This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft File: FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft (raw, json) Hash identifier: yzMES0yf/b/aa6EUWQopLYC6YZb7kJ64fTcMnSXrnQc= Subject key identifier: 52:0B:49:5A:A2:9B:A1:B6:67:64:66:54:86:B1:90:3D:21:EB:EA:C0 Authority key identifier: 14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF Certificate issuer: /CN=14da869ba03374a192c8e3bdce950a90027adcaf Certificate serial: 019AF50990164C212D66B69A076BFFF6F08A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft Manifest number: 0EC6 Signing time: Sat 06 Dec 2025 19:00:35 +0000 Manifest this update: Sat 06 Dec 2025 19:00:35 +0000 Manifest next update: Sun 07 Dec 2025 19:00:35 +0000 Files and hashes: 1: FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl (hash: 65p8EWPFMMQ0YQGtqDgkzGh+2MFzb8X0er1NnzSCFx4=) 2: NuC1DvR6dkAnmNkZTXn3GrNysHw.roa (hash: uCl9YesbV1jR2lkUdesbTXgdlfoQbL9A8g8vjrWrFMg=) 3: ouo267dSlLznMI9vKQqz-AZYNWg.roa (hash: zlSoo8P2oxNbKGPhoJCcuB1Nm21ZI/szjt14xojWUSQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:09:90:16:4c:21:2d:66:b6:9a:07:6b:ff:f6:f0:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14da869ba03374a192c8e3bdce950a90027adcaf Validity Not Before: Dec 6 19:00:35 2025 GMT Not After : Dec 7 19:00:35 2025 GMT Subject: CN=520b495aa29ba1b66764665486b1903d21ebeac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b1:25:5d:a2:27:e0:2a:90:a5:f0:91:31:4a: a4:05:da:e6:82:1c:39:19:ae:b8:2b:1f:d8:96:34: 62:bb:fd:b2:e7:fa:85:52:37:5a:99:f0:cc:7f:44: 11:dc:9e:6b:26:00:78:ad:49:02:f2:6c:43:9e:2e: 27:77:86:46:e6:b1:7d:db:7c:67:0e:9f:95:88:d4: 0c:96:fb:c5:ac:db:02:bf:fc:c0:7a:14:40:3e:97: 04:a0:6e:2a:0a:fb:96:b9:0c:17:da:cd:f5:14:5b: ca:0b:5a:2f:dc:e2:22:a7:d1:a1:03:48:6d:69:22: 16:19:e2:0c:a0:74:f5:7a:e1:d0:16:c2:08:e7:e6: f3:73:d5:52:4e:93:d0:f9:0f:bd:01:ae:40:96:6a: 4f:7d:c8:85:ac:2b:a8:fd:1f:03:06:1c:4b:d7:c5: 79:35:8f:a5:e0:71:81:c2:e4:ab:9b:85:24:0d:6f: 2e:41:5c:51:cd:12:d3:4a:5c:53:1b:87:e4:51:8f: 2c:8a:db:ba:72:40:df:08:dd:fd:7e:73:1f:f4:51: c1:1b:f9:76:c2:12:d2:9e:6b:d3:63:8d:9e:ca:30: 46:26:7d:ff:ff:e7:8e:fb:87:9f:3a:65:93:0b:36: 4c:08:d4:c2:2a:9d:cc:8e:45:f5:56:05:b7:6b:88: b9:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0B:49:5A:A2:9B:A1:B6:67:64:66:54:86:B1:90:3D:21:EB:EA:C0 X509v3 Authority Key Identifier: keyid:14:DA:86:9B:A0:33:74:A1:92:C8:E3:BD:CE:95:0A:90:02:7A:DC:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNqGm6AzdKGSyOO9zpUKkAJ63K8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/18e5a9-123f-48ad-91c5-f6007482fa93/1/FNqGm6AzdKGSyOO9zpUKkAJ63K8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:8b:96:04:fe:7f:57:ce:fd:0e:34:15:11:05:47:d0:17:91: a4:4e:27:26:b4:ea:6d:a8:56:1c:19:df:dc:6d:45:3e:59:6a: f9:06:8f:ba:04:59:f9:58:d4:33:30:4c:64:5f:33:ae:5e:3f: 01:47:66:79:c0:e0:ea:90:29:52:68:ce:1f:1c:f2:4e:ab:a6: 95:48:5c:97:41:7f:77:b7:dd:e3:9c:df:2f:8e:0a:c6:bf:1e: 22:8f:cf:84:d4:af:c0:28:52:8f:07:09:f7:5b:d5:11:8d:bc: 33:e2:95:e5:c0:2d:8e:e8:f8:57:41:df:c6:df:2b:2f:d3:25: 56:fe:52:1f:59:24:37:f7:4c:02:72:11:9a:e5:52:27:a0:93: e2:7d:c8:40:1d:0a:b0:a6:ef:4e:71:b2:bc:73:bd:8b:74:33: 76:41:34:72:57:61:c4:95:c0:77:8a:97:df:2b:7d:60:c2:da: 03:a8:ea:45:ae:f9:50:fb:59:38:ad:d9:5f:55:ec:43:bb:8f: f9:2b:8e:ba:83:6b:b1:89:5b:47:c0:bb:5f:bc:76:94:73:34: 95:09:05:a9:c2:87:57:2d:8c:69:73:12:98:62:c8:e8:5d:48: ec:2f:0b:85:05:fc:1f:8c:33:b8:6b:a6:1d:36:a5:39:7a:e3: b7:b5:8b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1CZAWTCEtZraaB2v/9vCKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGE4NjliYTAzMzc0YTE5MmM4ZTNiZGNlOTUwYTkwMDI3 YWRjYWYwHhcNMjUxMjA2MTkwMDM1WhcNMjUxMjA3MTkwMDM1WjAzMTEwLwYDVQQD Eyg1MjBiNDk1YWEyOWJhMWI2Njc2NDY2NTQ4NmIxOTAzZDIxZWJlYWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbElXaIn4CqQpfCRMUqkBdrmghw5 Ga64Kx/YljRiu/2y5/qFUjdamfDMf0QR3J5rJgB4rUkC8mxDni4nd4ZG5rF923xn Dp+ViNQMlvvFrNsCv/zAehRAPpcEoG4qCvuWuQwX2s31FFvKC1ov3OIip9GhA0ht aSIWGeIMoHT1euHQFsII5+bzc9VSTpPQ+Q+9Aa5AlmpPfciFrCuo/R8DBhxL18V5 NY+l4HGBwuSrm4UkDW8uQVxRzRLTSlxTG4fkUY8situ6ckDfCN39fnMf9FHBG/l2 whLSnmvTY42eyjBGJn3//+eO+4efOmWTCzZMCNTCKp3MjkX1VgW3a4i5IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFILSVqim6G2Z2RmVIaxkD0h6+rAMB8GA1UdIwQY MBaAFBTahpugM3Shksjjvc6VCpACetyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUt ZjYwMDc0ODJmYTkzLzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8xOGU1YTktMTIzZi00OGFkLTkxYzUtZjYwMDc0ODJmYTkz LzEvRk5xR202QXpkS0dTeU9POXpwVUtrQUo2M0s4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIuWBP5/ V879DjQVEQVH0BeRpE4nJrTqbahWHBnf3G1FPllq+QaPugRZ+VjUMzBMZF8zrl4/ AUdmecDg6pApUmjOHxzyTqumlUhcl0F/d7fd45zfL44Kxr8eIo/PhNSvwChSjwcJ 91vVEY28M+KV5cAtjuj4V0Hfxt8rL9MlVv5SH1kkN/dMAnIRmuVSJ6CT4n3IQB0K sKbvTnGyvHO9i3QzdkE0cldhxJXAd4qX3yt9YMLaA6jqRa75UPtZOK3ZX1XsQ7uP +SuOuoNrsYlbR8C7X7x2lHM0lQkFqcKHVy2MaXMSmGLI6F1I7C8LhQX8H4wzuGum HTalOXrjt7WLoQ== -----END CERTIFICATE-----Generated at Sat Dec 6 21:56:46 2025 by rpki-client