This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft File: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft (raw, json) Hash identifier: P7IV6UkjOUI00GIhicQrjZ8Dnr3n08siNV1kd05N6h4= Subject key identifier: F5:E6:80:2E:9D:85:BD:53:DD:19:BC:8B:78:B5:38:A3:50:32:85:B0 Authority key identifier: 15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B Certificate issuer: /CN=156849587a23bfb5d65b2a1404082232b439271b Certificate serial: 019AF12E3E70A1C925C85C71B77F0CFE8E3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft Manifest number: 0C18 Signing time: Sat 06 Dec 2025 01:02:10 +0000 Manifest this update: Sat 06 Dec 2025 01:02:10 +0000 Manifest next update: Sun 07 Dec 2025 01:02:10 +0000 Files and hashes: 1: FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl (hash: kLwL5W6k1u8WRiW3fkhj6PHuWpMnpL1n/p1IjyQ3bQw=) 2: VZ-kHDApXcDT9_2kTleGC7kcJA4.roa (hash: 8N2QqFM6UOQbHR5Tx8BGVp4hMQ1auv8Qt97IgnTaVI0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 01:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:2e:3e:70:a1:c9:25:c8:5c:71:b7:7f:0c:fe:8e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=156849587a23bfb5d65b2a1404082232b439271b Validity Not Before: Dec 6 01:02:10 2025 GMT Not After : Dec 7 01:02:10 2025 GMT Subject: CN=f5e6802e9d85bd53dd19bc8b78b538a3503285b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9f:50:58:d3:06:64:fb:94:79:f9:27:ba:42: 4b:da:ed:f0:a4:2b:53:17:f9:1e:56:d8:c6:64:f8: 94:aa:46:c3:33:34:d5:f9:8c:5d:58:9f:47:91:14: ab:a6:02:64:c5:8e:04:b9:18:ae:4a:f4:06:7f:d9: 37:bc:02:ed:00:fe:00:69:c3:cf:7e:3d:c5:cd:c6: 91:9d:06:7b:e0:79:73:0e:ba:6f:f3:04:3d:8d:8d: ce:88:aa:1e:9f:bc:36:c1:42:58:d4:6e:9c:f3:d0: 5e:f9:34:b9:84:36:67:4a:29:e6:e4:5e:96:85:ea: 56:91:eb:1d:b2:cf:81:90:9d:5e:20:f0:0e:af:f8: 15:a5:d8:1a:58:ab:66:92:3a:20:51:60:ae:17:24: 85:df:cd:62:f0:d8:d3:86:10:d1:8d:fb:f2:7a:0e: eb:b9:59:c6:01:94:1e:6d:f5:e3:b3:2a:68:87:30: f3:19:a9:a6:4f:6f:71:85:95:9d:92:3b:83:4e:4d: 0f:5b:67:d0:09:11:20:ae:f0:68:5c:b2:3a:fe:06: eb:8f:41:26:5d:26:d2:5f:7a:03:b1:88:e9:dc:9b: 34:3b:17:38:68:48:6d:07:85:43:2d:73:f0:ac:17: ba:f2:99:52:13:5d:83:c4:a5:49:2f:5b:22:82:94: fb:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E6:80:2E:9D:85:BD:53:DD:19:BC:8B:78:B5:38:A3:50:32:85:B0 X509v3 Authority Key Identifier: keyid:15:68:49:58:7A:23:BF:B5:D6:5B:2A:14:04:08:22:32:B4:39:27:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4bf3cc-023d-4b02-8028-c59efd348158/1/FWhJWHojv7XWWyoUBAgiMrQ5Jxs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:89:4f:88:49:19:6d:fe:85:bf:54:cd:4d:71:12:aa:fe:54: 0a:09:70:dd:8e:bb:29:26:52:3f:83:a3:7e:07:67:bd:02:dd: 8c:4a:8d:56:3a:6a:73:61:3f:0f:f2:be:8b:d1:7b:1a:19:d1: 89:37:d1:f7:67:4d:a2:9a:28:7d:eb:27:ed:bd:92:ad:7d:17: c8:e0:87:cb:54:e3:65:a6:bb:91:71:3a:35:76:96:1c:bc:f0: 82:7e:c9:0c:2d:6a:50:97:07:df:48:70:36:73:41:c9:d7:a7: 0c:b1:1d:ca:ed:1a:ce:86:cf:57:ef:ba:82:1f:0f:73:6f:ae: 5c:c2:98:46:9d:f5:e8:40:c1:5b:d6:65:54:fd:b1:d0:99:b2: a8:76:4a:8e:8c:e7:c1:86:23:23:7f:ba:fe:86:f2:4a:88:d5: 1b:2b:c2:21:bb:67:22:73:29:e0:6c:26:78:06:1d:ee:85:c9: 82:0b:75:0c:dd:88:4e:c7:90:a0:87:64:5b:bc:6a:30:73:ba: 02:51:8f:e4:c9:bf:0c:50:83:98:9b:94:84:c1:53:84:a7:c0: 8a:be:5b:1b:f4:e5:0a:c1:60:21:81:d1:e9:1d:77:3f:66:40: 44:41:be:3f:fb:7f:47:c1:6a:c5:10:7c:50:47:4a:61:a3:8e: f6:2b:99:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrxLj5wocklyFxxt38M/o46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Njg0OTU4N2EyM2JmYjVkNjViMmExNDA0MDgyMjMyYjQz OTI3MWIwHhcNMjUxMjA2MDEwMjEwWhcNMjUxMjA3MDEwMjEwWjAzMTEwLwYDVQQD EyhmNWU2ODAyZTlkODViZDUzZGQxOWJjOGI3OGI1MzhhMzUwMzI4NWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJ9QWNMGZPuUefknukJL2u3wpCtT F/keVtjGZPiUqkbDMzTV+YxdWJ9HkRSrpgJkxY4EuRiuSvQGf9k3vALtAP4AacPP fj3FzcaRnQZ74HlzDrpv8wQ9jY3OiKoen7w2wUJY1G6c89Be+TS5hDZnSinm5F6W hepWkesdss+BkJ1eIPAOr/gVpdgaWKtmkjogUWCuFySF381i8NjThhDRjfvyeg7r uVnGAZQebfXjsypohzDzGammT29xhZWdkjuDTk0PW2fQCREgrvBoXLI6/gbrj0Em XSbSX3oDsYjp3Js0Oxc4aEhtB4VDLXPwrBe68plSE12DxKVJL1sigpT7FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXmgC6dhb1T3Rm8i3i1OKNQMoWwMB8GA1UdIwQY MBaAFBVoSVh6I7+11lsqFAQIIjK0OScbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgt YzU5ZWZkMzQ4MTU4LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80YmYzY2MtMDIzZC00YjAyLTgwMjgtYzU5ZWZkMzQ4MTU4 LzEvRldoSldIb2p2N1hXV3lvVUJBZ2lNclE1SnhzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4lPiEkZ bf6Fv1TNTXESqv5UCglw3Y67KSZSP4OjfgdnvQLdjEqNVjpqc2E/D/K+i9F7GhnR iTfR92dNopoofesn7b2SrX0XyOCHy1TjZaa7kXE6NXaWHLzwgn7JDC1qUJcH30hw NnNBydenDLEdyu0azobPV++6gh8Pc2+uXMKYRp316EDBW9ZlVP2x0JmyqHZKjozn wYYjI3+6/obySojVGyvCIbtnInMp4GwmeAYd7oXJggt1DN2ITseQoIdkW7xqMHO6 AlGP5Mm/DFCDmJuUhMFThKfAir5bG/TlCsFgIYHR6R13P2ZAREG+P/t/R8FqxRB8 UEdKYaOO9iuZBQ== -----END CERTIFICATE-----Generated at Sat Dec 6 07:03:30 2025 by rpki-client