This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft File: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft (raw, json) Hash identifier: H+LT1Wn2DiS+/a8Houo/pACceh6Vnkta8G/a27Tv0IM= Subject key identifier: 86:51:65:A6:3F:27:38:65:71:55:2F:48:4F:43:23:2B:E0:17:B2:7D Authority key identifier: 16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94 Certificate issuer: /CN=166fed8bb6449b1cec6b665e930718b858a2b694 Certificate serial: 019AF3C036DCAC3049E13A992BA32E8A84B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft Manifest number: 0D9F Signing time: Sat 06 Dec 2025 13:00:51 +0000 Manifest this update: Sat 06 Dec 2025 13:00:51 +0000 Manifest next update: Sun 07 Dec 2025 13:00:51 +0000 Files and hashes: 1: Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl (hash: JwiA9CFWUvri+Qd+FwISW5cqRQNS9cURUH1k96XA7q0=) 2: krakPppfz7flLx069ZARtir4dzE.roa (hash: rc01bvPv/5+vfBCkfObVuaLV/O1M46ZYkYO5PLG/3iM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:c0:36:dc:ac:30:49:e1:3a:99:2b:a3:2e:8a:84:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166fed8bb6449b1cec6b665e930718b858a2b694 Validity Not Before: Dec 6 13:00:51 2025 GMT Not After : Dec 7 13:00:51 2025 GMT Subject: CN=865165a63f27386571552f484f43232be017b27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:25:0a:f5:ec:28:8d:4c:e8:53:ea:43:77:31: a7:2b:23:88:b1:25:70:04:0e:26:0e:12:f9:b5:dd: c1:54:e6:17:42:25:a1:6b:fb:13:6f:29:01:d1:65: 97:16:75:5c:f7:ab:ba:16:e2:66:bb:d4:f2:cc:c3: 0f:ff:99:d1:e0:65:10:91:4e:0f:29:de:6e:d6:6c: 89:61:64:fd:42:f9:47:f4:b6:3a:24:00:27:c6:6a: 7b:c7:8c:5b:22:a6:8e:d1:69:26:3f:d3:33:d8:5f: 67:e3:f1:43:be:27:a7:59:c4:6e:0a:5b:bf:37:ab: e6:ff:f8:19:3d:0f:fd:cb:87:68:a4:c7:9c:fd:ef: d4:75:a4:ad:85:6e:9f:22:01:5c:28:9b:bc:ab:1d: e6:cb:91:45:04:d6:c4:07:d6:ab:e0:02:75:85:d4: f9:71:36:b7:d2:3d:67:78:72:55:d9:98:2a:98:17: 30:22:df:53:73:5a:18:bb:dc:c8:80:0c:06:62:ce: b5:f9:18:ee:e9:f2:3d:09:36:82:7d:cc:7c:2b:00: 29:29:4e:55:c4:37:bf:db:4e:7c:85:1d:f9:5c:88: bd:e7:39:be:f4:27:0e:a0:6b:17:c9:d1:84:3a:cb: 93:18:4c:62:92:cc:68:fa:58:6c:52:11:e0:50:55: 2a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:51:65:A6:3F:27:38:65:71:55:2F:48:4F:43:23:2B:E0:17:B2:7D X509v3 Authority Key Identifier: keyid:16:6F:ED:8B:B6:44:9B:1C:EC:6B:66:5E:93:07:18:B8:58:A2:B6:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/6581f4-1483-4571-b7d1-6dea603ccc7b/1/Fm_ti7ZEmxzsa2ZekwcYuFiitpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:8b:cf:2e:e4:76:7d:bd:91:e7:83:1b:59:e5:82:b4:ab:d6: 02:47:b0:99:84:2d:a0:1b:02:26:3e:34:06:40:b0:42:3b:50: d5:c4:38:16:73:d2:e1:63:2b:94:19:20:bb:ae:4b:bb:f2:fe: ec:7a:4a:02:83:dd:45:05:88:17:42:e3:94:b5:52:3d:6f:07: ca:07:93:58:92:17:d9:bc:12:cd:e2:14:81:56:99:09:06:19: fb:fb:96:6a:af:ed:cc:bd:ad:51:ef:68:31:ec:59:f1:c2:0e: ba:f2:81:d7:30:2d:6a:df:32:fb:ca:e4:4d:4d:79:7d:d2:6d: e5:7b:fa:e0:38:dd:db:90:8a:25:88:86:ca:72:78:32:0f:e0: e4:54:67:41:68:e2:0d:45:ee:81:1c:b2:c4:ba:82:dd:71:01: a2:7e:10:0e:2c:5b:ca:fb:6e:e2:b6:5d:67:ff:a7:b9:11:3e: 3d:25:8d:2d:2b:d6:1f:66:7a:70:3a:a2:38:b9:81:c0:2e:71: 0b:31:b2:2f:89:f4:82:5f:bf:b2:2c:67:f1:b4:3c:df:19:8f: c0:06:13:be:86:84:aa:34:3e:c4:a3:a0:5c:3e:8d:b6:52:ef: db:9c:fe:7c:3b:20:f3:02:ee:ed:cd:e2:01:79:6a:5d:b4:7d: c4:60:94:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzwDbcrDBJ4TqZK6MuioSwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmZlZDhiYjY0NDliMWNlYzZiNjY1ZTkzMDcxOGI4NThh MmI2OTQwHhcNMjUxMjA2MTMwMDUxWhcNMjUxMjA3MTMwMDUxWjAzMTEwLwYDVQQD Eyg4NjUxNjVhNjNmMjczODY1NzE1NTJmNDg0ZjQzMjMyYmUwMTdiMjdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCUK9ewojUzoU+pDdzGnKyOIsSVw BA4mDhL5td3BVOYXQiWha/sTbykB0WWXFnVc96u6FuJmu9TyzMMP/5nR4GUQkU4P Kd5u1myJYWT9QvlH9LY6JAAnxmp7x4xbIqaO0WkmP9Mz2F9n4/FDvienWcRuClu/ N6vm//gZPQ/9y4dopMec/e/UdaSthW6fIgFcKJu8qx3my5FFBNbEB9ar4AJ1hdT5 cTa30j1neHJV2ZgqmBcwIt9Tc1oYu9zIgAwGYs61+Rju6fI9CTaCfcx8KwApKU5V xDe/2058hR35XIi95zm+9CcOoGsXydGEOsuTGExiksxo+lhsUhHgUFUqdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIZRZaY/JzhlcVUvSE9DIyvgF7J9MB8GA1UdIwQY MBaAFBZv7Yu2RJsc7GtmXpMHGLhYoraUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEt NmRlYTYwM2NjYzdiLzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82NTgxZjQtMTQ4My00NTcxLWI3ZDEtNmRlYTYwM2NjYzdi LzEvRm1fdGk3WkVteHpzYTJaZWt3Y1l1RmlpdHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYvPLuR2 fb2R54MbWeWCtKvWAkewmYQtoBsCJj40BkCwQjtQ1cQ4FnPS4WMrlBkgu65Lu/L+ 7HpKAoPdRQWIF0LjlLVSPW8HygeTWJIX2bwSzeIUgVaZCQYZ+/uWaq/tzL2tUe9o MexZ8cIOuvKB1zAtat8y+8rkTU15fdJt5Xv64Djd25CKJYiGynJ4Mg/g5FRnQWji DUXugRyyxLqC3XEBon4QDixbyvtu4rZdZ/+nuRE+PSWNLSvWH2Z6cDqiOLmBwC5x CzGyL4n0gl+/sixn8bQ83xmPwAYTvoaEqjQ+xKOgXD6NtlLv25z+fDsg8wLu7c3i AXlqXbR9xGCUSA== -----END CERTIFICATE-----Generated at Sat Dec 6 19:42:27 2025 by rpki-client