This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json) Hash identifier: Ys5YhRGfuC2cbaaXMPE6CZggRZlHMopMeEX+lvzVLj8= Subject key identifier: C8:6C:4D:00:CB:12:39:BE:0E:E8:1E:65:8A:7E:4C:09:BC:3E:80:D8 Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Certificate serial: 019B2D0AD6D4FE62E9973A44144FB5A7FE6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft Manifest number: 064F Signing time: Wed 17 Dec 2025 16:00:43 +0000 Manifest this update: Wed 17 Dec 2025 16:00:43 +0000 Manifest next update: Thu 18 Dec 2025 16:00:43 +0000 Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: phIeZRZRKy7aV8yDcvTkZ7dngJPElfsYlNC0QZ/jxBc=) 2: o8S7tkvunun9ckbw4BTp3xF4qOg.roa (hash: m5zy4GD9yIfkM+gnTmUFCt3YRr3WAaO9EejYBf8+Bnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0a:d6:d4:fe:62:e9:97:3a:44:14:4f:b5:a7:fe:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f Validity Not Before: Dec 17 16:00:43 2025 GMT Not After : Dec 18 16:00:43 2025 GMT Subject: CN=c86c4d00cb1239be0ee81e658a7e4c09bc3e80d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f5:ab:49:55:17:8e:ab:07:93:5b:85:bd:4e: fc:12:9c:2e:77:28:b2:ab:17:4d:18:33:0a:cc:86: 94:68:fc:a5:c9:a3:77:9a:dd:fc:65:50:9d:90:c3: 6d:43:f4:18:50:fb:c8:de:75:35:ed:78:1c:e3:76: 7a:19:ce:d7:5e:b0:e3:7a:94:af:92:fb:df:99:9b: 1f:a7:9a:24:83:6f:81:27:97:a4:07:a8:6f:a2:06: 9f:21:60:11:b6:9d:17:07:90:96:a5:e3:4d:55:f0: 8d:30:55:14:6b:0f:1e:19:c6:7a:3a:3a:7f:21:88: 08:54:2a:58:d7:36:82:89:01:e2:65:90:ea:6c:a8: 48:ed:e6:03:20:d1:b4:37:97:c3:65:30:3f:ef:46: fc:69:98:30:53:e6:b8:18:26:5e:bf:46:87:9f:d4: 41:3c:e3:c6:c5:00:c9:c6:0a:1a:f3:a3:c8:e0:e5: 66:c6:71:78:6d:f0:48:4d:21:55:21:ed:82:db:3e: c1:f4:60:5a:6a:44:8d:66:be:f3:8c:89:51:76:79: 42:fc:1d:d0:d0:0c:6e:ca:5e:f6:bc:49:59:00:5b: 76:0d:4e:7f:8e:59:f0:e1:d0:8e:e3:cd:db:a6:96: e0:fb:68:dc:43:54:55:6c:01:51:65:ad:51:28:e1: d0:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:6C:4D:00:CB:12:39:BE:0E:E8:1E:65:8A:7E:4C:09:BC:3E:80:D8 X509v3 Authority Key Identifier: keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:94:7f:d0:eb:de:1c:c1:0f:76:0e:61:7f:02:8d:a8:e6:66: fc:ca:30:89:ab:de:76:28:4d:d0:34:50:d2:e4:87:d2:15:78: 51:17:34:6a:3f:7c:4e:80:d2:8a:c7:8c:58:84:d8:ca:37:28: f3:a1:e0:94:8d:86:52:72:4f:40:ef:09:75:5a:85:af:1e:49: c9:8d:8f:28:4d:f7:fc:7e:a9:b0:32:cf:8f:72:e2:5d:51:fd: 40:c7:f9:3b:2a:3e:27:b3:a8:fc:e8:86:72:20:be:8c:ac:38: 64:07:cd:3f:1a:ed:91:b4:bd:7a:49:62:17:bc:9b:ad:75:e1: fa:41:47:94:3b:5c:9a:46:a0:6e:4e:0b:19:58:5b:14:d8:c5: 79:c3:17:a1:80:03:f4:4d:ac:a7:cf:db:f9:aa:b0:7a:91:53: 8f:e9:b4:7c:50:9b:73:be:63:53:59:7b:ba:f0:5c:6b:f0:e9: 7d:f6:30:ff:5f:ae:13:38:62:e5:b6:a5:44:63:5e:e2:ca:13: 06:e7:75:97:6a:05:ac:e2:ed:5b:66:43:92:94:ca:cf:50:03: 9d:3f:6a:d3:65:c5:e6:d1:34:91:aa:9e:96:3e:35:62:ec:ea: e8:94:36:1d:7c:e0:a8:13:41:9e:d3:ed:15:d9:f5:b7:f4:e8: d8:a4:34:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstCtbU/mLplzpEFE+1p/5uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTI4YTBlMjQxZmZmN2FhMmU2NGFhMzg4MTU2ZjIyM2Uy ZDIxNWYwHhcNMjUxMjE3MTYwMDQzWhcNMjUxMjE4MTYwMDQzWjAzMTEwLwYDVQQD EyhjODZjNGQwMGNiMTIzOWJlMGVlODFlNjU4YTdlNGMwOWJjM2U4MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vWrSVUXjqsHk1uFvU78Epwudyiy qxdNGDMKzIaUaPylyaN3mt38ZVCdkMNtQ/QYUPvI3nU17Xgc43Z6Gc7XXrDjepSv kvvfmZsfp5okg2+BJ5ekB6hvogafIWARtp0XB5CWpeNNVfCNMFUUaw8eGcZ6Ojp/ IYgIVCpY1zaCiQHiZZDqbKhI7eYDING0N5fDZTA/70b8aZgwU+a4GCZev0aHn9RB POPGxQDJxgoa86PI4OVmxnF4bfBITSFVIe2C2z7B9GBaakSNZr7zjIlRdnlC/B3Q 0Axuyl72vElZAFt2DU5/jlnw4dCO483bppbg+2jcQ1RVbAFRZa1RKOHQPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhsTQDLEjm+DugeZYp+TAm8PoDYMB8GA1UdIwQY MBaAFBaiig4kH/96ouZKo4gVbyI+LSFfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2Et ZmIyYTk4M2NjNjZhLzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi9kOTVmMWQtMGU3Ny00ZWM2LWJiY2EtZmIyYTk4M2NjNjZh LzEvRnFLS0RpUWZfM3FpNWtxamlCVnZJajR0SVY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP5R/0Ove HMEPdg5hfwKNqOZm/MowiavedihN0DRQ0uSH0hV4URc0aj98ToDSiseMWITYyjco 86HglI2GUnJPQO8JdVqFrx5JyY2PKE33/H6psDLPj3LiXVH9QMf5Oyo+J7Oo/OiG ciC+jKw4ZAfNPxrtkbS9ekliF7ybrXXh+kFHlDtcmkagbk4LGVhbFNjFecMXoYAD 9E2sp8/b+aqwepFTj+m0fFCbc75jU1l7uvBca/DpffYw/1+uEzhi5balRGNe4soT Bud1l2oFrOLtW2ZDkpTKz1ADnT9q02XF5tE0kaqelj41Yuzq6JQ2HXzgqBNBntPt Fdn1t/To2KQ0zg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:45 2025 by rpki-client