This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json) Hash identifier: VSNye6TmhGFNn1d4CmJMIgfusTwEaxubJDPPtgqbu9k= Subject key identifier: 06:11:AD:BF:29:71:20:2E:15:FD:39:02:74:0C:E8:1D:D2:13:92:C2 Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Certificate serial: 019AF68A27B45A5345B4AA976AC2710BC961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft Manifest number: 1767 Signing time: Sun 07 Dec 2025 02:00:40 +0000 Manifest this update: Sun 07 Dec 2025 02:00:40 +0000 Manifest next update: Mon 08 Dec 2025 02:00:40 +0000 Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: 9RBYsX3JVkcihG3VMoc8j29AkTa+Rro64WeKkJcVdiM=) 2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 08 Dec 2025 02:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:8a:27:b4:5a:53:45:b4:aa:97:6a:c2:71:0b:c9:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Validity Not Before: Dec 7 02:00:40 2025 GMT Not After : Dec 8 02:00:40 2025 GMT Subject: CN=0611adbf2971202e15fd3902740ce81dd21392c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6b:12:68:bd:35:c8:d3:c2:f3:7f:6c:2c:0d: 5c:fc:0c:c1:bc:78:48:a6:5f:46:61:88:52:3f:5c: 78:14:7b:0d:f3:22:a1:4b:d0:ac:e6:8f:a5:cc:1b: e8:98:7a:3f:21:01:73:b5:41:92:66:6e:fe:6b:b6: f2:9b:1d:2c:e9:e4:c9:63:df:bb:41:56:ec:64:b9: 65:3c:1f:de:34:78:76:16:9a:23:d6:8b:c1:23:a5: f6:3e:a9:85:6e:2d:5c:a1:18:ac:88:30:59:cf:8d: c6:db:36:b8:3d:8e:09:99:95:8d:10:8d:b6:3b:ea: d3:0a:e7:48:e8:8b:25:9f:0e:cc:81:81:fa:3b:80: f4:b8:29:1d:bd:a0:ff:0a:30:c1:e5:c2:b9:fd:7b: a5:d1:ee:a3:d9:c8:81:bf:5a:ad:20:3b:05:1a:bb: 18:5f:a2:d8:af:99:55:dc:a1:5b:7d:84:9c:8b:71: 81:d4:68:12:6d:8c:b1:0c:74:2f:78:6f:3e:7f:8a: af:2c:9e:2c:69:d6:de:24:f4:64:af:df:23:b9:16: 79:40:1e:c4:5b:57:50:32:d1:fc:8f:b7:e6:3c:e4: d1:ff:de:29:fa:19:71:39:94:95:0e:2f:81:17:48: a9:d1:2e:19:7e:50:98:97:37:f5:bb:dc:ac:d8:a1: 07:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:11:AD:BF:29:71:20:2E:15:FD:39:02:74:0C:E8:1D:D2:13:92:C2 X509v3 Authority Key Identifier: keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:47:17:ae:f6:84:2c:c5:26:3c:00:4b:21:c0:dd:91:4a:47: b3:34:8e:2b:ce:38:96:3e:b9:7e:bc:a2:31:ec:40:8c:e7:bd: 3a:33:18:0a:8d:63:04:18:a6:49:44:cb:5c:c3:45:bf:f0:51: 3b:a0:ee:e8:41:7c:ed:95:0f:14:9c:20:9b:89:c9:4f:01:fd: 98:b2:09:61:b5:cc:f2:19:5d:c0:b0:81:93:27:58:f6:95:67: d3:12:08:e5:34:f7:61:33:41:64:34:00:82:df:e5:35:95:dd: 49:da:5c:56:12:5c:76:4d:ba:6c:3e:b8:98:1e:01:c7:be:7c: 01:fb:db:cd:80:5d:6a:7a:be:b6:d6:e3:60:83:bc:a7:16:eb: d4:52:79:88:6d:f3:33:53:4e:a3:30:f9:30:f3:c1:d5:25:e6: f7:25:f7:95:01:22:8b:8e:04:7b:e5:5c:7a:14:30:ec:31:71: ec:3a:c1:d6:c8:b3:0b:6c:8b:d3:ed:61:d8:f7:37:99:d6:04: 50:ff:ba:7f:08:c9:da:0f:6f:c3:27:6c:53:cd:b3:87:e3:2c: 7f:19:6c:7f:84:e6:fa:9d:ba:b6:dc:9b:3c:5e:cf:85:ea:b3: 59:24:86:e7:1c:cc:32:4a:da:7c:14:cf:48:f3:b9:cc:c8:52: e2:17:fa:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2iie0WlNFtKqXasJxC8lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGFjMzM0NDM4YTUzZDE4YWU0MGVmYzkzNjg3NjhiOTMx Y2ZhYzIwHhcNMjUxMjA3MDIwMDQwWhcNMjUxMjA4MDIwMDQwWjAzMTEwLwYDVQQD EygwNjExYWRiZjI5NzEyMDJlMTVmZDM5MDI3NDBjZTgxZGQyMTM5MmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmsSaL01yNPC839sLA1c/AzBvHhI pl9GYYhSP1x4FHsN8yKhS9Cs5o+lzBvomHo/IQFztUGSZm7+a7bymx0s6eTJY9+7 QVbsZLllPB/eNHh2Fpoj1ovBI6X2PqmFbi1coRisiDBZz43G2za4PY4JmZWNEI22 O+rTCudI6Islnw7MgYH6O4D0uCkdvaD/CjDB5cK5/Xul0e6j2ciBv1qtIDsFGrsY X6LYr5lV3KFbfYSci3GB1GgSbYyxDHQveG8+f4qvLJ4sadbeJPRkr98juRZ5QB7E W1dQMtH8j7fmPOTR/94p+hlxOZSVDi+BF0ip0S4ZflCYlzf1u9ys2KEHjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYRrb8pcSAuFf05AnQM6B3SE5LCMB8GA1UdIwQY MBaAFH0KwzRDilPRiuQO/JNodouTHPrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzkt YjUxOWIxMzFiZjg1LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzktYjUxOWIxMzFiZjg1 LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0cXrvaE LMUmPABLIcDdkUpHszSOK844lj65fryiMexAjOe9OjMYCo1jBBimSUTLXMNFv/BR O6Du6EF87ZUPFJwgm4nJTwH9mLIJYbXM8hldwLCBkydY9pVn0xII5TT3YTNBZDQA gt/lNZXdSdpcVhJcdk26bD64mB4Bx758AfvbzYBdanq+ttbjYIO8pxbr1FJ5iG3z M1NOozD5MPPB1SXm9yX3lQEii44Ee+VcehQw7DFx7DrB1sizC2yL0+1h2Pc3mdYE UP+6fwjJ2g9vwydsU82zh+Msfxlsf4Tm+p26ttybPF7PheqzWSSG5xzMMkrafBTP SPO5zMhS4hf69A== -----END CERTIFICATE-----Generated at Sun Dec 7 12:02:58 2025 by rpki-client