This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft File: FV9JSb982s8-nUZXsIzYR4DUF0U.mft (raw, json) Hash identifier: 94BB3JXeeXiodBwFW0+R4qRJ2NrrovrDal5FCqgRcb8= Subject key identifier: F8:84:B5:DE:B2:0C:63:C7:7E:13:0A:0A:6D:CD:BF:65:DB:02:15:D8 Authority key identifier: 15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45 Certificate issuer: /CN=155f4949bf7cdacf3e9d4657b08cd84780d41745 Certificate serial: 019AF209714DB3BD9E8680AB591543DE93B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft Manifest number: 0CB1 Signing time: Sat 06 Dec 2025 05:01:36 +0000 Manifest this update: Sat 06 Dec 2025 05:01:36 +0000 Manifest next update: Sun 07 Dec 2025 05:01:36 +0000 Files and hashes: 1: FV9JSb982s8-nUZXsIzYR4DUF0U.crl (hash: po1kXbxuFtvZC5y1WT8zdVNjor3qsALXqPyOrv8UuH0=) 2: ojHiQO19UWzWeZWUnpfHf7I7cMc.roa (hash: 9VsVu1Joj/Zh9nV4rRjBb7OhHCDd3dk9hkqFPQjM6n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:09:71:4d:b3:bd:9e:86:80:ab:59:15:43:de:93:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=155f4949bf7cdacf3e9d4657b08cd84780d41745 Validity Not Before: Dec 6 05:01:36 2025 GMT Not After : Dec 7 05:01:36 2025 GMT Subject: CN=f884b5deb20c63c77e130a0a6dcdbf65db0215d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d5:38:85:d4:0f:a0:a4:1f:1f:8d:55:92:ee: 72:ae:7b:c4:3d:d1:70:8f:62:2c:0f:88:27:20:5e: a8:49:a1:7f:46:36:2f:92:a9:62:41:46:3b:44:9c: 03:0c:b3:13:72:11:9e:89:f7:96:e8:52:05:8e:0a: 6d:fb:16:14:ac:05:49:80:e9:5e:3b:32:86:19:d4: 1a:49:e7:3a:c8:bb:f2:f9:2d:ea:a7:0b:eb:0f:52: 16:74:25:af:9b:e1:99:07:77:20:e1:ce:25:0c:2a: 64:7e:c1:ef:c2:1e:7f:ff:eb:be:a2:be:81:a0:51: 1c:5b:df:af:04:16:99:be:4b:35:fe:88:f9:9e:1a: 7d:45:24:9a:4f:f2:b1:fc:48:a8:f9:16:ef:ac:d8: 49:ef:56:da:34:48:8d:c4:cd:31:1b:9e:f1:e0:03: f9:bd:78:1a:4b:94:6d:12:bd:ad:6a:d0:d6:e5:d2: b9:a3:a3:d0:23:a5:02:5e:25:43:ad:ea:5d:d3:dd: 60:a2:a7:aa:09:ff:03:8d:73:bc:a0:f1:b6:f8:11: 06:c0:e5:d3:11:03:09:7e:c6:f9:fa:ec:a5:fe:06: 72:35:38:6b:99:ed:16:23:e7:5e:af:5c:e2:2a:fd: e3:e7:f9:c9:f2:d0:dd:4d:57:37:af:1c:d8:9d:b8: 9a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:84:B5:DE:B2:0C:63:C7:7E:13:0A:0A:6D:CD:BF:65:DB:02:15:D8 X509v3 Authority Key Identifier: keyid:15:5F:49:49:BF:7C:DA:CF:3E:9D:46:57:B0:8C:D8:47:80:D4:17:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FV9JSb982s8-nUZXsIzYR4DUF0U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8f601e-c56f-40d4-9ad5-1bce3bc678ed/1/FV9JSb982s8-nUZXsIzYR4DUF0U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:fb:e2:fe:0b:af:26:e6:e5:36:fd:35:ea:73:2a:5c:b1:a3: cb:67:f3:ea:20:66:d0:99:3b:26:46:1e:05:cf:39:91:fa:c5: 81:52:a7:03:62:b2:83:3a:d9:42:83:1f:c1:1a:6f:91:ba:4f: cd:d0:50:1b:57:38:78:aa:e7:da:96:d0:57:ee:4c:d0:08:41: b7:82:9a:66:98:f4:64:20:60:ee:78:74:2b:c4:d8:8e:6e:71: 8f:84:ab:75:34:71:68:e5:08:74:f6:d0:35:c7:c1:dc:3b:2e: 7b:18:63:e6:ac:e3:6a:35:26:e2:55:c5:a2:e4:77:22:f9:a7: 4c:f8:46:89:dd:56:ec:06:f9:51:35:9b:58:c3:1e:26:80:3e: 24:0b:81:8b:fd:ab:2c:99:2e:fa:fd:f4:4a:e7:59:be:9c:8d: e7:58:aa:4c:f5:ec:bd:8d:ba:1a:51:99:e2:27:1d:39:b9:56: 1a:92:2c:6b:54:fa:8c:8a:5f:0d:43:63:65:9f:d2:dd:9e:5e: e5:d1:17:7e:e1:bb:90:34:51:1a:8d:8f:15:87:34:f6:90:9a: f4:51:08:86:b5:da:7d:d7:bf:ea:3b:3f:34:67:24:b9:d5:55: 30:77:31:f3:92:5f:60:8a:07:56:76:ae:96:1d:49:fd:43:e9: ec:56:a3:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCXFNs72ehoCrWRVD3pOyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NWY0OTQ5YmY3Y2RhY2YzZTlkNDY1N2IwOGNkODQ3ODBk NDE3NDUwHhcNMjUxMjA2MDUwMTM2WhcNMjUxMjA3MDUwMTM2WjAzMTEwLwYDVQQD EyhmODg0YjVkZWIyMGM2M2M3N2UxMzBhMGE2ZGNkYmY2NWRiMDIxNWQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9U4hdQPoKQfH41Vku5yrnvEPdFw j2IsD4gnIF6oSaF/RjYvkqliQUY7RJwDDLMTchGeifeW6FIFjgpt+xYUrAVJgOle OzKGGdQaSec6yLvy+S3qpwvrD1IWdCWvm+GZB3cg4c4lDCpkfsHvwh5//+u+or6B oFEcW9+vBBaZvks1/oj5nhp9RSSaT/Kx/Eio+RbvrNhJ71baNEiNxM0xG57x4AP5 vXgaS5RtEr2tatDW5dK5o6PQI6UCXiVDrepd091goqeqCf8DjXO8oPG2+BEGwOXT EQMJfsb5+uyl/gZyNThrme0WI+der1ziKv3j5/nJ8tDdTVc3rxzYnbia8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiEtd6yDGPHfhMKCm3Nv2XbAhXYMB8GA1UdIwQY MBaAFBVfSUm/fNrPPp1GV7CM2EeA1BdFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUt MWJjZTNiYzY3OGVkLzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OC84ZjYwMWUtYzU2Zi00MGQ0LTlhZDUtMWJjZTNiYzY3OGVk LzEvRlY5SlNiOTgyczgtblVaWHNJellSNERVRjBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHPvi/guv JublNv016nMqXLGjy2fz6iBm0Jk7JkYeBc85kfrFgVKnA2KygzrZQoMfwRpvkbpP zdBQG1c4eKrn2pbQV+5M0AhBt4KaZpj0ZCBg7nh0K8TYjm5xj4SrdTRxaOUIdPbQ NcfB3Dsuexhj5qzjajUm4lXFouR3IvmnTPhGid1W7Ab5UTWbWMMeJoA+JAuBi/2r LJku+v30SudZvpyN51iqTPXsvY26GlGZ4icdOblWGpIsa1T6jIpfDUNjZZ/S3Z5e 5dEXfuG7kDRRGo2PFYc09pCa9FEIhrXafde/6js/NGckudVVMHcx85JfYIoHVnau lh1J/UPp7Fajxg== -----END CERTIFICATE-----Generated at Sat Dec 6 14:17:14 2025 by rpki-client