This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json) Hash identifier: sNUxFSWPWGpO4LuWBJEroJt1IOtAgBrrRAxHeMgW8xM= Subject key identifier: FA:74:23:30:A6:0C:BE:FA:77:D6:26:03:3B:49:D5:93:74:79:51:18 Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Certificate serial: 019AF1D1D083597EBDB5CF2110186EA72F0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft Manifest number: 0A05 Signing time: Sat 06 Dec 2025 04:00:50 +0000 Manifest this update: Sat 06 Dec 2025 04:00:50 +0000 Manifest next update: Sun 07 Dec 2025 04:00:50 +0000 Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=) 2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: /lyz/7I8qQHs5X4aeZ+UJXojlov/PdRTJza+uOeudXE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:d0:83:59:7e:bd:b5:cf:21:10:18:6e:a7:2f:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Validity Not Before: Dec 6 04:00:50 2025 GMT Not After : Dec 7 04:00:50 2025 GMT Subject: CN=fa742330a60cbefa77d626033b49d59374795118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:af:59:5e:05:1b:09:da:2c:42:82:90:48:bc: 52:33:51:3e:f1:67:3f:9b:a9:0d:cc:f3:82:2f:a3: 75:43:0f:ff:c9:7e:0c:a9:53:c9:aa:c0:b1:e2:86: 67:d8:42:42:db:ed:46:0e:d4:87:eb:19:53:97:b8: f0:17:d1:c9:e6:82:13:34:14:7b:5b:7d:a3:9c:94: b1:0c:0b:79:7d:6d:37:75:16:4b:fc:e9:cc:83:e5: 77:cd:ca:ae:e2:da:a4:d4:df:4d:90:40:5e:3d:2d: ff:5d:44:49:cd:fd:f9:59:13:46:71:45:8e:dd:90: f2:34:82:1b:4e:19:4a:df:8b:1d:1c:74:fd:d5:c9: f8:6b:4d:65:8b:0e:1b:29:ce:f7:0f:98:fd:5e:bd: b8:8b:65:54:73:fb:ae:92:10:eb:d3:60:58:c1:9b: c3:0e:e3:38:f4:5c:d2:cf:c7:e6:67:65:97:9b:8d: 26:68:61:3b:7f:2a:73:cd:26:aa:20:04:c2:a7:62: a8:87:66:4f:40:d7:0d:b4:b2:4a:8e:0b:20:eb:ad: e1:e4:9b:7b:7c:b6:64:a7:a9:1a:03:f3:33:e3:21: 3f:a1:3d:4a:16:03:da:e8:8a:ec:0d:37:47:6e:2f: 02:ea:0f:e0:f7:ac:42:19:91:04:dd:a8:b2:c8:e8: 67:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:74:23:30:A6:0C:BE:FA:77:D6:26:03:3B:49:D5:93:74:79:51:18 X509v3 Authority Key Identifier: keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f8:8a:e5:5f:a6:d3:59:67:4a:73:cb:46:47:1c:82:2e:ff: 50:8a:e4:4c:d4:16:d6:00:d3:e0:9a:5d:87:f8:e7:cd:ec:cd: 42:23:ae:1e:17:bd:73:64:22:57:a6:80:5f:98:10:22:2a:74: 05:41:36:75:e0:2e:96:5d:0f:91:55:78:9c:c8:ea:5d:41:d0: 07:67:db:b7:32:88:ea:7b:d0:14:d3:f5:b4:40:7d:3c:9e:b8: 6b:ef:0a:ef:09:a6:8a:21:80:1b:f2:86:3c:d9:78:91:0d:f7: d4:a1:9d:e6:97:4e:cd:47:6c:77:c3:9a:7d:76:db:6b:73:5a: 5a:cd:ea:62:49:e1:7c:29:02:ff:fa:1a:87:4a:fb:f2:49:7c: 1f:11:9a:7e:8c:68:da:e3:02:e0:e7:d1:2a:af:1b:74:1d:c2: 39:55:6f:5d:4f:1f:2a:99:ad:7a:73:89:6d:35:5f:ea:1e:c9: cd:19:09:fd:11:72:93:80:5d:52:65:68:00:3d:d3:23:a3:78: f6:ef:38:43:24:13:5e:f0:cb:7a:07:57:8b:65:f0:32:18:c6: 80:8f:26:02:ac:fa:9b:3e:56:c8:51:7c:ac:36:5c:eb:5b:db: 5a:01:fe:32:da:56:5c:12:9f:99:75:35:b0:05:c0:f8:fc:c0: cc:2b:00:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0dCDWX69tc8hEBhupy8LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz YzQyZDYwHhcNMjUxMjA2MDQwMDUwWhcNMjUxMjA3MDQwMDUwWjAzMTEwLwYDVQQD EyhmYTc0MjMzMGE2MGNiZWZhNzdkNjI2MDMzYjQ5ZDU5Mzc0Nzk1MTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyq9ZXgUbCdosQoKQSLxSM1E+8Wc/ m6kNzPOCL6N1Qw//yX4MqVPJqsCx4oZn2EJC2+1GDtSH6xlTl7jwF9HJ5oITNBR7 W32jnJSxDAt5fW03dRZL/OnMg+V3zcqu4tqk1N9NkEBePS3/XURJzf35WRNGcUWO 3ZDyNIIbThlK34sdHHT91cn4a01liw4bKc73D5j9Xr24i2VUc/uukhDr02BYwZvD DuM49FzSz8fmZ2WXm40maGE7fypzzSaqIATCp2Koh2ZPQNcNtLJKjgsg663h5Jt7 fLZkp6kaA/Mz4yE/oT1KFgPa6IrsDTdHbi8C6g/g96xCGZEE3aiyyOhnRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPp0IzCmDL76d9YmAztJ1ZN0eVEYMB8GA1UdIwQY MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeviK5V+m 01lnSnPLRkccgi7/UIrkTNQW1gDT4Jpdh/jnzezNQiOuHhe9c2QiV6aAX5gQIip0 BUE2deAull0PkVV4nMjqXUHQB2fbtzKI6nvQFNP1tEB9PJ64a+8K7wmmiiGAG/KG PNl4kQ331KGd5pdOzUdsd8OafXbba3NaWs3qYknhfCkC//oah0r78kl8HxGafoxo 2uMC4OfRKq8bdB3COVVvXU8fKpmtenOJbTVf6h7JzRkJ/RFyk4BdUmVoAD3TI6N4 9u84QyQTXvDLegdXi2XwMhjGgI8mAqz6mz5WyFF8rDZc61vbWgH+MtpWXBKfmXU1 sAXA+PzAzCsAgQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:25:05 2025 by rpki-client