This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json) Hash identifier: S10g1dD0SnOzVYhQs4PuWv5O/agMaE4tTiR77+vSSU0= Subject key identifier: 4C:C1:82:EF:7C:98:F5:55:F7:F3:52:E2:7D:E1:CB:FD:67:7B:91:20 Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e Certificate serial: 019AF12EFEC107B8C66BEF7C6317BA1A7216 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft Manifest number: 0E16 Signing time: Sat 06 Dec 2025 01:03:00 +0000 Manifest this update: Sat 06 Dec 2025 01:03:00 +0000 Manifest next update: Sun 07 Dec 2025 01:03:00 +0000 Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: 4hrs4ETTRLTpYH/l4cftM5jIMIzlHaXzeC02bCupTnY=) 2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:fe:c1:07:b8:c6:6b:ef:7c:63:17:ba:1a:72:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e Validity Not Before: Dec 6 01:03:00 2025 GMT Not After : Dec 7 01:03:00 2025 GMT Subject: CN=4cc182ef7c98f555f7f352e27de1cbfd677b9120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ca:77:26:0e:e2:e5:e1:78:b2:2f:fa:25:f8: 2a:29:a2:98:da:b2:50:83:e1:13:0f:eb:4b:f8:9b: 30:5d:2d:1a:0b:c6:33:2a:31:fe:6d:57:ae:fa:90: ba:ea:d3:38:b9:20:9c:4c:e3:2d:b1:3d:7f:04:51: d4:e0:26:18:65:bc:4a:48:6f:e8:45:24:ea:e5:67: 8c:0b:e0:94:55:21:be:a6:60:50:76:f6:32:4e:f8: 25:f2:98:60:68:8c:d7:50:79:31:00:89:17:f8:ed: 2e:2e:df:b5:e2:ea:1c:f0:a3:ca:bd:2d:38:d2:a9: e6:b1:17:4d:f1:7b:1d:9c:ee:e5:ad:22:8f:a5:9c: 38:0d:e7:1c:00:18:97:01:09:8e:9a:b5:ab:ea:16: 88:ea:0e:66:bd:29:46:f9:5b:2a:c0:57:fb:29:3d: 53:8e:3e:c1:16:54:5e:be:8d:d4:48:8f:76:57:25: b8:52:ff:cc:f2:5c:02:15:d0:d5:c0:00:db:6f:b3: 50:2e:d6:e8:ae:4e:cb:1b:fb:a8:25:13:4a:54:e6: 35:0c:88:9f:46:98:40:d8:ea:6c:75:84:76:95:b4: 66:e0:15:55:1c:95:df:dc:6c:50:53:e5:d7:a5:54: 73:b2:8d:14:fc:bf:ff:93:8a:88:6e:f9:7a:b7:39: 33:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:C1:82:EF:7C:98:F5:55:F7:F3:52:E2:7D:E1:CB:FD:67:7B:91:20 X509v3 Authority Key Identifier: keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ce:cd:78:07:70:70:42:08:02:03:b6:d5:e3:36:81:54:f6: 7f:ff:63:aa:4b:fc:a0:73:65:16:24:55:17:a6:2d:6e:a7:fb: 89:b4:e4:8f:2c:99:e3:06:55:8f:1c:37:7e:0e:d0:4a:93:44: 52:c2:80:a1:0d:df:ff:4d:58:2e:f1:f8:71:bf:74:57:a0:86: be:b2:ed:55:8e:1b:c9:cb:40:b9:cb:a4:41:38:cb:5c:b4:2a: 1e:10:b8:0a:0b:ce:8a:bd:bc:38:ee:d0:ad:d8:80:dc:ba:28: 2b:19:03:0f:d3:fa:88:4b:1b:df:11:35:3e:d6:2d:f0:66:38: 72:33:18:f5:ff:63:5d:93:d7:e3:f7:39:47:1f:83:5a:a7:4a: 3c:da:72:be:f7:98:38:bb:af:00:de:0a:77:9b:8d:29:d8:78: 70:85:4f:21:be:2d:bb:11:5f:e5:5d:31:92:78:92:38:5e:83: d3:d0:6c:33:2e:9f:a2:0e:b2:11:4f:9d:7b:3e:92:ca:ed:c5: 5e:fe:2f:5b:ae:1f:10:f7:ac:a3:c3:cb:a1:6e:3b:59:04:ba: bc:d6:d1:64:3c:2b:d9:d8:9e:7b:35:17:65:29:3b:5c:7d:e4: 1f:3e:eb:32:d8:aa:75:db:ba:b1:c2:38:31:79:a4:c2:78:66: 8c:7d:48:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLv7BB7jGa+98Yxe6GnIWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj OTQwNmUwHhcNMjUxMjA2MDEwMzAwWhcNMjUxMjA3MDEwMzAwWjAzMTEwLwYDVQQD Eyg0Y2MxODJlZjdjOThmNTU1ZjdmMzUyZTI3ZGUxY2JmZDY3N2I5MTIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcp3Jg7i5eF4si/6JfgqKaKY2rJQ g+ETD+tL+JswXS0aC8YzKjH+bVeu+pC66tM4uSCcTOMtsT1/BFHU4CYYZbxKSG/o RSTq5WeMC+CUVSG+pmBQdvYyTvgl8phgaIzXUHkxAIkX+O0uLt+14uoc8KPKvS04 0qnmsRdN8XsdnO7lrSKPpZw4DeccABiXAQmOmrWr6haI6g5mvSlG+VsqwFf7KT1T jj7BFlRevo3USI92VyW4Uv/M8lwCFdDVwADbb7NQLtbork7LG/uoJRNKVOY1DIif RphA2OpsdYR2lbRm4BVVHJXf3GxQU+XXpVRzso0U/L//k4qIbvl6tzkz+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEzBgu98mPVV9/NS4n3hy/1ne5EgMB8GA1UdIwQY MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK87NeAdw cEIIAgO21eM2gVT2f/9jqkv8oHNlFiRVF6Ytbqf7ibTkjyyZ4wZVjxw3fg7QSpNE UsKAoQ3f/01YLvH4cb90V6CGvrLtVY4byctAucukQTjLXLQqHhC4CgvOir28OO7Q rdiA3LooKxkDD9P6iEsb3xE1PtYt8GY4cjMY9f9jXZPX4/c5Rx+DWqdKPNpyvveY OLuvAN4Kd5uNKdh4cIVPIb4tuxFf5V0xkniSOF6D09BsMy6fog6yEU+dez6Syu3F Xv4vW64fEPeso8PLoW47WQS6vNbRZDwr2dieezUXZSk7XH3kHz7rMtiqddu6scI4 MXmkwnhmjH1Idw== -----END CERTIFICATE-----Generated at Sat Dec 6 09:59:22 2025 by rpki-client