This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json) Hash identifier: wkrZ8lg8R6p+e5l+9FUz3oObfxiJILcLF7RbiL9xkOs= Subject key identifier: D1:5E:AE:F2:AA:8A:7B:82:AB:A2:70:2C:A3:D3:68:80:A5:DE:CC:B8 Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Certificate serial: 019B2F67498F9D660AE1B658D8C2B4EB3A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft Manifest number: 1525 Signing time: Thu 18 Dec 2025 03:00:56 +0000 Manifest this update: Thu 18 Dec 2025 03:00:56 +0000 Manifest next update: Fri 19 Dec 2025 03:00:56 +0000 Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: b+u/nJAT/xVpNeEZrrmu/Cc0r78WQpMwvCDUDabbX3c=) 2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:67:49:8f:9d:66:0a:e1:b6:58:d8:c2:b4:eb:3a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7 Validity Not Before: Dec 18 03:00:56 2025 GMT Not After : Dec 19 03:00:56 2025 GMT Subject: CN=d15eaef2aa8a7b82aba2702ca3d36880a5deccb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a6:4f:3b:6f:60:c4:3f:b3:5c:ec:3b:21:d4: 63:a9:49:ed:76:53:8c:65:8c:0d:f2:6e:85:f0:0b: 40:62:7f:81:0f:aa:94:6b:7c:fb:e1:1e:39:e7:62: 23:b1:80:3e:65:e0:49:5e:06:4c:d7:bd:62:cd:a2: f0:8e:39:4b:6b:15:fd:8d:e4:36:ca:ed:94:bb:eb: 51:ac:7b:bd:3f:37:9c:48:50:66:05:0d:76:cd:49: d4:02:1d:89:eb:f7:66:4d:1c:db:0e:5a:e7:2c:06: 6e:16:a0:fd:bb:69:8c:f1:8b:bb:f2:35:eb:a0:fe: f4:60:1f:32:22:f2:55:b9:1c:ff:f4:b8:1c:a6:98: a4:cd:4c:0c:f2:0f:be:30:ad:7a:02:af:e6:53:5f: d0:bc:c7:73:e3:17:9e:03:a0:0f:7c:a8:db:c7:48: e3:5e:bd:56:27:61:89:f6:bd:73:ee:eb:ef:bf:cb: f7:8b:70:e0:ad:b6:b8:58:4f:f2:86:58:6c:92:0a: d2:5d:d8:35:b8:a6:a9:47:6c:21:9b:e8:22:30:21: 33:d5:e0:ed:bb:66:45:a9:d0:5a:22:0b:81:d1:38: 1a:00:bd:96:f5:f2:82:4d:7a:4c:d4:84:bf:47:28: 48:f8:9d:a2:3f:85:2d:9f:74:26:d6:ca:6e:10:61: 73:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5E:AE:F2:AA:8A:7B:82:AB:A2:70:2C:A3:D3:68:80:A5:DE:CC:B8 X509v3 Authority Key Identifier: keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8b:9a:4e:a3:25:0f:55:5f:6e:45:7a:f8:2c:85:92:0b:8e: 76:8e:ac:46:3a:4b:6e:69:ad:cd:09:d8:b6:65:a8:8b:db:ce: c1:52:b7:22:99:bc:2f:e4:12:8d:5f:0a:29:0a:cf:d1:7c:f1: 00:22:af:ea:0f:f8:e9:55:b5:c9:08:20:54:e6:48:80:46:e6: 17:1a:b4:50:4b:50:c6:d0:15:f6:ba:11:57:79:ea:8e:fd:9c: ec:81:7a:68:2d:67:8e:7c:8c:36:18:c1:49:31:7c:0d:e2:df: 42:3b:8e:92:bf:08:3f:dc:b8:7b:b4:1a:89:91:b8:2d:0e:ac: 9c:1c:47:bd:e9:9f:58:1d:b5:c9:2f:9b:39:8a:67:7d:9b:44: 2e:1f:71:c2:69:2b:1d:b5:b5:87:29:35:e3:ed:6f:2c:a9:e3: 56:7b:17:27:04:fd:75:1b:ac:ac:c4:55:a0:9b:77:ac:a0:f4: 42:4b:21:01:19:8b:39:6c:9c:58:11:94:59:95:09:b9:1e:2d: 6a:6c:40:7d:52:5e:58:87:f6:f6:3f:89:43:fd:53:8c:01:33: 21:50:b2:1a:58:78:5a:b7:33:59:02:c6:d8:ee:28:3f:43:5b: 06:1b:0d:be:7f:ad:73:f5:d6:09:6a:74:75:9c:7c:c9:f6:df: 4c:d9:9c:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZ0mPnWYK4bZY2MK06zoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDRhNTFkODRmYmE2ZDBmZTIxOGFlZGNhOTVhODk0ZGNj ZTFjZDcwHhcNMjUxMjE4MDMwMDU2WhcNMjUxMjE5MDMwMDU2WjAzMTEwLwYDVQQD EyhkMTVlYWVmMmFhOGE3YjgyYWJhMjcwMmNhM2QzNjg4MGE1ZGVjY2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKZPO29gxD+zXOw7IdRjqUntdlOM ZYwN8m6F8AtAYn+BD6qUa3z74R4552IjsYA+ZeBJXgZM171izaLwjjlLaxX9jeQ2 yu2Uu+tRrHu9PzecSFBmBQ12zUnUAh2J6/dmTRzbDlrnLAZuFqD9u2mM8Yu78jXr oP70YB8yIvJVuRz/9LgcppikzUwM8g++MK16Aq/mU1/QvMdz4xeeA6APfKjbx0jj Xr1WJ2GJ9r1z7uvvv8v3i3Dgrba4WE/yhlhskgrSXdg1uKapR2whm+giMCEz1eDt u2ZFqdBaIguB0TgaAL2W9fKCTXpM1IS/RyhI+J2iP4Utn3Qm1spuEGFzZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFervKqinuCq6JwLKPTaICl3sy4MB8GA1UdIwQY MBaAFBcEpR2E+6bQ/iGK7cqVqJTczhzXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTIt ZWFmOTI0NzMxMjE4LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lMGRkZGUtY2M5Zi00ODA3LThmYTItZWFmOTI0NzMxMjE4 LzEvRndTbEhZVDdwdEQtSVlydHlwV29sTnpPSE5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoIuaTqMl D1VfbkV6+CyFkguOdo6sRjpLbmmtzQnYtmWoi9vOwVK3Ipm8L+QSjV8KKQrP0Xzx ACKv6g/46VW1yQggVOZIgEbmFxq0UEtQxtAV9roRV3nqjv2c7IF6aC1njnyMNhjB STF8DeLfQjuOkr8IP9y4e7QaiZG4LQ6snBxHvemfWB21yS+bOYpnfZtELh9xwmkr HbW1hyk14+1vLKnjVnsXJwT9dRusrMRVoJt3rKD0QkshARmLOWycWBGUWZUJuR4t amxAfVJeWIf29j+JQ/1TjAEzIVCyGlh4WrczWQLG2O4oP0NbBhsNvn+tc/XWCWp0 dZx8yfbfTNmcVg== -----END CERTIFICATE-----Generated at Thu Dec 18 07:50:52 2025 by rpki-client