This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft File: FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft (raw, json) Hash identifier: a+M5UphyGEtAERXSU3N4md8QaNJFMrxe54hjWr2x9Lw= Subject key identifier: 92:3A:78:DE:6E:7D:BD:9A:D1:C3:56:40:9F:77:7F:6B:83:48:67:41 Authority key identifier: 14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68 Certificate issuer: /CN=146170cb906ef42d097c6402d83eec3d92677a68 Certificate serial: 019AF1D1F4B8CC4EC9C3BF5936F30733E82D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft Manifest number: 1762 Signing time: Sat 06 Dec 2025 04:00:59 +0000 Manifest this update: Sat 06 Dec 2025 04:00:59 +0000 Manifest next update: Sun 07 Dec 2025 04:00:59 +0000 Files and hashes: 1: FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl (hash: pbLDgJ1UbAtuV/VSyQRZaI07BZELefOiyy4lxqpOZW0=) 2: m47qBE9phwomTDeqf52wHfAYr9E.roa (hash: 7rx0B/HjAB/FPNOSkgRw7oYEkC39mslIeJTzls7ObLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d1:f4:b8:cc:4e:c9:c3:bf:59:36:f3:07:33:e8:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=146170cb906ef42d097c6402d83eec3d92677a68 Validity Not Before: Dec 6 04:00:59 2025 GMT Not After : Dec 7 04:00:59 2025 GMT Subject: CN=923a78de6e7dbd9ad1c356409f777f6b83486741 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:70:6f:a9:c6:d6:40:8b:e2:00:35:d9:f2:7f: d0:a3:f3:56:34:df:e5:83:c4:3b:49:f4:63:cb:3d: 6c:2f:2b:38:44:57:64:89:71:3e:8d:83:0a:36:73: 28:8d:33:6a:bc:91:b2:79:bf:38:a5:3d:e3:fd:f7: bf:3e:2f:8f:d8:84:ed:84:21:47:30:21:7d:5c:f2: de:1e:62:db:be:9f:f5:6f:da:b9:26:17:d4:07:cc: 29:14:1a:66:23:cb:c4:66:6b:35:06:87:74:ab:4f: fc:cc:8f:8c:b3:f5:38:b9:8b:ba:73:3f:9e:50:39: 37:75:95:18:97:e4:fa:f2:7c:19:29:f8:9b:bc:88: 90:2c:64:41:29:1b:43:2b:e2:16:aa:11:e7:67:bc: 25:49:73:5d:6b:fc:3c:a7:9e:bd:59:69:1e:b1:6c: 36:46:82:23:23:a1:2a:2f:64:0a:b9:d7:a6:46:0c: 1a:0d:4a:a3:ba:80:2d:c3:f1:92:39:df:91:69:1e: f3:3a:d7:cc:4a:72:a1:04:1d:d3:65:00:21:6e:ec: 18:2f:cd:ce:de:07:26:fa:00:8b:31:4a:6c:85:dd: 2d:76:ea:72:35:a2:23:b3:53:74:69:d6:ac:72:bc: 1c:20:2e:84:5d:ac:a4:85:69:81:78:d4:c9:37:f5: 3a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:3A:78:DE:6E:7D:BD:9A:D1:C3:56:40:9F:77:7F:6B:83:48:67:41 X509v3 Authority Key Identifier: keyid:14:61:70:CB:90:6E:F4:2D:09:7C:64:02:D8:3E:EC:3D:92:67:7A:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGFwy5Bu9C0JfGQC2D7sPZJnemg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/702a72-3112-4d9f-bba9-8034e2d05d39/1/FGFwy5Bu9C0JfGQC2D7sPZJnemg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:74:e5:89:29:06:ee:a4:89:73:91:24:d6:2d:0d:b1:e2:be: 00:be:04:c2:83:b4:a1:4d:33:b2:12:54:bc:ad:70:f3:30:ea: 6f:92:dd:5b:58:25:e3:40:56:2b:40:07:3f:ba:7a:68:20:87: 4c:b1:d8:08:99:86:a8:70:73:93:b1:80:05:05:2c:a0:9d:4b: 1d:59:78:a0:f2:8e:a7:19:7e:1c:0c:7d:cf:00:8e:ca:39:c3: 88:43:db:26:e0:d3:47:4e:38:59:37:72:9f:19:4a:52:26:cb: 0f:de:19:d3:58:76:44:17:65:72:11:7e:52:e8:f5:87:15:ae: 09:9b:88:70:a7:0b:51:ac:9d:6c:0f:59:a3:7f:04:5c:22:e1: 81:76:05:6a:22:3b:e0:70:b5:83:1d:25:78:a1:c5:e4:a3:1c: f6:e5:78:fb:9c:ab:54:25:af:75:88:f7:c1:af:1b:37:26:0d: 40:37:6e:a0:56:87:7c:3d:24:28:92:94:1d:19:fc:26:96:62: 58:c6:0b:4d:6a:8f:dc:cc:92:e3:d1:d6:87:25:72:f3:71:ae: 7a:78:b1:65:43:19:4a:02:12:f3:a3:12:f7:50:f7:cb:46:f6: e9:83:a0:7f:de:92:b8:0f:b3:40:38:6e:41:b0:c0:46:0f:4c: 24:9d:d4:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0fS4zE7Jw79ZNvMHM+gtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjE3MGNiOTA2ZWY0MmQwOTdjNjQwMmQ4M2VlYzNkOTI2 NzdhNjgwHhcNMjUxMjA2MDQwMDU5WhcNMjUxMjA3MDQwMDU5WjAzMTEwLwYDVQQD Eyg5MjNhNzhkZTZlN2RiZDlhZDFjMzU2NDA5Zjc3N2Y2YjgzNDg2NzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznBvqcbWQIviADXZ8n/Qo/NWNN/l g8Q7SfRjyz1sLys4RFdkiXE+jYMKNnMojTNqvJGyeb84pT3j/fe/Pi+P2ITthCFH MCF9XPLeHmLbvp/1b9q5JhfUB8wpFBpmI8vEZms1Bod0q0/8zI+Ms/U4uYu6cz+e UDk3dZUYl+T68nwZKfibvIiQLGRBKRtDK+IWqhHnZ7wlSXNda/w8p569WWkesWw2 RoIjI6EqL2QKudemRgwaDUqjuoAtw/GSOd+RaR7zOtfMSnKhBB3TZQAhbuwYL83O 3gcm+gCLMUpshd0tdupyNaIjs1N0adascrwcIC6EXaykhWmBeNTJN/U6WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJI6eN5ufb2a0cNWQJ93f2uDSGdBMB8GA1UdIwQY MBaAFBRhcMuQbvQtCXxkAtg+7D2SZ3poMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTkt ODAzNGUyZDA1ZDM5LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC83MDJhNzItMzExMi00ZDlmLWJiYTktODAzNGUyZDA1ZDM5 LzEvRkdGd3k1QnU5QzBKZkdRQzJEN3NQWkpuZW1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXTliSkG 7qSJc5Ek1i0NseK+AL4EwoO0oU0zshJUvK1w8zDqb5LdW1gl40BWK0AHP7p6aCCH TLHYCJmGqHBzk7GABQUsoJ1LHVl4oPKOpxl+HAx9zwCOyjnDiEPbJuDTR044WTdy nxlKUibLD94Z01h2RBdlchF+Uuj1hxWuCZuIcKcLUaydbA9Zo38EXCLhgXYFaiI7 4HC1gx0leKHF5KMc9uV4+5yrVCWvdYj3wa8bNyYNQDduoFaHfD0kKJKUHRn8JpZi WMYLTWqP3MyS49HWhyVy83GuenixZUMZSgIS86MS91D3y0b26YOgf96SuA+zQDhu QbDARg9MJJ3UpA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:22:08 2025 by rpki-client