This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft File: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft (raw, json) Hash identifier: ZVn6pD/pa4LtnWCyrLGKFdZZ0RUTxpD8mN7uCDVm2YM= Subject key identifier: 5D:D2:24:DE:D8:BA:0E:19:08:99:67:43:87:E3:3A:51:99:CD:76:50 Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Certificate serial: 019AF24025CF4932548D1CFE5FC5F346735C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft Manifest number: 14AE Signing time: Sat 06 Dec 2025 06:01:21 +0000 Manifest this update: Sat 06 Dec 2025 06:01:21 +0000 Manifest next update: Sun 07 Dec 2025 06:01:21 +0000 Files and hashes: 1: 9LYwP72SZhTP9lZsq-7j8HuZdgM.roa (hash: G+yR0ErMQLPYRLmJwGI9EkRMjsbBolXBG62m79mi45g=) 2: FR9MfFqpLiVuFujJBtFbhJmONI4.roa (hash: E+6VeTvBdtosqoAM0l7HopHp27qrMu4a19ly9IU6g9U=) 3: Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl (hash: 1WxtVKq1BkNoSnWPtl6+QE55lsaGxibgF62OMudxAMs=) 4: a5dgM43xwH6TzzG3OU4-DU-VReU.roa (hash: lvQLcSmhppO+nBAUrEWVk8HCNuzIbjnnhIRTEmwBZUw=) 5: dK_YVUmItcs6Jo6KBWMzLehOltU.roa (hash: cxdMWN6vf7XXfhS5ABEMBqXeAf173QdfF9qlyNjA1g8=) 6: fNVPBx-nJkzMb3EbI9eFden66xI.roa (hash: 4Ma//fNnrLCw4CmoykWoEiiC3wb4lPTvORAHCvUM+U4=) 7: rrKDVy-QxSmZ2HqqmDRKJ_O3zjE.roa (hash: qQt4LgJZUrwxxbQW9H3UI+h4NYxT7FciUlDfdQlIp3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:40:25:cf:49:32:54:8d:1c:fe:5f:c5:f3:46:73:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1 Validity Not Before: Dec 6 06:01:21 2025 GMT Not After : Dec 7 06:01:21 2025 GMT Subject: CN=5dd224ded8ba0e190899674387e33a5199cd7650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:b2:b7:82:bd:3b:27:d5:f2:05:6c:93:2a:1a: 78:83:af:ea:f9:1a:a4:c6:68:d7:22:a1:98:6b:5e: 5f:e4:cf:f2:d9:60:66:82:26:91:a3:2e:d2:66:94: 7e:d2:77:9b:3a:fc:0d:7b:ce:42:ae:4a:22:59:51: ba:46:04:03:3f:21:4a:e5:39:06:a9:7f:a2:a1:1f: 83:e3:d4:b4:1e:75:cc:e4:69:9b:01:f3:1d:84:0f: 17:19:92:65:69:b8:3d:4f:69:9b:05:8a:d4:5f:37: 96:a5:2a:11:17:28:c9:25:e4:f2:8e:d3:bc:5f:75: 29:47:db:4e:92:a0:b6:e0:61:9c:91:82:fa:eb:3b: e8:a9:64:ee:e7:aa:f6:d3:24:22:f5:38:5c:6d:ed: 56:87:3e:f2:0e:ab:52:34:a9:23:c5:33:f0:c1:26: 33:5f:b3:b6:c7:36:cd:1f:21:12:bf:9e:67:8f:f3: d3:4e:5f:bd:7b:98:c6:27:82:96:cb:fe:58:79:34: f5:08:6d:c4:7c:57:eb:44:4e:c2:e5:7d:70:ad:81: 47:9e:8d:6f:e5:d1:77:3e:0f:7c:bd:e2:d5:77:3f: b6:6e:4f:14:9d:d0:01:c7:b6:00:59:2e:50:5b:54: 1e:d8:69:76:47:82:c9:09:7b:3d:7f:ae:41:19:60: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:D2:24:DE:D8:BA:0E:19:08:99:67:43:87:E3:3A:51:99:CD:76:50 X509v3 Authority Key Identifier: keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:10:d3:a6:8f:cb:1b:0b:43:6e:96:91:6c:d7:50:45:05:ce: c0:7e:9a:ed:e1:40:0c:d6:c7:7e:ae:b0:37:22:ad:87:63:22: 93:f3:05:97:f5:52:3c:82:fe:30:e4:b6:de:85:b3:9f:d6:09: 1b:b3:e8:07:38:d9:65:e7:59:69:91:e8:72:bf:ab:bf:3b:e7: 8f:fb:d0:39:ba:21:2a:e7:8a:fe:93:9f:31:b1:7f:3e:9e:f9: 90:8d:a6:3e:70:53:98:2a:22:a5:f8:2b:bc:39:bb:9a:a7:fa: 94:1b:1b:d2:3a:a6:01:ec:3d:6e:5a:fb:4c:e1:9e:da:13:24: aa:07:97:1f:57:f5:4c:db:18:8a:81:49:9a:43:ad:a0:55:9f: 0a:c2:40:b2:07:8e:44:92:08:7a:40:6e:68:3b:96:2b:d8:28: ec:3d:29:d5:0c:cc:c3:6c:bc:68:0c:c2:7e:6a:9e:1a:73:7b: 2a:c0:38:29:04:30:ae:7b:97:f0:0c:79:0b:eb:8d:e3:ca:6b: 2b:03:5a:3c:a8:62:c2:ba:73:88:b1:02:e8:57:50:d4:9a:17: ff:7c:c7:1e:44:d1:15:f3:74:7a:37:b4:79:7d:fc:3e:f9:53: 35:81:d1:22:ce:f3:08:fc:cc:6d:0f:57:36:6a:da:e2:46:43: 03:7e:26:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryQCXPSTJUjRz+X8XzRnNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5 YmViYTEwHhcNMjUxMjA2MDYwMTIxWhcNMjUxMjA3MDYwMTIxWjAzMTEwLwYDVQQD Eyg1ZGQyMjRkZWQ4YmEwZTE5MDg5OTY3NDM4N2UzM2E1MTk5Y2Q3NjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibK3gr07J9XyBWyTKhp4g6/q+Rqk xmjXIqGYa15f5M/y2WBmgiaRoy7SZpR+0nebOvwNe85CrkoiWVG6RgQDPyFK5TkG qX+ioR+D49S0HnXM5GmbAfMdhA8XGZJlabg9T2mbBYrUXzeWpSoRFyjJJeTyjtO8 X3UpR9tOkqC24GGckYL66zvoqWTu56r20yQi9Thcbe1Whz7yDqtSNKkjxTPwwSYz X7O2xzbNHyESv55nj/PTTl+9e5jGJ4KWy/5YeTT1CG3EfFfrRE7C5X1wrYFHno1v 5dF3Pg98veLVdz+2bk8UndABx7YAWS5QW1Qe2Gl2R4LJCXs9f65BGWAcSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3SJN7Yug4ZCJlnQ4fjOlGZzXZQMB8GA1UdIwQY MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt YjY5ZGNlNzU0N2ExLzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRDTpo/L GwtDbpaRbNdQRQXOwH6a7eFADNbHfq6wNyKth2Mik/MFl/VSPIL+MOS23oWzn9YJ G7PoBzjZZedZaZHocr+rvzvnj/vQObohKueK/pOfMbF/Pp75kI2mPnBTmCoipfgr vDm7mqf6lBsb0jqmAew9blr7TOGe2hMkqgeXH1f1TNsYioFJmkOtoFWfCsJAsgeO RJIIekBuaDuWK9go7D0p1QzMw2y8aAzCfmqeGnN7KsA4KQQwrnuX8Ax5C+uN48pr KwNaPKhiwrpziLEC6FdQ1JoX/3zHHkTRFfN0eje0eX38PvlTNYHRIs7zCPzMbQ9X Nmra4kZDA34mhw== -----END CERTIFICATE-----Generated at Sat Dec 6 11:06:29 2025 by rpki-client