This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft File: FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json) Hash identifier: +Ot754104Aw8iWZowNY+DeGcvrZvn3dL3E/9Y+NKVNY= Subject key identifier: CB:8D:6A:22:2B:B1:20:26:79:8D:F2:7E:4C:ED:4D:9A:97:A6:DF:9F Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC Certificate issuer: /CN=15b595260f72c222547ac3e367f2c887ae38a3fc Certificate serial: 019B3D907110CCD05817E2A7AF5D63A43BA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft Manifest number: 1532 Signing time: Sat 20 Dec 2025 21:00:34 +0000 Manifest this update: Sat 20 Dec 2025 21:00:34 +0000 Manifest next update: Sun 21 Dec 2025 21:00:34 +0000 Files and hashes: 1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: ZhSiBc4JML+llEQ7KZK6lOoFMca3wB6vdoNvQ82pj24=) 2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:90:71:10:cc:d0:58:17:e2:a7:af:5d:63:a4:3b:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc Validity Not Before: Dec 20 21:00:34 2025 GMT Not After : Dec 21 21:00:34 2025 GMT Subject: CN=cb8d6a222bb12026798df27e4ced4d9a97a6df9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:44:7e:e3:cc:21:aa:c4:06:1c:b2:dd:c8:23: f0:d5:33:72:9a:1a:8f:a0:a6:36:c3:69:18:01:d7: c1:c4:27:fb:84:1c:ec:41:5f:0e:63:b2:a6:6d:03: c7:1e:a7:c6:55:91:33:00:70:3e:76:5b:dd:fe:3c: 91:00:75:49:1f:c1:e4:7d:98:03:ca:bd:c9:55:fe: 5f:1b:40:ac:58:f9:26:cc:81:e8:02:a7:4b:8e:68: 63:05:9e:37:4e:76:d7:84:c2:ae:26:ef:5d:69:18: ab:d5:40:24:fd:85:3b:8d:6d:8b:7a:2d:8f:3e:bf: ea:67:1c:16:60:51:33:19:94:98:aa:a2:75:31:bc: b2:1d:ee:e0:ee:5d:e6:4d:b7:e4:3e:cc:6f:78:1c: c5:94:b3:f2:a5:a3:5e:a7:17:5b:49:3d:bd:f9:b4: 94:83:bc:8b:4b:6b:4c:e5:b2:f8:ae:95:dd:35:c9: 8a:f7:7e:75:ba:c7:a2:92:1e:38:90:87:42:9b:09: b3:e2:06:d2:53:63:65:9f:78:60:e9:51:85:30:55: 74:84:13:7b:b7:6e:07:2d:94:a1:e5:db:5e:c3:ce: 74:e9:3a:6a:e7:18:76:ef:c9:52:3d:a7:77:91:0d: 96:a0:b7:d7:fd:6f:8e:3c:70:e2:73:77:22:b8:b6: 77:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8D:6A:22:2B:B1:20:26:79:8D:F2:7E:4C:ED:4D:9A:97:A6:DF:9F X509v3 Authority Key Identifier: keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:11:af:cf:cc:6a:49:41:0d:c1:71:87:41:39:9c:d3:da:bb: 87:91:db:6f:b6:48:a8:8f:dd:8b:0a:07:3a:12:93:42:02:10: 8f:b8:56:34:7a:9b:12:5c:b1:bb:7d:6d:7a:e3:bb:1b:3d:2d: 57:91:95:77:7a:0c:bd:b6:e5:28:6f:c3:64:0b:2b:54:f4:ca: 82:7c:2c:6d:5f:1a:3e:81:fc:b8:4b:6c:e7:6b:79:08:db:3b: 05:0d:6a:26:33:15:d9:6d:22:6f:f4:b7:00:ca:35:66:c8:72: a7:38:b2:21:c3:9a:a7:1d:a4:b1:88:1e:76:ea:a8:2b:8c:98: e5:22:11:9a:28:0b:d2:c9:36:54:06:24:c3:ce:d6:0d:de:12: 08:7d:90:62:c5:ce:9a:61:fe:19:95:50:d5:f1:b9:95:8b:a7: 37:76:ea:09:97:2c:c5:0d:0e:a6:a0:77:e1:c2:99:4d:21:75: 9d:24:e7:85:44:1a:88:8a:a3:0f:ad:6b:09:de:05:ae:f5:21: 33:68:12:a2:a6:0c:70:e4:b3:e8:6b:4d:80:10:f7:46:8b:29: 59:2f:55:29:71:4b:57:93:f4:2b:fd:e2:9a:85:b1:f2:98:40: f3:c2:4c:3f:3f:d2:11:c8:a4:62:fe:5c:02:49:ac:6c:4e:56: 20:34:8b:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9kHEQzNBYF+Knr11jpDukMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YjU5NTI2MGY3MmMyMjI1NDdhYzNlMzY3ZjJjODg3YWUz OGEzZmMwHhcNMjUxMjIwMjEwMDM0WhcNMjUxMjIxMjEwMDM0WjAzMTEwLwYDVQQD EyhjYjhkNmEyMjJiYjEyMDI2Nzk4ZGYyN2U0Y2VkNGQ5YTk3YTZkZjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArER+48whqsQGHLLdyCPw1TNymhqP oKY2w2kYAdfBxCf7hBzsQV8OY7KmbQPHHqfGVZEzAHA+dlvd/jyRAHVJH8HkfZgD yr3JVf5fG0CsWPkmzIHoAqdLjmhjBZ43TnbXhMKuJu9daRir1UAk/YU7jW2Lei2P Pr/qZxwWYFEzGZSYqqJ1MbyyHe7g7l3mTbfkPsxveBzFlLPypaNepxdbST29+bSU g7yLS2tM5bL4rpXdNcmK9351useikh44kIdCmwmz4gbSU2Nln3hg6VGFMFV0hBN7 t24HLZSh5dtew8506Tpq5xh278lSPad3kQ2WoLfX/W+OPHDic3ciuLZ38QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMuNaiIrsSAmeY3yfkztTZqXpt+fMB8GA1UdIwQY MBaAFBW1lSYPcsIiVHrD42fyyIeuOKP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2Qt YjQzY2Q0ZDk3YzhlLzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2QtYjQzY2Q0ZDk3Yzhl LzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzxGvz8xq SUENwXGHQTmc09q7h5Hbb7ZIqI/diwoHOhKTQgIQj7hWNHqbElyxu31teuO7Gz0t V5GVd3oMvbblKG/DZAsrVPTKgnwsbV8aPoH8uEts52t5CNs7BQ1qJjMV2W0ib/S3 AMo1ZshypziyIcOapx2ksYgeduqoK4yY5SIRmigL0sk2VAYkw87WDd4SCH2QYsXO mmH+GZVQ1fG5lYunN3bqCZcsxQ0OpqB34cKZTSF1nSTnhUQaiIqjD61rCd4FrvUh M2gSoqYMcOSz6GtNgBD3RospWS9VKXFLV5P0K/3imoWx8phA88JMPz/SEcikYv5c AkmsbE5WIDSLzQ== -----END CERTIFICATE-----Generated at Sat Dec 20 22:20:03 2025 by rpki-client