This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft File: _FNNTENDzYmRiWnVbaGFZ0sWY1U.mft (raw, json) Hash identifier: S+TNOm8EWiK5Dvc8P6dRdSUjDx5TIPkgRUfeUHTPji4= Subject key identifier: F2:B9:14:17:5A:46:3F:8E:30:08:D6:23:52:46:AF:7E:54:98:3A:46 Authority key identifier: FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55 Certificate issuer: /CN=fc534d4c4343cd89918969d56da185674b166355 Certificate serial: 019AF2402D70F739B9CCB24E9705C5FD596B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft Manifest number: 115D Signing time: Sat 06 Dec 2025 06:01:23 +0000 Manifest this update: Sat 06 Dec 2025 06:01:23 +0000 Manifest next update: Sun 07 Dec 2025 06:01:23 +0000 Files and hashes: 1: _FNNTENDzYmRiWnVbaGFZ0sWY1U.crl (hash: 4mTuCKudiySX5oWrjmjrGmZfCqLtRXUCo5IQa9ysILo=) 2: bjwBa29o8sLtvq0lB3wmXidRAXM.roa (hash: voja3TwiIQ0KziGC7wSgsvdSwQWHXLdVHcxuiguvZGU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:2d:70:f7:39:b9:cc:b2:4e:97:05:c5:fd:59:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc534d4c4343cd89918969d56da185674b166355 Validity Not Before: Dec 6 06:01:23 2025 GMT Not After : Dec 7 06:01:23 2025 GMT Subject: CN=f2b914175a463f8e3008d6235246af7e54983a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:82:00:92:4d:45:6f:5c:48:e3:53:36:7f:f3: 84:7a:a3:a6:4f:2e:52:16:35:18:bb:85:57:ae:27: 3d:7f:40:45:09:fe:26:50:de:ba:1e:6e:7b:34:77: 46:96:f0:85:a9:42:15:16:c2:6b:39:94:ae:e2:e4: 6f:72:31:04:4f:d9:fb:3f:52:85:9d:47:bc:e9:1a: 39:56:97:fd:ba:69:a6:67:fc:ab:4c:93:33:02:84: e1:3c:49:f3:b1:8f:43:84:5d:39:7b:20:56:5e:f2: b8:2d:b9:0c:2d:58:61:29:c5:a2:d6:c3:81:d8:11: 42:96:20:b5:dc:44:6e:07:6e:1c:cd:4a:e1:a0:33: 89:77:43:a1:77:cd:39:f4:f1:ad:f3:c3:fd:c9:77: f1:9a:7d:6e:ab:7c:da:95:3b:e0:31:d7:98:16:92: 96:3e:13:ea:ce:08:8b:68:c7:12:8f:0f:90:61:5e: c4:88:8b:3b:55:a8:94:05:71:1b:85:7a:a9:d6:6a: 7d:d4:cb:2a:c9:f8:39:ca:91:42:ad:27:fc:12:b9: 59:b7:67:dd:19:e2:1a:c8:00:e7:b1:cc:d8:6d:da: 2e:08:d9:35:2a:3c:88:65:3c:5f:9e:8b:12:ae:e3: 5c:27:c5:09:a2:e3:c6:b1:a2:ba:0f:d1:e1:13:2b: dd:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:14:17:5A:46:3F:8E:30:08:D6:23:52:46:AF:7E:54:98:3A:46 X509v3 Authority Key Identifier: keyid:FC:53:4D:4C:43:43:CD:89:91:89:69:D5:6D:A1:85:67:4B:16:63:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FNNTENDzYmRiWnVbaGFZ0sWY1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/60b62b-8e2c-443e-a162-b4c2dca593b3/1/_FNNTENDzYmRiWnVbaGFZ0sWY1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ae:82:9a:ce:e4:bd:78:08:83:d3:a1:b9:0d:8b:2d:de:c3: 2f:b6:8e:36:d5:19:40:aa:5c:19:f8:d5:a0:fb:02:a3:0e:0e: ad:ac:c6:7f:d5:42:05:3f:fb:80:aa:a1:00:03:c2:f3:70:7e: ff:fa:23:24:96:89:70:4a:39:e1:b0:22:dc:3c:d1:cf:4c:e8: 92:c5:1a:cf:46:23:9b:9f:88:9f:82:2e:83:0b:9c:49:14:d2: b3:c9:60:d0:e6:e0:53:de:6c:0e:d1:33:59:1c:07:44:02:76: 28:ac:57:0f:fd:e0:04:e6:4c:9e:f2:a7:e8:61:08:5c:7b:78: d0:f1:da:0c:6a:3c:9b:0d:fc:32:8c:e2:9d:25:de:bc:4d:49: cf:a6:7a:e9:7e:78:0c:6b:d4:3b:3d:39:be:6e:b2:c5:23:8a: 38:33:94:75:bc:ae:3b:cd:63:d9:92:a9:cf:b1:9d:d1:3d:65: 75:e9:3d:2d:cd:a4:87:b6:76:4c:96:2b:4a:fd:e2:eb:70:5f: 60:c5:18:c2:85:18:63:d5:68:3a:17:77:2f:26:d4:90:fc:ea: 5a:e4:01:00:b9:d7:a9:cc:d8:3e:ac:92:09:0c:79:33:3f:c8: 4e:a2:d1:fb:75:41:30:e9:b4:17:5e:55:44:23:d6:79:ef:f2: 7c:ed:d2:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQC1w9zm5zLJOlwXF/VlrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTM0ZDRjNDM0M2NkODk5MTg5NjlkNTZkYTE4NTY3NGIx NjYzNTUwHhcNMjUxMjA2MDYwMTIzWhcNMjUxMjA3MDYwMTIzWjAzMTEwLwYDVQQD EyhmMmI5MTQxNzVhNDYzZjhlMzAwOGQ2MjM1MjQ2YWY3ZTU0OTgzYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIIAkk1Fb1xI41M2f/OEeqOmTy5S FjUYu4VXric9f0BFCf4mUN66Hm57NHdGlvCFqUIVFsJrOZSu4uRvcjEET9n7P1KF nUe86Ro5Vpf9ummmZ/yrTJMzAoThPEnzsY9DhF05eyBWXvK4LbkMLVhhKcWi1sOB 2BFCliC13ERuB24czUrhoDOJd0Ohd8059PGt88P9yXfxmn1uq3zalTvgMdeYFpKW PhPqzgiLaMcSjw+QYV7EiIs7VaiUBXEbhXqp1mp91Msqyfg5ypFCrSf8ErlZt2fd GeIayADnsczYbdouCNk1KjyIZTxfnosSruNcJ8UJouPGsaK6D9HhEyvdDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPK5FBdaRj+OMAjWI1JGr35UmDpGMB8GA1UdIwQY MBaAFPxTTUxDQ82JkYlp1W2hhWdLFmNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjIt YjRjMmRjYTU5M2IzLzEvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82MGI2MmItOGUyYy00NDNlLWExNjItYjRjMmRjYTU5M2Iz LzEvX0ZOTlRFTkR6WW1SaVduVmJhR0ZaMHNXWTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq6Cms7k vXgIg9OhuQ2LLd7DL7aONtUZQKpcGfjVoPsCow4OrazGf9VCBT/7gKqhAAPC83B+ //ojJJaJcEo54bAi3DzRz0zoksUaz0Yjm5+In4IugwucSRTSs8lg0ObgU95sDtEz WRwHRAJ2KKxXD/3gBOZMnvKn6GEIXHt40PHaDGo8mw38MozinSXevE1Jz6Z66X54 DGvUOz05vm6yxSOKODOUdbyuO81j2ZKpz7Gd0T1ldek9Lc2kh7Z2TJYrSv3i63Bf YMUYwoUYY9VoOhd3LybUkPzqWuQBALnXqczYPqySCQx5Mz/ITqLR+3VBMOm0F15V RCPWee/yfO3SvQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:39:38 2025 by rpki-client