This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft File: FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft (raw, json) Hash identifier: BgrX2B6JtzieFUnKqPST0tCFKSRYfufu4Vcr27lJp+Y= Subject key identifier: 1A:42:99:49:D7:5F:31:08:0D:51:80:0D:D3:D5:0B:5B:F4:4D:C8:E2 Authority key identifier: 14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A Certificate issuer: /CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a Certificate serial: 019AF5785031AA929B9A7C94C911C912A71D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft Manifest number: 0B5B Signing time: Sat 06 Dec 2025 21:01:33 +0000 Manifest this update: Sat 06 Dec 2025 21:01:33 +0000 Manifest next update: Sun 07 Dec 2025 21:01:33 +0000 Files and hashes: 1: C5kS-eXFEoRGhSGKrj1aky_A-YU.roa (hash: 0Cexvh0L+qwpqym6REc7bvetIUnS6MiKORaDRSgSxQo=) 2: FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl (hash: CvO7VCBR4i2l1YxUhdgDOI1F2r4oFI6ArblrNzJ8xA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 21:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f5:78:50:31:aa:92:9b:9a:7c:94:c9:11:c9:12:a7:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1462a497efe0bc92b7ed92529ebbe39cb19d330a Validity Not Before: Dec 6 21:01:33 2025 GMT Not After : Dec 7 21:01:33 2025 GMT Subject: CN=1a429949d75f31080d51800dd3d50b5bf44dc8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:01:cb:48:f0:f0:e1:08:c0:b5:51:53:29:0b: 54:65:fe:c0:00:31:4f:9e:b2:a5:a6:60:42:ad:18: 32:33:32:69:07:80:b1:c6:7e:51:00:4b:6b:b8:b0: e7:9f:b7:17:31:1b:1a:9f:a7:5e:4a:f2:dd:7f:7c: 1c:86:61:cc:9a:cc:25:2c:9f:c6:84:d6:a4:d1:63: 92:1c:aa:42:4d:4c:a4:97:33:2f:bc:74:99:c9:93: f7:e2:84:a1:8f:36:db:c7:87:a6:7e:b2:b1:5a:b8: 33:f0:ab:e4:08:56:08:f3:69:4c:f1:d9:06:63:dc: 5d:b4:33:60:ae:8e:69:eb:d8:81:1d:8d:d3:cd:17: e4:2c:38:ad:c9:2e:96:7a:4f:eb:9f:cf:b5:cb:c3: 18:7a:3d:3d:6c:30:cf:98:f7:a5:6b:9a:78:e0:68: 8c:a3:d0:b8:c6:ae:a2:6b:ac:29:49:2a:08:bb:d1: 1f:a5:0e:c8:2f:bd:97:3f:6b:e1:17:2d:92:59:5a: dd:9b:05:96:16:ec:c1:42:0b:78:2d:fb:80:f4:5b: 22:98:c6:72:37:e2:75:a0:00:8b:95:1b:5b:98:88: f6:e2:79:b7:10:1d:9f:44:24:0d:b5:44:ac:86:1c: 99:6e:37:84:d0:7e:d6:52:a1:f8:ee:0e:47:54:89: 83:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:42:99:49:D7:5F:31:08:0D:51:80:0D:D3:D5:0B:5B:F4:4D:C8:E2 X509v3 Authority Key Identifier: keyid:14:62:A4:97:EF:E0:BC:92:B7:ED:92:52:9E:BB:E3:9C:B1:9D:33:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FGKkl-_gvJK37ZJSnrvjnLGdMwo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/be1171-1202-4df8-8c30-d36935ebc6ad/1/FGKkl-_gvJK37ZJSnrvjnLGdMwo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:b8:ee:e9:14:4a:cd:ba:6e:1b:0b:d9:fd:32:94:32:21:a1: 5e:15:d5:71:dc:83:58:f8:d0:10:1d:56:dd:f4:69:4c:af:2e: b4:94:c7:b9:2f:0d:2c:a7:47:8a:f6:42:c3:83:c5:60:59:bb: 1b:34:74:00:a9:d9:4a:76:20:21:1c:09:02:d1:25:73:ff:a8: 92:d9:73:7b:f3:77:82:dc:64:20:7f:71:6a:2b:3c:2c:f8:53: ef:ab:69:68:b6:4e:36:ea:71:2b:76:76:e3:00:36:93:57:90: 2a:d9:65:c5:b2:6a:f7:c7:04:46:ca:11:03:1c:99:95:86:10: 1f:2a:f9:ba:5d:0c:a1:1b:24:25:3a:6e:df:ed:0f:e2:a7:fc: 17:0f:84:14:7e:c2:45:df:89:7b:74:bd:2f:c1:7f:3f:87:38: b9:4e:07:27:bd:d0:35:aa:0f:00:f0:38:07:9d:1f:53:a6:fe: 32:99:84:1d:3e:d6:20:ba:18:27:84:5b:0a:27:9e:bc:a5:60: be:09:ea:44:15:74:50:ab:85:e4:59:cb:aa:45:de:fd:30:11: 38:b5:70:e0:c4:a2:b1:a2:ce:9f:c1:e4:ff:a9:c2:1a:b8:eb: 9e:b2:16:33:d9:94:a6:94:3d:99:6a:ce:9b:97:65:a4:0c:a0: b1:a2:2a:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZr1eFAxqpKbmnyUyRHJEqcdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NjJhNDk3ZWZlMGJjOTJiN2VkOTI1MjllYmJlMzljYjE5 ZDMzMGEwHhcNMjUxMjA2MjEwMTMzWhcNMjUxMjA3MjEwMTMzWjAzMTEwLwYDVQQD EygxYTQyOTk0OWQ3NWYzMTA4MGQ1MTgwMGRkM2Q1MGI1YmY0NGRjOGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QHLSPDw4QjAtVFTKQtUZf7AADFP nrKlpmBCrRgyMzJpB4Cxxn5RAEtruLDnn7cXMRsan6deSvLdf3wchmHMmswlLJ/G hNak0WOSHKpCTUyklzMvvHSZyZP34oShjzbbx4emfrKxWrgz8KvkCFYI82lM8dkG Y9xdtDNgro5p69iBHY3TzRfkLDityS6Wek/rn8+1y8MYej09bDDPmPela5p44GiM o9C4xq6ia6wpSSoIu9EfpQ7IL72XP2vhFy2SWVrdmwWWFuzBQgt4LfuA9FsimMZy N+J1oACLlRtbmIj24nm3EB2fRCQNtUSshhyZbjeE0H7WUqH47g5HVImDoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBpCmUnXXzEIDVGADdPVC1v0TcjiMB8GA1UdIwQY MBaAFBRipJfv4LySt+2SUp6745yxnTMKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAt ZDM2OTM1ZWJjNmFkLzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC9iZTExNzEtMTIwMi00ZGY4LThjMzAtZDM2OTM1ZWJjNmFk LzEvRkdLa2wtX2d2SkszN1pKU25ydmpuTEdkTXdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQbju6RRK zbpuGwvZ/TKUMiGhXhXVcdyDWPjQEB1W3fRpTK8utJTHuS8NLKdHivZCw4PFYFm7 GzR0AKnZSnYgIRwJAtElc/+oktlze/N3gtxkIH9xais8LPhT76tpaLZONupxK3Z2 4wA2k1eQKtllxbJq98cERsoRAxyZlYYQHyr5ul0MoRskJTpu3+0P4qf8Fw+EFH7C Rd+Je3S9L8F/P4c4uU4HJ73QNaoPAPA4B50fU6b+MpmEHT7WILoYJ4RbCieevKVg vgnqRBV0UKuF5FnLqkXe/TAROLVw4MSisaLOn8Hk/6nCGrjrnrIWM9mUppQ9mWrO m5dlpAygsaIqMw== -----END CERTIFICATE-----Generated at Sun Dec 7 00:54:09 2025 by rpki-client