This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json) Hash identifier: vcaMX54G6DHCMn0tgX8ryO5Pw29NCax0ZxDcm9uAZY0= Subject key identifier: 34:F5:50:3F:5D:52:6C:1F:C3:FF:96:F3:99:95:A2:28:F1:78:A5:C4 Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Certificate serial: 019B3833982099C6A17766093734D9ED3703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft Manifest number: 1789 Signing time: Fri 19 Dec 2025 20:01:03 +0000 Manifest this update: Fri 19 Dec 2025 20:01:03 +0000 Manifest next update: Sat 20 Dec 2025 20:01:03 +0000 Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: sy+42IB+I009Kki42DnJjz5Yo0WtocZ2ovvZa9mp7sI=) 2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:38:33:98:20:99:c6:a1:77:66:09:37:34:d9:ed:37:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2 Validity Not Before: Dec 19 20:01:03 2025 GMT Not After : Dec 20 20:01:03 2025 GMT Subject: CN=34f5503f5d526c1fc3ff96f39995a228f178a5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:e1:f4:47:26:dc:4c:23:ff:f1:53:f6:b0: f2:c0:39:5b:aa:61:a9:0d:22:ec:e1:22:81:c9:59: ce:32:ae:3c:6b:ef:a2:00:69:80:fd:90:3f:d9:65: 76:ee:3c:fd:b9:8c:98:4a:fb:22:6f:05:97:8c:fc: cf:38:62:87:31:71:0c:06:8a:f8:39:29:fb:82:11: 60:cf:00:e0:25:88:8c:8c:cd:39:5d:73:6f:bd:3c: ce:16:e0:4e:4c:77:fd:73:26:18:f4:5c:a1:55:f8: 99:f8:91:89:40:05:e8:fa:59:64:29:ee:86:e7:e5: 10:41:5c:44:f5:ae:f2:c7:6a:8c:d9:d0:f5:20:16: a5:37:66:14:ec:70:90:d9:c1:70:07:71:31:3b:40: 15:30:33:77:ec:b4:0a:22:6f:1a:f7:af:43:49:2a: fa:f6:bb:e7:c1:35:e8:ee:ae:90:ed:2c:d9:94:22: ed:b9:44:cc:ce:05:4f:4b:63:49:19:30:96:58:a9: d3:e5:f2:51:71:0c:f3:cd:99:1b:f8:fe:25:99:1f: f7:be:ea:fe:2c:88:93:02:bf:8e:15:28:04:23:84: 2d:36:4a:eb:da:23:c6:b1:7f:ba:06:af:68:18:06: 74:d1:f3:f3:a9:a2:df:b5:32:bd:bc:ad:15:f1:1c: 90:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:50:3F:5D:52:6C:1F:C3:FF:96:F3:99:95:A2:28:F1:78:A5:C4 X509v3 Authority Key Identifier: keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:d4:79:61:53:71:60:9c:2c:fe:d7:9d:50:93:ec:4a:ec:40: 4d:11:bf:97:f5:2d:e5:e6:36:79:c7:97:fa:58:b9:61:26:5f: 44:de:70:64:20:39:89:0c:8a:c8:ac:19:3c:2a:32:1d:a6:d0: 93:fb:04:16:13:02:a8:62:39:77:61:56:91:5b:90:02:99:ee: ef:f1:78:d5:61:41:00:1f:9b:70:a0:a7:ee:16:b1:3c:51:11: 88:ed:81:be:69:76:8f:98:c3:49:a7:5c:1f:09:6e:66:ca:77: 8b:a3:5d:c1:2c:e2:41:24:b3:30:70:29:84:ca:8b:16:57:45: 1d:d0:59:91:9e:43:f9:b5:a6:65:22:c5:73:23:b2:75:ce:ba: fc:38:6c:36:9a:3d:b9:fc:86:60:01:d5:49:33:46:a8:01:8b: 19:e7:cd:5a:c8:62:53:67:70:d7:87:bf:97:f1:aa:53:70:1c: df:0f:5b:a7:f3:3f:9b:80:ee:28:01:ac:f1:d4:c6:68:f8:55: de:c3:c1:05:a4:1e:39:a3:33:c4:b9:57:c6:ea:1f:f0:d6:de: 01:9b:c7:2f:92:ec:08:cf:9c:a5:df:63:17:5e:0d:5a:3d:6c: 35:20:12:24:d7:b4:59:ac:49:6b:cc:45:83:90:26:e6:3c:ea: aa:c1:71:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs4M5ggmcahd2YJNzTZ7TcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGFjMzM0NDM4YTUzZDE4YWU0MGVmYzkzNjg3NjhiOTMx Y2ZhYzIwHhcNMjUxMjE5MjAwMTAzWhcNMjUxMjIwMjAwMTAzWjAzMTEwLwYDVQQD EygzNGY1NTAzZjVkNTI2YzFmYzNmZjk2ZjM5OTk1YTIyOGYxNzhhNWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw73h9Ecm3Ewj//FT9rDywDlbqmGp DSLs4SKByVnOMq48a++iAGmA/ZA/2WV27jz9uYyYSvsibwWXjPzPOGKHMXEMBor4 OSn7ghFgzwDgJYiMjM05XXNvvTzOFuBOTHf9cyYY9FyhVfiZ+JGJQAXo+llkKe6G 5+UQQVxE9a7yx2qM2dD1IBalN2YU7HCQ2cFwB3ExO0AVMDN37LQKIm8a969DSSr6 9rvnwTXo7q6Q7SzZlCLtuUTMzgVPS2NJGTCWWKnT5fJRcQzzzZkb+P4lmR/3vur+ LIiTAr+OFSgEI4QtNkrr2iPGsX+6Bq9oGAZ00fPzqaLftTK9vK0V8RyQtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDT1UD9dUmwfw/+W85mVoijxeKXEMB8GA1UdIwQY MBaAFH0KwzRDilPRiuQO/JNodouTHPrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzkt YjUxOWIxMzFiZjg1LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mMjZmZDEtYjM3NS00MjZjLWFmNzktYjUxOWIxMzFiZjg1 LzEvZlFyRE5FT0tVOUdLNUE3OGsyaDJpNU1jLXNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvdR5YVNx YJws/tedUJPsSuxATRG/l/Ut5eY2eceX+li5YSZfRN5wZCA5iQyKyKwZPCoyHabQ k/sEFhMCqGI5d2FWkVuQApnu7/F41WFBAB+bcKCn7haxPFERiO2Bvml2j5jDSadc HwluZsp3i6NdwSziQSSzMHAphMqLFldFHdBZkZ5D+bWmZSLFcyOydc66/DhsNpo9 ufyGYAHVSTNGqAGLGefNWshiU2dw14e/l/GqU3Ac3w9bp/M/m4DuKAGs8dTGaPhV 3sPBBaQeOaMzxLlXxuof8NbeAZvHL5LsCM+cpd9jF14NWj1sNSASJNe0WaxJa8xF g5Am5jzqqsFxgQ== -----END CERTIFICATE-----Generated at Sat Dec 20 00:14:57 2025 by rpki-client