This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft File: FzTbXEHnEbc9jynawS6bg2TNH70.mft (raw, json) Hash identifier: O6uqMhl/Pvbcz6x54k2xQYT+LiJLC7TwPV7Z64quQic= Subject key identifier: 9B:41:63:F0:2A:E5:C6:F2:A5:4C:1A:BC:25:B5:1C:67:BE:B6:EE:C0 Authority key identifier: 17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD Certificate issuer: /CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd Certificate serial: 019AF31C85A76F3AC6A291B756E16447CBEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft Manifest number: 16F2 Signing time: Sat 06 Dec 2025 10:02:03 +0000 Manifest this update: Sat 06 Dec 2025 10:02:03 +0000 Manifest next update: Sun 07 Dec 2025 10:02:03 +0000 Files and hashes: 1: FzTbXEHnEbc9jynawS6bg2TNH70.crl (hash: 5ocPtDSUBzjkpEu2UkKkL4jflSK6txNPt5RSJVs/X6w=) 2: _ryT7JJRyl2zbDlcHLiieOVaWDE.roa (hash: aYopHcEKoiKmgUw0u7ZqiunqjMA1+tPcCa/wAYiX86g=) 3: cmxdqS626N731JSDXMkhCrtA4_Q.roa (hash: LRekbyCIvJRl2MojJwg69VWuVHL2U6Aun+QU7GJY++E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 10:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:1c:85:a7:6f:3a:c6:a2:91:b7:56:e1:64:47:cb:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1734db5c41e711b73d8f29dac12e9b8364cd1fbd Validity Not Before: Dec 6 10:02:03 2025 GMT Not After : Dec 7 10:02:03 2025 GMT Subject: CN=9b4163f02ae5c6f2a54c1abc25b51c67beb6eec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c9:a8:ba:f6:d9:2f:d0:ef:eb:e9:dc:b1:bd: 01:e1:9f:c7:5f:3f:27:44:ad:df:55:72:03:e7:ab: 50:57:e5:ec:dd:c4:02:c9:de:81:76:c5:b6:67:76: f3:f6:da:f7:48:c4:67:c7:4e:b6:dd:35:45:7c:d1: d0:f3:87:eb:51:70:d4:af:4a:80:1f:4d:ea:70:52: 13:6f:63:d5:4f:34:3e:09:98:11:3a:3e:ba:9d:1e: b7:e4:28:ce:32:c1:18:c1:54:37:61:ca:a0:1c:6b: 69:15:7b:0c:59:26:6c:e0:36:19:45:91:82:a7:fc: 03:85:06:14:4b:e5:17:f5:23:38:ed:6a:51:09:01: ae:eb:3a:8e:0a:1e:ab:6f:93:ea:86:98:79:bc:d2: c6:04:fe:27:46:b9:2f:35:90:d2:39:31:cb:2d:84: ce:07:62:08:26:19:85:9c:b2:a7:12:21:f8:7e:a9: 88:57:8f:40:95:fd:e7:06:f0:15:9a:35:04:be:f8: ca:31:85:86:3d:38:e7:c3:dc:f6:cc:3e:53:83:3a: 84:1f:a9:70:a3:f6:36:88:3f:0e:df:d1:21:48:09: 3b:ab:2b:81:4a:f6:15:70:7f:35:25:99:dd:c1:7a: 81:2b:a4:f3:8b:46:0f:7c:b2:68:ce:49:50:e8:47: 60:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:41:63:F0:2A:E5:C6:F2:A5:4C:1A:BC:25:B5:1C:67:BE:B6:EE:C0 X509v3 Authority Key Identifier: keyid:17:34:DB:5C:41:E7:11:B7:3D:8F:29:DA:C1:2E:9B:83:64:CD:1F:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzTbXEHnEbc9jynawS6bg2TNH70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/925259-2527-45eb-b916-5f2650c9012d/1/FzTbXEHnEbc9jynawS6bg2TNH70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:5c:14:3c:5d:90:cf:52:ef:ed:43:11:3a:f8:95:8b:ca:bd: a5:25:28:50:bf:7d:b3:72:3c:db:2d:54:a2:17:93:1e:87:71: 69:ba:62:bf:c4:ff:bc:4f:53:58:a1:a8:5f:e9:a5:a4:43:bf: 0d:f0:90:66:09:19:76:fd:76:b9:e8:c3:c5:52:a1:4f:ee:d1: bc:3e:1f:7d:f6:80:6f:c7:94:04:47:21:9b:68:f5:46:d5:57: 49:be:35:b5:8d:f2:fa:4a:ba:f6:55:5b:cc:d3:89:37:93:dc: 3d:ad:c0:4a:cb:e3:3f:a4:fb:a3:78:20:ca:fb:d5:40:d7:ab: 4f:a8:85:f6:a1:49:97:15:cb:d3:84:ae:05:8e:a0:49:2c:83: ca:8a:12:d7:30:4d:bd:f3:c2:f5:72:c2:d1:24:63:b6:3a:49: fc:07:aa:2d:27:cb:cd:fa:c3:59:a5:f2:de:53:d1:af:64:2a: 06:56:ab:f6:e1:61:45:03:57:78:a7:4d:f6:76:b5:0d:de:53: 80:05:b0:19:f0:ac:8f:06:ca:fd:92:00:1d:bc:d1:51:20:60: 45:fa:a0:4d:3d:66:a5:c4:7a:59:eb:24:cc:ce:e5:94:4a:dc: 22:32:6c:1c:6c:eb:35:de:ff:26:b6:02:71:f3:8c:2b:2e:a7: ab:f7:8a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrzHIWnbzrGopG3VuFkR8vuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MzRkYjVjNDFlNzExYjczZDhmMjlkYWMxMmU5YjgzNjRj ZDFmYmQwHhcNMjUxMjA2MTAwMjAzWhcNMjUxMjA3MTAwMjAzWjAzMTEwLwYDVQQD Eyg5YjQxNjNmMDJhZTVjNmYyYTU0YzFhYmMyNWI1MWM2N2JlYjZlZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosmouvbZL9Dv6+ncsb0B4Z/HXz8n RK3fVXID56tQV+Xs3cQCyd6BdsW2Z3bz9tr3SMRnx0623TVFfNHQ84frUXDUr0qA H03qcFITb2PVTzQ+CZgROj66nR635CjOMsEYwVQ3YcqgHGtpFXsMWSZs4DYZRZGC p/wDhQYUS+UX9SM47WpRCQGu6zqOCh6rb5Pqhph5vNLGBP4nRrkvNZDSOTHLLYTO B2IIJhmFnLKnEiH4fqmIV49Alf3nBvAVmjUEvvjKMYWGPTjnw9z2zD5TgzqEH6lw o/Y2iD8O39EhSAk7qyuBSvYVcH81JZndwXqBK6Tzi0YPfLJozklQ6EdgBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJtBY/Aq5cbypUwavCW1HGe+tu7AMB8GA1UdIwQY MBaAFBc021xB5xG3PY8p2sEum4NkzR+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYt NWYyNjUwYzkwMTJkLzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS85MjUyNTktMjUyNy00NWViLWI5MTYtNWYyNjUwYzkwMTJk LzEvRnpUYlhFSG5FYmM5anluYXdTNmJnMlROSDcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1wUPF2Q z1Lv7UMROviVi8q9pSUoUL99s3I82y1UoheTHodxabpiv8T/vE9TWKGoX+mlpEO/ DfCQZgkZdv12uejDxVKhT+7RvD4fffaAb8eUBEchm2j1RtVXSb41tY3y+kq69lVb zNOJN5PcPa3ASsvjP6T7o3ggyvvVQNerT6iF9qFJlxXL04SuBY6gSSyDyooS1zBN vfPC9XLC0SRjtjpJ/AeqLSfLzfrDWaXy3lPRr2QqBlar9uFhRQNXeKdN9na1Dd5T gAWwGfCsjwbK/ZIAHbzRUSBgRfqgTT1mpcR6WeskzM7llErcIjJsHGzrNd7/JrYC cfOMKy6nq/eK6Q== -----END CERTIFICATE-----Generated at Sat Dec 6 19:38:57 2025 by rpki-client