This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json) Hash identifier: RNx9Kd4b5AOlj/LZZAlzmt1jMNu89cxgcdP6R3F/YUE= Subject key identifier: E4:C6:EC:07:87:BC:9C:E6:1E:AB:F1:63:FB:FB:F0:FB:8B:25:FE:31 Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019AF1642A93F3032F2511597AFA69ADFD9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft Manifest number: 16A0 Signing time: Sat 06 Dec 2025 02:01:04 +0000 Manifest this update: Sat 06 Dec 2025 02:01:04 +0000 Manifest next update: Sun 07 Dec 2025 02:01:04 +0000 Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=) 2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: ROylOztLAK6B1iA0x+hGlL7SEiXhrDx0kNlaWUbOVcA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:64:2a:93:f3:03:2f:25:11:59:7a:fa:69:ad:fd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Dec 6 02:01:04 2025 GMT Not After : Dec 7 02:01:04 2025 GMT Subject: CN=e4c6ec0787bc9ce61eabf163fbfbf0fb8b25fe31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:23:f6:f3:80:f8:36:9f:c5:f0:62:10:b2:b7: b6:b2:79:ab:11:a9:7c:7b:05:c5:74:30:5b:9a:b2: 33:86:22:96:84:b0:b0:d6:bf:49:05:f5:38:47:33: 12:b3:59:13:93:45:b8:62:7d:81:fd:23:7f:b8:e6: f9:c0:16:21:83:18:5f:af:56:3f:ef:3f:b2:31:6b: 24:b0:28:f6:f6:da:8f:c8:0f:e6:b6:91:c2:9e:7c: d1:fc:65:f5:b1:0d:99:bf:76:24:17:e3:30:9e:b8: 74:81:c2:7c:eb:3a:63:73:de:ef:f4:1a:be:6a:60: 11:90:d5:45:1a:e0:ea:83:71:f8:b3:f3:42:0f:2c: 4f:21:6d:93:3d:68:86:54:09:3b:ec:67:16:8f:1d: 1f:f2:87:24:ac:d9:f4:0c:8c:bb:8c:c4:2f:b3:09: c3:57:a7:c2:73:7a:6b:e7:91:bf:a1:19:77:33:90: 8e:94:8d:c1:fe:37:bd:08:c2:ae:3b:5c:a8:f4:18: cc:e1:4a:38:46:1c:7b:f8:93:eb:7d:87:55:80:b5: 44:b5:de:e0:d6:29:3c:d1:44:8a:7d:fe:eb:ec:7e: ab:57:02:8a:82:b8:9f:c8:89:70:e0:c4:da:40:5d: a3:72:db:de:b9:ce:f6:9c:3d:90:19:e4:df:07:ab: c7:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C6:EC:07:87:BC:9C:E6:1E:AB:F1:63:FB:FB:F0:FB:8B:25:FE:31 X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:69:04:a4:b7:f5:e5:ae:c7:fd:0b:d9:61:18:ef:94:c8:57: 71:65:d4:63:08:b7:81:56:8c:3e:a6:84:8c:28:b0:95:35:ff: b9:2b:8f:ae:19:e8:9c:68:6f:b3:19:7d:7e:aa:d4:2a:b9:ac: 41:d6:4f:c5:a7:fd:5c:95:0d:aa:a5:90:d1:56:09:20:1c:06: 49:58:59:77:d4:0d:70:0c:0c:ca:9e:50:1a:8c:2c:ea:7b:92: 49:d2:40:dc:f0:96:aa:da:d7:b4:6d:3f:62:b6:90:e4:d6:cb: d2:9b:d2:29:71:ad:53:a9:be:b5:ca:a3:cd:ad:07:d7:81:48: 6b:57:fa:e9:9d:83:b2:1e:b5:f0:1a:83:50:49:76:5a:87:0b: 4a:9f:05:37:07:8a:e1:17:a6:8b:a0:1c:73:97:24:f1:c1:ca: 1c:9e:d1:ca:ef:a0:c0:46:d9:ac:4e:9e:cd:d0:6d:3d:18:c6: 76:28:69:96:b1:39:ff:78:ad:fa:5d:6e:78:3b:52:8a:cb:f2: 31:a2:41:df:03:16:2d:dd:d1:30:5b:d1:29:52:a7:33:f3:39: 10:1d:bc:88:ac:55:ec:bb:19:d3:06:50:32:96:9f:e5:a6:b2: 81:d6:25:c9:6a:f4:21:3e:86:df:86:1b:33:f6:20:cf:ad:ec: 2b:ac:61:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxZCqT8wMvJRFZevpprf2aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjUxMjA2MDIwMTA0WhcNMjUxMjA3MDIwMTA0WjAzMTEwLwYDVQQD EyhlNGM2ZWMwNzg3YmM5Y2U2MWVhYmYxNjNmYmZiZjBmYjhiMjVmZTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCP284D4Np/F8GIQsre2snmrEal8 ewXFdDBbmrIzhiKWhLCw1r9JBfU4RzMSs1kTk0W4Yn2B/SN/uOb5wBYhgxhfr1Y/ 7z+yMWsksCj29tqPyA/mtpHCnnzR/GX1sQ2Zv3YkF+Mwnrh0gcJ86zpjc97v9Bq+ amARkNVFGuDqg3H4s/NCDyxPIW2TPWiGVAk77GcWjx0f8ockrNn0DIy7jMQvswnD V6fCc3pr55G/oRl3M5COlI3B/je9CMKuO1yo9BjM4Uo4Rhx7+JPrfYdVgLVEtd7g 1ik80USKff7r7H6rVwKKgrifyIlw4MTaQF2jctveuc72nD2QGeTfB6vHtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTG7AeHvJzmHqvxY/v78PuLJf4xMB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbmkEpLf1 5a7H/QvZYRjvlMhXcWXUYwi3gVaMPqaEjCiwlTX/uSuPrhnonGhvsxl9fqrUKrms QdZPxaf9XJUNqqWQ0VYJIBwGSVhZd9QNcAwMyp5QGows6nuSSdJA3PCWqtrXtG0/ YraQ5NbL0pvSKXGtU6m+tcqjza0H14FIa1f66Z2Dsh618BqDUEl2WocLSp8FNweK 4Remi6Acc5ck8cHKHJ7Ryu+gwEbZrE6ezdBtPRjGdihplrE5/3it+l1ueDtSisvy MaJB3wMWLd3RMFvRKVKnM/M5EB28iKxV7LsZ0wZQMpaf5aaygdYlyWr0IT6G34Yb M/Ygz63sK6xhPA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:43:25 2025 by rpki-client