This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft File: FpNzegFGnJUBHWlzklZZFgRdOiA.mft (raw, json) Hash identifier: hCnwFUzOBTaD4yWN5RxGfuLIdsnFwZ7HwANNHaavZ/E= Subject key identifier: 33:26:F7:36:E7:4C:F8:29:6E:18:8A:4A:FB:44:14:8F:96:74:D2:B9 Authority key identifier: 16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20 Certificate issuer: /CN=1693737a01469c95011d697392565916045d3a20 Certificate serial: 019AF23F7D1C40D1B0082CBC86A5E8FFDD02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft Manifest number: 0447 Signing time: Sat 06 Dec 2025 06:00:38 +0000 Manifest this update: Sat 06 Dec 2025 06:00:38 +0000 Manifest next update: Sun 07 Dec 2025 06:00:38 +0000 Files and hashes: 1: FpNzegFGnJUBHWlzklZZFgRdOiA.crl (hash: BUDfqzcZ3bTStQ/xEMyLU8EWWrI+JQslI8Ph7VuWANA=) 2: mgFhpVWpKKOAS9kS1Whb-f8EjPw.roa (hash: b1ojmUR/j/a0k5umyT93sSV7c2lVJTgs9RA7eYuyM+k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:7d:1c:40:d1:b0:08:2c:bc:86:a5:e8:ff:dd:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1693737a01469c95011d697392565916045d3a20 Validity Not Before: Dec 6 06:00:38 2025 GMT Not After : Dec 7 06:00:38 2025 GMT Subject: CN=3326f736e74cf8296e188a4afb44148f9674d2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:03:29:3a:a9:e9:04:c9:9e:24:19:14:13: 1d:9f:ed:05:bd:01:01:1a:93:64:45:06:c9:93:59: f9:df:11:58:62:28:ea:60:4b:9c:8e:90:99:bd:bd: ca:60:64:cd:12:a7:29:e0:b7:90:81:1e:c0:f6:d8: 2b:ec:ba:91:fd:29:9d:96:69:37:ec:46:45:3e:4e: 3d:0c:7a:d9:df:11:58:8c:b6:fb:66:d2:e3:7e:91: 4b:59:32:77:77:fe:b3:46:34:bc:b3:b3:62:76:a1: 32:89:ef:6a:cb:30:0d:a0:90:df:5f:0d:48:7c:6e: 3e:47:f9:e9:c0:01:a3:f1:50:a8:76:57:26:75:42: 58:05:97:18:ac:fb:e5:a6:29:84:e1:2c:af:ff:ba: 95:17:cb:91:34:0e:d5:1b:3e:14:dc:32:74:4b:d6: 50:a2:f3:ed:da:b8:31:d3:80:67:2b:cb:45:cd:16: e0:34:72:fb:48:5f:34:6b:23:32:41:53:a1:1a:10: cc:c9:bc:f8:bb:45:76:45:31:e5:88:ce:e3:78:de: 70:88:cd:e2:be:77:56:62:65:59:d7:43:49:5d:0a: 26:f6:8a:73:0a:db:13:78:ab:cc:f7:91:76:a9:80: 0b:5e:58:f6:66:f6:6b:b5:45:3a:d6:78:db:99:dd: 5d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:26:F7:36:E7:4C:F8:29:6E:18:8A:4A:FB:44:14:8F:96:74:D2:B9 X509v3 Authority Key Identifier: keyid:16:93:73:7A:01:46:9C:95:01:1D:69:73:92:56:59:16:04:5D:3A:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpNzegFGnJUBHWlzklZZFgRdOiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/d1b6b1-223a-410b-9596-5ae307304b0b/1/FpNzegFGnJUBHWlzklZZFgRdOiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dc:88:93:52:74:b2:c1:5f:81:c7:57:75:cd:81:00:6d:53:57: bb:04:18:6e:81:30:0b:6b:86:35:c4:bf:04:46:e5:9d:1f:42: 1a:ea:12:ca:ff:2c:21:8a:bd:80:ee:8d:72:be:ec:22:27:ef: ad:4b:a8:62:52:88:75:69:21:85:48:18:c8:87:fa:d5:2b:40: c2:d3:3b:fa:fb:c8:f1:e1:5c:e4:12:c3:65:43:35:79:68:67: 91:41:20:81:72:e5:e8:e2:0b:70:a4:23:b8:56:23:97:ae:0a: 3a:bf:e4:f5:cf:42:65:a2:85:94:77:2c:11:be:2a:84:0c:53: 22:b5:0c:8d:04:32:18:7a:14:b2:1f:c6:0d:66:4c:44:7b:13: eb:fe:08:36:81:1a:d0:bc:0c:1e:70:d0:95:ce:0c:90:8f:a2: 55:e9:ea:f4:6b:3a:a4:93:8c:92:8e:00:d7:e1:7b:49:71:90: 2c:37:d3:82:e6:0f:82:27:a2:94:c2:55:45:0c:d9:96:70:b4: 51:06:3f:19:cc:0a:9f:34:e7:25:fe:0d:d1:b6:b8:78:0e:d1: 9e:51:fa:68:07:73:4c:01:05:dc:76:b3:67:16:d3:bd:ca:72: 78:e4:41:a0:e8:74:ce:d2:00:65:74:be:33:25:6c:a7:ea:e6: 8a:9d:b7:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP30cQNGwCCy8hqXo/90CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTM3MzdhMDE0NjljOTUwMTFkNjk3MzkyNTY1OTE2MDQ1 ZDNhMjAwHhcNMjUxMjA2MDYwMDM4WhcNMjUxMjA3MDYwMDM4WjAzMTEwLwYDVQQD EygzMzI2ZjczNmU3NGNmODI5NmUxODhhNGFmYjQ0MTQ4Zjk2NzRkMmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq0DKTqp6QTJniQZFBMdn+0FvQEB GpNkRQbJk1n53xFYYijqYEucjpCZvb3KYGTNEqcp4LeQgR7A9tgr7LqR/Smdlmk3 7EZFPk49DHrZ3xFYjLb7ZtLjfpFLWTJ3d/6zRjS8s7NidqEyie9qyzANoJDfXw1I fG4+R/npwAGj8VCodlcmdUJYBZcYrPvlpimE4Syv/7qVF8uRNA7VGz4U3DJ0S9ZQ ovPt2rgx04BnK8tFzRbgNHL7SF80ayMyQVOhGhDMybz4u0V2RTHliM7jeN5wiM3i vndWYmVZ10NJXQom9opzCtsTeKvM95F2qYALXlj2ZvZrtUU61njbmd1doQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDMm9zbnTPgpbhiKSvtEFI+WdNK5MB8GA1UdIwQY MBaAFBaTc3oBRpyVAR1pc5JWWRYEXTogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYt NWFlMzA3MzA0YjBiLzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9kMWI2YjEtMjIzYS00MTBiLTk1OTYtNWFlMzA3MzA0YjBi LzEvRnBOemVnRkduSlVCSFdsemtsWlpGZ1JkT2lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3IiTUnSy wV+Bx1d1zYEAbVNXuwQYboEwC2uGNcS/BEblnR9CGuoSyv8sIYq9gO6Ncr7sIifv rUuoYlKIdWkhhUgYyIf61StAwtM7+vvI8eFc5BLDZUM1eWhnkUEggXLl6OILcKQj uFYjl64KOr/k9c9CZaKFlHcsEb4qhAxTIrUMjQQyGHoUsh/GDWZMRHsT6/4INoEa 0LwMHnDQlc4MkI+iVenq9Gs6pJOMko4A1+F7SXGQLDfTguYPgieilMJVRQzZlnC0 UQY/GcwKnzTnJf4N0ba4eA7RnlH6aAdzTAEF3HazZxbTvcpyeORBoOh0ztIAZXS+ MyVsp+rmip23nQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:38:47 2025 by rpki-client