This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft File: FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json) Hash identifier: 4eoUxibwC0quxdalHPBuUMk21+DklAZ4FT9nMEW0xiU= Subject key identifier: 58:FB:4D:F6:E8:4A:55:65:00:39:F7:D5:4F:CA:D1:7D:AF:4B:AE:62 Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a Certificate serial: 019AF5407B858D7A11F13E238C1659143F0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 20:00:35 +0000 Manifest this update: Sat 06 Dec 2025 20:00:35 +0000 Manifest next update: Sun 07 Dec 2025 20:00:35 +0000 Files and hashes: 1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: kBradbjV90hv3RFOfVG0xXm7EtTdbvpFPV/UJr3r1aY=) 2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:40:7b:85:8d:7a:11:f1:3e:23:8c:16:59:14:3f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a Validity Not Before: Dec 6 20:00:35 2025 GMT Not After : Dec 7 20:00:35 2025 GMT Subject: CN=58fb4df6e84a55650039f7d54fcad17daf4bae62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:30:fc:88:fd:8b:c0:05:61:b3:bc:ff:b7:76: fc:57:de:5f:03:86:da:76:2e:22:44:35:5b:84:78: ea:8a:f9:84:22:09:59:66:20:af:58:e0:d9:62:5d: b5:37:22:c9:58:f3:26:1a:74:e2:ff:8e:e4:e6:74: 59:9d:48:86:55:47:2a:19:c1:ba:5c:13:c9:6c:02: 40:6d:94:0a:2a:3b:4d:28:83:be:ae:49:23:4d:bb: be:3b:4b:a1:4d:74:92:2d:16:98:88:da:75:ad:c4: 22:fe:8e:72:b9:ef:4f:1a:c1:16:e5:5f:7b:83:75: 6b:65:2a:95:25:d7:c3:77:0a:51:3f:e6:fc:47:97: a0:57:c8:2f:72:54:45:75:07:7c:37:a7:81:1e:81: 45:79:d1:a1:24:97:8a:cc:30:c4:22:b2:c8:67:4e: 3d:0a:66:33:e8:80:66:b1:d5:5c:4c:51:4d:de:2b: 05:5c:86:c4:30:0e:a0:5c:9c:e2:c4:d2:c5:51:3a: aa:ee:ea:df:20:79:37:07:12:49:f7:58:62:a0:d7: 39:f1:66:80:06:a8:8a:50:d3:f3:7a:cf:72:78:b2: 73:31:34:ee:8b:80:d7:f0:63:3f:7c:8c:d2:6e:63: 2b:40:c7:71:c2:12:f0:45:f6:8b:03:a2:45:2a:fe: 0c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FB:4D:F6:E8:4A:55:65:00:39:F7:D5:4F:CA:D1:7D:AF:4B:AE:62 X509v3 Authority Key Identifier: keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:a2:06:31:14:7e:e1:88:4c:7c:ba:5f:b7:e6:c8:5a:f0:dd: 63:c3:62:fc:8c:6e:d5:2a:30:52:d2:74:69:ad:0e:5e:49:0a: c4:d6:d1:9c:bd:38:96:48:82:ed:ae:8c:45:09:ef:f0:ff:82: 92:44:24:4e:4b:c7:63:12:8d:6b:4b:85:aa:d9:27:64:78:2a: 14:ce:09:58:9b:f2:97:a0:ec:23:a5:dc:cf:65:1e:66:37:40: 79:e0:ad:fa:71:62:d6:99:18:ff:39:13:0b:3a:ed:2f:d8:bf: bb:55:33:a4:4b:30:f9:51:62:b2:09:77:da:44:ba:d5:7c:47: 42:2d:15:6f:9a:b7:2d:b4:19:d9:6e:a8:c9:7e:2a:cb:4e:f4: 64:bd:88:85:35:e1:e6:77:23:26:c4:74:3e:1a:ed:cf:1a:87: 09:74:b6:db:ac:4c:f4:0c:74:c3:fd:38:9d:b5:01:90:cb:05: ba:44:bf:1f:65:ea:cb:0d:7d:5c:37:78:d7:09:ff:38:be:e3: dd:92:6a:f0:6e:fe:00:d9:93:7b:d8:02:d7:5f:20:b0:d6:8a: 40:ce:05:23:84:0e:d3:46:8b:a7:61:b7:1a:eb:f4:a4:ad:1b: 77:e1:8f:0c:79:22:26:99:40:e1:09:ed:8f:7e:1d:ce:e3:f0: bf:82:50:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1QHuFjXoR8T4jjBZZFD8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3 NDhlM2EwHhcNMjUxMjA2MjAwMDM1WhcNMjUxMjA3MjAwMDM1WjAzMTEwLwYDVQQD Eyg1OGZiNGRmNmU4NGE1NTY1MDAzOWY3ZDU0ZmNhZDE3ZGFmNGJhZTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjD8iP2LwAVhs7z/t3b8V95fA4ba di4iRDVbhHjqivmEIglZZiCvWODZYl21NyLJWPMmGnTi/47k5nRZnUiGVUcqGcG6 XBPJbAJAbZQKKjtNKIO+rkkjTbu+O0uhTXSSLRaYiNp1rcQi/o5yue9PGsEW5V97 g3VrZSqVJdfDdwpRP+b8R5egV8gvclRFdQd8N6eBHoFFedGhJJeKzDDEIrLIZ049 CmYz6IBmsdVcTFFN3isFXIbEMA6gXJzixNLFUTqq7urfIHk3BxJJ91hioNc58WaA BqiKUNPzes9yeLJzMTTui4DX8GM/fIzSbmMrQMdxwhLwRfaLA6JFKv4MJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj7TfboSlVlADn31U/K0X2vS65iMB8GA1UdIwQY MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5 LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATKIGMRR+ 4YhMfLpft+bIWvDdY8Ni/Ixu1SowUtJ0aa0OXkkKxNbRnL04lkiC7a6MRQnv8P+C kkQkTkvHYxKNa0uFqtknZHgqFM4JWJvyl6DsI6Xcz2UeZjdAeeCt+nFi1pkY/zkT CzrtL9i/u1UzpEsw+VFisgl32kS61XxHQi0Vb5q3LbQZ2W6oyX4qy070ZL2IhTXh 5ncjJsR0PhrtzxqHCXS226xM9Ax0w/04nbUBkMsFukS/H2Xqyw19XDd41wn/OL7j 3ZJq8G7+ANmTe9gC118gsNaKQM4FI4QO00aLp2G3Guv0pK0bd+GPDHkiJplA4Qnt j34dzuPwv4JQ4A== -----END CERTIFICATE-----Generated at Sun Dec 7 05:52:16 2025 by rpki-client