This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json) Hash identifier: o+HMYZsoqziIWjse2zQpbSfGUUqUoARNF5oLbxdXiAw= Subject key identifier: 11:1B:59:87:FC:DE:0F:CC:CA:AA:95:F8:03:7D:78:E3:EE:A3:E1:17 Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Certificate serial: 019AF577C02F224A7EB329A20DB91D464932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft Manifest number: 167F Signing time: Sat 06 Dec 2025 21:00:57 +0000 Manifest this update: Sat 06 Dec 2025 21:00:57 +0000 Manifest next update: Sun 07 Dec 2025 21:00:57 +0000 Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=) 2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: d5RKtBvur1r7tCC/MZPIEHO0CUNB8Vl6HY7MxUz+M+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:77:c0:2f:22:4a:7e:b3:29:a2:0d:b9:1d:46:49:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Validity Not Before: Dec 6 21:00:57 2025 GMT Not After : Dec 7 21:00:57 2025 GMT Subject: CN=111b5987fcde0fcccaaa95f8037d78e3eea3e117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b6:b9:d3:f5:c0:93:1c:27:d7:5b:35:ac:0e: 44:87:d9:7e:ca:08:bf:3c:55:56:dc:a8:93:5e:e8: 69:bc:cb:41:ba:cf:e0:20:77:ec:09:80:e3:b5:e3: 58:5d:7c:4a:18:2a:15:01:ab:66:19:20:b8:bf:9a: 55:0c:ab:2f:b7:c6:7c:c1:38:de:ab:f3:bc:a6:26: ad:83:7b:1d:45:3b:28:00:dd:5a:9b:5b:46:ff:99: 2e:2c:03:cb:0b:00:2d:33:af:7f:60:70:da:47:d3: db:a5:7a:41:a1:0c:74:da:d0:9f:d8:40:00:d1:6a: 34:d8:79:e9:b1:81:68:f3:88:8a:d3:be:53:15:74: 19:15:1d:43:a2:58:58:34:f4:98:4b:ea:5e:7e:ab: 17:1b:03:1f:97:22:3a:cc:18:b4:f2:e5:dd:08:7b: f9:26:42:93:34:49:6a:05:d5:e2:93:ad:d7:2b:e9: c0:97:b0:e3:00:c1:47:23:c3:6e:39:5d:3a:9e:65: 69:d3:65:2c:66:12:76:62:47:7a:ee:60:2d:8d:07: 85:ec:83:19:6a:5e:cb:0d:16:c2:3e:03:b4:ad:e6: ea:d4:cb:8c:ef:95:ba:7c:9a:bc:1b:b9:33:e6:dc: 97:40:0a:c4:3e:ed:74:40:e0:8a:b3:5c:d9:5a:7a: 1a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:1B:59:87:FC:DE:0F:CC:CA:AA:95:F8:03:7D:78:E3:EE:A3:E1:17 X509v3 Authority Key Identifier: keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:71:9a:3f:39:33:5f:b4:ac:9d:15:a3:ad:22:01:df:bf:37: ab:58:a2:35:c6:8a:a9:53:9b:66:0b:48:27:ca:08:9c:eb:f7: 08:6f:49:ce:87:8f:30:92:a1:37:9e:64:3c:72:60:c1:b7:15: 03:c1:6c:02:70:cc:2b:36:b1:eb:a2:a4:49:6c:4e:91:13:c6: fe:a0:f0:7c:57:a3:5d:96:88:53:e0:8e:8b:6c:3d:5d:d2:a7: 21:d0:2b:a1:ed:cf:b2:5e:26:d1:42:44:c6:90:30:38:d8:fe: e3:60:89:3d:0a:a1:8e:0c:a8:f4:9e:de:4c:d6:49:e6:83:90: 48:8e:c4:67:8f:37:a2:f4:9a:ca:ab:1d:96:fe:98:2f:ac:ce: ec:6b:80:c6:b1:19:a2:9d:97:45:9d:e9:ba:b5:33:c5:9a:5e: 84:c8:72:cf:cf:75:36:d0:29:5c:10:b6:81:2c:ac:d5:46:19: e7:c5:39:5c:d5:25:7d:be:4e:32:89:fb:50:00:9e:f1:99:7c: 18:0a:e6:89:b6:83:46:05:1e:98:4e:b7:cb:e8:f4:f6:34:83: c8:ed:af:a4:da:c9:5e:f0:d5:b9:73:02:6a:24:f0:8e:bc:ae: e6:b6:0a:2b:c9:fa:5a:ac:d7:bb:6d:bc:f3:de:cf:f7:bb:8f: e8:ad:6a:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1d8AvIkp+symiDbkdRkkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz ZGNlYmYwHhcNMjUxMjA2MjEwMDU3WhcNMjUxMjA3MjEwMDU3WjAzMTEwLwYDVQQD EygxMTFiNTk4N2ZjZGUwZmNjY2FhYTk1ZjgwMzdkNzhlM2VlYTNlMTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLa50/XAkxwn11s1rA5Eh9l+ygi/ PFVW3KiTXuhpvMtBus/gIHfsCYDjteNYXXxKGCoVAatmGSC4v5pVDKsvt8Z8wTje q/O8piatg3sdRTsoAN1am1tG/5kuLAPLCwAtM69/YHDaR9PbpXpBoQx02tCf2EAA 0Wo02HnpsYFo84iK075TFXQZFR1DolhYNPSYS+pefqsXGwMflyI6zBi08uXdCHv5 JkKTNElqBdXik63XK+nAl7DjAMFHI8NuOV06nmVp02UsZhJ2Ykd67mAtjQeF7IMZ al7LDRbCPgO0rebq1MuM75W6fJq8G7kz5tyXQArEPu10QOCKs1zZWnoaTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEbWYf83g/MyqqV+AN9eOPuo+EXMB8GA1UdIwQY MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqHGaPzkz X7SsnRWjrSIB3783q1iiNcaKqVObZgtIJ8oInOv3CG9JzoePMJKhN55kPHJgwbcV A8FsAnDMKzax66KkSWxOkRPG/qDwfFejXZaIU+COi2w9XdKnIdAroe3Psl4m0UJE xpAwONj+42CJPQqhjgyo9J7eTNZJ5oOQSI7EZ483ovSayqsdlv6YL6zO7GuAxrEZ op2XRZ3purUzxZpehMhyz891NtApXBC2gSys1UYZ58U5XNUlfb5OMon7UACe8Zl8 GArmibaDRgUemE63y+j09jSDyO2vpNrJXvDVuXMCaiTwjryu5rYKK8n6WqzXu228 897P97uP6K1qGw== -----END CERTIFICATE-----Generated at Sun Dec 7 01:54:48 2025 by rpki-client