This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json) Hash identifier: zxT5bM5pYwFLM2+bjdPJNQQhrw2vecNlZxmgILyM4+8= Subject key identifier: 88:D6:DB:C5:08:06:06:3A:B4:BF:B5:D5:75:83:57:36:CD:5F:FF:05 Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Certificate serial: 019AF31BCD7AD408F50FBD704633EC6142C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 10:01:16 +0000 Manifest this update: Sat 06 Dec 2025 10:01:16 +0000 Manifest next update: Sun 07 Dec 2025 10:01:16 +0000 Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: nTSpYeiYvFxoz3T32LapKUP1h78qMrGC+9hHGnKOTTY=) 2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:cd:7a:d4:08:f5:0f:bd:70:46:33:ec:61:42:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Validity Not Before: Dec 6 10:01:16 2025 GMT Not After : Dec 7 10:01:16 2025 GMT Subject: CN=88d6dbc50806063ab4bfb5d575835736cd5fff05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:95:c3:37:70:6c:2c:6c:69:5b:59:63:b1: 8d:fe:70:86:54:be:8f:31:14:34:b7:fb:1d:00:e7: 61:51:db:90:28:2f:8d:cd:3c:6b:ab:fd:6d:c7:17: 5e:54:3c:f7:d4:f3:0c:59:cc:8c:0b:e3:fe:53:3f: a9:d4:26:45:ed:07:1c:2b:e8:6d:82:46:46:0f:fd: 09:00:99:49:8e:d7:ad:f3:80:ca:41:1a:e8:c4:0b: 9e:2e:eb:3c:d2:fb:a0:a9:0a:c9:05:12:35:f4:fa: bb:22:4c:b9:51:3f:4a:b3:61:c5:20:73:6e:4e:9b: 34:fc:f2:61:7d:6b:b8:15:10:fe:a9:a8:84:e0:64: b5:65:5b:77:5a:5a:ed:b8:24:6c:96:d9:c6:ec:e3: e6:ce:19:b6:28:eb:6b:b8:98:2c:4d:f8:2f:5d:84: d0:cc:9f:ed:35:7f:13:66:29:e6:e6:d6:1d:c8:7b: ed:e1:06:10:e7:4a:64:72:e2:f9:8c:cb:e2:fa:4a: 8b:c7:19:11:79:19:2a:4a:5e:57:0c:5c:f6:99:2f: 40:e5:be:62:5d:ab:d7:f4:2c:10:be:63:cb:4b:bb: 8d:13:17:04:19:0a:02:75:bd:15:e5:ef:75:12:c0: 6e:d3:3c:dc:64:a2:85:63:b8:d9:74:c3:ca:1b:19: 82:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:D6:DB:C5:08:06:06:3A:B4:BF:B5:D5:75:83:57:36:CD:5F:FF:05 X509v3 Authority Key Identifier: keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:34:fd:0c:65:8e:14:4a:91:1a:a8:cc:dc:ea:4c:d0:a9:98: 28:af:f3:6b:be:0e:29:b1:8e:87:f9:01:17:b7:45:37:8f:c0: de:00:68:27:21:77:48:f4:56:54:88:d3:3a:80:4a:7e:4b:0b: 2c:15:7a:e0:14:ad:89:db:c4:bd:86:e9:1d:bc:d3:0e:61:d9: 99:a8:91:f5:4a:a7:b3:08:6f:20:42:1f:f4:44:91:64:7a:dc: 81:8b:c6:b3:d6:f2:98:dc:c0:50:ec:57:a1:29:d2:02:b2:eb: 2f:f7:69:1c:ee:a9:0e:ad:8b:77:e0:90:14:c9:bf:c5:ce:a3: fd:d5:af:69:f3:65:f5:65:b8:e6:f9:26:a6:9e:14:70:ee:e4: 59:35:56:7c:ff:75:73:a9:1a:f7:6f:d8:82:4c:e8:bb:56:94: f9:ac:3a:5a:cf:b8:6a:43:f0:2f:b8:19:b2:e9:80:21:61:aa: a9:95:89:e6:8c:be:ba:06:50:0a:f1:00:e7:34:a1:ea:66:9d: 0e:b1:23:93:fe:a9:5e:0f:eb:18:39:3d:ed:03:91:18:7c:e4: 13:7e:6c:14:7c:7d:5c:d1:4e:93:c3:c8:13:72:75:30:00:7f: 20:e3:60:42:5f:b8:bf:33:27:93:07:8f:91:52:a7:16:90:d4: 70:51:0f:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG8161Aj1D71wRjPsYULIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx YmQyNmEwHhcNMjUxMjA2MTAwMTE2WhcNMjUxMjA3MTAwMTE2WjAzMTEwLwYDVQQD Eyg4OGQ2ZGJjNTA4MDYwNjNhYjRiZmI1ZDU3NTgzNTczNmNkNWZmZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaOVwzdwbCxsaVtZY7GN/nCGVL6P MRQ0t/sdAOdhUduQKC+NzTxrq/1txxdeVDz31PMMWcyMC+P+Uz+p1CZF7QccK+ht gkZGD/0JAJlJjtet84DKQRroxAueLus80vugqQrJBRI19Pq7Iky5UT9Ks2HFIHNu Tps0/PJhfWu4FRD+qaiE4GS1ZVt3WlrtuCRsltnG7OPmzhm2KOtruJgsTfgvXYTQ zJ/tNX8TZinm5tYdyHvt4QYQ50pkcuL5jMvi+kqLxxkReRkqSl5XDFz2mS9A5b5i XavX9CwQvmPLS7uNExcEGQoCdb0V5e91EsBu0zzcZKKFY7jZdMPKGxmCqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIjW28UIBgY6tL+11XWDVzbNX/8FMB8GA1UdIwQY MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzT9DGWO FEqRGqjM3OpM0KmYKK/za74OKbGOh/kBF7dFN4/A3gBoJyF3SPRWVIjTOoBKfksL LBV64BStidvEvYbpHbzTDmHZmaiR9UqnswhvIEIf9ESRZHrcgYvGs9bymNzAUOxX oSnSArLrL/dpHO6pDq2Ld+CQFMm/xc6j/dWvafNl9WW45vkmpp4UcO7kWTVWfP91 c6ka92/Ygkzou1aU+aw6Ws+4akPwL7gZsumAIWGqqZWJ5oy+ugZQCvEA5zSh6mad DrEjk/6pXg/rGDk97QORGHzkE35sFHx9XNFOk8PIE3J1MAB/IONgQl+4vzMnkweP kVKnFpDUcFEPww== -----END CERTIFICATE-----Generated at Sat Dec 6 14:21:29 2025 by rpki-client