This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: rp/gL82l/3Ae1MBz3jXfhftbk6X8C8w1C/nwz2R/dIo= Subject key identifier: 07:60:37:BD:B1:21:0D:04:CF:70:E7:54:40:52:1C:F4:4A:1E:A9:67 Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019AF2AD4083F4DFC59A786EEAF53599848B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 08E5 Signing time: Sat 06 Dec 2025 08:00:31 +0000 Manifest this update: Sat 06 Dec 2025 08:00:31 +0000 Manifest next update: Sun 07 Dec 2025 08:00:31 +0000 Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: /rUlcQqNMmQ0c+cilJJpczVM+1dV74PK17a4c1gSnhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:ad:40:83:f4:df:c5:9a:78:6e:ea:f5:35:99:84:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Dec 6 08:00:31 2025 GMT Not After : Dec 7 08:00:31 2025 GMT Subject: CN=076037bdb1210d04cf70e75440521cf44a1ea967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:57:b8:ea:fb:d0:b2:45:9e:e1:17:58:32:bf: 76:6b:2a:a0:51:04:ca:87:81:82:4b:1b:7a:c0:53: 1b:86:06:3d:2f:74:d4:b6:ea:35:2a:c5:75:b6:13: f5:fb:c3:9a:80:8b:43:4e:ad:a3:9e:0a:49:ed:7a: 22:36:99:1d:a6:c6:d9:6d:86:a7:e1:d4:a2:ef:7e: f0:1e:6e:a1:f1:76:7c:02:58:be:41:6c:77:2b:b5: cb:b0:25:65:53:94:bf:62:32:ad:00:a4:5b:91:aa: 49:43:6f:04:56:cd:8e:5a:0f:e0:25:09:c7:63:d1: 1e:c1:cd:f7:9c:e3:dc:ff:5b:de:6e:27:65:d6:4e: 13:33:85:32:95:21:a1:53:53:29:fc:74:0b:22:d8: b7:40:6f:7b:be:47:b6:a3:5f:28:a9:89:fe:e3:0d: cd:23:58:27:d4:3b:07:5d:97:0e:6f:5c:0c:88:25: 05:d7:88:f3:07:83:e5:0b:eb:2f:9c:b8:f3:99:40: 9a:cc:c8:19:e8:0c:90:8f:c2:72:c6:ac:97:82:64: 28:de:12:02:af:58:75:85:d4:b3:ba:93:d6:4a:38: 5c:18:e9:1b:e5:01:3c:0f:69:41:20:d5:2a:fe:06: d5:66:ea:b4:34:99:f9:f8:fa:d1:32:da:dd:8f:b4: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:60:37:BD:B1:21:0D:04:CF:70:E7:54:40:52:1C:F4:4A:1E:A9:67 X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0f:71:c7:34:f8:27:4e:03:42:29:91:fa:fb:85:a3:01:39: 42:22:9d:27:17:35:6a:57:da:c2:19:de:d8:12:00:f6:3c:96: 73:43:83:f6:f3:ef:d2:62:f8:fd:80:39:9f:c5:c4:ca:fb:c3: 3b:c3:f4:a0:e3:ba:8f:5f:89:0d:72:0e:6f:45:dc:31:36:dd: b4:22:99:02:38:81:fb:d0:2b:a4:39:ba:b9:86:59:93:4f:d1: c4:5c:7c:59:e3:4b:e1:2c:c1:84:b9:18:64:4e:05:e3:ed:0c: f1:0b:87:c2:ab:88:d4:5c:6f:b7:0e:d5:02:35:37:3c:08:cd: e9:b3:e1:13:3f:a8:c4:61:22:5a:21:4f:f8:a8:13:21:a5:6b: c6:c7:b9:a6:e2:26:6b:8c:4e:d4:aa:83:a5:c1:85:bd:30:96: f3:03:99:4e:07:37:1c:e7:07:c1:58:55:8a:d8:2d:81:fa:b9: c3:8e:f7:f3:da:0c:76:e8:cc:fc:42:4a:58:65:36:58:ad:9b: fb:d2:bc:df:c0:53:b6:c6:78:1c:74:fc:b7:bd:b7:14:35:86: c4:42:16:1a:fe:6f:da:e6:e7:3d:c8:e7:cb:4d:7b:52:fe:88: 3e:96:ea:f6:fd:72:44:b8:ac:e6:b7:72:1a:ef:39:87:ac:8d: f0:f8:52:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryrUCD9N/Fmnhu6vU1mYSLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjUxMjA2MDgwMDMxWhcNMjUxMjA3MDgwMDMxWjAzMTEwLwYDVQQD EygwNzYwMzdiZGIxMjEwZDA0Y2Y3MGU3NTQ0MDUyMWNmNDRhMWVhOTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVe46vvQskWe4RdYMr92ayqgUQTK h4GCSxt6wFMbhgY9L3TUtuo1KsV1thP1+8OagItDTq2jngpJ7XoiNpkdpsbZbYan 4dSi737wHm6h8XZ8Ali+QWx3K7XLsCVlU5S/YjKtAKRbkapJQ28EVs2OWg/gJQnH Y9Eewc33nOPc/1vebidl1k4TM4UylSGhU1Mp/HQLIti3QG97vke2o18oqYn+4w3N I1gn1DsHXZcOb1wMiCUF14jzB4PlC+svnLjzmUCazMgZ6AyQj8JyxqyXgmQo3hIC r1h1hdSzupPWSjhcGOkb5QE8D2lBINUq/gbVZuq0NJn5+PrRMtrdj7QMfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdgN72xIQ0Ez3DnVEBSHPRKHqlnMB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOw9xxzT4 J04DQimR+vuFowE5QiKdJxc1alfawhne2BIA9jyWc0OD9vPv0mL4/YA5n8XEyvvD O8P0oOO6j1+JDXIOb0XcMTbdtCKZAjiB+9ArpDm6uYZZk0/RxFx8WeNL4SzBhLkY ZE4F4+0M8QuHwquI1Fxvtw7VAjU3PAjN6bPhEz+oxGEiWiFP+KgTIaVrxse5puIm a4xO1KqDpcGFvTCW8wOZTgc3HOcHwVhVitgtgfq5w47389oMdujM/EJKWGU2WK2b +9K838BTtsZ4HHT8t723FDWGxEIWGv5v2ubnPcjny017Uv6IPpbq9v1yRLis5rdy Gu85h6yN8PhSLw== -----END CERTIFICATE-----Generated at Sat Dec 6 12:36:19 2025 by rpki-client