This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft File: fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft (raw, json) Hash identifier: PVmXCz+EYpzItrj2+hPaWDJ8AyOClpf4YxoHCJcr5QM= Subject key identifier: 69:0E:F0:AA:85:10:0F:11:3F:BA:A0:F6:16:0E:47:78:FD:23:61:A9 Authority key identifier: 7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 Certificate issuer: /CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Certificate serial: 019B19BCE0E1102CB7E1C1EA569BC61AF10B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft Manifest number: 0381 Signing time: Sat 13 Dec 2025 22:02:47 +0000 Manifest this update: Sat 13 Dec 2025 22:02:47 +0000 Manifest next update: Sun 14 Dec 2025 22:02:47 +0000 Files and hashes: 1: fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl (hash: Ow+GIn4vUGIbEafbSdFdK97p2MnUKlccrQruc7mvOlQ=) 2: kgTnhPtf5U0Bz8tjOOggGBZkLG8.roa (hash: HNiluWUdkJ/NWqiUVgEDQcdv9s5KKhDvu8H4CNi9wMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:e0:e1:10:2c:b7:e1:c1:ea:56:9b:c6:1a:f1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea66f9dd6b72c56718c85c5e18f6685f5795c75 Validity Not Before: Dec 13 22:02:47 2025 GMT Not After : Dec 14 22:02:47 2025 GMT Subject: CN=690ef0aa85100f113fbaa0f6160e4778fd2361a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ce:0e:a0:7c:ee:e0:95:d6:bb:3c:fc:ca:d0: f1:2d:56:2c:48:5f:c3:31:79:05:c5:8c:99:d6:4f: 41:0b:e4:fa:d6:2f:8f:f4:a1:a2:0e:b9:cf:86:9a: 1a:f2:6f:f1:1d:74:24:e2:8c:f3:94:3d:1b:1e:c1: 6c:42:31:f4:45:63:e9:62:a9:3b:dc:f2:2e:56:5c: 52:0f:5b:02:b6:e8:91:c8:66:a8:ac:72:c4:fc:06: 7c:f8:09:37:b0:58:44:11:7f:7c:df:92:dd:54:60: 21:90:1f:52:c8:f6:72:61:53:97:1a:c9:1e:e5:c3: 1a:40:dc:ff:77:7a:14:96:1b:d7:4b:ee:1d:6c:4e: 4e:98:e4:53:10:0c:12:aa:7c:55:9f:cf:06:ba:29: 22:7c:b1:89:d0:59:27:61:e6:c1:d1:5e:81:1d:e3: 5b:3d:41:44:f5:93:66:cb:79:e1:10:88:7e:92:25: bd:64:2c:1a:0e:11:c8:64:36:3d:2a:13:fd:75:5d: 46:21:ca:ac:bd:62:2a:c3:78:8d:1b:3e:94:84:e9: c9:bf:ff:bb:08:3b:21:71:30:b7:01:b8:ef:c6:f2: 80:2f:70:69:2c:b9:fe:0f:11:89:c5:ac:8a:8f:2c: 87:2c:cf:f4:5a:56:27:b0:8d:f4:af:40:d8:4f:10: 5f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0E:F0:AA:85:10:0F:11:3F:BA:A0:F6:16:0E:47:78:FD:23:61:A9 X509v3 Authority Key Identifier: keyid:7E:A6:6F:9D:D6:B7:2C:56:71:8C:85:C5:E1:8F:66:85:F5:79:5C:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqZvnda3LFZxjIXF4Y9mhfV5XHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/cba57a-6306-4c9c-9e8c-1f2f464bea2a/1/fqZvnda3LFZxjIXF4Y9mhfV5XHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:69:77:4e:eb:f8:7d:1c:6e:62:c2:4d:9c:b8:47:05:d6:be: eb:21:85:44:1a:bb:38:18:c8:7c:06:9d:46:f5:74:81:f7:79: 44:b5:1d:b7:37:1a:91:74:2f:02:b8:fc:5d:90:91:8f:e9:a5: 1b:38:37:82:6b:e2:af:78:d5:5a:50:2d:7e:38:31:2f:b9:25: 1f:0a:75:83:98:4b:41:78:82:02:32:26:fd:e2:41:e0:fd:6d: a6:c1:07:f8:29:9d:cf:30:d6:7c:30:9b:de:48:b0:69:8c:4c: 64:89:24:72:cd:cf:2e:ec:7b:54:ed:dc:7c:7b:b7:f8:77:82: 72:a8:60:a1:06:bc:dd:0e:02:a8:be:03:0b:7d:8f:62:6d:82: d7:c4:e6:37:48:48:fe:43:d0:dd:18:39:03:c0:31:10:d6:4a: 0d:91:cd:89:23:e0:32:1f:63:12:0d:6b:ad:6b:75:a9:5f:dd: 42:8f:f6:a5:77:f2:c5:b3:d0:87:c1:89:aa:0f:4f:5a:c0:8b: 4b:7f:c9:68:c8:a7:b4:20:19:45:f3:e4:ff:83:b6:51:dd:72: 6c:22:ed:6d:66:1d:44:51:23:44:e7:8e:76:1f:76:de:87:46: 26:25:b8:8a:7d:bf:58:16:67:e0:77:cf:f4:8f:9d:49:ca:e3: aa:a4:de:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvODhECy34cHqVpvGGvELMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYTY2ZjlkZDZiNzJjNTY3MThjODVjNWUxOGY2Njg1ZjU3 OTVjNzUwHhcNMjUxMjEzMjIwMjQ3WhcNMjUxMjE0MjIwMjQ3WjAzMTEwLwYDVQQD Eyg2OTBlZjBhYTg1MTAwZjExM2ZiYWEwZjYxNjBlNDc3OGZkMjM2MWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc4OoHzu4JXWuzz8ytDxLVYsSF/D MXkFxYyZ1k9BC+T61i+P9KGiDrnPhpoa8m/xHXQk4ozzlD0bHsFsQjH0RWPpYqk7 3PIuVlxSD1sCtuiRyGaorHLE/AZ8+Ak3sFhEEX9835LdVGAhkB9SyPZyYVOXGske 5cMaQNz/d3oUlhvXS+4dbE5OmORTEAwSqnxVn88GuikifLGJ0FknYebB0V6BHeNb PUFE9ZNmy3nhEIh+kiW9ZCwaDhHIZDY9KhP9dV1GIcqsvWIqw3iNGz6UhOnJv/+7 CDshcTC3AbjvxvKAL3BpLLn+DxGJxayKjyyHLM/0WlYnsI30r0DYTxBf4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkO8KqFEA8RP7qg9hYOR3j9I2GpMB8GA1UdIwQY MBaAFH6mb53WtyxWcYyFxeGPZoX1eVx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMt MWYyZjQ2NGJlYTJhLzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9jYmE1N2EtNjMwNi00YzljLTllOGMtMWYyZjQ2NGJlYTJh LzEvZnFadm5kYTNMRlp4aklYRjRZOW1oZlY1WEhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGl3Tuv4 fRxuYsJNnLhHBda+6yGFRBq7OBjIfAadRvV0gfd5RLUdtzcakXQvArj8XZCRj+ml Gzg3gmvir3jVWlAtfjgxL7klHwp1g5hLQXiCAjIm/eJB4P1tpsEH+CmdzzDWfDCb 3kiwaYxMZIkkcs3PLux7VO3cfHu3+HeCcqhgoQa83Q4CqL4DC32PYm2C18TmN0hI /kPQ3Rg5A8AxENZKDZHNiSPgMh9jEg1rrWt1qV/dQo/2pXfyxbPQh8GJqg9PWsCL S3/JaMintCAZRfPk/4O2Ud1ybCLtbWYdRFEjROeOdh923odGJiW4in2/WBZn4HfP 9I+dScrjqqTevQ== -----END CERTIFICATE-----Generated at Sun Dec 14 03:43:39 2025 by rpki-client