This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft File: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft (raw, json) Hash identifier: Pc9JMXIHibNlwS/CYOgIJ8UCxvmzZzpLn2kf1rSge7Y= Subject key identifier: 43:EE:66:14:CB:8C:B1:3E:5F:6B:FE:B6:F1:F5:C9:4D:6C:81:16:91 Authority key identifier: 16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E Certificate issuer: /CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Certificate serial: 019AF2E42B4F6B4BFEFD2208684019EC4A5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft Manifest number: 07E9 Signing time: Sat 06 Dec 2025 09:00:30 +0000 Manifest this update: Sat 06 Dec 2025 09:00:30 +0000 Manifest next update: Sun 07 Dec 2025 09:00:30 +0000 Files and hashes: 1: 1-gc9D1wMAKrnlAJOxU2iS0InzTc.roa (hash: RqODY1Vf6kd5geEwqwz689tzV+KQld4BuX/kDiE/H2g=) 2: 1wmzqwE2ku8n0Mm8ErGyhHCrJOk.roa (hash: c652pSMHzVee2CwYp/svFjVJzZcqt1kjmMsHG7p6sR4=) 3: 3M77FQFV6iiOUx3kj5ltTV-Ss6g.roa (hash: ID80XwGiXRTSswVcjaFJF1FTfgWMTYqaJ3DgCgi0vSU=) 4: 7yfIJfmkQ3SPL6ztwHSsQEDFq7c.roa (hash: U9gIE3TvcsVcC8ANP/yj+2f+VDmJwysXxpIohNyNBO4=) 5: 9qU_RshPDt8npKa7LLuRKWJ4eFg.roa (hash: z8T4KAMz4z5WwuZ8X7hdFs4SqXVbIIq8ewPKx0LgVz8=) 6: FXlMAg6Tns5ug0sX3I9sZGNNPD4.roa (hash: 8+nZr8pDoLQyj2zJ+3NpzXLge4WTT12/Die6DTWaVCs=) 7: Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl (hash: MbKBAsNrg0kOtN1NrpN+kXTyNDPtHGXUdy9Zp9aGETo=) 8: J2HRCNN0O3I0ylWoGdWNujol0fA.roa (hash: rPj3oS6cRki0EPapM96ljLrY07pTqQoIZWe0btTMRN0=) 9: Ly5l7uAGGOrfvlsGGnQdz0V4nKE.roa (hash: ZxmUNWDmKGotedZO8VKzz/Oj5QRxUTc3RwaJAGYeFSE=) 10: S4vy57KePPm5skYt1swzoPGddGE.roa (hash: KQUtpTpFRREzYju49IndpBOUgh/QmNJ4Aj5rKfHkClA=) 11: VT5NTSGEDx5EgUmkbl_9I7Gr6ZQ.roa (hash: zvMGZnTSXs7rRdgQq7BTWfaj5rzWax6QH5PVbXYcxAU=) 12: nO2DISCKoX95cbSl-4IE1IdCmBM.roa (hash: RSdRSi7lQ1Dk0PK2vlKk4Ff47FnbPUTG14kEWbAzlVs=) 13: p10y8t_WBLoKxkKhbrvVO3CBo7s.roa (hash: bR+UE5G2Oqk8wUwtmF/tWOLA+Bc3PLN2bliUn37gDYg=) 14: p8XI18_G0w6VQzp-cFuSc-YU7KU.roa (hash: 5L36hI/Ib9EXnAz7w+VyYhvbv64/xZKpeIB+xqORWK4=) 15: wT7vmcLVhrxJsD9cpF_QsLflW0E.roa (hash: WkCXdJU0J3BkU37zXWAXQdEI632t1NHqwLrYDW6Qn/Y=) 16: wYgSIaQwBTuITHU0HBRQkglSG0E.roa (hash: qiaCjrygoBnt3D71M1yuQyzb1QgBc8U5I1dN3wTSJ/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:e4:2b:4f:6b:4b:fe:fd:22:08:68:40:19:ec:4a:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166afc51c922fd842fec5b0cbbd26ebdbd1a161e Validity Not Before: Dec 6 09:00:30 2025 GMT Not After : Dec 7 09:00:30 2025 GMT Subject: CN=43ee6614cb8cb13e5f6bfeb6f1f5c94d6c811691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:20:46:19:42:3d:60:c1:3d:75:f6:ce:9a:00: 9f:98:bc:7a:72:06:89:b2:a5:80:ff:8b:6f:94:9b: 13:c2:1e:1f:e8:2e:ca:79:9c:50:f5:09:2a:71:bf: 74:a0:c6:c7:8c:98:03:f1:a6:37:df:64:32:c8:2a: ed:63:91:e7:9e:78:23:82:3f:a4:61:df:bd:89:a7: c6:dc:76:b6:9f:4a:00:2f:a5:31:1b:90:ad:29:74: 27:6d:8e:2d:27:9b:9f:d9:09:7b:d5:72:a9:2b:0c: f2:67:ef:08:a8:54:a0:01:05:d5:0e:87:a8:fe:0c: 6c:6c:51:f2:3c:b6:e3:ac:b8:51:a9:95:da:0e:3d: e3:74:01:1c:72:23:b6:53:88:74:48:1f:96:43:4e: d0:09:b3:6b:8d:55:48:af:c6:83:98:06:11:af:0e: 18:17:48:92:b1:a9:66:fc:4f:35:4f:46:d7:5b:98: ec:46:55:c3:86:14:a3:c8:d6:11:8d:ad:d5:b7:03: 02:d6:7f:f8:94:5e:f8:09:fa:df:63:a8:5d:1b:0d: dc:10:2e:89:a3:3a:f9:c8:5e:5f:71:ae:ed:4f:2e: 0a:79:d9:73:43:4b:cb:a3:28:cc:53:ac:21:f3:5a: e8:03:9f:eb:2e:5b:b8:01:31:44:7a:ad:b3:d1:52: ba:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:EE:66:14:CB:8C:B1:3E:5F:6B:FE:B6:F1:F5:C9:4D:6C:81:16:91 X509v3 Authority Key Identifier: keyid:16:6A:FC:51:C9:22:FD:84:2F:EC:5B:0C:BB:D2:6E:BD:BD:1A:16:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/88c454-cbaa-43fd-b3c1-13b9110ce20c/1/Fmr8Ucki_YQv7FsMu9Juvb0aFh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:3e:71:ce:e4:34:c0:f9:a1:d6:54:60:95:63:93:a0:f4:03: 9c:f9:f1:b4:42:b9:12:f8:33:19:d7:0d:a6:ef:60:9c:05:2b: c3:ab:6b:09:05:77:31:86:78:e3:85:61:8a:86:97:d3:b6:24: 79:aa:5a:9c:10:d6:23:24:10:ce:bb:dc:e3:60:be:31:3a:d7: f2:2e:55:71:da:6e:5a:0b:20:95:bb:00:b7:00:cd:19:e1:54: 8b:b5:0e:83:0d:7f:f6:ef:02:30:3e:25:4e:57:e9:4b:8c:e4: 03:cd:b0:a6:bb:bc:2c:91:f4:14:03:ab:ea:e2:8a:02:6e:a0: 49:6d:3e:52:24:29:1f:29:c6:b4:7b:70:19:fe:43:71:f2:ad: 2c:24:9b:c7:31:a6:24:e4:2e:c1:16:d3:17:b6:ee:76:68:5e: 0e:8e:68:d8:d5:45:2b:61:89:58:14:93:33:02:82:2d:79:76: dd:81:19:63:2c:83:3a:68:cd:e7:4c:10:88:ed:77:2e:7e:bb: f6:d8:2d:b9:71:4d:aa:8a:c2:11:bc:83:d7:56:16:18:ac:f3: 37:80:fa:a1:1b:f2:51:05:dc:02:35:2c:f1:7f:0b:cf:60:e2: cf:1c:62:e6:67:36:cf:3f:49:f0:cf:0b:b3:95:72:6b:7f:02: e0:03:98:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZry5CtPa0v+/SIIaEAZ7EpfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmFmYzUxYzkyMmZkODQyZmVjNWIwY2JiZDI2ZWJkYmQx YTE2MWUwHhcNMjUxMjA2MDkwMDMwWhcNMjUxMjA3MDkwMDMwWjAzMTEwLwYDVQQD Eyg0M2VlNjYxNGNiOGNiMTNlNWY2YmZlYjZmMWY1Yzk0ZDZjODExNjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiBGGUI9YME9dfbOmgCfmLx6cgaJ sqWA/4tvlJsTwh4f6C7KeZxQ9Qkqcb90oMbHjJgD8aY332QyyCrtY5Hnnngjgj+k Yd+9iafG3Ha2n0oAL6UxG5CtKXQnbY4tJ5uf2Ql71XKpKwzyZ+8IqFSgAQXVDoeo /gxsbFHyPLbjrLhRqZXaDj3jdAEcciO2U4h0SB+WQ07QCbNrjVVIr8aDmAYRrw4Y F0iSsalm/E81T0bXW5jsRlXDhhSjyNYRja3VtwMC1n/4lF74CfrfY6hdGw3cEC6J ozr5yF5fca7tTy4KedlzQ0vLoyjMU6wh81roA5/rLlu4ATFEeq2z0VK64wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPuZhTLjLE+X2v+tvH1yU1sgRaRMB8GA1UdIwQY MBaAFBZq/FHJIv2EL+xbDLvSbr29GhYeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEt MTNiOTExMGNlMjBjLzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84OGM0NTQtY2JhYS00M2ZkLWIzYzEtMTNiOTExMGNlMjBj LzEvRm1yOFVja2lfWVF2N0ZzTXU5SnV2YjBhRmg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0D5xzuQ0 wPmh1lRglWOToPQDnPnxtEK5EvgzGdcNpu9gnAUrw6trCQV3MYZ444VhioaX07Yk eapanBDWIyQQzrvc42C+MTrX8i5VcdpuWgsglbsAtwDNGeFUi7UOgw1/9u8CMD4l TlfpS4zkA82wpru8LJH0FAOr6uKKAm6gSW0+UiQpHynGtHtwGf5DcfKtLCSbxzGm JOQuwRbTF7budmheDo5o2NVFK2GJWBSTMwKCLXl23YEZYyyDOmjN50wQiO13Ln67 9tgtuXFNqorCEbyD11YWGKzzN4D6oRvyUQXcAjUs8X8Lz2Dizxxi5mc2zz9J8M8L s5Vya38C4AOYdQ== -----END CERTIFICATE-----Generated at Sat Dec 6 12:04:51 2025 by rpki-client