This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft File: fqxm_CIxyyZW51M1of1mdx9Xqcw.mft (raw, json) Hash identifier: A/MpZhiJH+uc2BhWRn4yRPitNVhk/LzQVnx3etFh5S0= Subject key identifier: 34:8F:D6:C5:29:20:22:DC:F1:82:E2:BA:36:AC:17:A1:48:C8:95:2D Authority key identifier: 7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC Certificate issuer: /CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Certificate serial: 019B10818152C3FCEE0CA56190CAB434B97B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft Manifest number: 0458 Signing time: Fri 12 Dec 2025 03:01:21 +0000 Manifest this update: Fri 12 Dec 2025 03:01:21 +0000 Manifest next update: Sat 13 Dec 2025 03:01:21 +0000 Files and hashes: 1: 82ywaE3JFKydhCtiLwP3kX3cHw4.roa (hash: HxQsJBHdoQOXXDmtm1dRn8dN912bmzuv+pkYTIzf//Q=) 2: fqxm_CIxyyZW51M1of1mdx9Xqcw.crl (hash: 4yHwlpFD2+cSAV4NaZg5FaSU2BEgkEBuDWgvms1r0Jo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:81:81:52:c3:fc:ee:0c:a5:61:90:ca:b4:34:b9:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eac66fc2231cb2656e75335a1fd66771f57a9cc Validity Not Before: Dec 12 03:01:21 2025 GMT Not After : Dec 13 03:01:21 2025 GMT Subject: CN=348fd6c5292022dcf182e2ba36ac17a148c8952d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:fe:ee:e1:d3:d2:b7:0e:9d:3b:75:14:cf:5c: e7:23:ed:ec:89:0e:3a:b0:65:9a:ee:f4:39:71:ae: 96:cd:c0:fe:02:c9:83:7c:be:09:44:19:1a:d0:ae: 8b:7a:a6:21:b5:34:47:a7:29:6f:77:19:e1:1f:44: 7b:45:dd:8b:60:de:2e:b5:0a:8f:ab:99:85:15:55: bc:e8:57:c2:d1:3c:10:e5:95:9b:b6:d7:08:b2:c4: f4:88:3d:24:fb:9d:10:d4:3c:c9:e0:67:df:a5:49: b3:a3:ed:41:6a:a1:93:ed:80:c3:76:ef:85:e5:e5: 7e:1e:13:d0:41:7e:8f:6e:68:ef:68:7d:49:fc:bc: df:72:29:69:55:0d:19:2f:d1:9c:30:07:ee:0e:03: ce:5d:d4:d6:b7:3a:a5:5a:0a:4b:b4:2a:64:db:4d: 41:b8:07:76:1d:83:b8:b6:5a:1e:08:2a:51:dc:36: c4:9f:51:30:c1:98:cc:41:d1:00:6a:46:38:9c:f6: 2d:22:a6:ce:7b:78:e2:d5:72:fc:ad:63:90:69:6a: 62:33:6e:c5:07:ba:a0:5f:6d:ea:bb:6a:ae:cb:24: fa:b6:9b:04:97:69:25:2b:79:cc:85:f3:d7:59:2b: a2:84:27:fd:cb:2e:54:53:e6:cc:ba:34:a9:f9:3e: eb:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8F:D6:C5:29:20:22:DC:F1:82:E2:BA:36:AC:17:A1:48:C8:95:2D X509v3 Authority Key Identifier: keyid:7E:AC:66:FC:22:31:CB:26:56:E7:53:35:A1:FD:66:77:1F:57:A9:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqxm_CIxyyZW51M1of1mdx9Xqcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f14721-2910-42de-b71e-46ce5c8241db/1/fqxm_CIxyyZW51M1of1mdx9Xqcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:76:b3:ef:8e:cb:6a:8c:25:ed:1a:29:db:d6:02:a7:a9:8d: a5:bf:e8:90:08:1a:b7:8d:6f:06:82:03:01:c5:40:1e:39:ad: 22:84:86:f0:d6:e5:d0:32:40:ed:87:ab:cf:42:5b:a3:1e:1b: 1d:8b:2a:2c:8c:aa:57:66:65:e8:0e:cc:3f:41:e5:1a:99:77: e3:48:5a:40:d6:e7:77:04:bc:7f:f7:d4:fc:ac:83:ac:84:3a: 3b:64:29:aa:62:e4:6e:fc:78:ca:e7:03:10:44:10:a9:51:3f: 8b:ac:57:45:e3:a9:2f:fd:c6:69:54:c8:b9:a9:f5:fa:44:44: d0:3e:1a:ff:1d:5c:5f:c4:6d:2d:f3:2d:57:33:c5:2e:70:98: a9:16:00:88:ac:d8:1d:e2:41:1d:25:3b:ee:92:e0:85:05:03: 07:01:6a:f2:f1:82:ac:0f:a8:c9:87:c8:99:d9:ea:a4:de:00: 49:b5:73:4a:05:8c:86:d0:6d:96:73:58:f2:0c:df:9d:65:33: 84:28:b0:eb:92:b6:24:08:b3:e1:d6:d0:23:ea:37:55:08:53: 7e:0a:88:b2:c2:ac:d5:46:f3:d9:de:ae:e4:14:65:28:81:de: 2c:86:b4:bc:03:50:0b:b0:ed:d1:9d:e9:66:04:7f:d5:25:99: 95:c5:89:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQgYFSw/zuDKVhkMq0NLl7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWM2NmZjMjIzMWNiMjY1NmU3NTMzNWExZmQ2Njc3MWY1 N2E5Y2MwHhcNMjUxMjEyMDMwMTIxWhcNMjUxMjEzMDMwMTIxWjAzMTEwLwYDVQQD EygzNDhmZDZjNTI5MjAyMmRjZjE4MmUyYmEzNmFjMTdhMTQ4Yzg5NTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof7u4dPStw6dO3UUz1znI+3siQ46 sGWa7vQ5ca6WzcD+AsmDfL4JRBka0K6LeqYhtTRHpylvdxnhH0R7Rd2LYN4utQqP q5mFFVW86FfC0TwQ5ZWbttcIssT0iD0k+50Q1DzJ4GffpUmzo+1BaqGT7YDDdu+F 5eV+HhPQQX6PbmjvaH1J/LzfcilpVQ0ZL9GcMAfuDgPOXdTWtzqlWgpLtCpk201B uAd2HYO4tloeCCpR3DbEn1EwwZjMQdEAakY4nPYtIqbOe3ji1XL8rWOQaWpiM27F B7qgX23qu2quyyT6tpsEl2klK3nMhfPXWSuihCf9yy5UU+bMujSp+T7rQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSP1sUpICLc8YLiujasF6FIyJUtMB8GA1UdIwQY MBaAFH6sZvwiMcsmVudTNaH9ZncfV6nMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUt NDZjZTVjODI0MWRiLzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mMTQ3MjEtMjkxMC00MmRlLWI3MWUtNDZjZTVjODI0MWRi LzEvZnF4bV9DSXh5eVpXNTFNMW9mMW1keDlYcWN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPHaz747L aowl7Rop29YCp6mNpb/okAgat41vBoIDAcVAHjmtIoSG8Nbl0DJA7Yerz0Jbox4b HYsqLIyqV2Zl6A7MP0HlGpl340haQNbndwS8f/fU/KyDrIQ6O2QpqmLkbvx4yucD EEQQqVE/i6xXReOpL/3GaVTIuan1+kRE0D4a/x1cX8RtLfMtVzPFLnCYqRYAiKzY HeJBHSU77pLghQUDBwFq8vGCrA+oyYfImdnqpN4ASbVzSgWMhtBtlnNY8gzfnWUz hCiw65K2JAiz4dbQI+o3VQhTfgqIssKs1Ubz2d6u5BRlKIHeLIa0vANQC7Dt0Z3p ZgR/1SWZlcWJSw== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:05 2025 by rpki-client