This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft File: FqThByM1EnDNjJzGSwlkiOZOIw4.mft (raw, json) Hash identifier: 4vj5PzgJ6hiw22eQma9zm038q9cXJupPVLKmWqDS8CU= Subject key identifier: 5B:BF:7C:9D:88:D4:D1:9F:35:87:5B:9B:8A:0F:90:11:8E:1E:C8:44 Authority key identifier: 16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E Certificate issuer: /CN=16a4e10723351270cd8c9cc64b096488e64e230e Certificate serial: 019AF208ED2913518E430BAE726F7C0217B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft Manifest number: 08D2 Signing time: Sat 06 Dec 2025 05:01:02 +0000 Manifest this update: Sat 06 Dec 2025 05:01:02 +0000 Manifest next update: Sun 07 Dec 2025 05:01:02 +0000 Files and hashes: 1: FqThByM1EnDNjJzGSwlkiOZOIw4.crl (hash: bFUtpuj9IW+SaaV8qMJy0GqBUoJ2CZcVUFziyeBE5Xg=) 2: LHS-1GPmf3JlxOhkC8EvvEXsIio.roa (hash: qJmDzf2hiWRAwgR4H4d0P3HUtRpMHlkEr8kbVnNHB5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:ed:29:13:51:8e:43:0b:ae:72:6f:7c:02:17:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a4e10723351270cd8c9cc64b096488e64e230e Validity Not Before: Dec 6 05:01:02 2025 GMT Not After : Dec 7 05:01:02 2025 GMT Subject: CN=5bbf7c9d88d4d19f35875b9b8a0f90118e1ec844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:25:35:c8:6b:41:6e:40:7d:14:68:dd:d2:d3: 57:cd:e7:f8:26:82:0d:0e:fd:5c:59:5a:f4:8f:e6: 1f:e9:a2:06:e3:31:88:e2:6e:c2:c0:55:1b:6e:f5: 57:a4:a6:da:f4:3c:2c:fc:6f:53:3c:04:bb:17:98: 8b:0a:55:5b:ec:f6:d4:61:6a:7f:c1:b8:a9:96:15: f3:24:8f:32:66:96:3c:e6:a4:cc:14:d0:8e:73:8f: 6c:e6:49:73:6f:c7:6a:20:6c:f3:60:b0:b6:f3:a6: 4a:7d:75:6f:33:d6:69:18:6e:e9:c9:d6:f4:aa:3f: c1:19:20:6d:99:aa:28:6e:2d:6f:47:ae:94:8a:c9: cf:fd:11:81:68:39:88:bc:32:f1:25:95:8a:dd:78: 7a:70:47:1e:74:e0:10:05:e2:0c:9c:f2:a5:d0:80: 62:e8:8d:1a:b2:2c:f7:5a:af:79:09:d3:e9:00:32: 13:eb:bc:00:3f:4e:70:86:1b:3b:30:58:6b:e5:b7: 9a:62:9c:60:74:79:c8:cf:9b:3a:ca:80:1c:53:79: aa:9d:60:c3:ae:5b:37:3f:ce:17:89:9b:2e:ba:76: 5d:4e:f4:70:1d:98:70:f1:f5:1c:fc:7c:31:b6:17: c1:1e:e4:e6:03:04:fc:b1:48:5e:72:9d:ee:41:0a: 75:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BF:7C:9D:88:D4:D1:9F:35:87:5B:9B:8A:0F:90:11:8E:1E:C8:44 X509v3 Authority Key Identifier: keyid:16:A4:E1:07:23:35:12:70:CD:8C:9C:C6:4B:09:64:88:E6:4E:23:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqThByM1EnDNjJzGSwlkiOZOIw4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/275dc5-6f15-45fe-941f-9b64444ff688/1/FqThByM1EnDNjJzGSwlkiOZOIw4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:76:83:f4:83:15:74:ec:e0:61:5c:ca:2b:82:b7:e1:c6:0b: b0:7f:db:8a:b5:3f:b8:77:a1:d7:75:43:38:59:61:a3:37:fe: 47:8e:a5:d1:85:08:90:39:1c:61:91:f7:25:7a:f8:40:01:e8: f0:62:5f:18:19:cb:6a:82:50:4d:69:5b:4f:de:3e:9f:7e:e6: c4:31:31:2c:32:02:33:70:bc:25:5d:22:a7:f8:c2:23:0a:51: 4d:5e:aa:54:9f:2a:55:94:d8:28:f6:28:a7:0d:6c:e2:69:bf: e8:ad:99:c1:53:2b:a3:d0:8b:ab:f4:b7:a6:d3:e1:d4:76:04: b0:88:b9:6f:15:d5:f6:18:dc:09:71:e8:b1:f0:f6:b0:29:eb: 45:2e:de:88:c9:60:e8:b8:9e:ac:f3:3b:47:ac:9f:99:db:01: f0:0a:17:01:78:39:23:52:79:2d:5d:c6:b9:b8:67:d1:25:9d: df:58:09:cd:26:de:27:41:25:bf:f1:e0:34:01:b1:1a:4a:9c: c9:11:01:ce:69:a9:9c:18:85:85:55:33:de:58:53:9e:2c:1a: b2:b4:4d:35:6c:7a:56:71:c0:ba:74:11:ae:83:64:07:d5:58: 86:01:a5:8a:53:26:dd:6d:2b:9b:91:18:65:1e:fa:4a:88:39: f9:f2:76:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCO0pE1GOQwuucm98Ahe5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTRlMTA3MjMzNTEyNzBjZDhjOWNjNjRiMDk2NDg4ZTY0 ZTIzMGUwHhcNMjUxMjA2MDUwMTAyWhcNMjUxMjA3MDUwMTAyWjAzMTEwLwYDVQQD Eyg1YmJmN2M5ZDg4ZDRkMTlmMzU4NzViOWI4YTBmOTAxMThlMWVjODQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyU1yGtBbkB9FGjd0tNXzef4JoIN Dv1cWVr0j+Yf6aIG4zGI4m7CwFUbbvVXpKba9Dws/G9TPAS7F5iLClVb7PbUYWp/ wbiplhXzJI8yZpY85qTMFNCOc49s5klzb8dqIGzzYLC286ZKfXVvM9ZpGG7pydb0 qj/BGSBtmaoobi1vR66UisnP/RGBaDmIvDLxJZWK3Xh6cEcedOAQBeIMnPKl0IBi 6I0asiz3Wq95CdPpADIT67wAP05whhs7MFhr5beaYpxgdHnIz5s6yoAcU3mqnWDD rls3P84XiZsuunZdTvRwHZhw8fUc/HwxthfBHuTmAwT8sUhecp3uQQp1XQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFu/fJ2I1NGfNYdbm4oPkBGOHshEMB8GA1UdIwQY MBaAFBak4QcjNRJwzYycxksJZIjmTiMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYt OWI2NDQ0NGZmNjg4LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC8yNzVkYzUtNmYxNS00NWZlLTk0MWYtOWI2NDQ0NGZmNjg4 LzEvRnFUaEJ5TTFFbkROakp6R1N3bGtpT1pPSXc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnaD9IMV dOzgYVzKK4K34cYLsH/birU/uHeh13VDOFlhozf+R46l0YUIkDkcYZH3JXr4QAHo 8GJfGBnLaoJQTWlbT94+n37mxDExLDICM3C8JV0ip/jCIwpRTV6qVJ8qVZTYKPYo pw1s4mm/6K2ZwVMro9CLq/S3ptPh1HYEsIi5bxXV9hjcCXHosfD2sCnrRS7eiMlg 6LierPM7R6yfmdsB8AoXAXg5I1J5LV3Gubhn0SWd31gJzSbeJ0Elv/HgNAGxGkqc yREBzmmpnBiFhVUz3lhTniwasrRNNWx6VnHAunQRroNkB9VYhgGlilMm3W0rm5EY ZR76Sog5+fJ2Mg== -----END CERTIFICATE-----Generated at Sat Dec 6 11:01:09 2025 by rpki-client