This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft File: FQHIRfE91K1una5HDV_2nFzKN3E.mft (raw, json) Hash identifier: XEI9udET00pNbyPLSR8QW1eu/FAflDnyegC0kcpgGZ4= Subject key identifier: F7:22:A4:FC:71:B5:11:DC:F2:34:13:D2:FA:66:31:0A:FA:31:59:50 Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019B1BAB1915661087488696BB23487BFEC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft Manifest number: 177A Signing time: Sun 14 Dec 2025 07:02:36 +0000 Manifest this update: Sun 14 Dec 2025 07:02:36 +0000 Manifest next update: Mon 15 Dec 2025 07:02:36 +0000 Files and hashes: 1: 6fJjIO572rRtTzs1Q7jirr0rogU.roa (hash: lnfishpwQLE66hzcfQQ47M/+3n4mO6BxT9e3So84HXc=) 2: 9GIzAJUr_ot9Wk-LOBAg1Ku1CJ0.roa (hash: 9kCPW/zlShXMw7TqPRpG5YaYgI2ITqB9HqH456C8zHM=) 3: 9aibnbG15OYXr_CwwXWE25MOQzQ.roa (hash: uojCF0tqrH10N9391h4LuClKmMmHSTH14D7jK0LX19o=) 4: FQHIRfE91K1una5HDV_2nFzKN3E.crl (hash: Z6THfqYgMcxi5+wPQ+9MJea9ZHkAnFx7kdvFuNlBiNY=) 5: JiiAQHHQ7ilOvQDebu3VRDZ4GHk.roa (hash: nCg2LBGRguEEYRzIikpWv4Lkalt9WCnhcWuH2ZKPobk=) 6: XNozD6gpDdwt0jGjIZYI-3jrZdo.roa (hash: hHWVNnpzJQhuwUuCwNB2KNKcpqNI3ZvRAGrTDP4DfJA=) 7: xpBtw8xNwQpBRT8ur2iAvN2a-zU.roa (hash: 9EOMXCiP71GUhwUoav13zuQOWQdLg+I/B4p7vGgCnlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 07:02:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:ab:19:15:66:10:87:48:86:96:bb:23:48:7b:fe:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Dec 14 07:02:36 2025 GMT Not After : Dec 15 07:02:36 2025 GMT Subject: CN=f722a4fc71b511dcf23413d2fa66310afa315950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e1:8d:74:d4:2b:5c:28:12:69:23:0b:d6:97: 51:1b:86:68:1e:1e:8f:83:9c:b0:88:97:ae:9d:0e: 33:30:81:f5:00:3c:7f:44:de:03:24:16:8a:a6:67: cd:92:3a:cc:01:42:0c:e1:d0:8e:95:ae:ba:49:eb: 55:f5:26:9a:f3:34:75:ae:3d:a2:7e:c3:d9:96:00: 98:78:54:f1:52:33:e3:64:cf:a5:44:2a:29:c0:ae: 37:72:44:6b:9c:21:c0:9e:81:c9:a2:68:b1:b7:f4: 0d:8f:6a:94:b0:85:c6:51:d3:62:7c:5a:36:96:97: f6:c9:4c:07:2a:0f:e6:37:4e:4b:cd:cf:99:2e:ab: a0:6c:d3:51:6b:9c:10:81:44:f0:9b:ab:4e:19:16: c1:de:14:fc:ca:d6:4a:28:96:4d:31:ca:a3:14:96: e1:63:01:27:ce:3c:84:cb:b6:09:c6:b5:f6:3e:74: 90:d7:1c:84:ae:49:d1:ed:cb:0d:08:e8:2c:6b:fc: 3a:39:62:21:48:e4:af:4e:e6:a9:a8:0e:50:bb:9a: 97:be:e2:87:0b:cf:35:cc:99:53:4c:5c:50:95:72: 1f:77:1d:d3:55:ee:33:b8:29:35:9c:14:35:51:ed: eb:cf:83:50:be:6b:93:ed:79:4e:48:b6:a0:fc:60: cd:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:22:A4:FC:71:B5:11:DC:F2:34:13:D2:FA:66:31:0A:FA:31:59:50 X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:37:83:5f:4e:25:ca:c2:63:a3:bd:c4:80:43:70:1b:b2:d0: 93:8d:a7:b3:eb:50:34:4b:c5:fe:77:90:06:91:c1:35:9b:72: 85:d3:b2:51:06:b5:55:42:9c:55:94:1e:92:4d:15:9f:a7:c4: c2:79:ea:83:eb:b9:f9:06:fc:4d:d0:b1:10:dc:65:93:68:d6: 7c:83:5c:1a:aa:a6:52:06:fb:72:3d:c9:e4:0f:c3:00:be:0e: 85:02:3a:a6:c7:57:db:86:00:91:80:6f:99:6f:69:d6:d0:c6: fa:f2:0e:1c:9c:2d:a0:00:0b:da:66:64:3b:25:c7:06:49:99: 83:ea:17:f6:91:12:01:1b:ce:55:84:d2:7c:d8:30:e8:79:7f: 40:81:0b:bd:da:6f:05:f3:a4:8b:e3:74:f6:d5:c2:b8:31:75: 95:14:e3:5e:97:a1:ea:c3:76:d7:94:ef:e1:49:93:57:bd:45: ae:c7:a5:9e:7c:74:d0:11:c7:6c:cd:67:25:39:1e:5e:d3:2d: 9a:57:75:fe:a7:7f:d7:ac:8d:8c:0d:f0:98:dd:b1:50:ba:91: ce:cb:49:f0:70:d3:fe:f5:fb:87:48:f9:26:8e:40:2d:92:1a: 54:79:5e:95:42:ca:ca:d7:be:64:68:2f:ea:65:6d:b3:a4:c7: 18:52:a7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsbqxkVZhCHSIaWuyNIe/7DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjUxMjE0MDcwMjM2WhcNMjUxMjE1MDcwMjM2WjAzMTEwLwYDVQQD EyhmNzIyYTRmYzcxYjUxMWRjZjIzNDEzZDJmYTY2MzEwYWZhMzE1OTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOGNdNQrXCgSaSML1pdRG4ZoHh6P g5ywiJeunQ4zMIH1ADx/RN4DJBaKpmfNkjrMAUIM4dCOla66SetV9Saa8zR1rj2i fsPZlgCYeFTxUjPjZM+lRCopwK43ckRrnCHAnoHJomixt/QNj2qUsIXGUdNifFo2 lpf2yUwHKg/mN05Lzc+ZLqugbNNRa5wQgUTwm6tOGRbB3hT8ytZKKJZNMcqjFJbh YwEnzjyEy7YJxrX2PnSQ1xyErknR7csNCOgsa/w6OWIhSOSvTuapqA5Qu5qXvuKH C881zJlTTFxQlXIfdx3TVe4zuCk1nBQ1Ue3rz4NQvmuT7XlOSLag/GDNfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPcipPxxtRHc8jQT0vpmMQr6MVlQMB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApTeDX04l ysJjo73EgENwG7LQk42ns+tQNEvF/neQBpHBNZtyhdOyUQa1VUKcVZQekk0Vn6fE wnnqg+u5+Qb8TdCxENxlk2jWfINcGqqmUgb7cj3J5A/DAL4OhQI6psdX24YAkYBv mW9p1tDG+vIOHJwtoAAL2mZkOyXHBkmZg+oX9pESARvOVYTSfNgw6Hl/QIELvdpv BfOki+N09tXCuDF1lRTjXpeh6sN215Tv4UmTV71Frselnnx00BHHbM1nJTkeXtMt mld1/qd/16yNjA3wmN2xULqRzstJ8HDT/vX7h0j5Jo5ALZIaVHlelULKyte+ZGgv 6mVts6THGFKnzg== -----END CERTIFICATE-----Generated at Sun Dec 14 17:26:41 2025 by rpki-client