This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft File: FjnmEbWLf3BV32p_mV0B-5XXkMk.mft (raw, json) Hash identifier: iKlCjdJJa1Q6JEwMIXtLAlJv/iIgbm+Grlh7Cyu33WM= Subject key identifier: B8:4A:3F:EF:8E:9A:62:50:53:70:98:23:BF:AF:E1:65:E8:82:E4:B7 Authority key identifier: 16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 Certificate issuer: /CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Certificate serial: 019AF31B922F782EFBD4F2E8ACE885E3113D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft Manifest number: 16F6 Signing time: Sat 06 Dec 2025 10:01:01 +0000 Manifest this update: Sat 06 Dec 2025 10:01:01 +0000 Manifest next update: Sun 07 Dec 2025 10:01:01 +0000 Files and hashes: 1: FjnmEbWLf3BV32p_mV0B-5XXkMk.crl (hash: t3biF8PEJMIOvwMkSGZ+Srgj3eYV6SlbWJ7VXTQ6qg8=) 2: ThMXbqzx9UxsJ7TnPmcwU32vPLA.roa (hash: 4NEDCtF2sgEdEat+pt3nEdPQAXszdJX/0mX9HFFwmgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1b:92:2f:78:2e:fb:d4:f2:e8:ac:e8:85:e3:11:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1639e611b58b7f7055df6a7f995d01fb95d790c9 Validity Not Before: Dec 6 10:01:01 2025 GMT Not After : Dec 7 10:01:01 2025 GMT Subject: CN=b84a3fef8e9a625053709823bfafe165e882e4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:98:19:2b:5f:cb:ee:2d:0e:ac:7e:67:19: d8:6c:a3:0c:fa:c0:2a:1f:96:c8:8c:1f:f7:d2:62: ee:fc:ee:3f:6b:85:45:22:d4:ca:ba:dd:3f:2b:68: c9:a6:02:3b:46:47:5b:5c:6e:38:bc:ab:d0:45:5b: 25:86:03:10:ed:80:20:5e:9d:41:25:0d:8e:41:89: c1:82:0d:f2:10:c3:7e:79:fa:ed:ab:58:ad:36:5b: c7:2c:35:b6:a1:c9:1a:2b:0e:1f:e2:3e:91:1e:01: ce:67:1c:dc:d0:16:99:9f:74:c7:bb:fd:cd:c1:62: de:b2:b7:f2:38:23:78:f1:66:2b:73:f6:e5:fe:4a: 33:04:bd:42:7a:aa:a2:f7:5d:0b:87:6d:36:a8:0d: c8:72:46:93:70:c5:6c:15:7b:22:68:a0:e8:c8:5b: 19:ba:a0:e4:4b:24:f4:33:f1:84:f6:08:13:a0:32: 82:e6:32:31:c8:7a:1a:3b:3a:aa:ec:e1:8e:a4:d2: 16:ba:86:93:ef:54:80:0e:28:ee:42:f1:b4:6b:77: 70:5b:a6:71:16:5d:b8:94:bb:29:7e:36:20:60:72: 2a:89:66:84:4c:37:67:62:94:26:b5:6b:2a:fd:8f: e9:ad:37:94:eb:8b:13:da:e4:58:20:f4:3a:79:97: 29:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:4A:3F:EF:8E:9A:62:50:53:70:98:23:BF:AF:E1:65:E8:82:E4:B7 X509v3 Authority Key Identifier: keyid:16:39:E6:11:B5:8B:7F:70:55:DF:6A:7F:99:5D:01:FB:95:D7:90:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjnmEbWLf3BV32p_mV0B-5XXkMk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ceff08-0527-48be-92b7-0cdfa1c291f6/1/FjnmEbWLf3BV32p_mV0B-5XXkMk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:8b:7b:45:e3:2f:c7:24:26:9f:0f:95:2d:93:74:7d:39:f5: a6:fe:32:96:50:cf:45:19:bd:20:bb:47:b1:10:90:8a:98:6b: 7a:7a:9c:8e:48:6e:7e:ae:c0:7d:9f:8a:27:31:3b:1e:62:6c: 42:97:5d:16:88:16:6f:4e:f6:20:51:3e:0e:87:bb:16:ef:d5: 2e:8c:5a:e9:48:e9:60:f6:08:8a:6f:5f:38:38:37:a1:12:08: b0:f7:b5:0c:7f:94:2e:fa:f4:04:17:ef:1f:2e:cb:e9:57:29: b6:8d:9a:53:aa:62:9f:58:fa:00:d8:55:b5:1a:23:69:0e:73: d5:aa:ae:48:75:94:ab:28:93:dc:89:20:b6:29:be:b7:ff:09: f7:59:ef:cc:04:46:7c:5f:47:01:82:86:85:84:ab:f6:b6:f1: f9:b0:5c:9a:aa:90:29:85:b5:4e:d0:f1:a3:61:93:bf:14:10: d2:fc:04:7e:d2:cd:56:6d:cf:3d:ac:9e:e7:53:ea:82:e1:5f: 65:7b:7f:f1:9a:10:bf:43:04:3a:fd:c6:e2:50:f1:65:ab:9b: 10:d7:7a:2e:96:88:a6:a4:da:d7:c0:1a:a2:b0:66:35:d0:b3: 9e:12:8b:6f:2b:ef:52:0c:3b:54:ed:1b:21:a6:88:20:bb:ba: 90:aa:4f:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzG5IveC771PLorOiF4xE9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzllNjExYjU4YjdmNzA1NWRmNmE3Zjk5NWQwMWZiOTVk NzkwYzkwHhcNMjUxMjA2MTAwMTAxWhcNMjUxMjA3MTAwMTAxWjAzMTEwLwYDVQQD EyhiODRhM2ZlZjhlOWE2MjUwNTM3MDk4MjNiZmFmZTE2NWU4ODJlNGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4iYGStfy+4tDqx+ZxnYbKMM+sAq H5bIjB/30mLu/O4/a4VFItTKut0/K2jJpgI7RkdbXG44vKvQRVslhgMQ7YAgXp1B JQ2OQYnBgg3yEMN+efrtq1itNlvHLDW2ockaKw4f4j6RHgHOZxzc0BaZn3THu/3N wWLesrfyOCN48WYrc/bl/kozBL1Ceqqi910Lh202qA3IckaTcMVsFXsiaKDoyFsZ uqDkSyT0M/GE9ggToDKC5jIxyHoaOzqq7OGOpNIWuoaT71SADijuQvG0a3dwW6Zx Fl24lLspfjYgYHIqiWaETDdnYpQmtWsq/Y/prTeU64sT2uRYIPQ6eZcpvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhKP++OmmJQU3CYI7+v4WXoguS3MB8GA1UdIwQY MBaAFBY55hG1i39wVd9qf5ldAfuV15DJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjct MGNkZmExYzI5MWY2LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9jZWZmMDgtMDUyNy00OGJlLTkyYjctMGNkZmExYzI5MWY2 LzEvRmpubUViV0xmM0JWMzJwX21WMEItNVhYa01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIt7ReMv xyQmnw+VLZN0fTn1pv4yllDPRRm9ILtHsRCQiphrenqcjkhufq7AfZ+KJzE7HmJs QpddFogWb072IFE+Doe7Fu/VLoxa6UjpYPYIim9fODg3oRIIsPe1DH+ULvr0BBfv Hy7L6Vcpto2aU6pin1j6ANhVtRojaQ5z1aquSHWUqyiT3Ikgtim+t/8J91nvzARG fF9HAYKGhYSr9rbx+bBcmqqQKYW1TtDxo2GTvxQQ0vwEftLNVm3PPaye51PqguFf ZXt/8ZoQv0MEOv3G4lDxZaubENd6LpaIpqTa18AaorBmNdCznhKLbyvvUgw7VO0b IaaIILu6kKpPxg== -----END CERTIFICATE-----Generated at Sat Dec 6 20:15:55 2025 by rpki-client