This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json) Hash identifier: 7noxsnZ+/UDS0kCk7GluOKPKO26uy561c69/i6WK9hI= Subject key identifier: 8E:1A:82:BE:0C:E6:7B:52:69:D2:B1:88:9C:D5:E8:7B:03:C8:C5:54 Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb Certificate serial: 019AF3F721F44CF2FA536DC9F1C755005156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft Manifest number: 0A6D Signing time: Sat 06 Dec 2025 14:00:50 +0000 Manifest this update: Sat 06 Dec 2025 14:00:50 +0000 Manifest next update: Sun 07 Dec 2025 14:00:50 +0000 Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: e07wMp1IxfsC1v2i0tDE04sdDmFc8QGW6lQYuQpaTS8=) 2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:21:f4:4c:f2:fa:53:6d:c9:f1:c7:55:00:51:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb Validity Not Before: Dec 6 14:00:50 2025 GMT Not After : Dec 7 14:00:50 2025 GMT Subject: CN=8e1a82be0ce67b5269d2b1889cd5e87b03c8c554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:e9:e9:58:6e:a1:c4:fb:95:c7:a8:d5:04: d4:b7:54:7c:7a:51:62:b0:64:35:76:d6:51:e6:b1: fb:96:0d:21:b2:89:36:c3:81:6d:38:72:4c:12:9c: 01:0b:f1:26:06:8e:1c:43:3c:8a:1f:b2:a3:9d:f9: 8e:04:ec:c2:00:21:46:81:5d:fb:be:8d:d0:bd:bd: 68:bd:d0:3d:a7:7d:62:0e:88:ed:d8:e4:1f:37:83: 16:5e:5e:2b:45:c7:70:99:99:1e:fb:0a:32:6c:53: bf:42:20:60:d9:53:ee:c5:fa:94:62:30:4c:c7:e7: 2b:8e:d6:39:08:38:1c:81:3e:a8:9f:d9:2c:78:7b: 6c:5e:57:07:61:2f:7d:73:77:32:cb:11:21:65:21: 5f:8c:e5:73:1d:5e:9a:aa:d0:4b:57:4c:7f:63:21: 24:77:77:36:be:c2:e4:32:84:df:33:6a:fe:5f:0c: a1:56:18:5f:a7:5f:9d:7f:c3:8e:a8:85:a9:c7:51: db:de:5d:ba:ae:62:de:c2:6b:f5:74:36:62:63:b2: 59:ca:b5:ba:a5:80:fe:30:13:63:d1:4b:58:d3:85: 1b:7d:62:5b:93:82:ea:8e:f0:b9:fe:b7:71:4f:46: d4:96:95:69:f1:24:aa:0b:68:ca:d3:50:61:f6:71: 64:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1A:82:BE:0C:E6:7B:52:69:D2:B1:88:9C:D5:E8:7B:03:C8:C5:54 X509v3 Authority Key Identifier: keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1b:82:c5:a9:86:2f:51:0a:de:16:4e:c5:3d:55:0b:94:3b: b3:a8:a5:b1:01:81:1d:a5:76:7d:26:04:71:f3:68:ac:c2:6d: 69:49:87:8e:6b:3a:51:27:29:c2:7d:f6:cc:26:4e:31:88:55: 17:01:f6:b2:01:0e:b0:bf:3f:3d:9a:6b:d1:40:c6:56:00:bf: e4:30:f5:f6:6c:b1:a7:40:09:5d:18:71:d2:5a:bb:74:21:87: 31:21:8d:1b:e7:8b:0b:36:33:07:d3:4e:03:b8:df:b7:cf:2a: 19:95:cd:f7:0e:02:ad:9f:2c:3b:04:ee:aa:c4:7e:63:e2:f0: df:55:a8:1a:e9:88:1d:0f:94:b1:ae:52:74:0e:05:a5:cb:76: 69:aa:5f:82:e7:ed:d4:df:8d:cb:91:4b:46:38:f9:3f:d3:f0: 9a:b1:02:ce:7e:21:65:8b:e4:f6:29:03:73:7f:4e:a3:20:16: 35:ee:d2:ca:a9:2b:ad:27:f8:e5:63:44:13:f6:fe:61:67:d4: ac:72:59:5d:cb:a6:1b:9a:12:dd:eb:3b:ba:1b:ce:c0:cd:83: cc:91:1f:8a:d5:b8:99:c7:a3:fd:ad:7c:cc:97:99:bc:16:53: 0f:e7:26:38:97:06:2a:55:b7:52:ee:88:1b:55:55:b5:79:ca: d8:e1:b8:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz9yH0TPL6U23J8cdVAFFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OThkZjAzMDBhYWI1ZTJhNmYxYWM3OGU1OTNlY2M5NzQw ZGFhZGIwHhcNMjUxMjA2MTQwMDUwWhcNMjUxMjA3MTQwMDUwWjAzMTEwLwYDVQQD Eyg4ZTFhODJiZTBjZTY3YjUyNjlkMmIxODg5Y2Q1ZTg3YjAzYzhjNTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXvp6VhuocT7lceo1QTUt1R8elFi sGQ1dtZR5rH7lg0hsok2w4FtOHJMEpwBC/EmBo4cQzyKH7KjnfmOBOzCACFGgV37 vo3Qvb1ovdA9p31iDojt2OQfN4MWXl4rRcdwmZke+woybFO/QiBg2VPuxfqUYjBM x+crjtY5CDgcgT6on9kseHtsXlcHYS99c3cyyxEhZSFfjOVzHV6aqtBLV0x/YyEk d3c2vsLkMoTfM2r+XwyhVhhfp1+df8OOqIWpx1Hb3l26rmLewmv1dDZiY7JZyrW6 pYD+MBNj0UtY04UbfWJbk4LqjvC5/rdxT0bUlpVp8SSqC2jK01Bh9nFkawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4agr4M5ntSadKxiJzV6HsDyMVUMB8GA1UdIwQY MBaAFBaY3wMAqrXipvGseOWT7Ml0DarbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYt NmVjOWQ5ODhhNDA4LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi84NGNkNGUtMTQyYy00MjY4LWJlZjYtNmVjOWQ5ODhhNDA4 LzEvRnBqZkF3Q3F0ZUttOGF4NDVaUHN5WFFOcXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABRuCxamG L1EK3hZOxT1VC5Q7s6ilsQGBHaV2fSYEcfNorMJtaUmHjms6UScpwn32zCZOMYhV FwH2sgEOsL8/PZpr0UDGVgC/5DD19myxp0AJXRhx0lq7dCGHMSGNG+eLCzYzB9NO A7jft88qGZXN9w4CrZ8sOwTuqsR+Y+Lw31WoGumIHQ+Usa5SdA4Fpct2aapfguft 1N+Ny5FLRjj5P9PwmrECzn4hZYvk9ikDc39OoyAWNe7SyqkrrSf45WNEE/b+YWfU rHJZXcumG5oS3es7uhvOwM2DzJEfitW4mcej/a18zJeZvBZTD+cmOJcGKlW3Uu6I G1VVtXnK2OG49g== -----END CERTIFICATE-----Generated at Sat Dec 6 17:33:03 2025 by rpki-client