This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft File: FUA-FXyC9176fFSpvH0NG_AbHK4.mft (raw, json) Hash identifier: maYtd4C50OY3qF4DwXXjWl42UQkdXZit9ozytdIKVOQ= Subject key identifier: C8:5B:75:EF:D9:B5:F6:23:87:95:3D:AD:C6:9B:63:6D:CF:67:4C:ED Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae Certificate serial: 019AF3F741E47FB8D1361EE26AC60BD41736 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft Manifest number: 1765 Signing time: Sat 06 Dec 2025 14:00:58 +0000 Manifest this update: Sat 06 Dec 2025 14:00:58 +0000 Manifest next update: Sun 07 Dec 2025 14:00:58 +0000 Files and hashes: 1: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (hash: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=) 2: FUA-FXyC9176fFSpvH0NG_AbHK4.crl (hash: TPg7BdEBk+uEsp8sDL9kJTP6/o0Lqkpmgc5xxrOpIL4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:41:e4:7f:b8:d1:36:1e:e2:6a:c6:0b:d4:17:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae Validity Not Before: Dec 6 14:00:58 2025 GMT Not After : Dec 7 14:00:58 2025 GMT Subject: CN=c85b75efd9b5f62387953dadc69b636dcf674ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b9:8a:5d:de:68:a0:f4:d4:91:90:c1:a5:22: 1c:0b:c8:6b:7f:33:40:70:09:8e:ea:c6:13:91:a4: ad:7d:96:e3:79:7b:e3:93:6b:3d:24:75:77:32:8b: bf:d6:fa:33:9d:14:d3:04:7e:f3:ea:77:37:29:c0: 5e:ab:87:df:5a:06:cd:ec:0b:7a:1c:5b:86:98:75: 4b:92:74:d5:af:76:8b:0f:92:a3:75:34:59:4a:91: a5:53:e7:ff:13:b6:e6:f5:7d:8c:b9:0e:ab:91:46: 98:3c:45:23:69:fa:08:ef:70:7b:51:bd:14:69:05: 04:fc:40:0a:20:8b:99:fd:8f:ce:2e:92:b8:4e:cc: a9:0d:b1:0a:fd:99:e7:84:11:73:fc:0a:76:6e:6a: df:83:08:18:7b:39:91:89:ec:27:12:22:71:21:cc: 8b:64:f1:8d:90:f5:c9:2b:81:91:e9:28:87:c9:13: bc:2f:9a:78:55:04:fb:d2:b6:4e:5f:e2:cd:42:64: 42:00:a3:cd:f5:4c:94:cb:01:44:2a:97:c0:48:52: be:07:00:81:25:c6:8e:57:af:df:0c:4f:54:5a:a3: 29:6e:5b:61:9e:b5:69:bb:34:8e:07:a1:a2:f4:6d: 18:85:83:26:a9:cb:88:e8:36:ed:3a:9c:4c:a8:a1: bb:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:5B:75:EF:D9:B5:F6:23:87:95:3D:AD:C6:9B:63:6D:CF:67:4C:ED X509v3 Authority Key Identifier: keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c1:9d:35:cb:26:07:02:2e:b7:bc:77:dd:77:ce:65:13:d6: 48:15:8b:17:87:a8:25:6c:b4:21:71:24:dd:a2:c5:a6:88:cc: c3:0f:1f:33:0a:91:52:73:58:86:ee:27:17:63:bd:af:5e:11: 1d:eb:7b:f8:a0:31:da:3b:bc:d9:f8:69:21:3c:12:10:df:a3: de:90:3c:eb:de:7d:95:17:49:57:a4:4a:97:bb:4a:d8:8a:d8: a6:6c:01:17:f3:14:39:ec:7b:c5:05:8e:f8:e5:63:01:9e:7e: bc:4b:34:cd:7a:33:a9:8b:d0:a6:f3:f8:b2:9d:20:7a:31:67: bc:82:6c:d3:2d:71:ef:c1:f9:11:05:c4:6a:d8:3f:f7:ac:c8: a3:e3:0a:69:81:ef:34:85:7f:9f:77:e8:bf:18:4a:00:69:7a: 6a:8e:7f:bd:13:55:4b:75:97:b2:1a:bb:07:09:74:f3:02:27: ef:fa:8a:55:43:d0:25:5b:65:2b:6d:98:cf:1c:99:ac:b7:d3: 84:cb:83:36:40:61:a0:d3:ec:5a:07:b1:8e:df:b0:b5:64:90: 12:54:b2:1a:76:6a:db:0a:ef:c9:ea:30:f7:fc:de:97:ec:8f: be:5e:d1:1d:ec:be:d1:a4:07:5b:a2:c7:35:3d:f0:76:a6:50: 22:83:02:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90Hkf7jRNh7iasYL1Bc2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NDAzZTE1N2M4MmY3NWVmYTdjNTRhOWJjN2QwZDFiZjAx YjFjYWUwHhcNMjUxMjA2MTQwMDU4WhcNMjUxMjA3MTQwMDU4WjAzMTEwLwYDVQQD EyhjODViNzVlZmQ5YjVmNjIzODc5NTNkYWRjNjliNjM2ZGNmNjc0Y2VkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLmKXd5ooPTUkZDBpSIcC8hrfzNA cAmO6sYTkaStfZbjeXvjk2s9JHV3Mou/1voznRTTBH7z6nc3KcBeq4ffWgbN7At6 HFuGmHVLknTVr3aLD5KjdTRZSpGlU+f/E7bm9X2MuQ6rkUaYPEUjafoI73B7Ub0U aQUE/EAKIIuZ/Y/OLpK4TsypDbEK/ZnnhBFz/Ap2bmrfgwgYezmRiewnEiJxIcyL ZPGNkPXJK4GR6SiHyRO8L5p4VQT70rZOX+LNQmRCAKPN9UyUywFEKpfASFK+BwCB JcaOV6/fDE9UWqMpblthnrVpuzSOB6Gi9G0YhYMmqcuI6DbtOpxMqKG7rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMhbde/ZtfYjh5U9rcabY23PZ0ztMB8GA1UdIwQY MBaAFBVAPhV8gvde+nxUqbx9DRvwGxyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUt MzM0Zjk0MjkyNDhlLzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUtMzM0Zjk0MjkyNDhl LzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcGdNcsm BwIut7x33XfOZRPWSBWLF4eoJWy0IXEk3aLFpojMww8fMwqRUnNYhu4nF2O9r14R Het7+KAx2ju82fhpITwSEN+j3pA86959lRdJV6RKl7tK2IrYpmwBF/MUOex7xQWO +OVjAZ5+vEs0zXozqYvQpvP4sp0gejFnvIJs0y1x78H5EQXEatg/96zIo+MKaYHv NIV/n3fovxhKAGl6ao5/vRNVS3WXshq7Bwl08wIn7/qKVUPQJVtlK22YzxyZrLfT hMuDNkBhoNPsWgexjt+wtWSQElSyGnZq2wrvyeow9/zel+yPvl7RHey+0aQHW6LH NT3wdqZQIoMC9Q== -----END CERTIFICATE-----Generated at Sat Dec 6 23:45:59 2025 by rpki-client