This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json) Hash identifier: NFLJ2qINUfCnHvYnpB+IufZT+DnNw9lbYd5JWb1bPow= Subject key identifier: DB:7A:E2:5E:E2:31:79:54:6D:D3:BC:49:93:C5:BD:D0:27:66:11:55 Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Certificate serial: 019AF12E2529078CDC6504470FBC52073A45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft Manifest number: 042C Signing time: Sat 06 Dec 2025 01:02:04 +0000 Manifest this update: Sat 06 Dec 2025 01:02:04 +0000 Manifest next update: Sun 07 Dec 2025 01:02:04 +0000 Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: /F0S6qBWfvQa6NB9Mn7PN4SPGMfb4bwpBaYHEKleGSw=) 2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:25:29:07:8c:dc:65:04:47:0f:bc:52:07:3a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Validity Not Before: Dec 6 01:02:04 2025 GMT Not After : Dec 7 01:02:04 2025 GMT Subject: CN=db7ae25ee23179546dd3bc4993c5bdd027661155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:67:52:40:0d:4e:b2:85:10:7c:b1:46:91:4d: 14:0c:9f:32:39:d0:bc:d8:a6:5f:81:16:eb:73:0e: 00:3b:f3:f3:41:34:04:00:97:ac:48:36:ec:22:24: e3:de:57:ae:e7:dc:06:1b:7d:f8:74:5c:b9:25:6c: 60:6a:c4:d3:b4:6f:4a:21:ce:79:b5:3e:92:7a:7b: c5:c0:33:af:28:87:f1:e9:f1:b7:98:16:a4:3d:08: d7:af:65:71:a6:01:d7:08:ef:51:49:e4:1b:1c:e3: c2:3f:95:48:3e:ee:3a:b2:35:9c:c7:77:91:7b:be: af:f5:ed:77:05:85:0e:85:33:4e:a3:ab:f3:7f:7c: 5d:b3:9a:0f:27:6e:55:cd:8a:af:73:91:fb:fe:1f: 90:26:85:85:60:5a:fc:f7:1b:0d:42:71:9d:62:62: c4:eb:e5:85:c5:ef:26:56:70:03:61:05:ba:79:af: 10:88:e5:77:b5:20:32:e4:d5:f2:8a:b3:5c:4e:22: 4c:4f:5e:f1:ec:1e:13:7c:bd:93:b2:23:e1:08:e7: e7:79:10:0b:df:e6:d3:7b:3e:b0:a8:29:09:14:08: 88:1d:ee:9d:e2:00:66:35:15:df:1b:dc:7a:cc:55: b0:c2:b8:d2:48:c8:52:46:c3:d2:4f:c5:92:65:2f: 5b:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:7A:E2:5E:E2:31:79:54:6D:D3:BC:49:93:C5:BD:D0:27:66:11:55 X509v3 Authority Key Identifier: keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:94:d6:1a:f5:86:9a:b2:01:e2:d5:50:22:27:40:7f:4d:7c: af:23:2a:f8:9e:d2:1f:7b:56:62:c8:d8:32:df:e6:be:f3:23: 67:e4:33:ab:6d:00:fb:bd:00:da:1a:d1:5f:2d:45:c0:7f:b9: 75:35:4f:cc:80:0a:d5:c7:78:76:0c:64:6d:bf:37:a8:d6:d5: 22:92:b5:ca:71:e6:87:82:e5:f2:8e:12:84:ae:85:4f:d0:18: 11:66:bb:31:14:e4:17:08:ec:60:98:60:53:f7:62:3d:73:be: 7b:28:e9:e7:30:fc:db:45:f8:18:d7:71:6d:29:f1:05:f1:2d: bc:08:f0:cc:8a:1b:1b:8e:ee:fb:ff:77:14:d0:9d:d0:93:84: 36:41:79:00:cd:80:3a:44:52:85:ff:62:e5:dc:f2:79:af:38: 81:15:f2:56:22:51:f1:8d:3f:84:51:1d:61:2b:58:84:ce:00: a3:7d:bd:74:33:e5:ee:85:b7:f4:45:0b:26:50:24:03:92:d0: f6:67:b3:4c:03:92:f3:b2:0f:e1:23:bf:d3:00:c5:89:76:ee: f4:ff:0b:54:17:3c:4c:99:e5:08:a4:08:4f:91:36:ba:cd:3b: 19:a1:10:a1:35:a0:94:1e:a9:9d:3e:21:ac:07:98:0c:fa:b9: c4:e7:45:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLiUpB4zcZQRHD7xSBzpFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2FiYzRmMzE2NWM2ZmExZWVjZmRkMDA0ZjQ1ZTUyZTAw YTUwMGUwHhcNMjUxMjA2MDEwMjA0WhcNMjUxMjA3MDEwMjA0WjAzMTEwLwYDVQQD EyhkYjdhZTI1ZWUyMzE3OTU0NmRkM2JjNDk5M2M1YmRkMDI3NjYxMTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02dSQA1OsoUQfLFGkU0UDJ8yOdC8 2KZfgRbrcw4AO/PzQTQEAJesSDbsIiTj3leu59wGG334dFy5JWxgasTTtG9KIc55 tT6SenvFwDOvKIfx6fG3mBakPQjXr2VxpgHXCO9RSeQbHOPCP5VIPu46sjWcx3eR e76v9e13BYUOhTNOo6vzf3xds5oPJ25VzYqvc5H7/h+QJoWFYFr89xsNQnGdYmLE 6+WFxe8mVnADYQW6ea8QiOV3tSAy5NXyirNcTiJMT17x7B4TfL2TsiPhCOfneRAL 3+bTez6wqCkJFAiIHe6d4gBmNRXfG9x6zFWwwrjSSMhSRsPST8WSZS9bdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNt64l7iMXlUbdO8SZPFvdAnZhFVMB8GA1UdIwQY MBaAFBY6vE8xZcb6Huz90AT0XlLgClAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYt MjcxMmY3MWJjNjc0LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYtMjcxMmY3MWJjNjc0 LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVJTWGvWG mrIB4tVQIidAf018ryMq+J7SH3tWYsjYMt/mvvMjZ+Qzq20A+70A2hrRXy1FwH+5 dTVPzIAK1cd4dgxkbb83qNbVIpK1ynHmh4Ll8o4ShK6FT9AYEWa7MRTkFwjsYJhg U/diPXO+eyjp5zD820X4GNdxbSnxBfEtvAjwzIobG47u+/93FNCd0JOENkF5AM2A OkRShf9i5dzyea84gRXyViJR8Y0/hFEdYStYhM4Ao329dDPl7oW39EULJlAkA5LQ 9mezTAOS87IP4SO/0wDFiXbu9P8LVBc8TJnlCKQIT5E2us07GaEQoTWglB6pnT4h rAeYDPq5xOdFtw== -----END CERTIFICATE-----Generated at Sat Dec 6 08:12:43 2025 by rpki-client