This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft File: FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft (raw, json) Hash identifier: 56ew1CDaiqNNSXw2kaWYAzTOsVM6XtmSV5/KNex6OQ0= Subject key identifier: 43:6D:72:E2:71:66:BB:63:A3:29:78:79:E1:AF:28:22:96:AD:AF:4B Authority key identifier: 16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 Certificate issuer: /CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Certificate serial: 019B2F66F649120AB922817C918A963E31A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft Manifest number: 10FF Signing time: Thu 18 Dec 2025 03:00:35 +0000 Manifest this update: Thu 18 Dec 2025 03:00:35 +0000 Manifest next update: Fri 19 Dec 2025 03:00:35 +0000 Files and hashes: 1: FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl (hash: YNj7Syga2YJ3kXNhs4EJK3yHcxWcGWwkN2wlmKgT6Nk=) 2: sdQpr9vBWbo2oFyAIJwywqV94V0.roa (hash: q2Hm5+yXKjxuN/cBMa4LO9usoHIS/gexRqRStEbsYf4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 03:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2f:66:f6:49:12:0a:b9:22:81:7c:91:8a:96:3e:31:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1670e1bc5869c602b642449031d4b7116c9dfa26 Validity Not Before: Dec 18 03:00:35 2025 GMT Not After : Dec 19 03:00:35 2025 GMT Subject: CN=436d72e27166bb63a3297879e1af282296adaf4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:48:ec:5f:77:5e:c1:31:2b:c6:9a:90:5c: 47:82:88:1a:58:8c:33:d6:86:14:bc:8f:a2:d0:ff: 5e:80:a2:c2:4c:ab:b3:12:c5:2e:2d:3c:82:48:ff: 3a:62:2a:9a:ef:92:02:2d:a5:33:9b:b1:75:ab:20: 66:a7:6b:3c:0d:1f:4e:8d:fb:b4:d2:83:02:18:5a: 9c:07:87:2f:ed:bf:80:58:9d:d0:29:1a:a1:7f:bd: 46:8e:07:52:17:5c:2a:e8:50:b2:6d:f0:98:a2:66: 39:53:dd:44:6a:68:fc:51:92:92:fe:c6:b3:40:cd: 17:b5:3e:6f:9f:9f:be:05:15:8a:4f:85:df:2a:1f: 1f:a7:50:d1:02:ed:f5:10:82:26:80:70:47:16:58: a4:72:a9:23:ab:14:3e:b0:2e:e1:1d:7b:f5:46:1e: 72:e6:ff:ba:d2:7e:69:5c:2e:59:cf:f7:24:f4:4f: 1d:fc:87:8a:45:d0:db:d1:8d:ab:06:a5:ac:40:17: 57:e3:91:72:53:8c:b3:7e:77:a3:7c:a1:45:4c:cf: 9c:c9:cc:49:87:a9:e3:6e:e5:6a:99:67:13:17:cd: cc:3c:2d:ee:d3:64:f1:db:2e:92:5c:66:a8:4f:15: 80:f9:73:d2:2c:7f:d5:33:d6:7a:4f:3f:7d:bd:2f: 6d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6D:72:E2:71:66:BB:63:A3:29:78:79:E1:AF:28:22:96:AD:AF:4B X509v3 Authority Key Identifier: keyid:16:70:E1:BC:58:69:C6:02:B6:42:44:90:31:D4:B7:11:6C:9D:FA:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnDhvFhpxgK2QkSQMdS3EWyd-iY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ecb2aa-5e5c-4fef-bc8d-c0ea28ac367a/1/FnDhvFhpxgK2QkSQMdS3EWyd-iY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:85:ab:64:8e:7e:3b:27:83:52:3a:d1:08:79:07:cb:bc:1d: 29:7b:e7:89:1d:d6:12:dc:3b:26:e4:69:97:ba:5b:f5:cb:df: 5d:d1:74:82:42:b4:59:bb:21:d5:7f:76:94:2d:2f:f0:79:a6: c2:52:da:13:54:c9:06:83:ad:f7:d3:0f:bc:25:46:77:c5:4f: cd:d5:05:3f:22:35:17:06:24:e0:2f:f0:59:f2:ee:92:dd:20: ac:1e:01:2f:1b:9d:38:5a:09:32:ad:45:e5:23:24:37:ae:a5: 49:87:ae:ac:83:96:9c:4b:a8:37:86:db:06:95:25:ed:00:a5: 1f:12:2d:1e:15:35:a8:62:02:b5:08:e0:27:ca:6f:02:1e:fb: a8:58:42:63:28:25:bd:cf:bc:14:2f:7f:96:49:b7:f4:66:4d: 61:14:56:98:1c:24:03:1c:ea:21:a8:9b:ce:5b:8a:e0:75:c4: 55:31:8a:8d:8d:e4:76:39:35:15:bb:5c:11:3e:2a:5c:04:00: 5b:f9:a9:0f:b8:8e:4b:ef:05:a7:1d:ad:40:71:2a:f7:f8:97: e8:40:90:b8:f0:8b:65:40:50:6b:50:d5:e0:ff:3b:64:98:83: 24:d9:32:10:74:c0:79:dd:ea:4a:05:10:81:b0:36:ec:b9:07: 30:2a:a8:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsvZvZJEgq5IoF8kYqWPjGoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzBlMWJjNTg2OWM2MDJiNjQyNDQ5MDMxZDRiNzExNmM5 ZGZhMjYwHhcNMjUxMjE4MDMwMDM1WhcNMjUxMjE5MDMwMDM1WjAzMTEwLwYDVQQD Eyg0MzZkNzJlMjcxNjZiYjYzYTMyOTc4NzllMWFmMjgyMjk2YWRhZjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1I7F93XsExK8aakFxHgogaWIwz 1oYUvI+i0P9egKLCTKuzEsUuLTyCSP86Yiqa75ICLaUzm7F1qyBmp2s8DR9Ojfu0 0oMCGFqcB4cv7b+AWJ3QKRqhf71GjgdSF1wq6FCybfCYomY5U91Eamj8UZKS/saz QM0XtT5vn5++BRWKT4XfKh8fp1DRAu31EIImgHBHFlikcqkjqxQ+sC7hHXv1Rh5y 5v+60n5pXC5Zz/ck9E8d/IeKRdDb0Y2rBqWsQBdX45FyU4yzfnejfKFFTM+cycxJ h6njbuVqmWcTF83MPC3u02Tx2y6SXGaoTxWA+XPSLH/VM9Z6Tz99vS9tcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENtcuJxZrtjoyl4eeGvKCKWra9LMB8GA1UdIwQY MBaAFBZw4bxYacYCtkJEkDHUtxFsnfomMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQt YzBlYTI4YWMzNjdhLzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9lY2IyYWEtNWU1Yy00ZmVmLWJjOGQtYzBlYTI4YWMzNjdh LzEvRm5EaHZGaHB4Z0syUWtTUU1kUzNFV3lkLWlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYWrZI5+ OyeDUjrRCHkHy7wdKXvniR3WEtw7JuRpl7pb9cvfXdF0gkK0Wbsh1X92lC0v8Hmm wlLaE1TJBoOt99MPvCVGd8VPzdUFPyI1FwYk4C/wWfLukt0grB4BLxudOFoJMq1F 5SMkN66lSYeurIOWnEuoN4bbBpUl7QClHxItHhU1qGICtQjgJ8pvAh77qFhCYygl vc+8FC9/lkm39GZNYRRWmBwkAxzqIaibzluK4HXEVTGKjY3kdjk1FbtcET4qXAQA W/mpD7iOS+8Fpx2tQHEq9/iX6ECQuPCLZUBQa1DV4P87ZJiDJNkyEHTAed3qSgUQ gbA27LkHMCqopw== -----END CERTIFICATE-----Generated at Thu Dec 18 12:48:43 2025 by rpki-client