This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft File: FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft (raw, json) Hash identifier: jS5wC/Q31ng9oQJasbj7sRJnKHTmocjGDv1KkG2OgVk= Subject key identifier: A8:98:CA:53:FD:53:66:24:0D:9E:DA:87:D8:E0:5B:8A:1C:65:96:29 Authority key identifier: 16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F Certificate issuer: /CN=169767585dcef73e1fa9f64da6c7f276ed87a71f Certificate serial: 019AF0BF2DF3977624641887D0608A13E833 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft Manifest number: 0BDE Signing time: Fri 05 Dec 2025 23:00:52 +0000 Manifest this update: Fri 05 Dec 2025 23:00:52 +0000 Manifest next update: Sat 06 Dec 2025 23:00:52 +0000 Files and hashes: 1: FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl (hash: uWt7vbgGMzeo91moHUNUMm+AJsAaGGauD9wI2f06yBI=) 2: QNhj8szxUJQB2UJkTSFbnKRcj2U.roa (hash: G9tQdAu6v2DV1kcxNZeTfgXQ9D3NQf3F0+ROvxbmmRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f0:bf:2d:f3:97:76:24:64:18:87:d0:60:8a:13:e8:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=169767585dcef73e1fa9f64da6c7f276ed87a71f Validity Not Before: Dec 5 23:00:52 2025 GMT Not After : Dec 6 23:00:52 2025 GMT Subject: CN=a898ca53fd5366240d9eda87d8e05b8a1c659629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:99:ed:eb:74:53:0b:d4:18:9e:b6:da:54:7c: 19:1b:70:2f:a5:0f:9e:b1:59:3f:28:b8:a2:2b:6c: 64:a8:f4:6e:93:7c:a5:83:09:b1:0f:e9:30:65:58: 8b:0f:46:a7:4f:a5:65:9c:f7:bb:f1:79:ac:14:da: e7:bc:3d:86:6e:c5:c8:d1:f9:ab:9c:ac:16:09:0c: 6e:c8:af:d4:88:db:0a:8e:ff:39:a4:84:10:e4:1e: 6b:f9:b0:7a:7c:06:42:71:b9:60:cf:45:8c:40:3b: 2d:b6:db:51:1c:52:1d:78:c7:a1:a1:bc:49:1e:7d: 03:03:84:db:8f:58:3e:47:e2:5c:ab:a0:d5:37:4b: f1:65:07:a9:c7:5c:51:ae:ba:bb:bc:5b:51:cd:9c: 96:2e:c2:28:9e:61:1e:61:fe:e3:5e:14:5b:d3:1a: f2:99:7f:6b:14:64:28:b4:73:b0:b3:36:b1:e5:16: eb:30:a2:54:4a:8f:1b:26:7d:29:f8:75:75:97:87: 47:31:79:8f:0f:30:8c:1e:65:0e:85:a8:a8:d5:66: 2a:d7:23:4b:b3:c6:55:ba:79:da:da:dd:da:3a:1b: d3:ad:30:0c:a5:ea:09:a9:3a:5a:70:4b:dd:93:7e: 1f:2e:62:a4:94:3c:1c:72:bf:75:29:67:e5:f3:ac: 47:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:98:CA:53:FD:53:66:24:0D:9E:DA:87:D8:E0:5B:8A:1C:65:96:29 X509v3 Authority Key Identifier: keyid:16:97:67:58:5D:CE:F7:3E:1F:A9:F6:4D:A6:C7:F2:76:ED:87:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpdnWF3O9z4fqfZNpsfydu2Hpx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e8db6c-81ae-4ce2-af30-47b630953c50/1/FpdnWF3O9z4fqfZNpsfydu2Hpx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:75:65:c4:20:ce:62:f3:ca:81:ef:65:c1:27:67:c3:b2:a5: 17:ec:20:d6:22:e6:2f:d6:50:db:55:40:2a:24:af:88:94:7e: 43:2d:62:ff:b6:2d:27:c2:04:30:3f:d3:ed:5b:41:9d:21:a3: a6:54:04:16:5b:7e:1f:3b:0f:79:5e:8b:c2:e1:46:11:13:8e: 7a:76:9b:8c:d9:c2:60:54:3c:28:d0:5e:a2:44:74:37:b3:45: af:0f:fa:43:12:77:df:df:4b:f2:4c:16:f8:97:0a:a7:46:e8: da:81:2a:c7:ad:7c:ee:7a:1f:b4:19:1b:7b:12:69:7e:2f:0f: d8:b4:b0:ec:3b:7d:84:9b:1b:59:0b:cb:21:3a:7f:05:7f:bc: 5e:fc:ee:57:79:1f:6b:9a:92:8c:91:dc:55:4e:9a:ba:4a:f5: e7:4c:a4:dd:06:43:0c:13:4e:da:9c:4c:f8:ca:c2:14:62:23: df:ac:3a:2c:26:4f:86:52:bc:f3:d6:a1:1a:3b:29:76:5f:33: 94:69:8c:4f:da:44:eb:0a:05:fa:78:5e:ff:8c:4d:30:86:21: d7:49:25:69:9b:60:9c:8b:36:0b:11:e4:27:3e:92:60:9c:04: 39:86:02:e7:85:12:fc:69:cc:2d:85:c9:43:aa:f0:a8:e4:c8: 80:9e:fd:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrwvy3zl3YkZBiH0GCKE+gzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTc2NzU4NWRjZWY3M2UxZmE5ZjY0ZGE2YzdmMjc2ZWQ4 N2E3MWYwHhcNMjUxMjA1MjMwMDUyWhcNMjUxMjA2MjMwMDUyWjAzMTEwLwYDVQQD EyhhODk4Y2E1M2ZkNTM2NjI0MGQ5ZWRhODdkOGUwNWI4YTFjNjU5NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5nt63RTC9QYnrbaVHwZG3AvpQ+e sVk/KLiiK2xkqPRuk3ylgwmxD+kwZViLD0anT6VlnPe78XmsFNrnvD2GbsXI0fmr nKwWCQxuyK/UiNsKjv85pIQQ5B5r+bB6fAZCcblgz0WMQDsttttRHFIdeMehobxJ Hn0DA4Tbj1g+R+Jcq6DVN0vxZQepx1xRrrq7vFtRzZyWLsIonmEeYf7jXhRb0xry mX9rFGQotHOwszax5RbrMKJUSo8bJn0p+HV1l4dHMXmPDzCMHmUOhaio1WYq1yNL s8ZVunna2t3aOhvTrTAMpeoJqTpacEvdk34fLmKklDwccr91KWfl86xHLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKiYylP9U2YkDZ7ah9jgW4ocZZYpMB8GA1UdIwQY MBaAFBaXZ1hdzvc+H6n2TabH8nbth6cfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAt NDdiNjMwOTUzYzUwLzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9lOGRiNmMtODFhZS00Y2UyLWFmMzAtNDdiNjMwOTUzYzUw LzEvRnBkbldGM085ejRmcWZaTnBzZnlkdTJIcHg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARnVlxCDO YvPKge9lwSdnw7KlF+wg1iLmL9ZQ21VAKiSviJR+Qy1i/7YtJ8IEMD/T7VtBnSGj plQEFlt+HzsPeV6LwuFGEROOenabjNnCYFQ8KNBeokR0N7NFrw/6QxJ3399L8kwW +JcKp0bo2oEqx6187noftBkbexJpfi8P2LSw7Dt9hJsbWQvLITp/BX+8XvzuV3kf a5qSjJHcVU6aukr150yk3QZDDBNO2pxM+MrCFGIj36w6LCZPhlK889ahGjspdl8z lGmMT9pE6woF+nhe/4xNMIYh10klaZtgnIs2CxHkJz6SYJwEOYYC54US/GnMLYXJ Q6rwqOTIgJ79Bw== -----END CERTIFICATE-----Generated at Sat Dec 6 07:57:49 2025 by rpki-client