This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft File: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft (raw, json) Hash identifier: Gxlge7anq84LwrlSLuQDaIOtRt+aGxaK1hJdn6VsRhA= Subject key identifier: 22:B7:71:E2:D5:14:3C:05:5C:03:56:46:E5:12:F9:78:D9:C4:C0:52 Authority key identifier: 16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6 Certificate issuer: /CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6 Certificate serial: 019AF19B30CC23905321BCC2FEB94DB6D175 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft Manifest number: 0544 Signing time: Sat 06 Dec 2025 03:01:10 +0000 Manifest this update: Sat 06 Dec 2025 03:01:10 +0000 Manifest next update: Sun 07 Dec 2025 03:01:10 +0000 Files and hashes: 1: Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl (hash: rOfbFdko5rETweGCoXTOUI6MbjGRikJHrmxDpLW0GW0=) 2: KN3Pqvfy1GqF2HSIy087TZo7Qs0.roa (hash: oGzQ0+1tlhBDajtg9SkNTia0clrGxHNnBRyqbyuthV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 03:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:9b:30:cc:23:90:53:21:bc:c2:fe:b9:4d:b6:d1:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162fee2e6906e0cfd7c94c37c64fabf41e14c7b6 Validity Not Before: Dec 6 03:01:10 2025 GMT Not After : Dec 7 03:01:10 2025 GMT Subject: CN=22b771e2d5143c055c035646e512f978d9c4c052 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:da:5f:ff:89:02:5b:c8:48:51:93:73:fc:66: bd:74:b5:e1:06:66:5d:36:4e:b6:28:32:fc:74:69: 59:c9:dc:83:ed:e0:4c:ec:ca:a4:da:ac:c3:52:b8: 14:4d:b6:30:a7:97:a8:0e:19:f1:a1:ac:9e:fe:c9: 98:cb:29:bc:ff:1f:d9:52:9c:a5:24:c7:37:66:f1: 73:d0:c6:fa:33:a6:37:73:49:a1:01:a4:24:87:26: d2:76:63:8b:96:a4:b6:29:81:3d:ca:6d:81:27:fb: ea:29:50:9c:cc:ae:51:19:79:9c:6d:13:e9:08:1d: b5:5b:c5:c4:a6:e7:08:cb:57:6f:6a:97:52:44:e8: 1e:19:6e:ce:b0:3e:60:ef:e0:a5:69:06:cd:c1:e4: 2b:bc:49:a2:b7:8c:f1:1e:c1:ab:2a:32:9c:01:1f: 98:61:f7:60:34:f0:0d:96:b4:36:6b:97:9e:b8:65: c0:2d:2d:52:81:7b:6e:a7:52:fd:8c:6a:c0:e5:54: 93:94:32:82:f2:27:fa:06:48:6f:d0:63:f7:be:c3: bb:9d:83:1b:b5:89:b7:e7:50:06:89:5e:d3:a0:90: 9f:fb:20:43:a2:96:27:24:cd:8f:28:c3:d0:58:e9: bf:d2:0e:94:cd:fd:a2:5b:04:48:c1:5e:22:00:3b: 94:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B7:71:E2:D5:14:3C:05:5C:03:56:46:E5:12:F9:78:D9:C4:C0:52 X509v3 Authority Key Identifier: keyid:16:2F:EE:2E:69:06:E0:CF:D7:C9:4C:37:C6:4F:AB:F4:1E:14:C7:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/390837-2b7b-4684-9557-69c7ea5d8714/1/Fi_uLmkG4M_XyUw3xk-r9B4Ux7Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a4:fc:17:b2:69:ff:1a:c4:8e:eb:c1:43:ef:b2:3d:53:bb: 53:f5:98:b0:8e:77:22:e6:92:c5:98:05:59:ff:3f:ac:49:61: 0f:56:cf:a4:2d:40:a1:10:eb:a5:20:d7:25:43:4e:44:70:8e: bd:b4:54:5c:15:42:69:14:c9:71:f4:aa:9f:ab:0d:01:d8:26: 49:04:11:bf:4f:4a:b6:89:28:10:dd:68:df:e5:87:7e:86:8e: 72:25:8d:92:ff:93:54:bf:d3:59:af:e9:49:1c:6f:74:40:73: 6b:57:f4:5d:6d:e3:4b:18:fa:bd:f1:14:70:7e:c2:62:45:4d: da:66:ca:e3:9c:97:3a:58:52:7e:0e:e3:6f:20:9f:31:3d:31: c1:9d:c7:c5:8a:20:00:ee:f6:69:3e:10:b4:a8:28:e4:96:13: b7:16:dd:21:f7:6d:96:16:00:c2:a4:28:e5:cc:bc:8e:8d:4f: 7e:c5:e6:a0:ea:09:47:bc:4a:0f:f7:4d:03:83:33:5e:67:4f: bf:aa:6e:76:8e:54:4c:d1:31:00:50:3b:e5:b8:37:a9:f7:dd: 93:3e:21:2a:8a:e7:7b:6f:6f:df:e5:ec:f0:c8:af:16:11:40: 9c:0b:35:8a:71:45:03:83:22:71:2d:2b:aa:34:29:a3:30:f9: 09:76:c4:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxmzDMI5BTIbzC/rlNttF1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmZlZTJlNjkwNmUwY2ZkN2M5NGMzN2M2NGZhYmY0MWUx NGM3YjYwHhcNMjUxMjA2MDMwMTEwWhcNMjUxMjA3MDMwMTEwWjAzMTEwLwYDVQQD EygyMmI3NzFlMmQ1MTQzYzA1NWMwMzU2NDZlNTEyZjk3OGQ5YzRjMDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtpf/4kCW8hIUZNz/Ga9dLXhBmZd Nk62KDL8dGlZydyD7eBM7Mqk2qzDUrgUTbYwp5eoDhnxoaye/smYyym8/x/ZUpyl JMc3ZvFz0Mb6M6Y3c0mhAaQkhybSdmOLlqS2KYE9ym2BJ/vqKVCczK5RGXmcbRPp CB21W8XEpucIy1dvapdSROgeGW7OsD5g7+ClaQbNweQrvEmit4zxHsGrKjKcAR+Y YfdgNPANlrQ2a5eeuGXALS1SgXtup1L9jGrA5VSTlDKC8if6Bkhv0GP3vsO7nYMb tYm351AGiV7ToJCf+yBDopYnJM2PKMPQWOm/0g6Uzf2iWwRIwV4iADuUrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCK3ceLVFDwFXANWRuUS+XjZxMBSMB8GA1UdIwQY MBaAFBYv7i5pBuDP18lMN8ZPq/QeFMe2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTct NjljN2VhNWQ4NzE0LzEvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zOTA4MzctMmI3Yi00Njg0LTk1NTctNjljN2VhNWQ4NzE0 LzEvRmlfdUxta0c0TV9YeVV3M3hrLXI5QjRVeDdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKT8F7Jp /xrEjuvBQ++yPVO7U/WYsI53IuaSxZgFWf8/rElhD1bPpC1AoRDrpSDXJUNORHCO vbRUXBVCaRTJcfSqn6sNAdgmSQQRv09KtokoEN1o3+WHfoaOciWNkv+TVL/TWa/p SRxvdEBza1f0XW3jSxj6vfEUcH7CYkVN2mbK45yXOlhSfg7jbyCfMT0xwZ3HxYog AO72aT4QtKgo5JYTtxbdIfdtlhYAwqQo5cy8jo1PfsXmoOoJR7xKD/dNA4MzXmdP v6pudo5UTNExAFA75bg3qffdkz4hKorne29v3+Xs8MivFhFAnAs1inFFA4MicS0r qjQpozD5CXbEzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 11:39:33 2025 by rpki-client