This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: 8GzIFEHRZJH25jnsB7cCaUGK/G3w3uWaCEmUfjSTUYw= Subject key identifier: C3:CB:6A:C8:F1:F1:EA:53:33:67:C5:98:7D:DB:19:A8:D9:93:0C:A7 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B0E251679C3A8F3D94B6710620C62314B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1783 Signing time: Thu 11 Dec 2025 16:01:10 +0000 Manifest this update: Thu 11 Dec 2025 16:01:10 +0000 Manifest next update: Fri 12 Dec 2025 16:01:10 +0000 Files and hashes: 1: DBK9l2G1Y1RQ5PjyPxL_4I1OMHc.roa (hash: 3ebqdm6jhi27iGWijCrC+ujaLCSP8YdtxyMrgT6MGh0=) 2: De225tD85-F1qbUEFGgafancbWE.roa (hash: ffQBtPdq/jYZ9UDdbPyqbcdbl0gguGtGw9sQ+gR7uW0=) 3: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (hash: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=) 4: GGjTVZWbLSDhQp9W7TQ3y8oF_b4.roa (hash: Pk5u57XOUkvuKTr8WK8jFr5Dz4GoBS8wm3HWTrG8FLc=) 5: LBBZUXMrOft_XP60iSESTKt86sM.roa (hash: 89zGaVQWdEa8E1V0POtFohdWRYv8E1LJMUoFWfa2mrg=) 6: NoQQo7-js6L12fR0RacWq8GG0sQ.roa (hash: 5b2ty4pyO343YcitFJvqMF9Dc1v6ZLu7zQaIL0yJMCU=) 7: P7tcMbdP2x9DJkbSuUwIb9G9x9o.roa (hash: QjQA68r89i9yJT2InLr4ogmEqW/3iVwOl7YPH7/R1Mo=) 8: VX4ftyY4KZHbSmiCReLCvSah6K0.roa (hash: Rn1JFaArfYotjjdUcRkdUwwvp5zW652Iz5Ayfo9Jabw=) 9: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: CthGXZGctQhjgynjqWkp7lRTYcauJizcG6KPSXfnSDY=) 10: h-1L5eLqg4mkZA6vkbFimrHVmcg.roa (hash: bqaSlAu3zA+3kNA8VplAkJvr2kDap+TG6ZM8MSm8+8U=) 11: vCDuY3lxDvFGl_QkzVFbCKb-ZsE.roa (hash: OduZBIIo/1HneBK/hYWAUdQ5Rk0JzBTx0gVli+SLKl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:45:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0e:25:16:79:c3:a8:f3:d9:4b:67:10:62:0c:62:31:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Dec 11 16:01:10 2025 GMT Not After : Dec 12 16:01:10 2025 GMT Subject: CN=c3cb6ac8f1f1ea533367c5987ddb19a8d9930ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:98:31:66:ad:36:92:89:39:cf:60:19:a3:e4: b8:13:90:1e:95:61:fa:5e:ae:af:bb:a0:8c:ce:8a: be:56:7f:ba:5c:e6:84:03:b6:d6:d0:8f:8a:a1:fc: a2:dc:d9:49:db:96:19:83:e3:ea:eb:38:1f:34:0b: 74:c7:eb:5a:3e:0f:0c:a7:01:33:68:2d:2c:fc:ce: 5d:51:67:96:fa:88:0e:a0:c6:90:80:e2:04:e2:4c: 88:d7:5c:67:a9:98:5c:9d:99:f0:de:b9:2c:05:15: 61:10:28:1c:19:32:50:15:99:32:95:8a:45:80:fc: b9:04:b0:eb:d9:49:5a:dd:12:62:30:fd:cd:f8:fe: 86:e6:30:da:b2:10:a2:bc:64:71:de:12:cc:d7:63: d4:25:d4:4d:82:a9:56:65:40:2e:58:25:47:18:5a: 5e:fd:7e:06:d0:91:5c:33:a2:60:ff:3f:84:5f:92: 95:60:ee:1a:99:a0:13:ba:9f:50:d6:92:9f:a9:d1: f2:0e:f5:1c:ff:01:f3:d3:73:e8:ea:82:39:dd:17: 33:81:b5:dc:f7:bd:20:5b:56:21:60:80:41:24:29: b5:e4:a2:71:0e:43:78:21:89:56:df:6f:28:0c:ce: de:13:b9:35:73:3d:cd:69:52:9c:7e:3e:19:78:8a: 2b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CB:6A:C8:F1:F1:EA:53:33:67:C5:98:7D:DB:19:A8:D9:93:0C:A7 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:40:5f:04:0c:c8:13:7a:61:f0:c8:17:00:15:2b:52:0e:f9: bf:e9:93:06:17:fb:a7:01:9e:8c:ac:ce:b0:71:92:79:dd:e6: 94:f7:0e:c0:a7:8e:6d:c3:3c:2f:7c:41:a4:e8:69:6a:ab:31: 11:bc:d1:6e:13:0a:6d:9b:af:42:20:14:d2:a7:f5:35:28:0f: d6:14:4a:e0:90:cd:d7:f1:1c:c9:66:09:38:15:06:c6:3b:ff: f2:36:6c:d8:77:5a:35:f3:f4:5f:d4:9c:a5:56:5b:97:94:b2: 00:20:d5:49:d6:5f:22:42:04:9a:5f:b8:28:bc:72:49:10:5d: c5:86:35:16:f9:fe:d5:b6:39:fe:ba:b1:f2:c5:20:7f:d8:1b: 9e:44:31:52:ec:d0:fd:1b:bf:31:6b:bd:b9:43:a7:a4:a3:53: 0f:c0:00:35:f4:a1:90:99:02:34:d8:a8:52:bf:f4:5d:bc:e0: 73:60:4e:0e:df:db:8c:a8:01:ec:ab:a9:73:71:7a:50:c1:02: 2b:62:bb:d8:5e:d3:f8:3d:1f:26:9c:8b:23:97:18:e9:98:3e: aa:ce:f3:ee:22:62:3d:ad:9a:97:83:e4:5d:be:a3:66:21:48: 09:f9:fb:a7:a5:a8:e1:dd:a7:92:cc:0a:ae:3e:1c:57:8f:3e: ef:0f:60:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsOJRZ5w6jz2UtnEGIMYjFLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjUxMjExMTYwMTEwWhcNMjUxMjEyMTYwMTEwWjAzMTEwLwYDVQQD EyhjM2NiNmFjOGYxZjFlYTUzMzM2N2M1OTg3ZGRiMTlhOGQ5OTMwY2E3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJgxZq02kok5z2AZo+S4E5AelWH6 Xq6vu6CMzoq+Vn+6XOaEA7bW0I+Kofyi3NlJ25YZg+Pq6zgfNAt0x+taPg8MpwEz aC0s/M5dUWeW+ogOoMaQgOIE4kyI11xnqZhcnZnw3rksBRVhECgcGTJQFZkylYpF gPy5BLDr2Ula3RJiMP3N+P6G5jDashCivGRx3hLM12PUJdRNgqlWZUAuWCVHGFpe /X4G0JFcM6Jg/z+EX5KVYO4amaATup9Q1pKfqdHyDvUc/wHz03Po6oI53RczgbXc 970gW1YhYIBBJCm15KJxDkN4IYlW328oDM7eE7k1cz3NaVKcfj4ZeIorRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPLasjx8epTM2fFmH3bGajZkwynMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0BfBAzI E3ph8MgXABUrUg75v+mTBhf7pwGejKzOsHGSed3mlPcOwKeObcM8L3xBpOhpaqsx EbzRbhMKbZuvQiAU0qf1NSgP1hRK4JDN1/EcyWYJOBUGxjv/8jZs2HdaNfP0X9Sc pVZbl5SyACDVSdZfIkIEml+4KLxySRBdxYY1Fvn+1bY5/rqx8sUgf9gbnkQxUuzQ /Ru/MWu9uUOnpKNTD8AANfShkJkCNNioUr/0Xbzgc2BODt/bjKgB7Kupc3F6UMEC K2K72F7T+D0fJpyLI5cY6Zg+qs7z7iJiPa2al4PkXb6jZiFICfn7p6Wo4d2nkswK rj4cV48+7w9gfg== -----END CERTIFICATE-----Generated at Thu Dec 11 23:53:09 2025 by rpki-client