This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json) Hash identifier: a7vJTrr21vZSyiDqBtFxzw3Qk3BnObdW0YNasfc3S64= Subject key identifier: 1F:F1:AF:F9:C7:91:95:FE:18:15:5F:63:D1:D5:CF:EA:D1:FC:30:6C Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Certificate serial: 019B3CEBED8DD231456958B2533881A69E55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft Manifest number: 128E Signing time: Sat 20 Dec 2025 18:00:53 +0000 Manifest this update: Sat 20 Dec 2025 18:00:53 +0000 Manifest next update: Sun 21 Dec 2025 18:00:53 +0000 Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: rF4zNKAKejErKh5Ch8dvb70Us85bAG5z3jXAuweUm4g=) 2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:eb:ed:8d:d2:31:45:69:58:b2:53:38:81:a6:9e:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Validity Not Before: Dec 20 18:00:53 2025 GMT Not After : Dec 21 18:00:53 2025 GMT Subject: CN=1ff1aff9c79195fe18155f63d1d5cfead1fc306c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:de:7c:1d:95:90:b3:a0:76:fc:3a:5b:88:d4: ee:95:ae:e1:4a:5b:41:da:6f:8e:fa:d8:bc:61:a1: a9:c8:a7:38:84:1b:e1:e8:e6:5a:6a:f4:42:57:c7: 4e:18:be:7b:8b:d4:e9:93:3f:38:5a:12:76:ed:26: 81:70:17:d1:11:b4:9a:d2:74:00:fd:79:96:e5:70: 73:29:7b:2c:7d:a4:f2:6e:38:5d:d6:25:4d:b9:4c: 16:9f:0f:1c:de:b1:21:33:44:01:fc:cc:69:91:9b: 42:f5:b2:9f:23:18:a6:11:75:9e:48:0d:4c:13:6e: 01:6c:21:3c:55:36:e9:86:6c:ee:6d:99:60:1e:1a: de:85:71:88:f6:f0:95:83:a1:52:94:32:29:a6:22: 8d:37:0c:2b:f1:fa:6b:64:39:01:1e:b8:dd:c1:ae: c8:b1:86:b2:21:cf:d4:ae:f1:1c:d4:cb:ef:db:da: a9:ea:f5:43:36:b1:c0:d2:5f:d2:fe:c5:58:35:c2: dd:00:ee:b6:b5:e2:c9:98:10:f7:71:6f:e7:7c:9c: cc:82:47:ac:34:3a:58:c0:38:d4:c4:b2:37:24:1a: cd:48:81:06:10:0e:79:27:b3:b6:2f:a3:1e:5b:30: 4c:90:bc:04:ac:d9:15:51:e2:03:14:d7:6f:32:0b: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F1:AF:F9:C7:91:95:FE:18:15:5F:63:D1:D5:CF:EA:D1:FC:30:6C X509v3 Authority Key Identifier: keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d8:41:a1:dc:f1:b4:18:6d:43:14:df:c9:ca:bf:f0:ad:70: c3:40:2c:70:0d:fd:c1:8c:0b:a0:09:17:dd:ec:87:02:78:0a: e2:32:d7:ed:84:be:51:95:4a:d6:3c:02:71:46:f7:7b:95:e3: 63:25:20:74:cf:bf:0e:bc:37:53:06:40:ec:33:08:e7:05:a4: 2d:0a:3a:77:24:5c:1b:18:ea:d1:e6:b7:ff:03:0c:00:d7:6f: 99:c8:8e:74:fd:b4:10:82:9e:19:06:5b:ad:e4:aa:3d:77:48: 9e:7a:ce:7c:ee:03:b4:5a:ed:65:79:0d:6a:20:62:61:92:17: a6:4d:1c:d0:9d:0e:ce:03:24:9b:5d:b2:da:9b:a9:6a:60:ff: b0:06:4e:75:58:98:ea:e1:fa:05:64:cc:75:8b:77:c5:58:ea: 16:0f:4a:17:00:35:d4:99:33:a5:d1:5b:32:a1:1d:49:43:f6: eb:61:b3:e1:34:29:0f:65:e3:3b:10:35:42:74:4f:ea:06:d9: 8e:00:c1:7d:fe:bd:e9:5b:f1:17:3a:ba:8c:88:dc:b9:38:b6: 82:d6:75:6e:cc:7b:27:8b:a0:25:f9:e3:2c:6a:42:01:c1:62: 74:b1:76:7b:af:e6:84:d9:55:2e:43:f0:05:df:53:d8:8d:c2: 5c:9f:aa:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs86+2N0jFFaViyUziBpp5VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGMxMWVkMWE5ZDllZDU2YmYxOWRhN2YyMTc4MzBhODA5 OWM0MjkwHhcNMjUxMjIwMTgwMDUzWhcNMjUxMjIxMTgwMDUzWjAzMTEwLwYDVQQD EygxZmYxYWZmOWM3OTE5NWZlMTgxNTVmNjNkMWQ1Y2ZlYWQxZmMzMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk958HZWQs6B2/DpbiNTula7hSltB 2m+O+ti8YaGpyKc4hBvh6OZaavRCV8dOGL57i9Tpkz84WhJ27SaBcBfREbSa0nQA /XmW5XBzKXssfaTybjhd1iVNuUwWnw8c3rEhM0QB/MxpkZtC9bKfIximEXWeSA1M E24BbCE8VTbphmzubZlgHhrehXGI9vCVg6FSlDIppiKNNwwr8fprZDkBHrjdwa7I sYayIc/UrvEc1Mvv29qp6vVDNrHA0l/S/sVYNcLdAO62teLJmBD3cW/nfJzMgkes NDpYwDjUxLI3JBrNSIEGEA55J7O2L6MeWzBMkLwErNkVUeIDFNdvMgsG3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/xr/nHkZX+GBVfY9HVz+rR/DBsMB8GA1UdIwQY MBaAFBTcEe0anZ7Va/Gdp/IXgwqAmcQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUt YzcxZGI3MTg5NzBlLzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUtYzcxZGI3MTg5NzBl LzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYthBodzx tBhtQxTfycq/8K1ww0AscA39wYwLoAkX3eyHAngK4jLX7YS+UZVK1jwCcUb3e5Xj YyUgdM+/Drw3UwZA7DMI5wWkLQo6dyRcGxjq0ea3/wMMANdvmciOdP20EIKeGQZb reSqPXdInnrOfO4DtFrtZXkNaiBiYZIXpk0c0J0OzgMkm12y2pupamD/sAZOdViY 6uH6BWTMdYt3xVjqFg9KFwA11JkzpdFbMqEdSUP262Gz4TQpD2XjOxA1QnRP6gbZ jgDBff696VvxFzq6jIjcuTi2gtZ1bsx7J4ugJfnjLGpCAcFidLF2e6/mhNlVLkPw Bd9T2I3CXJ+q8g== -----END CERTIFICATE-----Generated at Sat Dec 20 22:43:32 2025 by rpki-client