This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft File: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft (raw, json) Hash identifier: dZFr7QUM/3ILzwwOq0sOOFkPRrvqJJkiDF+AwyCyEy0= Subject key identifier: 69:53:48:C3:9A:11:7A:47:F8:77:81:87:62:B4:9E:0F:CF:81:FB:4C Authority key identifier: 16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69 Certificate issuer: /CN=167d54d8cb6a8309c512605657c2563e3a1aaa69 Certificate serial: 019AF61C34C3E58C574A7A76FDFAEC1053F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft Manifest number: 0C2B Signing time: Sun 07 Dec 2025 00:00:34 +0000 Manifest this update: Sun 07 Dec 2025 00:00:34 +0000 Manifest next update: Mon 08 Dec 2025 00:00:34 +0000 Files and hashes: 1: Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl (hash: mtgRN22BQF4GVL1KX7V4dClIOKvdoFxufLZUViTNzBc=) 2: KhY12QXPgZGvijy8NVkM5-EZS4E.roa (hash: CzHA8lyjc+xI7dPqpc2iJoeImIrTVoVteRcgbm8dNIY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:29:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:1c:34:c3:e5:8c:57:4a:7a:76:fd:fa:ec:10:53:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167d54d8cb6a8309c512605657c2563e3a1aaa69 Validity Not Before: Dec 7 00:00:34 2025 GMT Not After : Dec 8 00:00:34 2025 GMT Subject: CN=695348c39a117a47f877818762b49e0fcf81fb4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:74:3c:b0:8a:2c:6c:6f:d2:b9:4d:1e:4f: bf:37:e6:bf:d5:f7:6d:d7:fa:08:7e:b9:97:95:c7: 45:c7:66:4b:b8:3d:fa:77:44:c4:bd:de:54:dd:f6: c3:e4:eb:c2:0c:61:94:f7:b6:36:90:37:28:6b:1e: 3d:ca:ed:89:12:91:2b:80:45:c5:06:2b:84:af:04: 5f:bd:e3:70:80:b0:23:63:39:39:fb:17:f3:e6:fa: d4:6e:ba:a0:e1:18:56:59:4a:bc:64:3c:ea:f7:27: 8c:d7:07:a4:b8:1a:3d:53:0b:64:6c:77:3f:1a:1b: 41:4e:1b:2a:2d:15:eb:83:88:ca:73:c5:8b:f0:7a: 9f:f3:72:df:3a:64:9c:0f:56:63:4d:c4:18:dd:9b: 4f:dd:e8:d7:e9:5a:ee:82:1b:ca:ed:76:ab:b1:04: 31:5b:5c:a0:ad:18:d0:9f:98:cd:4c:a1:f0:0e:9c: b3:e2:55:4f:49:4f:b2:db:8e:c5:56:20:dd:ec:29: 98:04:09:94:ce:b9:bd:48:df:cc:52:15:d1:41:40: fb:ba:fb:b4:45:6c:ea:3f:bc:06:9e:5a:83:ff:1c: 63:26:65:96:42:32:d3:26:bb:4a:b6:29:cc:01:c9: 4a:79:bf:8f:9f:79:5e:d1:09:3f:37:b1:49:a3:e1: ae:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:53:48:C3:9A:11:7A:47:F8:77:81:87:62:B4:9E:0F:CF:81:FB:4C X509v3 Authority Key Identifier: keyid:16:7D:54:D8:CB:6A:83:09:C5:12:60:56:57:C2:56:3E:3A:1A:AA:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/519634-923d-4f98-838a-7e38dbd5664f/1/Fn1U2MtqgwnFEmBWV8JWPjoaqmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:24:7b:1c:39:43:ba:1d:d4:6a:a8:43:a9:41:b4:8d:46:e5: 4c:10:4b:09:74:87:b4:31:82:94:17:97:90:f3:46:1a:03:b9: 60:05:c6:43:43:23:08:ff:1f:e5:7d:5b:6b:2d:a4:f3:d9:3f: 29:15:0d:62:94:9d:dd:54:61:d5:2d:b5:3e:f6:e7:4a:ed:b3: 01:b9:63:9c:67:72:20:e9:c7:5e:52:c6:00:10:06:bb:c5:25: 13:de:4f:1b:df:b6:ce:46:10:c0:4b:1e:19:ef:3d:e1:58:1e: 86:c4:20:1a:8d:37:57:c9:ec:b4:46:a4:09:bd:3f:e8:1a:9b: aa:c2:f3:92:a4:62:16:f6:9a:62:2a:f5:ea:fc:e6:98:45:16: 74:38:14:18:81:15:80:12:a9:06:ac:50:28:fe:c3:ba:a1:dd: ce:c1:5c:0b:b4:7f:ea:51:6a:4a:11:c3:80:79:f6:f4:ac:78: 78:e4:a7:6e:fa:f7:5c:ae:f3:fc:07:f7:b0:2b:bd:e4:8c:d2: 82:04:cf:b8:c5:00:61:7a:1c:de:51:63:cd:98:db:a1:37:bc: 87:89:ad:19:70:e4:98:96:70:34:44:f0:d0:5c:5f:82:eb:6e: 69:18:84:bc:4c:70:f9:fe:ce:ea:f2:cb:04:5e:0f:df:9c:0b: e4:36:63:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2HDTD5YxXSnp2/frsEFPyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2Q1NGQ4Y2I2YTgzMDljNTEyNjA1NjU3YzI1NjNlM2Ex YWFhNjkwHhcNMjUxMjA3MDAwMDM0WhcNMjUxMjA4MDAwMDM0WjAzMTEwLwYDVQQD Eyg2OTUzNDhjMzlhMTE3YTQ3Zjg3NzgxODc2MmI0OWUwZmNmODFmYjRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUd0PLCKLGxv0rlNHk+/N+a/1fdt 1/oIfrmXlcdFx2ZLuD36d0TEvd5U3fbD5OvCDGGU97Y2kDcoax49yu2JEpErgEXF BiuErwRfveNwgLAjYzk5+xfz5vrUbrqg4RhWWUq8ZDzq9yeM1wekuBo9UwtkbHc/ GhtBThsqLRXrg4jKc8WL8Hqf83LfOmScD1ZjTcQY3ZtP3ejX6VrughvK7XarsQQx W1ygrRjQn5jNTKHwDpyz4lVPSU+y247FViDd7CmYBAmUzrm9SN/MUhXRQUD7uvu0 RWzqP7wGnlqD/xxjJmWWQjLTJrtKtinMAclKeb+Pn3le0Qk/N7FJo+GuZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGlTSMOaEXpH+HeBh2K0ng/PgftMMB8GA1UdIwQY MBaAFBZ9VNjLaoMJxRJgVlfCVj46GqppMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEt N2UzOGRiZDU2NjRmLzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS81MTk2MzQtOTIzZC00Zjk4LTgzOGEtN2UzOGRiZDU2NjRm LzEvRm4xVTJNdHFnd25GRW1CV1Y4SldQam9hcW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSR7HDlD uh3UaqhDqUG0jUblTBBLCXSHtDGClBeXkPNGGgO5YAXGQ0MjCP8f5X1bay2k89k/ KRUNYpSd3VRh1S21PvbnSu2zAbljnGdyIOnHXlLGABAGu8UlE95PG9+2zkYQwEse Ge894VgehsQgGo03V8nstEakCb0/6BqbqsLzkqRiFvaaYir16vzmmEUWdDgUGIEV gBKpBqxQKP7DuqHdzsFcC7R/6lFqShHDgHn29Kx4eOSnbvr3XK7z/Af3sCu95IzS ggTPuMUAYXoc3lFjzZjboTe8h4mtGXDkmJZwNETw0FxfgutuaRiEvExw+f7O6vLL BF4P35wL5DZjsw== -----END CERTIFICATE-----Generated at Sun Dec 7 07:03:51 2025 by rpki-client