This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json) Hash identifier: QByBcYixfLxXwVMKj4Ny6dFcfNNExU1W3p62rsZwgKg= Subject key identifier: E8:40:D3:C5:AD:9C:9E:48:82:FA:8E:3E:FE:97:8E:A3:9D:FA:BE:26 Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5 Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5 Certificate serial: 019AF20901A26361A37F966967EC48F3C3CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft Manifest number: 12DA Signing time: Sat 06 Dec 2025 05:01:07 +0000 Manifest this update: Sat 06 Dec 2025 05:01:07 +0000 Manifest next update: Sun 07 Dec 2025 05:01:07 +0000 Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: n5AnjduJNW/ZMp8sfEu7bmr2oUJGQ+b2tWskl826vG8=) 2: H9dXCbHCAXGOrGOV28k8umzrLKQ.roa (hash: sDapbNuHEvC3TdmduqXaXIUkjYECPGi1w550P+lUprw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:01:a2:63:61:a3:7f:96:69:67:ec:48:f3:c3:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5 Validity Not Before: Dec 6 05:01:07 2025 GMT Not After : Dec 7 05:01:07 2025 GMT Subject: CN=e840d3c5ad9c9e4882fa8e3efe978ea39dfabe26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:3b:dd:65:76:a0:88:cf:c0:47:12:d2:8d: 63:25:3f:ed:03:d3:cb:6f:1f:70:52:61:66:f8:0d: dc:15:20:03:54:ce:66:81:4c:c8:2a:85:eb:c3:d3: 19:f1:0a:6f:f0:bb:a1:8d:8d:98:a6:01:f9:00:2c: de:0d:53:f8:52:b5:f2:bd:f7:01:1c:6d:82:ae:24: bc:bd:7e:fe:0e:28:c4:cf:04:13:9c:6e:d8:2a:54: 35:2a:4e:f2:88:1c:80:18:9f:44:40:9a:9d:0b:4f: 6c:59:21:80:72:06:24:87:b4:fc:d9:47:e5:17:10: 54:fa:58:18:e2:79:1b:0d:de:a9:87:50:6a:05:38: fb:8d:cb:32:4d:1f:6e:24:c1:03:76:16:a0:17:94: a0:47:f2:10:77:23:42:3f:60:cc:48:e0:8e:09:18: 99:d0:ed:d3:20:3f:0a:44:b5:59:87:42:a1:63:bd: 33:fd:d8:ef:7f:72:45:4e:5d:8a:32:38:f2:e8:75: 7c:08:40:cf:61:25:11:a2:87:db:ec:32:41:5c:5c: 05:8d:8b:ba:b9:ce:b3:3e:e0:5b:f3:8c:b9:89:3b: 9d:1a:69:f3:22:00:db:c2:ea:26:7c:3e:50:ab:0b: 3a:4a:39:08:93:97:4f:e4:39:95:39:93:c6:48:60: f3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:40:D3:C5:AD:9C:9E:48:82:FA:8E:3E:FE:97:8E:A3:9D:FA:BE:26 X509v3 Authority Key Identifier: keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0a:76:05:3b:7b:76:4b:7b:df:62:30:1e:0f:3f:0d:c5:d7: c4:3a:e2:15:ae:30:ab:ac:99:de:64:70:04:90:ff:1e:1b:86: ea:85:86:8b:73:b4:72:9d:21:41:fe:86:57:f2:dc:1b:d4:06: 6c:3d:e8:16:b0:b9:06:7a:35:c4:21:fe:81:dd:9d:1a:ba:2d: 62:45:d5:c2:02:7b:b0:ec:ff:c0:43:91:c5:71:9e:bf:a0:f6: a7:bc:db:53:88:37:a4:19:50:3d:1d:a8:cd:20:a2:f6:46:e8: 72:b5:f5:c5:fb:7d:c6:61:3a:84:6a:b5:84:c1:1f:04:d9:3c: 91:5b:95:0e:25:c8:81:02:e2:1f:0c:e3:c3:c9:25:25:40:e1: 2e:d4:35:e7:fc:f0:13:ef:2c:8d:fb:1d:8d:45:0c:5b:07:aa: cb:16:2f:c2:27:44:26:b1:0e:19:b5:48:6a:b5:89:1d:8f:44: 22:aa:13:5f:f0:e6:4b:47:1a:b5:65:15:2e:a5:af:91:d4:58: 6d:c1:3b:0b:fb:3b:b2:b9:db:e9:47:23:5a:78:f3:b3:dc:46: b7:98:da:e9:cb:29:64:8a:68:09:86:1a:bf:f0:56:73:1f:63: d1:fa:8d:50:3c:91:41:77:fb:f2:12:57:ab:e4:b7:3e:d2:1a: 34:1b:34:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCQGiY2Gjf5ZpZ+xI88PMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YWMxNjBkYTk5YjM0OTRhNTZiNTQ3YzY4YThlMmMwOTE4 NjkxYjUwHhcNMjUxMjA2MDUwMTA3WhcNMjUxMjA3MDUwMTA3WjAzMTEwLwYDVQQD EyhlODQwZDNjNWFkOWM5ZTQ4ODJmYThlM2VmZTk3OGVhMzlkZmFiZTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTM73WV2oIjPwEcS0o1jJT/tA9PL bx9wUmFm+A3cFSADVM5mgUzIKoXrw9MZ8Qpv8LuhjY2YpgH5ACzeDVP4UrXyvfcB HG2CriS8vX7+DijEzwQTnG7YKlQ1Kk7yiByAGJ9EQJqdC09sWSGAcgYkh7T82Ufl FxBU+lgY4nkbDd6ph1BqBTj7jcsyTR9uJMEDdhagF5SgR/IQdyNCP2DMSOCOCRiZ 0O3TID8KRLVZh0KhY70z/djvf3JFTl2KMjjy6HV8CEDPYSURoofb7DJBXFwFjYu6 uc6zPuBb84y5iTudGmnzIgDbwuomfD5Qqws6SjkIk5dP5DmVOZPGSGDzFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhA08WtnJ5IgvqOPv6XjqOd+r4mMB8GA1UdIwQY MBaAFBasFg2pmzSUpWtUfGio4sCRhpG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYt MWU2OTEyNjg5ZGQ4LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYtMWU2OTEyNjg5ZGQ4 LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwp2BTt7 dkt732IwHg8/DcXXxDriFa4wq6yZ3mRwBJD/HhuG6oWGi3O0cp0hQf6GV/LcG9QG bD3oFrC5Bno1xCH+gd2dGrotYkXVwgJ7sOz/wEORxXGev6D2p7zbU4g3pBlQPR2o zSCi9kbocrX1xft9xmE6hGq1hMEfBNk8kVuVDiXIgQLiHwzjw8klJUDhLtQ15/zw E+8sjfsdjUUMWweqyxYvwidEJrEOGbVIarWJHY9EIqoTX/DmS0catWUVLqWvkdRY bcE7C/s7srnb6UcjWnjzs9xGt5ja6cspZIpoCYYav/BWcx9j0fqNUDyRQXf78hJX q+S3PtIaNBs0Mw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:24:26 2025 by rpki-client