This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json) Hash identifier: Dj/Yinkiu0SL85Hctx+iG2UREidwYPESryLWfdHBwgk= Subject key identifier: C4:DA:A4:C3:61:E0:CB:33:19:9F:0E:D1:1D:E7:8C:88:C3:94:18:F2 Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Certificate serial: 019AF0BF5D2E9DEC4DC64BF2339740E35360 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft Manifest number: 0D67 Signing time: Fri 05 Dec 2025 23:01:04 +0000 Manifest this update: Fri 05 Dec 2025 23:01:04 +0000 Manifest next update: Sat 06 Dec 2025 23:01:04 +0000 Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: IU6i0x+4IFnAr6EufxRu1O3oNT6pyc4y3izoP7kn0lU=) 2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:5d:2e:9d:ec:4d:c6:4b:f2:33:97:40:e3:53:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101 Validity Not Before: Dec 5 23:01:04 2025 GMT Not After : Dec 6 23:01:04 2025 GMT Subject: CN=c4daa4c361e0cb33199f0ed11de78c88c39418f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:10:c7:92:85:03:6a:a1:c0:9b:1f:2a:22:37: d3:ec:9c:c5:83:49:de:8a:93:1c:0e:35:17:90:08: 71:e1:db:24:6b:d9:e9:e5:58:11:46:6b:ed:b3:c9: 33:53:3b:cb:96:91:f0:45:c8:0e:b6:f0:8d:a1:83: 08:2b:45:b3:8d:34:ec:10:47:9d:19:09:2d:1e:6f: 1d:be:ee:64:28:66:0a:8e:e6:cc:f5:3a:9e:d8:02: 3a:d2:05:74:d5:23:bd:bc:31:55:22:7f:3c:d6:76: 5a:a3:28:ad:ad:3c:0a:24:a8:74:ae:4c:51:51:a1: cf:5f:09:60:d9:43:5c:a9:4d:c5:49:d9:51:24:ad: ca:b3:a8:68:1c:95:66:02:49:63:27:a8:e8:b6:ae: 5f:1b:45:dc:82:f3:06:b9:65:7a:fe:42:ad:99:74: 0c:fc:b3:a3:5d:ca:18:82:e1:2c:37:36:90:d2:af: 06:97:58:8d:80:18:39:de:f2:fe:fa:49:13:d6:3c: 83:fb:ee:49:07:ce:e3:15:12:49:f1:7a:3c:8f:f2: b6:a6:84:53:e2:26:53:43:98:86:bd:97:64:73:b5: 23:4a:88:56:60:c2:5d:94:a9:63:14:97:1d:f7:81: 95:54:a2:09:a5:78:99:fd:cd:a0:c3:d3:99:11:2e: a0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:DA:A4:C3:61:E0:CB:33:19:9F:0E:D1:1D:E7:8C:88:C3:94:18:F2 X509v3 Authority Key Identifier: keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7e:bd:d5:a3:fe:d7:4d:dc:cf:f5:ba:f1:34:59:12:44:e9: 76:c4:1d:dc:f8:b0:23:7e:2e:21:81:6b:0f:d0:d5:f2:f7:c5: 42:fe:2b:de:31:94:c7:e6:2c:f0:fd:8e:3d:16:4d:1d:3e:01: 55:4d:ba:ee:ea:04:81:f9:97:ac:be:95:b7:60:ff:2b:da:41: b9:22:55:4c:a4:42:58:f6:2b:92:ae:eb:db:f2:20:40:2b:28: d7:cc:aa:14:88:0a:10:18:cb:e1:86:26:3b:be:75:20:12:c7: 23:c7:4c:bb:42:d7:1b:33:ed:3e:b7:16:ab:be:73:2d:19:70: ff:c2:eb:27:69:56:c0:7f:8c:b7:93:c5:c9:a0:49:85:3d:86: 34:3f:7e:69:69:9d:29:aa:6e:df:78:b4:f0:54:81:09:7e:50: 13:67:b3:a0:9d:3d:ed:f5:bb:97:8c:05:91:2f:6a:d2:d5:b2: 91:32:05:1d:45:53:30:78:88:1e:73:35:cf:46:53:ae:d6:45: de:04:a8:aa:24:04:67:92:e5:53:9f:bf:b2:11:35:46:c7:f1: 0f:56:4b:ee:1c:46:a1:d3:d3:5b:7a:bd:4a:13:2f:d4:3e:12: 1b:f5:5c:01:2b:70:a8:a1:36:30:9d:33:3e:f5:eb:79:90:dc: 23:87:d2:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwv10unexNxkvyM5dA41NgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDY5MjdiNWE3NWI3NjY5YjFmZTJhYzhmZGM3YjYxMzc3 YzkxMDEwHhcNMjUxMjA1MjMwMTA0WhcNMjUxMjA2MjMwMTA0WjAzMTEwLwYDVQQD EyhjNGRhYTRjMzYxZTBjYjMzMTk5ZjBlZDExZGU3OGM4OGMzOTQxOGYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBDHkoUDaqHAmx8qIjfT7JzFg0ne ipMcDjUXkAhx4dska9np5VgRRmvts8kzUzvLlpHwRcgOtvCNoYMIK0WzjTTsEEed GQktHm8dvu5kKGYKjubM9Tqe2AI60gV01SO9vDFVIn881nZaoyitrTwKJKh0rkxR UaHPXwlg2UNcqU3FSdlRJK3Ks6hoHJVmAkljJ6jotq5fG0XcgvMGuWV6/kKtmXQM /LOjXcoYguEsNzaQ0q8Gl1iNgBg53vL++kkT1jyD++5JB87jFRJJ8Xo8j/K2poRT 4iZTQ5iGvZdkc7UjSohWYMJdlKljFJcd94GVVKIJpXiZ/c2gw9OZES6gtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMTapMNh4MszGZ8O0R3njIjDlBjyMB8GA1UdIwQY MBaAFBTWkntadbdmmx/irI/ce2E3fJEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYt OGY1NGFiMTM0ZDgzLzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9hM2Q4NWUtNDMzNS00MjVhLWIwZjYtOGY1NGFiMTM0ZDgz LzEvRk5hU2UxcDF0MmFiSC1Lc2o5eDdZVGQ4a1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZH691aP+ 103cz/W68TRZEkTpdsQd3PiwI34uIYFrD9DV8vfFQv4r3jGUx+Ys8P2OPRZNHT4B VU267uoEgfmXrL6Vt2D/K9pBuSJVTKRCWPYrkq7r2/IgQCso18yqFIgKEBjL4YYm O751IBLHI8dMu0LXGzPtPrcWq75zLRlw/8LrJ2lWwH+Mt5PFyaBJhT2GND9+aWmd Kapu33i08FSBCX5QE2ezoJ097fW7l4wFkS9q0tWykTIFHUVTMHiIHnM1z0ZTrtZF 3gSoqiQEZ5LlU5+/shE1RsfxD1ZL7hxGodPTW3q9ShMv1D4SG/VcAStwqKE2MJ0z PvXreZDcI4fSRg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:58:32 2025 by rpki-client