This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft File: cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft (raw, json) Hash identifier: x8oQ80jIYLlH1pr8WendnOS/4um5i53qCSE5D15pwDg= Subject key identifier: 71:10:96:F7:89:01:7B:BB:78:BA:12:0D:25:14:BA:8C:63:1A:B2:11 Authority key identifier: 71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D Certificate issuer: /CN=710068d5bf1bffd79174e37501bfa17f917b313d Certificate serial: 019B5A515E569F15BB327A1BBE98E466EB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft Manifest number: 0FC4 Signing time: Fri 26 Dec 2025 11:00:40 +0000 Manifest this update: Fri 26 Dec 2025 11:00:40 +0000 Manifest next update: Sat 27 Dec 2025 11:00:40 +0000 Files and hashes: 1: cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl (hash: nmJhIaLDnm3MChfG3sREz+V7TvFcDoGh6Lsq1n9DdO4=) 2: q8epYF3ITJmcTk7KzU9-ybVTiI8.roa (hash: ynf0gvvVwgf87WpAamEBJq2+/MA1NpfszumEHpnlxfU=) 3: uDM7F8LY5WouCO7a0kMUmT3QPVg.roa (hash: 2/WNOkYZ2Hjr/CS7x76w5+dnVkOCkqa3HT6PAApsbQc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:5e:56:9f:15:bb:32:7a:1b:be:98:e4:66:eb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=710068d5bf1bffd79174e37501bfa17f917b313d Validity Not Before: Dec 26 11:00:40 2025 GMT Not After : Dec 27 11:00:40 2025 GMT Subject: CN=711096f789017bbb78ba120d2514ba8c631ab211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:c3:df:e7:9d:2f:19:26:21:e4:c9:71:de: 80:ae:39:e5:e9:82:8a:8f:0e:47:47:86:6f:27:e6: 87:70:a5:2b:46:6f:fb:8f:06:5c:6c:54:1d:eb:8a: 30:a7:d4:df:bd:dd:fd:4b:aa:ef:81:73:dd:f0:24: e3:8c:bd:05:77:3c:7b:ed:2e:e2:5c:58:f6:72:fc: 9f:1c:f3:b9:4f:eb:62:57:ad:31:b6:22:39:63:22: 3a:96:9e:fc:9d:78:61:06:3f:6f:70:aa:5c:0d:b7: 6f:93:f1:b8:f3:3f:c9:74:59:f0:e6:7d:78:bf:37: 19:e7:1d:c7:97:1f:26:b7:9d:61:ce:1d:2a:dd:f7: 2e:da:0e:8c:f0:32:8f:c4:f9:b1:5e:f4:b6:44:9d: 72:59:0d:3a:61:26:ec:bb:9f:df:41:12:19:71:e3: cd:95:6c:07:cf:58:fc:7f:2e:aa:46:eb:91:ad:a7: 90:1b:7c:b0:cd:c4:46:1e:f1:ae:1e:42:ea:da:19: e2:d8:1c:d8:32:03:08:c2:5d:ca:49:d4:f3:6f:1e: c5:0b:c0:e4:ec:12:d3:1f:81:b0:62:30:ce:97:05: c6:d1:97:18:1a:9e:6b:17:14:86:1b:44:69:08:a2: b9:65:3e:11:b8:83:d6:36:b4:8a:e3:39:63:85:9c: 62:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:96:F7:89:01:7B:BB:78:BA:12:0D:25:14:BA:8C:63:1A:B2:11 X509v3 Authority Key Identifier: keyid:71:00:68:D5:BF:1B:FF:D7:91:74:E3:75:01:BF:A1:7F:91:7B:31:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cQBo1b8b_9eRdON1Ab-hf5F7MT0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/74d7cd-04e1-49d8-aad9-82043b9e4f71/1/cQBo1b8b_9eRdON1Ab-hf5F7MT0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f0:16:c7:f6:7e:10:d1:5a:83:25:83:35:de:a3:fc:84:e9: 7d:3d:81:44:6c:17:f0:20:e6:20:ca:b3:f1:bb:8f:5b:df:fc: 6e:53:cf:33:67:f6:7e:22:f6:ac:a0:df:18:2e:0c:25:98:13: 7d:f3:75:22:80:1a:38:a6:7e:53:e1:e8:18:1b:72:de:34:0b: fd:63:81:67:7f:50:83:4b:5e:2b:62:67:52:d8:ef:8a:98:ed: c1:1b:9a:c2:38:0f:16:a5:54:52:c3:5d:f4:8e:a6:f2:ba:1d: 35:94:19:d2:36:32:9c:62:63:03:0e:f7:05:bd:b8:75:d7:c5: d4:97:c9:40:aa:13:9f:62:9d:2f:b1:42:da:5f:ee:e5:a8:50: f6:7b:5f:ad:a6:21:06:aa:3e:ae:86:d4:d9:60:54:5c:82:43: 40:5d:45:d2:b9:e5:d5:45:d2:b3:04:a0:46:b9:df:30:cb:e3: f4:f2:fc:63:d7:76:c4:5e:ce:8f:42:a0:9c:0a:e4:28:d1:f9: f7:71:4e:71:29:be:ff:ee:73:e9:9b:0b:ff:b9:6a:b5:f6:20: 9d:4a:f2:43:1f:51:30:b7:93:5b:56:6f:cb:33:0b:d5:cf:44: da:3e:43:b7:53:dc:dd:d0:d2:a6:23:5e:bd:00:fa:47:54:88: 3a:50:11:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUV5WnxW7MnobvpjkZuspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMDA2OGQ1YmYxYmZmZDc5MTc0ZTM3NTAxYmZhMTdmOTE3 YjMxM2QwHhcNMjUxMjI2MTEwMDQwWhcNMjUxMjI3MTEwMDQwWjAzMTEwLwYDVQQD Eyg3MTEwOTZmNzg5MDE3YmJiNzhiYTEyMGQyNTE0YmE4YzYzMWFiMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9vD3+edLxkmIeTJcd6Arjnl6YKK jw5HR4ZvJ+aHcKUrRm/7jwZcbFQd64owp9Tfvd39S6rvgXPd8CTjjL0Fdzx77S7i XFj2cvyfHPO5T+tiV60xtiI5YyI6lp78nXhhBj9vcKpcDbdvk/G48z/JdFnw5n14 vzcZ5x3Hlx8mt51hzh0q3fcu2g6M8DKPxPmxXvS2RJ1yWQ06YSbsu5/fQRIZcePN lWwHz1j8fy6qRuuRraeQG3ywzcRGHvGuHkLq2hni2BzYMgMIwl3KSdTzbx7FC8Dk 7BLTH4GwYjDOlwXG0ZcYGp5rFxSGG0RpCKK5ZT4RuIPWNrSK4zljhZxi0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQlveJAXu7eLoSDSUUuoxjGrIRMB8GA1UdIwQY MBaAFHEAaNW/G//XkXTjdQG/oX+RezE9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDkt ODIwNDNiOWU0ZjcxLzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny83NGQ3Y2QtMDRlMS00OWQ4LWFhZDktODIwNDNiOWU0Zjcx LzEvY1FCbzFiOGJfOWVSZE9OMUFiLWhmNUY3TVQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvAWx/Z+ ENFagyWDNd6j/ITpfT2BRGwX8CDmIMqz8buPW9/8blPPM2f2fiL2rKDfGC4MJZgT ffN1IoAaOKZ+U+HoGBty3jQL/WOBZ39Qg0teK2JnUtjvipjtwRuawjgPFqVUUsNd 9I6m8rodNZQZ0jYynGJjAw73Bb24ddfF1JfJQKoTn2KdL7FC2l/u5ahQ9ntfraYh Bqo+robU2WBUXIJDQF1F0rnl1UXSswSgRrnfMMvj9PL8Y9d2xF7Oj0KgnArkKNH5 93FOcSm+/+5z6ZsL/7lqtfYgnUryQx9RMLeTW1ZvyzML1c9E2j5Dt1Pc3dDSpiNe vQD6R1SIOlAReQ== -----END CERTIFICATE-----Generated at Fri Dec 26 15:47:28 2025 by rpki-client