This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft File: FGK93WyF9js9vnfnrIVJwm_m8-w.mft (raw, json) Hash identifier: +Nh7RxiSR3LzaEVOBslygEjxm2PI+Uf0yhLfFrEFnkY= Subject key identifier: C1:9F:B7:5B:4B:BB:DA:64:D6:5C:77:D8:CD:72:B3:56:F0:4F:20:28 Authority key identifier: 14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC Certificate issuer: /CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec Certificate serial: 019AF208F2D50A7E315DAAC664EC3835CE72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft Manifest number: 124F Signing time: Sat 06 Dec 2025 05:01:03 +0000 Manifest this update: Sat 06 Dec 2025 05:01:03 +0000 Manifest next update: Sun 07 Dec 2025 05:01:03 +0000 Files and hashes: 1: FGK93WyF9js9vnfnrIVJwm_m8-w.crl (hash: mFSQ7XvMop7UwMR9eFrI8RVKNI2HK/2dtg4tSVsH4XU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:f2:d5:0a:7e:31:5d:aa:c6:64:ec:38:35:ce:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1462bddd6c85f63b3dbe77e7ac8549c26fe6f3ec Validity Not Before: Dec 6 05:01:03 2025 GMT Not After : Dec 7 05:01:03 2025 GMT Subject: CN=c19fb75b4bbbda64d65c77d8cd72b356f04f2028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:36:7d:e5:33:f0:52:d2:04:43:cc:c7:a9:9f: 0b:e6:ba:bf:05:e5:a7:76:c9:c5:b9:dd:27:a7:50: 5c:44:5c:ab:ef:ea:a5:b1:4f:93:32:f0:61:67:5a: 9d:76:84:53:af:1a:5c:ec:e0:b9:e7:d6:24:78:ed: 3a:12:16:9f:2d:3b:e5:61:28:c4:f9:2b:5b:2a:ce: 8a:97:b8:43:1c:0c:44:a1:a5:c4:f7:64:8c:aa:23: c6:a7:c0:c0:28:f4:62:a2:f9:0a:6f:75:a0:ff:e3: a2:b2:d7:2d:80:20:86:fd:8c:a5:51:e6:a5:76:10: d1:8f:14:4b:60:a9:f0:1e:66:d6:db:b8:7a:ae:9e: d2:18:35:13:92:00:a4:f1:17:fe:f3:e0:d7:8a:82: 5d:03:1d:7d:02:6a:0b:c1:59:86:4d:d0:ed:e7:4a: 9e:ec:f1:56:71:d6:0e:75:ca:d4:8f:d6:01:a8:31: c2:9b:3b:82:96:31:86:e6:f7:15:c7:fa:da:0f:b9: a3:71:a0:e8:0e:63:0e:95:0a:71:d6:57:af:d4:29: 96:25:5b:4b:9e:2b:df:0f:b5:d6:2b:b7:0f:a4:5e: 7e:2f:ce:57:06:20:40:c1:26:86:db:3c:9b:d4:8c: 2e:2c:69:cb:96:f9:d6:84:eb:ad:eb:43:85:cd:b0: 09:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:B7:5B:4B:BB:DA:64:D6:5C:77:D8:CD:72:B3:56:F0:4F:20:28 X509v3 Authority Key Identifier: keyid:14:62:BD:DD:6C:85:F6:3B:3D:BE:77:E7:AC:85:49:C2:6F:E6:F3:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGK93WyF9js9vnfnrIVJwm_m8-w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/098f6b-47ce-41fc-8cdd-67a8a0e7aca9/1/FGK93WyF9js9vnfnrIVJwm_m8-w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:ff:71:25:a3:a5:47:38:dd:77:27:d7:61:98:99:a9:59:7c: c0:db:3f:7e:b0:0f:a6:04:8b:ff:3f:bb:c4:83:c8:f7:71:d3: a8:f3:27:67:0d:38:79:dd:f6:86:03:d2:f6:05:a6:bf:d3:e3: 86:24:cf:2b:57:f5:19:cb:c1:2c:aa:0a:03:62:01:c9:2e:28: 43:e3:d5:d2:9c:db:6c:90:28:fe:94:fd:50:56:8f:33:cc:65: 32:03:58:6c:59:d4:19:3f:7c:80:c1:ef:e0:db:b6:52:cf:3e: d0:2b:f6:45:6e:11:5b:d3:2e:f6:59:14:0d:1e:a9:cb:25:6d: 6e:6c:d0:70:d6:cc:c2:ce:45:5f:ab:21:87:53:94:e3:7e:3c: e1:5c:65:2c:67:1b:e0:05:b6:b0:f3:0d:6d:e1:12:55:29:5f: 80:f5:3e:74:91:34:55:fc:5e:21:b3:df:15:0a:c6:71:84:b9: 72:7a:c8:4d:27:5a:25:fe:9d:fe:37:5e:8b:bc:88:73:b8:1f: 12:ff:8d:63:96:74:fc:06:50:1a:0b:16:3c:ec:73:79:4b:f6: 55:47:68:b3:63:4f:61:59:9e:12:55:49:ca:1b:43:09:16:e8: e3:21:e9:b6:aa:1e:d1:11:e8:3c:a2:33:af:b0:2a:fa:d5:6e: 73:cf:4a:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCPLVCn4xXarGZOw4Nc5yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjJiZGRkNmM4NWY2M2IzZGJlNzdlN2FjODU0OWMyNmZl NmYzZWMwHhcNMjUxMjA2MDUwMTAzWhcNMjUxMjA3MDUwMTAzWjAzMTEwLwYDVQQD EyhjMTlmYjc1YjRiYmJkYTY0ZDY1Yzc3ZDhjZDcyYjM1NmYwNGYyMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zZ95TPwUtIEQ8zHqZ8L5rq/BeWn dsnFud0np1BcRFyr7+qlsU+TMvBhZ1qddoRTrxpc7OC559YkeO06EhafLTvlYSjE +StbKs6Kl7hDHAxEoaXE92SMqiPGp8DAKPRiovkKb3Wg/+OistctgCCG/YylUeal dhDRjxRLYKnwHmbW27h6rp7SGDUTkgCk8Rf+8+DXioJdAx19AmoLwVmGTdDt50qe 7PFWcdYOdcrUj9YBqDHCmzuCljGG5vcVx/raD7mjcaDoDmMOlQpx1lev1CmWJVtL nivfD7XWK7cPpF5+L85XBiBAwSaG2zyb1IwuLGnLlvnWhOut60OFzbAJRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMGft1tLu9pk1lx32M1ys1bwTyAoMB8GA1UdIwQY MBaAFBRivd1shfY7Pb5356yFScJv5vPsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi8wOThmNmItNDdjZS00MWZjLThjZGQt NjdhOGEwZTdhY2E5LzEvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi8wOThmNmItNDdjZS00MWZjLThjZGQtNjdhOGEwZTdhY2E5 LzEvRkdLOTNXeUY5anM5dm5mbnJJVkp3bV9tOC13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEP9xJaOl RzjddyfXYZiZqVl8wNs/frAPpgSL/z+7xIPI93HTqPMnZw04ed32hgPS9gWmv9Pj hiTPK1f1GcvBLKoKA2IByS4oQ+PV0pzbbJAo/pT9UFaPM8xlMgNYbFnUGT98gMHv 4Nu2Us8+0Cv2RW4RW9Mu9lkUDR6pyyVtbmzQcNbMws5FX6shh1OU43484VxlLGcb 4AW2sPMNbeESVSlfgPU+dJE0VfxeIbPfFQrGcYS5cnrITSdaJf6d/jdei7yIc7gf Ev+NY5Z0/AZQGgsWPOxzeUv2VUdos2NPYVmeElVJyhtDCRbo4yHptqoe0RHoPKIz r7Aq+tVuc89KzQ== -----END CERTIFICATE-----Generated at Sat Dec 6 13:14:57 2025 by rpki-client