This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft File: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft (raw, json) Hash identifier: 1tgeBbIQqJjwbu9CyCjdiL7fXxbAU/y8cT0iLypV4DA= Subject key identifier: A3:A9:0C:41:71:17:79:A8:25:19:3C:E4:03:D8:6B:1C:BE:DC:14:EC Authority key identifier: 14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1 Certificate issuer: /CN=14a9d3c7406e276005488871d5218c05a07166d1 Certificate serial: 019AF49C107DB6BB896CFB9804FFFF2E7973 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft Manifest number: 0D17 Signing time: Sat 06 Dec 2025 17:00:59 +0000 Manifest this update: Sat 06 Dec 2025 17:00:59 +0000 Manifest next update: Sun 07 Dec 2025 17:00:59 +0000 Files and hashes: 1: FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl (hash: m0d/oOKnzk7zvZ8NPVe9uFeF9GOPYa6OcL2xKIlKpvA=) 2: foAFIag6bLElaUey2ZaxoI-rq9U.roa (hash: 9IbR/5Hj38Nx2RBHaHIpWS+CIYm87fW1bNphG8TyovY=) 3: o_RVkUo12yIsWwd92ReBZuoWw6Q.roa (hash: SRUesdEiY2Y5wOgnJsCRLKIjGy9NIgo1L8w/6rAHzkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f4:9c:10:7d:b6:bb:89:6c:fb:98:04:ff:ff:2e:79:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a9d3c7406e276005488871d5218c05a07166d1 Validity Not Before: Dec 6 17:00:59 2025 GMT Not After : Dec 7 17:00:59 2025 GMT Subject: CN=a3a90c41711779a825193ce403d86b1cbedc14ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:33:47:de:4a:cd:56:6e:b8:0f:61:28:4a:c9: 7f:f7:e3:cb:e3:6e:b0:2c:32:c4:a5:c3:1e:bd:77: 25:4b:86:6b:dd:ca:9d:f8:1e:79:a2:2e:f4:ed:56: 39:fb:ba:77:2c:c8:f7:63:76:ca:eb:b2:be:1d:f8: 42:ab:fe:28:3d:ce:03:2a:13:23:0e:a6:e9:b0:27: 54:a1:4c:57:d6:8e:bf:1a:1d:30:13:6b:fe:4c:50: 21:d4:f8:b5:45:db:8a:e1:0d:07:96:4b:b2:45:43: 6e:7e:fc:e9:02:83:d2:0b:58:5d:17:74:a1:9c:2f: 65:60:62:79:53:6b:a6:a1:6c:ca:73:ff:c9:b3:0c: 6b:e5:94:48:51:79:c5:89:5c:e8:2b:c2:48:8a:90: 87:67:fd:56:d0:3e:2b:3c:d4:f3:c9:da:97:ac:ed: a3:ac:dc:36:36:0a:0a:bc:c8:19:6e:c6:ca:9f:74: 4c:81:f4:79:0a:67:41:4e:96:8a:5c:a7:da:76:e7: 05:33:d9:d5:11:06:92:70:f0:7f:06:03:4f:b9:92: ce:11:ea:03:96:5f:e8:2d:6a:a0:90:9d:03:79:ec: 80:28:98:62:10:1e:53:1d:f0:98:77:55:71:f8:e1: e4:cf:47:f9:61:0a:19:09:13:3b:08:48:9d:13:5b: 4d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A9:0C:41:71:17:79:A8:25:19:3C:E4:03:D8:6B:1C:BE:DC:14:EC X509v3 Authority Key Identifier: keyid:14:A9:D3:C7:40:6E:27:60:05:48:88:71:D5:21:8C:05:A0:71:66:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c6015c-39e4-4561-90c1-aff70d233eef/1/FKnTx0BuJ2AFSIhx1SGMBaBxZtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d4:6f:64:8e:7d:26:6d:12:a6:7c:10:a6:06:14:53:79:19: cc:64:64:a3:69:58:23:27:84:13:b6:c3:88:46:06:bb:8c:d1: f0:6a:49:8e:de:bb:d4:6b:49:08:86:6e:ba:4a:61:2c:b2:a2: 81:4e:55:07:92:f6:9a:90:30:53:bb:85:d6:96:18:8a:df:26: 91:c8:41:27:05:75:2b:df:34:23:0a:5b:1c:3b:94:f2:29:f4: 3f:53:25:35:de:e3:98:8c:38:23:1c:db:6a:bf:5f:b1:e5:f3: 8a:db:b1:04:43:aa:c3:06:0d:fd:ac:65:78:b1:24:fb:ed:a5: a2:3f:ca:a3:48:4f:99:c9:2b:18:5a:79:e3:37:8c:a2:1b:74: 9b:6f:e5:fc:13:93:66:3b:c6:d7:c0:cd:ae:d3:1d:7a:66:91: 83:6d:42:83:79:1f:6e:55:0b:6a:3b:ca:5d:48:bd:a0:9e:9c: 4a:61:b3:99:4e:b9:64:8f:6f:02:62:46:06:c7:11:73:cb:56: a6:7e:19:26:88:2b:64:97:18:7b:73:7e:3a:03:ce:dd:f3:7d: 34:31:fc:82:4a:f5:58:bf:08:36:79:7a:45:ae:25:04:fc:14: bf:7b:48:1d:83:40:94:6d:d1:03:66:e2:5b:c1:a8:20:e3:d6: 05:5f:b7:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr0nBB9truJbPuYBP//LnlzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTlkM2M3NDA2ZTI3NjAwNTQ4ODg3MWQ1MjE4YzA1YTA3 MTY2ZDEwHhcNMjUxMjA2MTcwMDU5WhcNMjUxMjA3MTcwMDU5WjAzMTEwLwYDVQQD EyhhM2E5MGM0MTcxMTc3OWE4MjUxOTNjZTQwM2Q4NmIxY2JlZGMxNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTNH3krNVm64D2EoSsl/9+PL426w LDLEpcMevXclS4Zr3cqd+B55oi707VY5+7p3LMj3Y3bK67K+HfhCq/4oPc4DKhMj DqbpsCdUoUxX1o6/Gh0wE2v+TFAh1Pi1RduK4Q0HlkuyRUNufvzpAoPSC1hdF3Sh nC9lYGJ5U2umoWzKc//Jswxr5ZRIUXnFiVzoK8JIipCHZ/1W0D4rPNTzydqXrO2j rNw2NgoKvMgZbsbKn3RMgfR5CmdBTpaKXKfaducFM9nVEQaScPB/BgNPuZLOEeoD ll/oLWqgkJ0DeeyAKJhiEB5THfCYd1Vx+OHkz0f5YQoZCRM7CEidE1tNtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOpDEFxF3moJRk85APYaxy+3BTsMB8GA1UdIwQY MBaAFBSp08dAbidgBUiIcdUhjAWgcWbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktuVHgwQnVKMkFGU0loeDFTR01CYUJ4WnRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jNjAxNWMtMzllNC00NTYxLTkwYzEt YWZmNzBkMjMzZWVmLzEvRktuVHgwQnVKMkFGU0loeDFTR01CYUJ4WnRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jNjAxNWMtMzllNC00NTYxLTkwYzEtYWZmNzBkMjMzZWVm LzEvRktuVHgwQnVKMkFGU0loeDFTR01CYUJ4WnRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPNRvZI59 Jm0SpnwQpgYUU3kZzGRko2lYIyeEE7bDiEYGu4zR8GpJjt671GtJCIZuukphLLKi gU5VB5L2mpAwU7uF1pYYit8mkchBJwV1K980IwpbHDuU8in0P1MlNd7jmIw4Ixzb ar9fseXzituxBEOqwwYN/axleLEk++2loj/Ko0hPmckrGFp54zeMoht0m2/l/BOT ZjvG18DNrtMdemaRg21Cg3kfblULajvKXUi9oJ6cSmGzmU65ZI9vAmJGBscRc8tW pn4ZJogrZJcYe3N+OgPO3fN9NDH8gkr1WL8INnl6Ra4lBPwUv3tIHYNAlG3RA2bi W8GoIOPWBV+32w== -----END CERTIFICATE-----Generated at Sat Dec 6 22:24:53 2025 by rpki-client