This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft File: FGRN0KgcYwc_LFG8l24R-pxhXFE.mft (raw, json) Hash identifier: D3HiM6LL1eLJozYCNq06kj3CQ7U8qYghxSDFmlrZ/nc= Subject key identifier: 1F:36:8E:AB:9D:07:F2:AD:19:BE:AD:DF:DF:53:9E:17:1E:BA:4A:89 Authority key identifier: 14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51 Certificate issuer: /CN=14644dd0a81c63073f2c51bc976e11fa9c615c51 Certificate serial: 019AF50ABD00E5C1B7641DAA04A3D29ED325 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft Manifest number: 1763 Signing time: Sat 06 Dec 2025 19:01:52 +0000 Manifest this update: Sat 06 Dec 2025 19:01:52 +0000 Manifest next update: Sun 07 Dec 2025 19:01:52 +0000 Files and hashes: 1: FGRN0KgcYwc_LFG8l24R-pxhXFE.crl (hash: QEwUVrB9jXPrv4klJ2tu850DDVLNRkGuli8LUrlbg3A=) 2: xdBt6mgdPLmEK6zvGwvirp2QCKY.roa (hash: nTAIAin8JLzpAvSGVhNOts7eSHkAmQZF1jcZc7SgaKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:0a:bd:00:e5:c1:b7:64:1d:aa:04:a3:d2:9e:d3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14644dd0a81c63073f2c51bc976e11fa9c615c51 Validity Not Before: Dec 6 19:01:52 2025 GMT Not After : Dec 7 19:01:52 2025 GMT Subject: CN=1f368eab9d07f2ad19beaddfdf539e171eba4a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:7f:9b:e5:91:1b:5b:f8:82:37:eb:ec:e4:5e: 28:6d:a7:c1:a7:5f:29:c3:1f:95:59:b9:e2:49:ea: fb:ca:02:11:50:c6:5a:fb:4f:a2:39:b7:df:03:fc: 41:0e:3a:a8:a0:8d:d0:b0:58:34:39:6b:52:e6:67: 34:45:d9:26:e3:06:e2:26:3c:77:1d:f4:e2:1c:db: 01:ba:42:9c:b5:26:45:c5:e5:16:2e:f7:ea:1f:ef: 55:7c:fc:db:29:31:76:1f:dc:2f:01:96:d4:21:f8: 18:eb:2d:f9:fb:2a:1c:0c:1b:ce:f0:bf:0e:2e:dd: e7:68:68:3e:5c:80:8c:69:25:93:4c:af:a4:f4:9f: 13:67:1d:f1:af:55:79:68:52:d8:42:fd:03:36:eb: a6:c2:4b:96:0f:7a:b6:2c:e8:1a:ca:2f:d9:d1:38: 07:e7:dc:27:84:61:94:06:8d:d6:9d:f7:17:a3:fc: 6b:ee:40:e4:19:60:1e:16:2e:46:f1:6d:61:5d:e5: 8b:78:7f:f4:c7:eb:33:2b:cb:e2:be:d0:49:32:71: e4:14:fb:b9:ed:3d:84:70:5c:bc:2d:f0:f6:4a:da: 31:4f:06:07:65:dc:8a:6a:d7:53:5a:ab:52:27:7b: 44:01:7f:d4:ab:bb:e6:9a:3b:ad:43:20:92:05:1a: b0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:8E:AB:9D:07:F2:AD:19:BE:AD:DF:DF:53:9E:17:1E:BA:4A:89 X509v3 Authority Key Identifier: keyid:14:64:4D:D0:A8:1C:63:07:3F:2C:51:BC:97:6E:11:FA:9C:61:5C:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGRN0KgcYwc_LFG8l24R-pxhXFE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db8a11-cadd-459c-b59f-9bf37ec98bb0/1/FGRN0KgcYwc_LFG8l24R-pxhXFE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:fe:ee:ec:ea:59:c9:85:13:61:12:e0:c9:17:85:96:d9:79: bd:02:fb:33:e4:01:1a:00:8c:dd:34:2e:48:8c:72:3d:e4:28: bc:d6:91:40:ef:5d:9f:08:93:0b:9f:95:3d:43:4c:71:77:a3: 12:10:2d:32:e1:78:11:4e:ad:30:0b:5c:06:f2:d2:54:97:2b: 8e:b9:85:72:e9:68:d7:52:9f:e1:4f:52:2b:75:e3:1b:c0:63: fd:ed:42:2e:fc:19:c0:39:58:7c:fc:c9:59:c3:21:70:07:82: 55:87:85:ec:cd:f7:51:72:f2:35:e7:ad:94:2c:53:2c:e8:0f: 31:66:e8:a6:41:bb:2b:1f:07:d0:40:0d:3f:44:68:c5:e9:e1: a4:0c:33:1f:4c:2b:d8:18:f9:38:55:27:02:5c:7c:c4:a8:e6: 07:3c:29:df:b0:cc:9b:47:76:1c:9e:a6:9c:98:23:df:85:04: d5:ad:7b:55:1f:b8:ce:18:24:35:32:39:4d:fa:ff:fd:33:c8: ea:ee:b9:67:45:ad:7b:e1:e4:7c:39:e2:4e:60:b0:8e:71:9d: b4:c5:d2:01:a2:bc:2d:04:9a:7e:09:6a:02:9f:b8:01:c0:80: 42:43:5c:ba:de:57:da:c7:66:72:3a:98:2b:82:78:d1:34:14: 86:26:7c:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1Cr0A5cG3ZB2qBKPSntMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjQ0ZGQwYTgxYzYzMDczZjJjNTFiYzk3NmUxMWZhOWM2 MTVjNTEwHhcNMjUxMjA2MTkwMTUyWhcNMjUxMjA3MTkwMTUyWjAzMTEwLwYDVQQD EygxZjM2OGVhYjlkMDdmMmFkMTliZWFkZGZkZjUzOWUxNzFlYmE0YTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43+b5ZEbW/iCN+vs5F4obafBp18p wx+VWbniSer7ygIRUMZa+0+iObffA/xBDjqooI3QsFg0OWtS5mc0Rdkm4wbiJjx3 HfTiHNsBukKctSZFxeUWLvfqH+9VfPzbKTF2H9wvAZbUIfgY6y35+yocDBvO8L8O Lt3naGg+XICMaSWTTK+k9J8TZx3xr1V5aFLYQv0DNuumwkuWD3q2LOgayi/Z0TgH 59wnhGGUBo3WnfcXo/xr7kDkGWAeFi5G8W1hXeWLeH/0x+szK8vivtBJMnHkFPu5 7T2EcFy8LfD2StoxTwYHZdyKatdTWqtSJ3tEAX/Uq7vmmjutQyCSBRqwNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB82jqudB/KtGb6t399TnhceukqJMB8GA1UdIwQY MBaAFBRkTdCoHGMHPyxRvJduEfqcYVxRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kYjhhMTEtY2FkZC00NTljLWI1OWYt OWJmMzdlYzk4YmIwLzEvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9kYjhhMTEtY2FkZC00NTljLWI1OWYtOWJmMzdlYzk4YmIw LzEvRkdSTjBLZ2NZd2NfTEZHOGwyNFItcHhoWEZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS/7u7OpZ yYUTYRLgyReFltl5vQL7M+QBGgCM3TQuSIxyPeQovNaRQO9dnwiTC5+VPUNMcXej EhAtMuF4EU6tMAtcBvLSVJcrjrmFculo11Kf4U9SK3XjG8Bj/e1CLvwZwDlYfPzJ WcMhcAeCVYeF7M33UXLyNeetlCxTLOgPMWbopkG7Kx8H0EANP0RoxenhpAwzH0wr 2Bj5OFUnAlx8xKjmBzwp37DMm0d2HJ6mnJgj34UE1a17VR+4zhgkNTI5Tfr//TPI 6u65Z0Wte+HkfDniTmCwjnGdtMXSAaK8LQSafglqAp+4AcCAQkNcut5X2sdmcjqY K4J40TQUhiZ8rA== -----END CERTIFICATE-----Generated at Sat Dec 6 22:33:18 2025 by rpki-client