This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft File: qFMQ9QMTeuizXU8yn0bwad1wOBU.mft (raw, json) Hash identifier: fWCNj40imP3QHJ6bRVuMFuvqvS3MDKvhkrrzD+pJp7M= Subject key identifier: 5F:D2:88:F2:8B:2E:4D:FB:C9:95:D4:8B:EA:BC:66:0C:8B:55:73:18 Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815 Certificate serial: 019B10EEE950722CFEDB9EEF163FDA8C24D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft Manifest number: 0F6B Signing time: Fri 12 Dec 2025 05:00:51 +0000 Manifest this update: Fri 12 Dec 2025 05:00:51 +0000 Manifest next update: Sat 13 Dec 2025 05:00:51 +0000 Files and hashes: 1: 45oKWJWNSoyMzWD0Kk8sRqagqHc.roa (hash: ZRiap7KBK/6F7WwTwhZKaIQBo6dyCPRAgO2PzUDFBBs=) 2: ATNXl5sMuCCQNc30c9l_cm0TcNw.roa (hash: JR8hJ7ucTtgcsP6vKnL9nV/ionD4rfzPRQrpuXEnEks=) 3: CFPX1ri2j5dVasAGgzMnoT-cOt4.roa (hash: XuiBdXxA9M8XJCfAqglXHp2+4b0MLMP/9FYtw4ETJG4=) 4: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (hash: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=) 5: RzmJFM1w4lcKb-cMMQHxwOVwaGg.roa (hash: QwnOv7xt3IWs1L0a2mkMv12V+qGgnpTK/xFmjuXt76M=) 6: XIPI990HC1lYv59Hhi_AZS8z1eo.roa (hash: BWRI70SBdr3thNPCuBYvRcFjHCRQb0FzI8VIio++Ldg=) 7: cD5IUm-EGBa-Vh255QRP5iyEl_s.roa (hash: /lOTEa3bqElIJJFu5D/6AmLfH6GyOP4ijF9uzNdORv0=) 8: eIw0eh3YEP-bYNeQocOrQeNT9Ho.roa (hash: BiNAvK+4yaYNt1bYkWd7/mgIyoOzJmL05f+bYFpnKTI=) 9: f8ajHMTtlNrrsyJRSeSaLdkgL4w.roa (hash: OG8Xhrawq0hNB4vX2mJ90g91tXyh7BGHjkXzp23NXFs=) 10: fCj0XSBtsIdMmdrpR-SG2Jh_SDI.roa (hash: 5XxUNgc3IIKpx0MnGdv0XOOztD0raRXWx9OFDmvoJGo=) 11: gHLoJSwOR2fIlfZQ84ZVB1QOa-c.roa (hash: SKoZJ8pTow2YG7a9sBl0MU1xTakkCXEyJHhzGygBuek=) 12: lrunxs8EBQWo1LhIzQdrw-3rbsE.roa (hash: 6Uc4XQPRY3dYjqUXjx+dcG63Gain6LYn70AV0wZhR+o=) 13: qFMQ9QMTeuizXU8yn0bwad1wOBU.crl (hash: H3ziYxPzcDXs/EHHZmSVTt5UDJeqbaDiOKl2TuZYEl8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:ee:e9:50:72:2c:fe:db:9e:ef:16:3f:da:8c:24:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815 Validity Not Before: Dec 12 05:00:51 2025 GMT Not After : Dec 13 05:00:51 2025 GMT Subject: CN=5fd288f28b2e4dfbc995d48beabc660c8b557318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ad:7b:d5:4b:e6:83:54:2a:2e:d9:89:c0:5f: 75:18:0c:30:48:99:6d:a3:d6:3b:46:8f:e0:de:b4: 0d:94:29:e5:49:10:d3:01:94:95:9f:c0:5b:db:b0: 22:ae:f0:87:e4:e5:f1:e2:89:58:36:ba:4a:46:46: bb:d8:53:e6:a3:82:ac:e9:b3:47:88:45:eb:80:85: fc:56:fb:8a:41:d2:0d:40:7e:fd:7c:cd:51:7b:48: 90:c5:23:a5:28:9f:65:8c:5b:fa:9e:a5:a2:f5:c7: 06:82:5c:d4:41:9d:13:73:ce:a8:32:bf:1d:95:85: 79:f6:b0:ce:43:76:11:96:cd:41:55:45:83:6a:44: 35:d4:51:e3:ea:0d:de:5f:fb:29:f2:64:3a:28:05: 65:93:c5:c8:32:53:ea:32:40:ad:88:a7:c6:3f:99: 20:97:96:a9:69:b2:81:be:e0:8c:2b:9a:bf:60:ad: 4d:97:46:ed:4a:9d:63:8b:71:bd:e7:ff:2a:08:19: 8f:d7:09:9d:79:63:72:42:71:5d:ca:13:f9:88:7d: e3:5a:2f:4a:85:c7:68:d2:f9:ce:21:32:53:41:eb: 3a:99:95:62:58:6c:a9:06:6c:7a:2a:27:62:e7:26: e9:87:fb:0b:2a:8d:c1:17:40:a8:4f:a7:6a:98:5b: 12:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:88:F2:8B:2E:4D:FB:C9:95:D4:8B:EA:BC:66:0C:8B:55:73:18 X509v3 Authority Key Identifier: keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:71:17:b6:32:10:47:ba:fe:45:5b:45:82:58:2b:18:54:a0: 82:f4:a9:68:a0:6b:5f:16:b3:71:6e:57:8d:b7:ce:27:09:29: a6:f0:09:fa:c1:a5:ec:51:d4:5a:0f:e3:52:2a:e6:ef:14:be: ea:a2:dd:5a:89:df:92:d1:ad:51:fc:b1:5b:a6:60:8f:e7:fa: 10:32:0d:f9:dd:d0:51:21:fb:a3:e1:5b:87:87:17:36:69:d0: be:8f:96:d9:2e:9f:58:d5:92:6a:0a:d9:70:62:4c:be:95:19: 08:51:e4:6e:ff:0f:9c:a9:0c:40:fe:ed:f6:20:46:3e:8c:5a: 77:54:f1:8a:8e:2e:fe:69:e0:d5:90:1e:f9:47:60:56:fa:62: 11:a3:e3:a4:90:c9:d2:82:dd:3a:0c:39:c7:5d:18:5e:8f:3f: e4:67:7c:90:3f:55:2d:25:6c:5e:55:01:bc:7e:51:31:66:d2: f2:19:69:4d:3d:8e:17:5f:b4:c1:bc:4f:80:e5:0e:7a:53:2f: f0:b7:5b:74:fe:e8:bb:49:18:5a:b8:75:25:f1:df:95:00:85: 95:ec:5d:28:ca:7d:1a:2b:37:c8:7b:ed:10:23:f3:40:d2:f9: 49:95:d6:7e:e6:4e:99:df:0d:46:54:14:ed:14:a3:18:85:5f: 00:15:0e:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQ7ulQciz+257vFj/ajCTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NTMxMGY1MDMxMzdhZThiMzVkNGYzMjlmNDZmMDY5ZGQ3 MDM4MTUwHhcNMjUxMjEyMDUwMDUxWhcNMjUxMjEzMDUwMDUxWjAzMTEwLwYDVQQD Eyg1ZmQyODhmMjhiMmU0ZGZiYzk5NWQ0OGJlYWJjNjYwYzhiNTU3MzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqK171Uvmg1QqLtmJwF91GAwwSJlt o9Y7Ro/g3rQNlCnlSRDTAZSVn8Bb27AirvCH5OXx4olYNrpKRka72FPmo4Ks6bNH iEXrgIX8VvuKQdINQH79fM1Re0iQxSOlKJ9ljFv6nqWi9ccGglzUQZ0Tc86oMr8d lYV59rDOQ3YRls1BVUWDakQ11FHj6g3eX/sp8mQ6KAVlk8XIMlPqMkCtiKfGP5kg l5apabKBvuCMK5q/YK1Nl0btSp1ji3G95/8qCBmP1wmdeWNyQnFdyhP5iH3jWi9K hcdo0vnOITJTQes6mZViWGypBmx6Kidi5ybph/sLKo3BF0CoT6dqmFsSRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/SiPKLLk37yZXUi+q8ZgyLVXMYMB8GA1UdIwQY MBaAFKhTEPUDE3ros11PMp9G8GndcDgVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYt MzAxODlhNWE0ZWJhLzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iNDI5NDktZWUwYS00MTIzLTg3YmYtMzAxODlhNWE0ZWJh LzEvcUZNUTlRTVRldWl6WFU4eW4wYndhZDF3T0JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAonEXtjIQ R7r+RVtFglgrGFSggvSpaKBrXxazcW5XjbfOJwkppvAJ+sGl7FHUWg/jUirm7xS+ 6qLdWonfktGtUfyxW6Zgj+f6EDIN+d3QUSH7o+Fbh4cXNmnQvo+W2S6fWNWSagrZ cGJMvpUZCFHkbv8PnKkMQP7t9iBGPoxad1Txio4u/mng1ZAe+UdgVvpiEaPjpJDJ 0oLdOgw5x10YXo8/5Gd8kD9VLSVsXlUBvH5RMWbS8hlpTT2OF1+0wbxPgOUOelMv 8LdbdP7ou0kYWrh1JfHflQCFlexdKMp9Gis3yHvtECPzQNL5SZXWfuZOmd8NRlQU 7RSjGIVfABUO/Q== -----END CERTIFICATE-----Generated at Fri Dec 12 08:01:03 2025 by rpki-client