This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft File: Fzn5ZM1In80lALN2gdWEedVTyKs.mft (raw, json) Hash identifier: 0a7lEGkMHgLQjHSzh4PiuechT4RfrR5S3f2KSXeKPYw= Subject key identifier: 95:B4:16:E6:72:CB:99:2A:B4:F9:20:B8:0E:0E:E3:C0:FC:E9:F8:11 Authority key identifier: 17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB Certificate issuer: /CN=1739f964cd489fcd2500b37681d58479d553c8ab Certificate serial: 019B3C7E69CAF3F41DB5924196203C59971D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft Manifest number: 1226 Signing time: Sat 20 Dec 2025 16:01:16 +0000 Manifest this update: Sat 20 Dec 2025 16:01:16 +0000 Manifest next update: Sun 21 Dec 2025 16:01:16 +0000 Files and hashes: 1: E7khi_dy64NAplQCGIYWONm6XWs.roa (hash: B7pDURftKO1TVaIjuNJYi/KUiJRc83FFsiFwUHpeKCw=) 2: Fzn5ZM1In80lALN2gdWEedVTyKs.crl (hash: +mkSUM112d1ZvN12Lr3XqxDNR0aDv3HghdJCGp4FyAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:69:ca:f3:f4:1d:b5:92:41:96:20:3c:59:97:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1739f964cd489fcd2500b37681d58479d553c8ab Validity Not Before: Dec 20 16:01:16 2025 GMT Not After : Dec 21 16:01:16 2025 GMT Subject: CN=95b416e672cb992ab4f920b80e0ee3c0fce9f811 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:60:b9:fa:0f:5c:ce:20:2f:1e:f1:cf:f5: d4:00:27:e3:d6:05:73:51:2a:b1:82:be:1f:4c:6c: 00:39:82:bc:50:9a:58:38:ca:9d:1d:06:8d:f9:aa: ef:65:34:d6:dc:8f:5e:b8:b0:99:0c:53:81:fd:f2: f6:a4:8d:58:de:b2:e1:6f:e2:d6:ef:d9:d1:da:d8: b6:50:80:18:7a:27:cd:fc:1a:70:09:a5:ff:d7:df: 36:a0:c9:fd:77:8f:fd:86:51:04:b5:7e:47:ab:9c: a0:5c:a6:1e:98:18:3f:e6:7d:ee:d9:11:c8:7c:ad: ea:6c:1b:97:3f:89:cd:48:36:84:de:89:8d:c0:d3: 69:9d:cd:2e:4d:28:e2:6f:34:0e:4c:63:78:2e:f6: c1:ea:43:b6:76:ec:00:83:1f:79:39:14:17:4b:49: 27:e9:c8:05:5c:d2:cd:b6:bf:23:1c:0f:1f:d5:22: c5:a2:05:bc:ff:b1:7c:44:33:45:2b:d1:a0:87:ea: 2e:11:d1:dd:66:34:82:f8:b4:63:aa:f5:1d:9b:a2: 03:55:7e:41:30:35:3a:0e:2e:aa:99:29:48:01:77: 9c:40:b3:a4:36:fe:7e:67:9c:df:a1:40:92:d5:57: 00:0c:8b:0b:40:86:0c:3b:72:aa:5a:02:34:22:ed: d5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B4:16:E6:72:CB:99:2A:B4:F9:20:B8:0E:0E:E3:C0:FC:E9:F8:11 X509v3 Authority Key Identifier: keyid:17:39:F9:64:CD:48:9F:CD:25:00:B3:76:81:D5:84:79:D5:53:C8:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fzn5ZM1In80lALN2gdWEedVTyKs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/394455-64b6-4e10-a792-72d1ffe25bd3/1/Fzn5ZM1In80lALN2gdWEedVTyKs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:3a:d1:44:82:23:9e:b5:fb:c3:38:b2:67:9e:04:0f:66:bb: df:b0:82:a5:de:4a:ab:10:35:bd:6e:1c:09:12:0a:d4:2f:5e: 01:2b:4a:ac:a4:fa:63:2a:5c:88:fe:df:6e:d8:41:a7:bc:91: 7a:99:1c:52:71:e9:ad:e9:69:7b:2f:5b:e8:c5:26:00:80:72: a0:ab:68:99:85:27:5c:a8:68:47:de:9e:fd:ab:14:7a:f8:d6: ac:d9:e2:55:2d:8a:55:a7:62:d8:e6:39:7f:83:30:34:42:8b: dc:fe:35:62:89:84:3c:cf:cd:1c:7d:68:38:03:a1:20:0b:bd: b7:37:3a:01:5d:62:9e:48:1b:28:53:7e:36:f8:f3:9d:45:07: ee:f8:1c:5f:d4:6c:0e:a1:c9:3e:e3:d5:8e:de:09:5a:6c:15: 92:63:ad:ad:64:e2:e4:5d:9a:f0:4f:0d:10:7f:b3:c6:91:2b: 0c:0a:13:16:5f:78:47:03:ca:7d:17:a5:23:e5:ea:ec:31:ef: 57:a3:8c:d7:20:a3:ff:f7:0c:66:8d:71:d4:54:8e:cd:1d:34: 5f:76:61:a4:e3:fe:b8:2b:af:21:f2:3f:6b:20:76:08:bb:8f: 3d:22:7d:6b:20:92:90:2e:26:40:08:67:c9:51:b2:c2:e7:e5: f2:a1:b4:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fmnK8/QdtZJBliA8WZcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzlmOTY0Y2Q0ODlmY2QyNTAwYjM3NjgxZDU4NDc5ZDU1 M2M4YWIwHhcNMjUxMjIwMTYwMTE2WhcNMjUxMjIxMTYwMTE2WjAzMTEwLwYDVQQD Eyg5NWI0MTZlNjcyY2I5OTJhYjRmOTIwYjgwZTBlZTNjMGZjZTlmODExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxgufoPXM4gLx7xz/XUACfj1gVz USqxgr4fTGwAOYK8UJpYOMqdHQaN+arvZTTW3I9euLCZDFOB/fL2pI1Y3rLhb+LW 79nR2ti2UIAYeifN/BpwCaX/1982oMn9d4/9hlEEtX5Hq5ygXKYemBg/5n3u2RHI fK3qbBuXP4nNSDaE3omNwNNpnc0uTSjibzQOTGN4LvbB6kO2duwAgx95ORQXS0kn 6cgFXNLNtr8jHA8f1SLFogW8/7F8RDNFK9Ggh+ouEdHdZjSC+LRjqvUdm6IDVX5B MDU6Di6qmSlIAXecQLOkNv5+Z5zfoUCS1VcADIsLQIYMO3KqWgI0Iu3V1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW0FuZyy5kqtPkguA4O48D86fgRMB8GA1UdIwQY MBaAFBc5+WTNSJ/NJQCzdoHVhHnVU8irMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTIt NzJkMWZmZTI1YmQzLzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC8zOTQ0NTUtNjRiNi00ZTEwLWE3OTItNzJkMWZmZTI1YmQz LzEvRnpuNVpNMUluODBsQUxOMmdkV0VlZFZUeUtzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDrRRIIj nrX7wziyZ54ED2a737CCpd5KqxA1vW4cCRIK1C9eAStKrKT6YypciP7fbthBp7yR epkcUnHprelpey9b6MUmAIByoKtomYUnXKhoR96e/asUevjWrNniVS2KVadi2OY5 f4MwNEKL3P41YomEPM/NHH1oOAOhIAu9tzc6AV1inkgbKFN+NvjznUUH7vgcX9Rs DqHJPuPVjt4JWmwVkmOtrWTi5F2a8E8NEH+zxpErDAoTFl94RwPKfRelI+Xq7DHv V6OM1yCj//cMZo1x1FSOzR00X3ZhpOP+uCuvIfI/ayB2CLuPPSJ9ayCSkC4mQAhn yVGywufl8qG0Tg== -----END CERTIFICATE-----Generated at Sun Dec 21 00:11:43 2025 by rpki-client