This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json) Hash identifier: khbLVsEFnzqtNmPqC6rKh2w728/pVp8N0ubYOlsK5Mk= Subject key identifier: 7C:46:13:57:A8:AB:FD:D2:4A:05:72:2B:1A:4C:7A:59:9F:39:D4:8D Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Certificate serial: 019AF464F26B82E34B74DF7471F3290AE7F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft Manifest number: 0928 Signing time: Sat 06 Dec 2025 16:00:47 +0000 Manifest this update: Sat 06 Dec 2025 16:00:47 +0000 Manifest next update: Sun 07 Dec 2025 16:00:47 +0000 Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=) 2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: Szl3S85Nx2X/ZDTT2GSEiYe6usSRqiozLub1OO1xDEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:64:f2:6b:82:e3:4b:74:df:74:71:f3:29:0a:e7:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Validity Not Before: Dec 6 16:00:47 2025 GMT Not After : Dec 7 16:00:47 2025 GMT Subject: CN=7c461357a8abfdd24a05722b1a4c7a599f39d48d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4a:f4:4e:ce:90:e1:35:31:b6:47:d0:e0:10: bd:ea:07:c8:87:22:42:e4:a8:95:fd:48:d2:3c:1e: a5:51:e4:fa:71:4b:ab:82:86:a9:85:82:47:12:11: ab:06:be:cb:8c:73:cc:43:d3:e4:37:d2:5e:7d:9f: de:ed:23:26:44:1b:05:9d:4a:f9:ef:b8:22:e6:4b: 95:5e:3f:9f:7d:b8:73:eb:5f:06:a1:87:74:fe:af: 67:ad:b2:be:19:d4:4d:97:74:97:7c:4a:77:90:5d: 86:3a:c0:d8:94:21:2c:bd:af:58:da:e6:b2:40:d1: a4:5d:13:bb:18:0f:9b:0d:2e:b1:6c:62:19:33:d4: 67:21:c3:5c:f5:69:11:6d:f9:39:72:54:3a:e3:a0: 2e:13:57:ce:56:be:1e:93:f5:db:8a:09:5a:0b:a4: 3d:fe:7b:70:5f:43:6f:37:ce:e5:0b:ea:67:9f:eb: 66:dd:41:16:18:1e:e9:a3:8d:2c:a6:c8:ab:ec:a8: c0:79:21:f2:0c:bb:0f:03:8e:3b:b2:da:cf:33:d6: 89:36:ef:60:0c:ee:9b:7f:37:9a:ae:3b:9c:58:ea: 18:54:68:7f:99:49:5d:1c:99:df:61:ce:82:a0:c6: 71:d9:e2:0f:b4:f5:21:c6:4a:6f:51:07:7b:97:83: ab:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:46:13:57:A8:AB:FD:D2:4A:05:72:2B:1A:4C:7A:59:9F:39:D4:8D X509v3 Authority Key Identifier: keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:57:e7:7c:4e:26:1f:e5:09:f6:f0:3f:69:2d:c6:01:1d:f9: 0e:46:1b:8a:39:56:6b:79:9c:00:11:d2:66:80:f1:69:ec:26: 4b:06:19:42:71:bc:e9:05:44:e4:48:e6:06:25:63:79:66:75: 57:ee:ad:fc:7b:bb:1e:68:2e:da:c2:2c:32:47:33:3f:db:06: 34:59:da:87:e1:24:9b:ce:14:06:dd:7c:1e:ad:b5:07:96:ce: 87:82:85:88:f8:6e:82:99:51:5d:76:40:05:6c:70:2c:69:39: 04:cb:4c:a6:14:e1:23:cd:a0:8f:e7:01:06:09:c9:fb:8d:ca: 15:bf:33:60:d2:42:fe:d8:1f:9a:26:7a:75:4a:95:18:3a:a3: 86:87:73:55:f5:d0:d6:ef:88:36:cc:8e:dc:f7:4e:d5:86:61: 51:94:b9:51:f3:05:9b:e7:fe:ae:96:7f:27:b8:93:13:48:a9: 90:2c:88:1f:9b:5e:3b:88:46:08:2b:e7:ee:95:2c:11:da:e6: 10:5e:57:10:b4:94:39:83:ba:90:18:99:75:53:00:4b:3b:ce: 12:ba:43:f2:e9:1a:92:1c:e8:38:bb:ec:4b:0a:c3:eb:15:cf: 8e:d4:c5:79:ab:62:2b:33:f6:94:33:42:55:80:d9:2c:b1:91: 30:a9:4a:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0ZPJrguNLdN90cfMpCuf3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4 MmY5NTkwHhcNMjUxMjA2MTYwMDQ3WhcNMjUxMjA3MTYwMDQ3WjAzMTEwLwYDVQQD Eyg3YzQ2MTM1N2E4YWJmZGQyNGEwNTcyMmIxYTRjN2E1OTlmMzlkNDhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60r0Ts6Q4TUxtkfQ4BC96gfIhyJC 5KiV/UjSPB6lUeT6cUurgoaphYJHEhGrBr7LjHPMQ9PkN9JefZ/e7SMmRBsFnUr5 77gi5kuVXj+ffbhz618GoYd0/q9nrbK+GdRNl3SXfEp3kF2GOsDYlCEsva9Y2uay QNGkXRO7GA+bDS6xbGIZM9RnIcNc9WkRbfk5clQ646AuE1fOVr4ek/XbiglaC6Q9 /ntwX0NvN87lC+pnn+tm3UEWGB7po40spsir7KjAeSHyDLsPA447strPM9aJNu9g DO6bfzearjucWOoYVGh/mUldHJnfYc6CoMZx2eIPtPUhxkpvUQd7l4OrpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHxGE1eoq/3SSgVyKxpMelmfOdSNMB8GA1UdIwQY MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwFfnfE4m H+UJ9vA/aS3GAR35DkYbijlWa3mcABHSZoDxaewmSwYZQnG86QVE5EjmBiVjeWZ1 V+6t/Hu7Hmgu2sIsMkczP9sGNFnah+Ekm84UBt18Hq21B5bOh4KFiPhugplRXXZA BWxwLGk5BMtMphThI82gj+cBBgnJ+43KFb8zYNJC/tgfmiZ6dUqVGDqjhodzVfXQ 1u+INsyO3PdO1YZhUZS5UfMFm+f+rpZ/J7iTE0ipkCyIH5teO4hGCCvn7pUsEdrm EF5XELSUOYO6kBiZdVMASzvOErpD8ukakhzoOLvsSwrD6xXPjtTFeatiKzP2lDNC VYDZLLGRMKlKQw== -----END CERTIFICATE-----Generated at Sat Dec 6 22:29:45 2025 by rpki-client