This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json) Hash identifier: KMhB+gwxBFCknlDUAKiwaTXO6Tt8EZcU8e7+fAi6ikU= Subject key identifier: 6D:5F:3B:62:2D:48:E3:53:8F:2B:68:DA:BD:03:D3:51:A5:CE:F7:D2 Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b Certificate serial: 019AF0F5CD4225AEDF58570845B69A63D25C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft Manifest number: 0465 Signing time: Sat 06 Dec 2025 00:00:31 +0000 Manifest this update: Sat 06 Dec 2025 00:00:31 +0000 Manifest next update: Sun 07 Dec 2025 00:00:31 +0000 Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=) 2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: ctRl3btEFoKu1Fgxi4sE1GpsVzRgyILtGMcUFjioB7I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 00:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:f5:cd:42:25:ae:df:58:57:08:45:b6:9a:63:d2:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b Validity Not Before: Dec 6 00:00:31 2025 GMT Not After : Dec 7 00:00:31 2025 GMT Subject: CN=6d5f3b622d48e3538f2b68dabd03d351a5cef7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:22:9b:91:84:53:a1:c0:68:6c:f0:23:0a: 62:6c:a0:f5:d2:be:c5:e2:e0:83:69:6b:f4:d2:56: 97:d1:20:51:b3:e3:13:97:5d:a1:64:76:39:5a:9f: e5:2a:ab:f2:e8:f1:b0:61:99:30:13:8e:26:de:f8: 8b:fb:0c:63:9e:3b:59:24:59:d5:fc:44:7e:3a:9e: 73:e6:46:0b:45:e0:a0:d8:29:cd:4b:1a:ae:c1:d7: 59:29:45:7b:34:44:6f:85:65:44:9f:b0:76:9d:13: 72:91:d6:a2:9b:ea:dd:28:2c:ea:eb:5d:64:cf:3d: 24:4a:e9:87:41:b1:11:a2:43:c4:df:24:ba:b5:ef: 17:c5:d6:ec:53:8d:92:d9:b0:ca:1b:1d:05:39:5c: a3:32:7b:fe:6f:bc:a5:8b:4a:ef:0e:6b:44:6b:88: 6e:cb:42:52:8a:1c:38:17:fb:6c:d2:85:ba:ca:9e: 16:23:31:3a:76:d2:02:b7:b0:2c:de:2b:c3:ef:89: 1c:51:d4:60:09:73:b3:bd:0b:b8:83:ff:18:85:40: 6c:69:d8:12:ac:ee:20:f1:d7:05:2e:1d:bb:fd:68: 02:8c:9f:e2:ba:c8:fb:e7:c4:1f:a9:e3:57:68:b9: 9d:76:75:f5:cc:de:b4:2e:28:44:af:9f:33:1b:45: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5F:3B:62:2D:48:E3:53:8F:2B:68:DA:BD:03:D3:51:A5:CE:F7:D2 X509v3 Authority Key Identifier: keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:5e:a7:36:68:f8:67:a2:31:7f:a8:7c:7b:b2:c2:21:5e:9c: ab:14:11:45:9a:dc:41:85:65:e8:2d:26:95:34:53:b5:42:c1: 19:95:d7:b5:12:19:dc:ea:09:1b:33:d8:50:bb:38:7b:1b:ae: 7a:38:ab:30:40:d3:9e:67:52:3a:c6:6a:ab:ad:5c:49:b9:b3: 35:91:59:0d:31:3d:ab:a8:87:60:1f:2c:eb:19:51:9f:5d:4f: f1:28:06:33:6b:ce:31:f7:d2:58:d6:b7:7d:83:30:d5:c6:0e: 93:bf:26:56:52:e5:2a:2f:16:bd:b6:97:4d:3e:a6:4b:85:4f: f7:e1:1e:e0:b6:e9:fb:a1:7b:cc:76:f9:c2:2f:6d:f1:8c:fc: 82:92:82:08:2f:b5:e7:d4:d1:83:6c:08:c3:1b:1f:78:bd:58: 1f:b8:ef:7c:c4:1e:84:45:15:6e:45:7a:d6:75:ea:08:20:d9: 5e:a3:d1:e1:e3:01:5a:ef:cc:07:44:7d:31:2e:b5:55:c2:a7: db:26:8c:62:7a:80:79:86:17:92:05:16:f4:03:51:01:82:e9: c8:99:e3:8c:9b:a4:18:18:7d:87:39:56:a6:df:1c:97:62:f6: a7:14:9a:3e:7a:c8:f1:93:62:06:6b:29:ff:6c:28:63:47:e6: bd:63:59:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrw9c1CJa7fWFcIRbaaY9JcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz MGYyOGIwHhcNMjUxMjA2MDAwMDMxWhcNMjUxMjA3MDAwMDMxWjAzMTEwLwYDVQQD Eyg2ZDVmM2I2MjJkNDhlMzUzOGYyYjY4ZGFiZDAzZDM1MWE1Y2VmN2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOUim5GEU6HAaGzwIwpibKD10r7F 4uCDaWv00laX0SBRs+MTl12hZHY5Wp/lKqvy6PGwYZkwE44m3viL+wxjnjtZJFnV /ER+Op5z5kYLReCg2CnNSxquwddZKUV7NERvhWVEn7B2nRNykdaim+rdKCzq611k zz0kSumHQbERokPE3yS6te8XxdbsU42S2bDKGx0FOVyjMnv+b7yli0rvDmtEa4hu y0JSihw4F/ts0oW6yp4WIzE6dtICt7As3ivD74kcUdRgCXOzvQu4g/8YhUBsadgS rO4g8dcFLh27/WgCjJ/iusj758QfqeNXaLmddnX1zN60LihEr58zG0XEzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG1fO2ItSONTjyto2r0D01GlzvfSMB8GA1UdIwQY MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcV6nNmj4 Z6Ixf6h8e7LCIV6cqxQRRZrcQYVl6C0mlTRTtULBGZXXtRIZ3OoJGzPYULs4exuu ejirMEDTnmdSOsZqq61cSbmzNZFZDTE9q6iHYB8s6xlRn11P8SgGM2vOMffSWNa3 fYMw1cYOk78mVlLlKi8WvbaXTT6mS4VP9+Ee4Lbp+6F7zHb5wi9t8Yz8gpKCCC+1 59TRg2wIwxsfeL1YH7jvfMQehEUVbkV61nXqCCDZXqPR4eMBWu/MB0R9MS61VcKn 2yaMYnqAeYYXkgUW9ANRAYLpyJnjjJukGBh9hzlWpt8cl2L2pxSaPnrI8ZNiBmsp /2woY0fmvWNZkg== -----END CERTIFICATE-----Generated at Sat Dec 6 08:06:59 2025 by rpki-client