This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft File: FnrFIxoNe8WCRZCgsvYh7emEdww.mft (raw, json) Hash identifier: WctxCwt/AFbpv2Kv1mGe4KkH9lGnFYd8LUGIB4FvYNs= Subject key identifier: 56:C9:B1:B6:82:2F:CD:E0:77:27:8C:D6:73:2D:DE:F9:51:AB:5D:15 Authority key identifier: 16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C Certificate issuer: /CN=167ac5231a0d7bc5824590a0b2f621ede984770c Certificate serial: 019AF23FD2E079A4480BDDB511DDAEE56FE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft Manifest number: 1226 Signing time: Sat 06 Dec 2025 06:01:00 +0000 Manifest this update: Sat 06 Dec 2025 06:01:00 +0000 Manifest next update: Sun 07 Dec 2025 06:01:00 +0000 Files and hashes: 1: CpHbUv6AMr2IBRTUslkSn14mbAM.roa (hash: hbGa8sRUPNzKoKWW9t46YLOtfBF6LvE9GQwcI4qQDDE=) 2: FnrFIxoNe8WCRZCgsvYh7emEdww.crl (hash: KqTuNVHtxkS3Kr7Jqf1x+3Kim1RZiNTeLVsQnIz3yLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:3f:d2:e0:79:a4:48:0b:dd:b5:11:dd:ae:e5:6f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=167ac5231a0d7bc5824590a0b2f621ede984770c Validity Not Before: Dec 6 06:01:00 2025 GMT Not After : Dec 7 06:01:00 2025 GMT Subject: CN=56c9b1b6822fcde077278cd6732ddef951ab5d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2d:dc:8f:40:7d:1b:ce:1a:9d:5f:7e:42:6e: 04:d3:ba:3c:20:49:ae:da:f1:d0:bc:33:69:6b:7c: a9:29:1b:da:3c:17:70:ec:2a:50:d8:a6:8a:e6:55: 15:ce:a8:7a:0a:ca:99:f3:e6:57:5e:ed:51:d0:a6: f7:20:4f:a7:cb:28:ba:0d:67:c1:39:73:af:d5:88: f5:26:bf:93:d9:49:8b:2e:1f:73:23:f5:c6:cc:08: 7a:64:91:2e:de:80:7a:0a:37:89:fb:5a:66:d5:6c: e9:5e:de:19:58:56:fd:ea:85:27:05:fb:c8:8b:0b: f7:d1:0a:1e:f1:8e:da:38:3e:27:0b:64:24:52:85: f1:5e:24:fc:d9:81:d6:ab:05:2a:ce:5c:91:5f:5b: bf:77:5c:f2:c3:e6:0f:17:17:39:d3:2d:95:f4:87: e7:0b:6b:62:93:2d:2f:2e:73:04:7f:f4:a6:50:8c: 71:11:0e:6c:a6:3c:b9:3c:28:0d:91:52:d6:7a:c7: e7:51:f2:bb:e5:81:30:08:28:7c:f8:c3:90:71:29: d0:0e:63:33:b9:08:dd:9a:de:e4:12:ac:f6:49:30: b3:8e:cd:b9:06:fc:09:70:51:c8:b5:60:22:b0:c3: 48:53:6e:12:2a:3f:fc:ac:be:6d:f9:90:91:14:a8: 0b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:C9:B1:B6:82:2F:CD:E0:77:27:8C:D6:73:2D:DE:F9:51:AB:5D:15 X509v3 Authority Key Identifier: keyid:16:7A:C5:23:1A:0D:7B:C5:82:45:90:A0:B2:F6:21:ED:E9:84:77:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnrFIxoNe8WCRZCgsvYh7emEdww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/61738e-3977-495e-ba1a-8035f2dfc1f4/1/FnrFIxoNe8WCRZCgsvYh7emEdww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:98:68:a1:31:87:51:57:c7:4a:29:71:74:7a:03:ba:0a:e2: 39:3f:2e:30:52:33:df:8b:10:8d:cc:21:70:be:55:7d:93:40: 25:55:14:87:22:ca:a2:67:20:89:d9:4c:70:0c:9f:94:47:91: 0e:88:9b:11:9c:9b:05:42:7f:ca:1b:3d:76:ef:52:7e:f0:eb: a5:96:2a:9a:31:8f:c4:eb:40:13:64:02:d6:d5:a2:5f:54:bf: 79:54:a9:4f:6d:ba:06:83:6d:a4:d3:62:67:0b:66:f0:84:b5: fb:5b:47:aa:d6:f8:ec:51:d2:8b:7f:f4:7e:c2:c5:87:2b:46: fe:14:58:f5:d3:c4:39:2a:2a:70:3c:69:a0:0b:df:d0:ac:10: 14:cf:43:f1:86:4a:c0:49:6b:65:13:90:18:f7:94:0a:84:03: 50:3e:b0:8e:97:5e:e5:3b:00:3f:54:e1:69:f1:7f:a9:ae:80: c9:ab:07:1a:9e:d4:31:aa:e8:33:44:e4:92:51:23:b2:63:26: ef:05:62:a1:d5:5d:ea:be:0c:86:45:3c:a2:13:e0:f5:df:e7: 61:ce:4c:a8:b6:3c:d3:63:30:2d:0c:20:19:ed:fd:36:ef:13: 47:f4:ab:a7:47:9f:9d:93:82:c4:9e:d8:c8:ff:0a:c0:e1:12: 9f:b9:27:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryP9LgeaRIC921Ed2u5W/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2N2FjNTIzMWEwZDdiYzU4MjQ1OTBhMGIyZjYyMWVkZTk4 NDc3MGMwHhcNMjUxMjA2MDYwMTAwWhcNMjUxMjA3MDYwMTAwWjAzMTEwLwYDVQQD Eyg1NmM5YjFiNjgyMmZjZGUwNzcyNzhjZDY3MzJkZGVmOTUxYWI1ZDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS3cj0B9G84anV9+Qm4E07o8IEmu 2vHQvDNpa3ypKRvaPBdw7CpQ2KaK5lUVzqh6CsqZ8+ZXXu1R0Kb3IE+nyyi6DWfB OXOv1Yj1Jr+T2UmLLh9zI/XGzAh6ZJEu3oB6CjeJ+1pm1WzpXt4ZWFb96oUnBfvI iwv30Qoe8Y7aOD4nC2QkUoXxXiT82YHWqwUqzlyRX1u/d1zyw+YPFxc50y2V9Ifn C2tiky0vLnMEf/SmUIxxEQ5spjy5PCgNkVLWesfnUfK75YEwCCh8+MOQcSnQDmMz uQjdmt7kEqz2STCzjs25BvwJcFHItWAisMNIU24SKj/8rL5t+ZCRFKgLiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFbJsbaCL83gdyeM1nMt3vlRq10VMB8GA1UdIwQY MBaAFBZ6xSMaDXvFgkWQoLL2Ie3phHcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEt ODAzNWYyZGZjMWY0LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS82MTczOGUtMzk3Ny00OTVlLWJhMWEtODAzNWYyZGZjMWY0 LzEvRm5yRkl4b05lOFdDUlpDZ3N2WWg3ZW1FZHd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQphooTGH UVfHSilxdHoDugriOT8uMFIz34sQjcwhcL5VfZNAJVUUhyLKomcgidlMcAyflEeR DoibEZybBUJ/yhs9du9SfvDrpZYqmjGPxOtAE2QC1tWiX1S/eVSpT226BoNtpNNi Zwtm8IS1+1tHqtb47FHSi3/0fsLFhytG/hRY9dPEOSoqcDxpoAvf0KwQFM9D8YZK wElrZROQGPeUCoQDUD6wjpde5TsAP1ThafF/qa6AyasHGp7UMaroM0TkklEjsmMm 7wViodVd6r4MhkU8ohPg9d/nYc5MqLY802MwLQwgGe39Nu8TR/Srp0efnZOCxJ7Y yP8KwOESn7knDg== -----END CERTIFICATE-----Generated at Sat Dec 6 09:10:58 2025 by rpki-client