This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json) Hash identifier: 7bBrr+L4qcFKIX5eusO7JO6tW/Sd5qIlV7lXrYU/M9s= Subject key identifier: FF:59:57:CE:97:D3:09:3E:D2:9B:62:B1:ED:08:0C:C8:2A:BF:C2:BB Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Certificate serial: 019AF65389CF25FCAC305EEA06FAEC93A124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft Manifest number: 16F4 Signing time: Sun 07 Dec 2025 01:01:01 +0000 Manifest this update: Sun 07 Dec 2025 01:01:01 +0000 Manifest next update: Mon 08 Dec 2025 01:01:01 +0000 Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: fGdpeP3Rx/V0k6BJdGTjptQnes6guSmOuv8qV0HbnV8=) 2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f6:53:89:cf:25:fc:ac:30:5e:ea:06:fa:ec:93:a1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Validity Not Before: Dec 7 01:01:01 2025 GMT Not After : Dec 8 01:01:01 2025 GMT Subject: CN=ff5957ce97d3093ed29b62b1ed080cc82abfc2bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2a:a6:8f:7e:4a:79:46:18:35:4b:87:b1:70: df:09:47:63:fd:82:fb:03:04:5f:7f:8c:3f:b1:43: a0:2c:fc:53:0a:74:a7:99:a0:78:c5:02:66:d1:7c: d4:a2:ae:e2:92:0a:60:24:df:8e:45:ef:ad:e4:1a: ce:8a:37:84:71:6a:c9:78:44:1a:c3:b3:da:b0:45: 53:c1:7b:66:10:be:d7:2d:fa:8c:75:f8:ad:42:a6: 8f:e6:6b:37:24:3e:6a:e6:e2:a9:55:17:a1:6f:07: 1b:12:74:c8:b9:63:22:c6:dd:95:7c:92:9f:f1:6e: 4b:f8:5a:ec:a1:0a:f7:8c:f4:7f:cf:4e:2e:4c:82: e4:c2:40:79:1a:79:83:2d:ff:19:4e:bc:ee:6f:e1: 11:13:d1:91:bf:af:1e:4a:27:3e:16:74:f8:c9:50: 9e:f8:bd:5f:31:e3:fe:74:cf:64:73:49:64:61:42: 13:1e:00:b7:a4:a7:c2:61:33:95:8f:c8:89:3a:4c: b1:29:62:7b:2a:89:71:a9:a6:98:83:7b:15:b7:3e: 79:b0:49:7f:25:c7:c8:8b:49:af:96:07:72:59:7c: 15:a1:cc:4a:eb:83:af:91:68:f1:08:c2:32:d8:24: 90:4f:46:44:d1:c1:52:f0:f0:a6:b2:10:ac:e0:18: 24:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:59:57:CE:97:D3:09:3E:D2:9B:62:B1:ED:08:0C:C8:2A:BF:C2:BB X509v3 Authority Key Identifier: keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:99:fc:45:dc:b6:2f:b2:d9:01:67:0a:ac:2d:24:f0:16:2c: 4d:63:56:07:9c:e5:6e:9b:4e:0c:47:b4:da:56:14:8c:e6:0f: 1e:d4:5b:c7:fe:80:1c:3a:49:69:65:4f:5b:2b:12:5e:53:31: 6b:1c:72:a1:a5:d7:a3:56:d9:94:8e:16:98:e0:21:97:00:f6: 94:ca:45:78:f8:c5:84:d9:ab:c1:2e:3a:bb:53:57:d4:6d:2b: c2:d3:fd:f8:d2:80:08:2a:81:02:b6:83:eb:5e:73:49:be:ce: 81:de:b6:d9:84:03:4b:93:0c:e5:14:a6:27:0f:36:c1:61:85: a9:5a:f8:86:2b:77:5f:43:fa:19:6b:9b:80:6d:ee:80:98:b2: 29:8e:05:09:9a:81:f8:ba:1f:ab:fe:b8:0d:cd:34:df:5a:bd: 55:26:06:99:e4:86:37:60:e8:41:d1:6e:d7:f4:61:f6:bf:fb: 0b:86:40:6d:0a:d5:39:f6:5b:5c:6a:93:46:91:db:8b:5c:91: da:8d:88:9b:2f:be:64:76:44:5b:5f:af:69:25:37:de:f4:d5: 0b:05:48:e9:e5:66:a5:ce:df:72:c3:56:f8:77:e9:e2:a2:1d: 51:97:67:59:51:c6:60:f1:19:51:21:1f:7d:67:bf:1f:ad:05: a6:59:e8:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr2U4nPJfysMF7qBvrsk6EkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDk0YTZiMzA5MjBkMWY3YTJkMTUxNzFiNTA4ZjkyMjY2 NDc2ZTMwHhcNMjUxMjA3MDEwMTAxWhcNMjUxMjA4MDEwMTAxWjAzMTEwLwYDVQQD EyhmZjU5NTdjZTk3ZDMwOTNlZDI5YjYyYjFlZDA4MGNjODJhYmZjMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCqmj35KeUYYNUuHsXDfCUdj/YL7 AwRff4w/sUOgLPxTCnSnmaB4xQJm0XzUoq7ikgpgJN+ORe+t5BrOijeEcWrJeEQa w7PasEVTwXtmEL7XLfqMdfitQqaP5ms3JD5q5uKpVRehbwcbEnTIuWMixt2VfJKf 8W5L+FrsoQr3jPR/z04uTILkwkB5GnmDLf8ZTrzub+ERE9GRv68eSic+FnT4yVCe +L1fMeP+dM9kc0lkYUITHgC3pKfCYTOVj8iJOkyxKWJ7KolxqaaYg3sVtz55sEl/ JcfIi0mvlgdyWXwVocxK64OvkWjxCMIy2CSQT0ZE0cFS8PCmshCs4BgkhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP9ZV86X0wk+0ptise0IDMgqv8K7MB8GA1UdIwQY MBaAFBTZSmswkg0fei0VFxtQj5ImZHbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQt ZjJiMjJjNjlkNWZjLzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQtZjJiMjJjNjlkNWZj LzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc5n8Rdy2 L7LZAWcKrC0k8BYsTWNWB5zlbptODEe02lYUjOYPHtRbx/6AHDpJaWVPWysSXlMx axxyoaXXo1bZlI4WmOAhlwD2lMpFePjFhNmrwS46u1NX1G0rwtP9+NKACCqBAraD 615zSb7Ogd622YQDS5MM5RSmJw82wWGFqVr4hit3X0P6GWubgG3ugJiyKY4FCZqB +Lofq/64Dc0031q9VSYGmeSGN2DoQdFu1/Rh9r/7C4ZAbQrVOfZbXGqTRpHbi1yR 2o2Imy++ZHZEW1+vaSU33vTVCwVI6eVmpc7fcsNW+Hfp4qIdUZdnWVHGYPEZUSEf fWe/H60Fplno/A== -----END CERTIFICATE-----Generated at Sun Dec 7 09:21:04 2025 by rpki-client