This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json) Hash identifier: 2CM6//vRuM0b2MffYyuaBDo2kYumxVJVF94ZUJfRIb0= Subject key identifier: EF:8E:81:5C:BF:BD:AA:CB:56:64:6A:09:1B:62:34:A7:63:5E:E9:D8 Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Certificate serial: 019AF46546C8FD7DF6ABBB6C990A1A5E3FF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft Manifest number: 018A Signing time: Sat 06 Dec 2025 16:01:09 +0000 Manifest this update: Sat 06 Dec 2025 16:01:09 +0000 Manifest next update: Sun 07 Dec 2025 16:01:09 +0000 Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: doXOnxapm8kAXi7pvNN98Sn0q0uvYfYhGuQm/2iepj8=) 2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:65:46:c8:fd:7d:f6:ab:bb:6c:99:0a:1a:5e:3f:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Validity Not Before: Dec 6 16:01:09 2025 GMT Not After : Dec 7 16:01:09 2025 GMT Subject: CN=ef8e815cbfbdaacb56646a091b6234a7635ee9d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c7:50:9c:27:1f:b6:c8:d6:fd:38:0b:07:c9: 46:1d:05:51:d6:78:82:b3:1f:8c:2a:f2:4d:6b:aa: 2c:05:ce:51:e7:dd:f7:71:83:20:06:59:9e:75:e1: 5f:b2:83:b6:4c:9b:28:18:8b:82:ed:95:e2:47:89: b1:e7:94:5e:e2:dc:c9:ee:7c:3e:d8:d7:64:33:30: 59:3c:e0:1b:8e:a4:9d:83:90:16:c7:7e:b2:06:db: 4b:08:d8:2c:ee:57:27:9f:e1:fb:60:7d:c8:43:de: 39:46:6a:eb:a3:d5:86:6e:bf:20:80:6d:a7:4e:84: da:aa:6c:06:f5:e7:f1:47:94:ce:4f:d8:17:89:12: 0b:d7:e4:0b:36:ab:5d:ea:ed:66:0e:70:e7:d8:12: 69:a5:08:ff:93:f7:b4:3a:5e:ce:39:af:81:d9:53: a3:05:60:a1:e2:59:98:a1:09:b0:da:b5:b4:bb:0c: c6:e1:9e:b5:f2:db:63:08:b8:aa:28:e4:b6:a7:90: 61:ca:1e:d2:55:9c:22:50:db:38:b2:94:af:32:a0: 46:7a:53:f2:94:06:b0:60:91:33:06:97:a3:12:73: cd:5c:b5:67:22:16:4a:a3:7c:cb:4a:29:04:28:2b: 38:d6:d1:1f:25:d1:e3:ac:97:62:2b:ef:5b:5d:e0: cb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:8E:81:5C:BF:BD:AA:CB:56:64:6A:09:1B:62:34:A7:63:5E:E9:D8 X509v3 Authority Key Identifier: keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:67:5f:f0:8c:5e:ea:fb:f4:d3:bf:0f:fb:4e:28:34:24:d3: 83:db:3b:fb:59:73:6e:9d:94:8c:b3:a6:98:4b:9c:bd:90:38: 50:4e:b6:fb:93:98:06:f6:ea:e4:07:3b:31:86:5e:cd:65:e3: d9:de:89:45:1e:e6:48:fa:22:59:35:3c:87:58:92:a7:ae:71: 7f:51:9a:cf:ad:22:17:6c:45:90:bd:fd:ef:ca:88:df:9e:9c: 5c:51:e6:d5:3a:94:c3:91:c2:db:cc:73:3c:41:0d:df:4e:11: f8:e0:5a:f8:37:d6:f4:ba:bf:1c:aa:19:d6:6a:7c:d9:0f:b2: 72:5a:ba:ed:da:02:0e:aa:17:d6:5a:2f:5e:48:62:5b:bf:8c: 5c:ae:de:0a:eb:51:7c:90:b3:08:48:35:1b:94:d9:f5:10:62: 94:2c:22:75:fb:37:ea:5f:53:02:91:a7:1a:e3:10:77:a6:33: 87:d3:5f:9e:f0:4f:1f:16:38:df:ea:fb:88:db:a1:47:84:6b: 33:4a:ef:9b:af:44:8d:6d:79:04:62:65:f3:c0:7c:1d:2b:ac: 67:cb:3f:d2:66:a2:e5:cb:2f:a7:ae:18:15:d0:8a:6c:5c:50: 97:ca:56:4a:8b:24:8c:72:6a:ab:45:e3:df:7d:b4:b9:84:ab: 41:76:ce:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZUbI/X32q7tsmQoaXj/2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzZlMTUyZWMwMGQyYjBlMzA3ZDYxOWU3N2YzYzFkMTQy NmVlZjAwHhcNMjUxMjA2MTYwMTA5WhcNMjUxMjA3MTYwMTA5WjAzMTEwLwYDVQQD EyhlZjhlODE1Y2JmYmRhYWNiNTY2NDZhMDkxYjYyMzRhNzYzNWVlOWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMdQnCcftsjW/TgLB8lGHQVR1niC sx+MKvJNa6osBc5R5933cYMgBlmedeFfsoO2TJsoGIuC7ZXiR4mx55Re4tzJ7nw+ 2NdkMzBZPOAbjqSdg5AWx36yBttLCNgs7lcnn+H7YH3IQ945Rmrro9WGbr8ggG2n ToTaqmwG9efxR5TOT9gXiRIL1+QLNqtd6u1mDnDn2BJppQj/k/e0Ol7OOa+B2VOj BWCh4lmYoQmw2rW0uwzG4Z618ttjCLiqKOS2p5Bhyh7SVZwiUNs4spSvMqBGelPy lAawYJEzBpejEnPNXLVnIhZKo3zLSikEKCs41tEfJdHjrJdiK+9bXeDLTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO+OgVy/varLVmRqCRtiNKdjXunYMB8GA1UdIwQY MBaAFBbG4VLsANKw4wfWGed/PB0UJu7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTct NDlmNGUzZWRkODc1LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTctNDlmNGUzZWRkODc1 LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGdf8Ixe 6vv0078P+04oNCTTg9s7+1lzbp2UjLOmmEucvZA4UE62+5OYBvbq5Ac7MYZezWXj 2d6JRR7mSPoiWTU8h1iSp65xf1Gaz60iF2xFkL3978qI356cXFHm1TqUw5HC28xz PEEN304R+OBa+DfW9Lq/HKoZ1mp82Q+yclq67doCDqoX1lovXkhiW7+MXK7eCutR fJCzCEg1G5TZ9RBilCwidfs36l9TApGnGuMQd6Yzh9NfnvBPHxY43+r7iNuhR4Rr M0rvm69EjW15BGJl88B8HSusZ8s/0mai5csvp64YFdCKbFxQl8pWSoskjHJqq0Xj 3320uYSrQXbOgA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:18:10 2025 by rpki-client