTv04B5bd2zReAYEP1PXjVMlLE= Subject key identifier: 74:9E:05:DC:05:17:36:FD:AA:72:2B:5B:7A:BA:78:94:46:76:63:1B Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Certificate serial: 019B0CDB747A937E2DE4E954924DC9011EF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft Manifest number: 122A Signing time: Thu 11 Dec 2025 10:01:07 +0000 Manifest this update: Thu 11 Dec 2025 10:01:07 +0000 Manifest next update: Fri 12 Dec 2025 10:01:07 +0000 Files and hashes: 1: AgU0XBmsv6hrvw1_FhFtRPIvIVA.roa (hash: yuLOgd4MMg3W+BuujF35ssU+fj+q8gIALwBMEgUaqi0=) 2: EdV2Oe0GLiqkn4fRwHvGS41mIRI.roa (hash: 6GlEIhQOXuUho2GfltUEy5vYiGJJuRaCTD7Fy/yAIGQ=) 3: HjZYRM1GY8NwIlqa0kEmRhdDg7o.roa (hash: k83Jec9pog7vuk6fuX8SfpctGFX9GXrAU6iLBU2zk9g=) 4: RiAjvvXs-bKn0uvcReZD6TgI_kE.roa (hash: v7x2MHjHDj3Do43R2jIjE1U3WWSCVGbO+STW7f8Hkic=) 5: dWB5v_50s28dCnQL8B8bFn58q18.roa (hash: pyj99aGAlWW7KJ5ZJq2AB9ncbyLG79M0Bh7ShdPddh0=) 6: n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl (hash: t40gheEVmuSxcpXMnKq9ltQOnQV6PzOt4s75Q1MJdq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 10:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0c:db:74:7a:93:7e:2d:e4:e9:54:92:4d:c9:01:1e:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987 Validity Not Before: Dec 11 10:01:07 2025 GMT Not After : Dec 12 10:01:07 2025 GMT Subject: CN=749e05dc051736fdaa722b5b7aba78944676631b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:96:ca:25:40:9c:f5:3c:6f:ad:fa:d8:4d: d8:12:9e:a3:7b:aa:8b:ba:c1:80:c6:cc:26:f1:be: 63:b0:39:ea:bf:96:63:00:d3:dc:95:48:93:26:57: 0f:81:73:1f:a4:26:75:b7:b6:b9:9d:e9:7d:1f:f6: 5e:bd:49:0b:4b:b6:10:67:eb:d7:ce:db:94:06:7b: 68:67:7d:be:94:53:e8:9d:44:5a:75:40:94:24:3e: 25:51:e6:4b:f5:24:92:45:86:3e:a7:2d:aa:43:4d: d2:d5:e2:89:d1:8e:a8:11:fc:0e:5e:6e:0c:0a:aa: 3f:65:10:46:16:c1:5b:f0:f4:bf:5e:e8:32:79:13: 71:56:fc:25:bc:67:74:07:da:ce:5e:92:25:99:c3: 3b:a7:eb:86:18:21:ff:0f:e6:f5:00:6c:56:fe:c4: 72:a7:7b:ab:2b:39:6a:05:81:55:fd:4d:b2:6e:c4: 78:4a:e2:9c:7f:ac:8e:a3:f4:b2:a4:bf:6e:03:47: b7:53:f3:ce:f7:b6:3e:93:39:1e:f0:4d:5a:1e:6b: 15:4f:c0:97:89:b9:36:2b:cf:1a:14:67:2f:5c:e1: 99:d4:b9:c4:39:bc:57:d6:1c:1c:f1:d4:79:71:1c: b3:67:53:86:0f:82:4b:9c:c9:27:8d:45:a7:fc:8f: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:9E:05:DC:05:17:36:FD:AA:72:2B:5B:7A:BA:78:94:46:76:63:1B X509v3 Authority Key Identifier: keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:eb:6f:ba:ba:9c:dd:68:77:46:3d:37:3f:b3:0d:4a:de:5b: 15:0b:d4:92:c4:27:f8:cb:86:9c:52:40:4e:2d:b6:ea:2b:ee: 8f:80:db:8f:db:73:91:db:17:d8:6e:f7:c6:2c:21:d1:ff:65: 06:63:5c:fd:06:ff:83:fa:d2:50:d6:84:7b:08:52:9a:35:df: d0:5d:b0:25:cb:91:0a:be:19:7d:0c:fc:a0:de:6e:4e:12:be: 36:6e:1e:d0:86:4f:79:2f:da:2f:2b:9f:53:c3:ad:88:41:87: a6:17:56:f3:db:95:f2:59:c5:06:d5:ca:4f:94:40:e2:26:51: c5:fd:a5:96:2b:33:f0:39:bc:1e:52:9e:27:86:ff:2c:fc:a4: fa:7d:aa:de:35:0a:36:4a:7e:f2:13:fd:cd:d9:4f:c6:b7:17: 17:b3:d3:42:a3:c3:cb:5f:3c:d9:e9:29:2f:87:c6:4a:0d:f0: 0b:31:a7:29:4d:17:9b:da:1b:3b:c7:c6:34:17:76:5e:9b:92: 6e:51:ef:4a:b1:35:a5:57:b7:91:cf:c1:d8:28:be:5b:31:02: 3d:4c:87:a8:79:df:42:ff:bb:bf:64:6b:73:11:19:bf:41:89: db:78:25:a0:f5:88:bc:69:16:c6:a5:50:28:09:24:3d:09:98: 85:31:c0:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsM23R6k34t5OlUkk3JAR73MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZjE1MDMyMTBmZTA2ZWQzNTQ5MGIwMjMxZGJkYjU5Njdl MTI5ODcwHhcNMjUxMjExMTAwMTA3WhcNMjUxMjEyMTAwMTA3WjAzMTEwLwYDVQQD Eyg3NDllMDVkYzA1MTczNmZkYWE3MjJiNWI3YWJhNzg5NDQ2NzY2MzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9OWyiVAnPU8b6362E3YEp6je6qL usGAxswm8b5jsDnqv5ZjANPclUiTJlcPgXMfpCZ1t7a5nel9H/ZevUkLS7YQZ+vX ztuUBntoZ32+lFPonURadUCUJD4lUeZL9SSSRYY+py2qQ03S1eKJ0Y6oEfwOXm4M Cqo/ZRBGFsFb8PS/XugyeRNxVvwlvGd0B9rOXpIlmcM7p+uGGCH/D+b1AGxW/sRy p3urKzlqBYFV/U2ybsR4SuKcf6yOo/SypL9uA0e3U/PO97Y+kzke8E1aHmsVT8CX ibk2K88aFGcvXOGZ1LnEObxX1hwc8dR5cRyzZ1OGD4JLnMknjUWn/I/orQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHSeBdwFFzb9qnIrW3q6eJRGdmMbMB8GA1UdIwQY MBaAFJ/xUDIQ/gbtNUkLAjHb21ln4SmHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAt NDYzMjJlMDJmMDhkLzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC84NDIxZDMtNTA2YS00ZjBjLWI5YzAtNDYzMjJlMDJmMDhk LzEvbl9GUU1oRC1CdTAxU1FzQ01kdmJXV2ZoS1ljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiutvurqc 3Wh3Rj03P7MNSt5bFQvUksQn+MuGnFJATi226ivuj4Dbj9tzkdsX2G73xiwh0f9l BmNc/Qb/g/rSUNaEewhSmjXf0F2wJcuRCr4ZfQz8oN5uThK+Nm4e0IZPeS/aLyuf U8OtiEGHphdW89uV8lnFBtXKT5RA4iZRxf2llisz8Dm8HlKeJ4b/LPyk+n2q3jUK Nkp+8hP9zdlPxrcXF7PTQqPDy1882ekpL4fGSg3wCzGnKU0Xm9obO8fGNBd2XpuS blHvSrE1pVe3kc/B2Ci+WzECPUyHqHnfQv+7v2RrcxEZv0GJ23gloPWIvGkWxqVQ KAkkPQmYhTHARw== -----END CERTIFICATE-----Generated at Thu Dec 11 15:06:58 2025 by rpki-client