This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json) Hash identifier: W58/u8/w8gyYVv76dy9jd4wpw2iTahHAN8iNCID6JEE= Subject key identifier: 5B:EC:F9:34:81:51:B6:67:8B:AF:F8:AA:5A:57:4E:8E:64:CF:A0:EF Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424 Certificate serial: 019B5ABF9EC830205B6A91579761EF6715AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft Manifest number: 14ED Signing time: Fri 26 Dec 2025 13:01:05 +0000 Manifest this update: Fri 26 Dec 2025 13:01:05 +0000 Manifest next update: Sat 27 Dec 2025 13:01:05 +0000 Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: crHhINRq27cTRZq4tbKBtGWRjAisLFDHHGgLy1c1ew0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:9e:c8:30:20:5b:6a:91:57:97:61:ef:67:15:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424 Validity Not Before: Dec 26 13:01:05 2025 GMT Not After : Dec 27 13:01:05 2025 GMT Subject: CN=5becf9348151b6678baff8aa5a574e8e64cfa0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d3:f6:16:b9:f0:62:7c:f4:87:c7:9c:8d:c9: 4a:3f:e0:08:63:e7:02:b1:18:ce:41:6e:bc:90:3d: bb:f5:c5:ee:70:b6:d9:2f:40:ca:b6:80:5c:45:6d: bc:14:e6:e7:0f:1f:df:19:0f:8a:b0:40:4a:e1:bc: 80:3f:09:40:e8:91:7a:4f:ae:55:3a:e8:1d:7d:6e: d6:5d:df:87:2b:09:de:1d:ac:a1:68:e4:f4:41:fc: f7:a8:87:01:a2:0e:27:b8:7b:87:0a:ba:b9:7e:db: d7:68:9e:3d:f0:e8:b8:e0:df:d0:4e:12:e9:56:bb: 08:7e:7b:9f:2e:f8:db:37:00:38:f0:1a:53:55:df: ed:de:63:84:ae:e5:0b:ae:b8:ab:e1:8e:ad:f2:7b: 9a:dd:0f:06:68:e0:e6:22:f8:79:0c:e5:2d:ac:5d: 37:66:9c:28:e6:e2:b0:cf:41:9c:94:3f:c7:f4:cf: 55:8e:99:c6:14:f4:c4:c7:a5:28:e6:df:0c:76:aa: c6:4c:91:c6:32:81:e7:9e:d8:8c:bc:55:32:f6:81: c2:39:de:25:4e:4f:9e:61:25:30:04:6f:bc:a5:a0: 2f:7d:5e:04:76:cf:b2:28:84:3c:05:b6:91:b8:2e: f3:9e:15:d9:bb:26:0b:8b:88:38:b1:43:40:67:c3: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EC:F9:34:81:51:B6:67:8B:AF:F8:AA:5A:57:4E:8E:64:CF:A0:EF X509v3 Authority Key Identifier: keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:31:36:12:1b:5a:db:f9:0d:d9:09:88:51:19:a3:9a:8b:08: 76:06:37:10:2c:4e:fb:75:5c:89:6a:0d:e1:1f:fd:96:1d:6c: b5:5a:dd:5b:7e:e0:85:7c:72:d7:24:21:49:30:63:dd:40:e4: 31:1f:7f:4b:7e:af:e5:04:e9:60:18:cc:e5:06:52:20:99:bf: a0:46:05:23:9f:22:91:e9:5e:43:d9:0d:7b:fd:f8:68:cc:4e: 96:db:09:72:af:10:52:fb:d7:ed:ac:db:c1:c8:84:86:58:7c: 29:3b:71:ef:7b:3c:9a:a5:58:0e:76:c3:88:88:ee:41:62:6c: 95:36:a9:06:94:2f:4f:bd:ab:b1:c4:25:13:f1:5d:6f:40:9f: d4:15:11:c1:b5:75:23:c4:8d:2f:de:61:b2:dc:01:75:f2:5a: a9:e3:b7:78:86:1b:fe:a6:cb:a2:22:8f:db:53:3e:5a:80:5f: de:3d:39:b0:57:fc:b4:6c:5b:80:ca:55:c2:f5:dd:1e:44:71: 99:c8:2d:d9:8d:42:c7:a6:2f:ec:52:bd:e3:f8:75:60:a5:ff: 46:62:9a:04:59:df:1a:cd:18:48:ca:54:e5:4b:9a:b6:bf:05: 1a:7e:e2:d7:79:4a:63:d6:a5:84:5e:55:20:26:30:cc:83:55: de:e1:f3:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav57IMCBbapFXl2HvZxWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3 Mjg0MjQwHhcNMjUxMjI2MTMwMTA1WhcNMjUxMjI3MTMwMTA1WjAzMTEwLwYDVQQD Eyg1YmVjZjkzNDgxNTFiNjY3OGJhZmY4YWE1YTU3NGU4ZTY0Y2ZhMGVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstP2FrnwYnz0h8ecjclKP+AIY+cC sRjOQW68kD279cXucLbZL0DKtoBcRW28FObnDx/fGQ+KsEBK4byAPwlA6JF6T65V OugdfW7WXd+HKwneHayhaOT0Qfz3qIcBog4nuHuHCrq5ftvXaJ498Oi44N/QThLp VrsIfnufLvjbNwA48BpTVd/t3mOEruULrrir4Y6t8nua3Q8GaODmIvh5DOUtrF03 Zpwo5uKwz0GclD/H9M9VjpnGFPTEx6Uo5t8MdqrGTJHGMoHnntiMvFUy9oHCOd4l Tk+eYSUwBG+8paAvfV4Eds+yKIQ8BbaRuC7znhXZuyYLi4g4sUNAZ8Mc0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvs+TSBUbZni6/4qlpXTo5kz6DvMB8GA1UdIwQY MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITE2Ehta 2/kN2QmIURmjmosIdgY3ECxO+3VciWoN4R/9lh1stVrdW37ghXxy1yQhSTBj3UDk MR9/S36v5QTpYBjM5QZSIJm/oEYFI58ikeleQ9kNe/34aMxOltsJcq8QUvvX7azb wciEhlh8KTtx73s8mqVYDnbDiIjuQWJslTapBpQvT72rscQlE/Fdb0Cf1BURwbV1 I8SNL95hstwBdfJaqeO3eIYb/qbLoiKP21M+WoBf3j05sFf8tGxbgMpVwvXdHkRx mcgt2Y1Cx6Yv7FK94/h1YKX/RmKaBFnfGs0YSMpU5Uuatr8FGn7i13lKY9alhF5V ICYwzINV3uHz+Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:03 2025 by rpki-client