This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json) Hash identifier: 1YJ631auGsxyrpJqr5AP1dbuz2mcxl4GxySmlTx9GqI= Subject key identifier: F4:AE:A3:74:46:69:74:0F:8C:92:76:27:BE:90:21:6A:31:8C:75:1A Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138 Certificate serial: 019B394634EB9DA88FA837CD279E39D9815B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft Manifest number: 0765 Signing time: Sat 20 Dec 2025 01:01:00 +0000 Manifest this update: Sat 20 Dec 2025 01:01:00 +0000 Manifest next update: Sun 21 Dec 2025 01:01:00 +0000 Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: 0QTM2i9H0c/GoiGwY0AzSdIoGKQ0IM4+TZoVXttKDLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:34:eb:9d:a8:8f:a8:37:cd:27:9e:39:d9:81:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138 Validity Not Before: Dec 20 01:01:00 2025 GMT Not After : Dec 21 01:01:00 2025 GMT Subject: CN=f4aea3744669740f8c927627be90216a318c751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:c7:fa:ac:7b:5b:80:2f:c8:5f:26:ce:6f: 0a:90:97:21:52:de:32:72:ea:1f:a9:4a:e3:b1:98: 8b:bc:21:86:3f:c9:a7:1d:74:fd:41:dd:30:23:37: cd:15:40:68:d4:74:b4:e9:04:7c:6a:cf:cf:65:41: 58:fe:76:bd:41:23:09:99:9f:8e:0a:e4:3e:cc:cf: 7f:2c:62:af:b8:fa:b3:a5:a7:74:c5:0a:91:c1:67: 52:83:97:bf:51:20:30:47:da:70:7c:9c:42:54:60: c1:aa:a7:7d:ac:c9:ac:37:43:b3:78:eb:e0:78:a6: 1a:5c:6e:0f:e3:9c:86:6f:13:24:05:0a:88:fe:86: df:ca:26:b5:fb:e7:75:53:0a:00:27:1f:e5:b8:e3: 98:e2:dc:e1:36:51:82:a2:e3:1d:28:38:90:12:27: a9:7e:bb:41:e2:2b:1a:63:fb:50:35:6b:5e:5a:cd: a8:74:ec:6c:b8:9a:e8:13:0f:11:a1:b4:50:0c:0e: 3b:7a:2d:bf:36:b6:ee:43:dd:61:d5:9d:f0:60:66: d4:58:01:2c:3a:56:e7:91:a9:83:4d:c7:a4:7c:da: 12:19:4d:69:bd:e2:cb:b9:0a:18:e5:54:9d:1c:fb: 2c:19:5b:9f:a4:2a:a6:6d:0b:e7:97:5b:0e:d3:5b: 8c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:A3:74:46:69:74:0F:8C:92:76:27:BE:90:21:6A:31:8C:75:1A X509v3 Authority Key Identifier: keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:96:65:79:67:10:79:53:e1:f1:a4:c4:e2:e6:96:d0:fc:30: a9:06:85:d6:9d:a2:2f:71:f7:c8:bd:25:66:8e:33:ab:07:fc: 8d:41:f2:62:82:d6:b9:de:df:43:37:6b:a2:cc:20:b9:24:a8: 6f:f6:99:18:f6:da:fc:d7:b6:c0:26:47:77:52:cd:73:15:48: e7:e3:0f:ea:4a:63:db:b7:2e:d0:01:ec:f0:a4:ae:90:55:40: bb:25:64:6c:01:e3:ba:86:5d:93:b6:e8:37:36:ab:ab:38:b0: 8f:92:86:95:1e:09:6d:1e:4d:aa:db:18:9c:32:00:4c:9f:ba: 67:19:46:ea:0e:ff:d8:59:1c:a9:7e:32:30:e9:33:83:8f:ec: 53:ea:58:ba:c5:f0:fa:d2:0c:9b:28:3a:c9:dd:c3:34:c7:af: bb:97:77:3c:24:02:5b:f5:c4:a9:7c:87:73:47:84:d6:b5:df: ac:f6:bb:9c:82:ec:e9:62:d3:5c:92:b4:74:75:e9:ec:5c:03: d2:a2:eb:e4:7d:96:05:6e:77:e9:a9:96:e5:0d:df:e0:e3:de: 82:33:0c:45:29:3d:5f:4b:0e:64:66:9f:2d:bd:14:62:9f:f9: 24:7a:0a:bc:26:99:75:3a:af:ec:11:3d:5b:a0:f4:20:72:d4: 68:3c:70:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RjTrnaiPqDfNJ5452YFbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYThhMDEwY2M2ZDdjOTMyMGUwMTJlYTFkMWUzNmUwYTc2 MWMxMzgwHhcNMjUxMjIwMDEwMTAwWhcNMjUxMjIxMDEwMTAwWjAzMTEwLwYDVQQD EyhmNGFlYTM3NDQ2Njk3NDBmOGM5Mjc2MjdiZTkwMjE2YTMxOGM3NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrjH+qx7W4AvyF8mzm8KkJchUt4y cuofqUrjsZiLvCGGP8mnHXT9Qd0wIzfNFUBo1HS06QR8as/PZUFY/na9QSMJmZ+O CuQ+zM9/LGKvuPqzpad0xQqRwWdSg5e/USAwR9pwfJxCVGDBqqd9rMmsN0OzeOvg eKYaXG4P45yGbxMkBQqI/obfyia1++d1UwoAJx/luOOY4tzhNlGCouMdKDiQEiep frtB4isaY/tQNWteWs2odOxsuJroEw8RobRQDA47ei2/NrbuQ91h1Z3wYGbUWAEs OlbnkamDTcekfNoSGU1pveLLuQoY5VSdHPssGVufpCqmbQvnl1sO01uMkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSuo3RGaXQPjJJ2J76QIWoxjHUaMB8GA1UdIwQY MBaAFH6ooBDMbXyTIOAS6h0eNuCnYcE4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEt NDViZWZiZjFlZjdmLzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9iYWE4NmUtN2ZjNi00NDJmLWFkZTEtNDViZWZiZjFlZjdm LzEvZnFpZ0VNeHRmSk1nNEJMcUhSNDI0S2Rod1RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZZleWcQ eVPh8aTE4uaW0PwwqQaF1p2iL3H3yL0lZo4zqwf8jUHyYoLWud7fQzdroswguSSo b/aZGPba/Ne2wCZHd1LNcxVI5+MP6kpj27cu0AHs8KSukFVAuyVkbAHjuoZdk7bo Nzarqziwj5KGlR4JbR5NqtsYnDIATJ+6ZxlG6g7/2FkcqX4yMOkzg4/sU+pYusXw +tIMmyg6yd3DNMevu5d3PCQCW/XEqXyHc0eE1rXfrPa7nILs6WLTXJK0dHXp7FwD 0qLr5H2WBW536amW5Q3f4OPegjMMRSk9X0sOZGafLb0UYp/5JHoKvCaZdTqv7BE9 W6D0IHLUaDxwDg== -----END CERTIFICATE-----Generated at Sat Dec 20 05:30:24 2025 by rpki-client