This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json) Hash identifier: KJS3/mGQImszZNQtDh+f80fNvgFHOFUqPX191FP2dGc= Subject key identifier: 4A:15:61:B0:C3:77:D5:88:9D:D2:B9:28:85:FD:69:D1:C9:2D:B4:2A Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Certificate serial: 019AF1D1EE348B709119DFBD3E7E6734E31F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft Manifest number: 14DD Signing time: Sat 06 Dec 2025 04:00:58 +0000 Manifest this update: Sat 06 Dec 2025 04:00:58 +0000 Manifest next update: Sun 07 Dec 2025 04:00:58 +0000 Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: 2/q361SG1FrKzPDQAtNUG/yff/+GhpzA1uzwkA2itJU=) 2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:ee:34:8b:70:91:19:df:bd:3e:7e:67:34:e3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Validity Not Before: Dec 6 04:00:58 2025 GMT Not After : Dec 7 04:00:58 2025 GMT Subject: CN=4a1561b0c377d5889dd2b92885fd69d1c92db42a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4c:72:54:f7:85:45:b7:1e:dd:1a:92:11:4b: ff:cb:ef:f2:30:28:63:aa:fc:c3:57:58:94:f8:99: 9d:7f:fb:2b:ff:80:62:e7:6e:3b:55:94:05:33:a6: ba:7d:05:0c:82:56:71:09:0a:11:5a:76:34:45:32: 9a:b5:ea:d2:b0:2a:a8:0c:3b:fb:8b:c5:0b:e3:11: c4:6f:5f:29:03:97:42:10:16:83:72:b5:14:59:47: 17:76:e2:0b:40:19:51:5a:9f:d2:6a:27:24:e6:4d: 21:c0:f9:82:b1:7e:eb:7d:e8:8d:88:98:2c:a6:73: b6:2c:4b:ac:1c:e0:5b:6c:1c:65:88:e9:70:ca:40: 8d:ca:47:c0:e9:18:51:33:a2:af:81:d4:c1:42:5d: 98:29:36:0a:c8:e4:b9:cf:8e:05:4d:6a:e8:1f:59: 6b:ef:9a:01:18:7c:7b:f1:e4:f6:1d:cc:89:65:bd: 0f:87:f4:94:12:22:2d:8c:04:1d:d0:02:d2:8e:48: 0d:fe:6d:35:1b:89:ea:9e:4e:7c:8f:7c:ab:65:3f: f4:f1:44:d9:9a:99:f1:7f:60:77:7c:23:1d:0d:52: 9c:95:22:e0:7b:61:42:43:7f:06:46:5c:79:4c:8f: eb:e6:c2:9f:ad:94:c3:95:27:54:d8:80:ab:d1:12: 43:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:15:61:B0:C3:77:D5:88:9D:D2:B9:28:85:FD:69:D1:C9:2D:B4:2A X509v3 Authority Key Identifier: keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:bf:18:34:7b:51:b0:a1:6b:f6:f2:8d:fb:e5:42:d1:92:89: 50:1c:db:3c:4e:d7:e1:10:5f:8c:7b:57:43:2b:c2:d1:d1:57: ae:7c:c6:e2:6b:ca:74:75:0d:c4:bf:fa:ba:a4:28:37:43:df: 09:21:ae:e5:ca:45:34:da:4d:fe:8a:b2:03:c8:15:dc:d1:05: 9d:59:18:9d:f3:8a:57:f0:a3:25:62:31:05:57:be:b5:68:ea: ef:39:c0:bb:31:3e:5c:98:bb:2b:1f:42:c2:93:18:1a:a6:22: c4:4a:d9:47:04:44:78:22:17:4c:be:c8:f4:e2:e4:9c:4e:70: 0c:b0:ca:c5:87:bd:28:03:b0:76:c4:31:00:79:9a:76:4a:af: 3b:d4:78:45:f2:de:fb:39:99:2c:d5:aa:e9:71:af:79:c3:32: f3:fa:28:ab:de:ce:2a:e9:e5:d2:38:e6:35:ef:b1:4f:b0:07: b4:ae:59:cb:db:1a:2c:98:d2:63:e3:2d:a2:b0:73:5c:00:aa: d2:e9:ed:f4:8f:e9:7d:ce:10:52:55:be:35:f6:9e:06:8f:d8: 23:63:bf:1a:20:94:fe:ff:67:4d:54:d1:87:d1:62:ef:de:88: 81:b3:6a:2e:fa:2e:64:ae:91:eb:12:61:62:7e:c4:bf:b7:c3: 82:b9:2a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0e40i3CRGd+9Pn5nNOMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzM0MWQzMDU3NTE0NGJlMzJjZDdjOGUzZWJkNGM2MzI5 YTMxNDEwHhcNMjUxMjA2MDQwMDU4WhcNMjUxMjA3MDQwMDU4WjAzMTEwLwYDVQQD Eyg0YTE1NjFiMGMzNzdkNTg4OWRkMmI5Mjg4NWZkNjlkMWM5MmRiNDJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkxyVPeFRbce3RqSEUv/y+/yMChj qvzDV1iU+Jmdf/sr/4Bi5247VZQFM6a6fQUMglZxCQoRWnY0RTKaterSsCqoDDv7 i8UL4xHEb18pA5dCEBaDcrUUWUcXduILQBlRWp/Saick5k0hwPmCsX7rfeiNiJgs pnO2LEusHOBbbBxliOlwykCNykfA6RhRM6KvgdTBQl2YKTYKyOS5z44FTWroH1lr 75oBGHx78eT2HcyJZb0Ph/SUEiItjAQd0ALSjkgN/m01G4nqnk58j3yrZT/08UTZ mpnxf2B3fCMdDVKclSLge2FCQ38GRlx5TI/r5sKfrZTDlSdU2ICr0RJDIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEoVYbDDd9WIndK5KIX9adHJLbQqMB8GA1UdIwQY MBaAFBRzQdMFdRRL4yzXyOPr1MYymjFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2Yt YTJiN2IwMzk2YmQ2LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2YtYTJiN2IwMzk2YmQ2 LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoL8YNHtR sKFr9vKN++VC0ZKJUBzbPE7X4RBfjHtXQyvC0dFXrnzG4mvKdHUNxL/6uqQoN0Pf CSGu5cpFNNpN/oqyA8gV3NEFnVkYnfOKV/CjJWIxBVe+tWjq7znAuzE+XJi7Kx9C wpMYGqYixErZRwREeCIXTL7I9OLknE5wDLDKxYe9KAOwdsQxAHmadkqvO9R4RfLe +zmZLNWq6XGvecMy8/ooq97OKunl0jjmNe+xT7AHtK5Zy9saLJjSY+MtorBzXACq 0unt9I/pfc4QUlW+NfaeBo/YI2O/GiCU/v9nTVTRh9Fi796IgbNqLvouZK6R6xJh Yn7Ev7fDgrkqBg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:32:53 2025 by rpki-client