This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json) Hash identifier: 8rKrwRPGyLTFL/SDnziytGBkJM+KWOW60cDe0sdEqjM= Subject key identifier: C4:FF:F1:93:C5:D6:65:AA:F2:03:24:9A:02:30:A0:EC:65:8C:E2:B4 Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Certificate serial: 019AF23FE65FCA8AB79B51903D10FE531926 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 06:01:05 +0000 Manifest this update: Sat 06 Dec 2025 06:01:05 +0000 Manifest next update: Sun 07 Dec 2025 06:01:05 +0000 Files and hashes: 1: 7nWZ-fXLkbaN6kk-WpeVPSb_Shk.roa (hash: +Nsf5cvVzwGmy0NBURwNVgZwqRNM1or+ZItAdRGNc3s=) 2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: OlOYoENHtU1/JfrdbdAJwDmBAkbDx+4tYCE4zTMl8qo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:e6:5f:ca:8a:b7:9b:51:90:3d:10:fe:53:19:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Validity Not Before: Dec 6 06:01:05 2025 GMT Not After : Dec 7 06:01:05 2025 GMT Subject: CN=c4fff193c5d665aaf203249a0230a0ec658ce2b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:d5:ec:0e:34:75:9b:a7:b3:b8:54:4a:fc:3b: 70:58:3f:cc:dc:e3:06:eb:d4:2a:6d:d0:44:27:e0: 0d:de:1c:59:76:71:41:ba:89:74:b4:98:ac:f7:07: fd:1d:44:bd:eb:86:53:5d:46:12:09:de:f6:87:0d: c5:a1:5a:d9:e8:7a:02:dd:28:e5:0c:cc:74:25:3d: 3b:ed:46:78:f5:ee:9b:f4:ba:67:a7:d8:bf:cd:2a: 44:67:22:99:25:0f:70:a1:61:cc:b3:2b:b3:ce:be: dd:e8:67:53:3a:51:3e:03:d3:5c:ce:6d:07:c8:22: e4:9c:f2:84:85:d3:8f:f2:12:8f:c2:fe:99:04:97: de:2b:eb:d7:ed:34:d3:83:04:70:b6:37:44:8b:1a: 44:c4:b5:d4:a7:0a:7d:a6:80:83:b5:6b:94:0c:77: 8b:ec:98:7a:e4:c9:4a:be:94:59:fc:c7:20:db:78: e7:f2:47:76:5b:36:4e:a6:b3:14:0f:1d:75:eb:22: 7c:5b:f1:46:c1:7f:f9:77:4a:1b:8b:e2:d4:4b:51: b2:33:39:a1:16:bc:0f:12:d6:53:19:10:21:9f:7a: bf:f0:0e:47:42:9f:4e:dd:67:ce:78:4e:df:38:e7: a6:bc:dc:f8:73:9d:18:98:c4:c9:47:6b:23:25:97: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FF:F1:93:C5:D6:65:AA:F2:03:24:9A:02:30:A0:EC:65:8C:E2:B4 X509v3 Authority Key Identifier: keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:e8:0c:e6:8c:a7:f9:be:44:4a:ec:e3:94:3f:0e:a3:2a:ac: a3:17:89:8d:60:f3:03:a6:4e:56:11:c6:92:15:d5:49:d2:11: 10:a9:15:bd:68:87:cf:05:b9:61:e3:94:f3:d5:83:23:cd:f7: 2d:80:04:84:65:c5:a7:37:07:87:68:48:b8:2f:d5:5b:d3:a8: 19:1f:45:7a:4d:d7:2a:ca:fc:93:d2:90:60:05:f0:9c:46:5d: c1:ab:95:a3:ec:35:74:08:42:e1:41:5a:31:eb:f6:55:af:3b: 81:ea:4a:c9:78:65:e9:10:a1:dd:4d:0b:91:51:c7:61:3f:8e: a6:04:59:5a:d9:85:cf:4c:1a:a4:e6:10:51:eb:51:9d:28:19: 96:6e:92:a9:0d:5a:cd:ff:90:ad:df:ce:92:32:83:b3:db:e3: c4:47:34:d9:03:1a:6a:e7:08:cd:17:d0:b3:b7:5f:e8:94:19: 69:f1:ea:b4:f0:55:66:6e:24:25:66:48:1e:b2:78:1e:a6:70: 6a:67:08:56:af:3f:de:09:3c:90:85:71:35:b2:e7:0c:e3:16: e0:34:69:02:a9:2e:6a:c6:2f:79:7d:cb:36:5c:67:4a:e5:65: 8a:b8:8a:35:9c:b9:a4:fa:f0:09:ef:7e:03:a3:72:86:db:9f: 5c:04:cd:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP+Zfyoq3m1GQPRD+UxkmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTZiMDg2MmIyYjMwM2IzMDJjM2MyMzQ5YTVhYzhkMGY5 MDZiMDYwHhcNMjUxMjA2MDYwMTA1WhcNMjUxMjA3MDYwMTA1WjAzMTEwLwYDVQQD EyhjNGZmZjE5M2M1ZDY2NWFhZjIwMzI0OWEwMjMwYTBlYzY1OGNlMmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtXsDjR1m6ezuFRK/DtwWD/M3OMG 69QqbdBEJ+AN3hxZdnFBuol0tJis9wf9HUS964ZTXUYSCd72hw3FoVrZ6HoC3Sjl DMx0JT077UZ49e6b9Lpnp9i/zSpEZyKZJQ9woWHMsyuzzr7d6GdTOlE+A9Nczm0H yCLknPKEhdOP8hKPwv6ZBJfeK+vX7TTTgwRwtjdEixpExLXUpwp9poCDtWuUDHeL 7Jh65MlKvpRZ/Mcg23jn8kd2WzZOprMUDx116yJ8W/FGwX/5d0obi+LUS1GyMzmh FrwPEtZTGRAhn3q/8A5HQp9O3WfOeE7fOOemvNz4c50YmMTJR2sjJZcJlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMT/8ZPF1mWq8gMkmgIwoOxljOK0MB8GA1UdIwQY MBaAFBSmsIYrKzA7MCw8I0mlrI0PkGsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMt NzUxY2YzYTVlMWUxLzEvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMtNzUxY2YzYTVlMWUx LzEvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgegM5oyn +b5ESuzjlD8OoyqsoxeJjWDzA6ZOVhHGkhXVSdIREKkVvWiHzwW5YeOU89WDI833 LYAEhGXFpzcHh2hIuC/VW9OoGR9Fek3XKsr8k9KQYAXwnEZdwauVo+w1dAhC4UFa Mev2Va87gepKyXhl6RCh3U0LkVHHYT+OpgRZWtmFz0wapOYQUetRnSgZlm6SqQ1a zf+Qrd/OkjKDs9vjxEc02QMaaucIzRfQs7df6JQZafHqtPBVZm4kJWZIHrJ4HqZw amcIVq8/3gk8kIVxNbLnDOMW4DRpAqkuasYveX3LNlxnSuVliriKNZy5pPrwCe9+ A6NyhtufXATN8A== -----END CERTIFICATE-----Generated at Sat Dec 6 14:49:08 2025 by rpki-client