This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json) Hash identifier: EQplCFspktsUiFkTDFJW5sFRaJRdFuljcKWVtfqohdY= Subject key identifier: 86:97:C5:F5:0A:9A:68:24:3D:37:C5:0A:69:DE:75:2B:90:07:0C:89 Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Certificate serial: 019B39469C0D5820FE5AD1874F4E4AC50B1E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft Manifest number: 178A Signing time: Sat 20 Dec 2025 01:01:27 +0000 Manifest this update: Sat 20 Dec 2025 01:01:27 +0000 Manifest next update: Sun 21 Dec 2025 01:01:27 +0000 Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: YHQbuvgq43iN+oJvQXrbGGkqNKccSPtivL3smACSnxk=) 2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:39:46:9c:0d:58:20:fe:5a:d1:87:4f:4e:4a:c5:0b:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73 Validity Not Before: Dec 20 01:01:27 2025 GMT Not After : Dec 21 01:01:27 2025 GMT Subject: CN=8697c5f50a9a68243d37c50a69de752b90070c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5c:92:d7:93:d6:a1:20:7c:6a:e1:c3:4b:14: c7:c6:8f:46:2e:32:dc:07:bb:60:49:16:d6:70:66: e9:17:bd:0c:87:ab:ba:b2:9c:e2:af:40:ed:3f:4b: 3c:ba:d0:01:ea:a4:9d:a0:7d:cb:73:cc:cc:04:63: b8:35:51:91:2b:15:22:b6:15:3a:e7:f0:5f:80:05: 68:4a:ea:5b:82:cc:4a:84:7d:da:ff:1b:0f:4c:02: 8a:e3:c2:a7:46:ca:0f:e3:c0:09:65:d9:d9:e5:b7: b6:a6:a0:f9:5a:a6:1e:5d:a2:3e:a9:27:fb:ab:60: 5d:6f:55:8c:0c:38:4b:07:6e:a5:26:0b:b0:59:81: 02:76:4e:14:8f:0d:86:72:bb:39:28:21:c5:d9:1d: d5:45:9e:75:7b:86:11:05:1e:21:05:b5:1a:17:08: 37:ce:a2:cd:98:69:fb:11:9d:14:83:ad:a8:90:d9: 8b:a8:6b:33:87:96:5d:5e:38:31:3f:91:ac:d8:29: bf:8a:f8:f7:ac:99:38:b9:3a:ce:12:8e:04:03:04: bc:75:05:a2:e0:f3:e7:49:3e:7e:24:73:2d:c9:af: 2b:bd:f5:79:1a:30:35:7f:a9:5c:88:02:6e:8d:f6: e1:39:1e:5b:a9:18:00:66:c9:a6:c2:cb:19:51:1a: 40:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:97:C5:F5:0A:9A:68:24:3D:37:C5:0A:69:DE:75:2B:90:07:0C:89 X509v3 Authority Key Identifier: keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ed:1c:3a:7f:c5:ee:7e:45:c2:b7:10:e0:4c:98:d6:cd:b9: 72:83:62:fc:14:cb:76:51:c3:05:e7:9b:32:49:ec:1f:3b:c8: 21:a9:e4:97:35:17:75:29:e5:2e:62:70:e5:48:d3:97:10:4a: 70:7f:96:2c:c6:36:82:a2:f1:42:c4:93:6a:fa:c4:72:05:90: b2:63:57:ca:65:69:d5:05:cb:34:93:03:4a:59:54:f6:66:40: 95:cb:5e:fd:bd:fc:4d:1c:28:d2:13:f4:bf:6b:3a:39:4c:cf: 96:da:5e:7f:3e:b3:37:9f:72:8c:df:6b:f7:b9:ee:80:04:2f: 5e:4c:65:7a:6b:65:e1:2d:cb:06:41:56:01:0f:58:e0:0b:64: 90:1c:fb:79:b8:18:84:da:22:00:4e:bf:3e:0a:1d:e3:6b:d2: c5:a6:80:6a:62:30:1a:09:ce:84:f9:78:25:52:9c:3f:d5:68: 6e:c6:19:31:8d:35:88:bc:e7:b3:71:c5:9d:f2:55:42:18:32: db:e2:db:74:bd:7b:0b:fd:40:cf:ea:1d:cd:5d:4f:93:ce:4e: b9:95:3c:2d:5d:2d:9e:b0:c8:90:68:bd:eb:e0:85:50:72:eb: 17:f4:99:5e:fc:09:11:5a:aa:55:8f:45:f9:31:93:89:4f:e1: 68:c8:fa:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs5RpwNWCD+WtGHT05KxQseMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NzhiNDlmOWFlMjVmMWUxMjc1MzRiMTkxNTA0NGFjN2Qw ZDllNzMwHhcNMjUxMjIwMDEwMTI3WhcNMjUxMjIxMDEwMTI3WjAzMTEwLwYDVQQD Eyg4Njk3YzVmNTBhOWE2ODI0M2QzN2M1MGE2OWRlNzUyYjkwMDcwYzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1yS15PWoSB8auHDSxTHxo9GLjLc B7tgSRbWcGbpF70Mh6u6spzir0DtP0s8utAB6qSdoH3Lc8zMBGO4NVGRKxUithU6 5/BfgAVoSupbgsxKhH3a/xsPTAKK48KnRsoP48AJZdnZ5be2pqD5WqYeXaI+qSf7 q2Bdb1WMDDhLB26lJguwWYECdk4Ujw2Gcrs5KCHF2R3VRZ51e4YRBR4hBbUaFwg3 zqLNmGn7EZ0Ug62okNmLqGszh5ZdXjgxP5Gs2Cm/ivj3rJk4uTrOEo4EAwS8dQWi 4PPnST5+JHMtya8rvfV5GjA1f6lciAJujfbhOR5bqRgAZsmmwssZURpADwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaXxfUKmmgkPTfFCmnedSuQBwyJMB8GA1UdIwQY MBaAFBZ4tJ+a4l8eEnU0sZFQRKx9DZ5zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzIt NzQ1NGExOWQzMmQxLzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8wZjcxZjMtN2UxMy00NzEzLWIyMzItNzQ1NGExOWQzMmQx LzEvRm5pMG41cmlYeDRTZFRTeGtWQkVySDBObm5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQu0cOn/F 7n5FwrcQ4EyY1s25coNi/BTLdlHDBeebMknsHzvIIanklzUXdSnlLmJw5UjTlxBK cH+WLMY2gqLxQsSTavrEcgWQsmNXymVp1QXLNJMDSllU9mZAlcte/b38TRwo0hP0 v2s6OUzPltpefz6zN59yjN9r97nugAQvXkxlemtl4S3LBkFWAQ9Y4AtkkBz7ebgY hNoiAE6/Pgod42vSxaaAamIwGgnOhPl4JVKcP9VobsYZMY01iLzns3HFnfJVQhgy 2+LbdL17C/1Az+odzV1Pk85OuZU8LV0tnrDIkGi96+CFUHLrF/SZXvwJEVqqVY9F +TGTiU/haMj6zg== -----END CERTIFICATE-----Generated at Sat Dec 20 09:54:18 2025 by rpki-client