This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft File: Fi5IMpyL6O8gnplY2marAkAUXhk.mft (raw, json) Hash identifier: OjPLPLAt7c6fguxPYitZIoIAqiwmuh3uCOSZWn1U1Es= Subject key identifier: 95:BC:8C:E8:0E:1D:7E:1B:02:82:89:92:8A:AE:46:55:D3:75:34:BC Authority key identifier: 16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19 Certificate issuer: /CN=162e48329c8be8ef209e9958da66ab0240145e19 Certificate serial: 019B2C9D91EFF619474DAFE5DAE351638804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft Manifest number: 085D Signing time: Wed 17 Dec 2025 14:01:22 +0000 Manifest this update: Wed 17 Dec 2025 14:01:22 +0000 Manifest next update: Thu 18 Dec 2025 14:01:22 +0000 Files and hashes: 1: Fi5IMpyL6O8gnplY2marAkAUXhk.crl (hash: cKZISVqrKJoQNSdJVJwiiMU//7WXwlvyVn8ILwuoT0c=) 2: T8lku0gm3fLIfup1o_IGJ-Nf8nU.roa (hash: LKcOl9u48RGXIFNErzIBt+0+CJzkc3SUSSRAWMDqgFc=) 3: gaLphM1A_moGiALt3CRC2ndoaVY.roa (hash: 3zCVRytJAz7EydYXmCr5U7I8CEvPHa4z1gbLc/C+dCU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2c:9d:91:ef:f6:19:47:4d:af:e5:da:e3:51:63:88:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162e48329c8be8ef209e9958da66ab0240145e19 Validity Not Before: Dec 17 14:01:22 2025 GMT Not After : Dec 18 14:01:22 2025 GMT Subject: CN=95bc8ce80e1d7e1b028289928aae4655d37534bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:69:c4:8c:7f:56:50:25:91:69:50:4d:fb: b1:7f:01:47:7b:67:23:f9:ee:76:65:23:77:01:ed: 47:8e:6f:2f:0c:db:2e:30:68:5c:ee:63:0a:b5:da: a0:c6:56:ac:49:d4:c6:3d:15:b8:60:4c:58:92:8e: 4f:68:1e:b9:78:0c:5f:c0:e2:d2:74:ce:dc:5f:e3: 58:7c:d1:74:91:c1:eb:86:07:8a:6b:49:7c:eb:96: 44:e0:ed:d5:e9:02:ef:dd:71:e0:b6:6a:f5:64:20: 24:4a:55:dd:c6:3b:8b:b8:fe:83:98:e7:7b:cd:e1: ec:83:3d:36:6c:c9:c6:65:ee:fb:4c:c0:38:6c:42: 54:b2:39:3f:13:d9:c1:97:11:d0:b0:1d:e5:00:ab: 6d:78:e5:00:f1:2d:30:59:ff:1b:1e:ce:5f:b7:bb: ac:ed:55:d3:58:79:8c:81:72:0e:99:cb:c5:bb:43: 8d:e5:48:62:ef:fd:30:fd:15:ee:02:31:09:06:dd: c2:0f:0b:26:d2:40:eb:bc:8b:0f:4a:6c:aa:a4:df: db:ff:e1:ce:88:2a:27:3f:bb:46:d2:04:e6:93:0d: 1d:b6:bb:c9:66:ed:a4:7d:af:3a:3d:e6:6b:33:85: 7d:19:ae:93:17:5a:b9:64:10:93:0d:25:23:3a:8c: 60:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BC:8C:E8:0E:1D:7E:1B:02:82:89:92:8A:AE:46:55:D3:75:34:BC X509v3 Authority Key Identifier: keyid:16:2E:48:32:9C:8B:E8:EF:20:9E:99:58:DA:66:AB:02:40:14:5E:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fi5IMpyL6O8gnplY2marAkAUXhk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/8e2067-283b-4e4e-b67e-69f33fe1b530/1/Fi5IMpyL6O8gnplY2marAkAUXhk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:28:f2:27:90:f0:a1:17:44:92:bc:28:81:93:09:9a:7c:ee: 54:bf:87:6e:eb:4e:10:b9:1e:33:22:71:fe:12:bc:ff:2a:c6: 4b:85:12:3b:44:d1:3e:46:9d:e7:4f:f8:b2:49:43:3c:27:1b: 5e:fd:2e:21:be:36:50:f2:cb:88:56:83:24:6d:e0:be:4c:35: 58:24:79:6b:cd:22:b9:e5:64:14:ac:c2:12:eb:a9:20:fa:db: 58:58:03:51:18:23:5c:ec:86:83:b0:7a:17:ef:30:6d:8d:e1: f6:34:cd:08:7a:c0:d7:07:41:a1:0b:aa:cb:a1:ca:bf:6d:95: 76:5b:27:ee:3c:eb:44:66:c0:c6:bf:d0:22:58:ee:42:88:6c: 54:35:54:9d:b3:26:2c:c5:b3:12:bb:13:a9:f3:8c:9b:66:ef: 37:10:c6:6a:a1:09:bb:c2:e8:ff:c1:1f:e9:cd:71:98:98:3c: 71:41:83:c7:b9:6d:a5:cd:34:04:9b:2e:04:75:46:be:f9:4e: db:8b:9c:c9:82:49:d8:ed:d8:03:c7:6f:b6:9e:51:01:f7:2a: 25:67:2e:9c:ff:35:77:db:d1:e5:95:5f:4b:d7:af:65:15:57: 6e:0e:ab:e5:f6:65:d7:aa:24:6f:c0:19:58:8b:1c:c8:4e:f8: 63:fe:66:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZssnZHv9hlHTa/l2uNRY4gEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmU0ODMyOWM4YmU4ZWYyMDllOTk1OGRhNjZhYjAyNDAx NDVlMTkwHhcNMjUxMjE3MTQwMTIyWhcNMjUxMjE4MTQwMTIyWjAzMTEwLwYDVQQD Eyg5NWJjOGNlODBlMWQ3ZTFiMDI4Mjg5OTI4YWFlNDY1NWQzNzUzNGJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaBpxIx/VlAlkWlQTfuxfwFHe2cj +e52ZSN3Ae1Hjm8vDNsuMGhc7mMKtdqgxlasSdTGPRW4YExYko5PaB65eAxfwOLS dM7cX+NYfNF0kcHrhgeKa0l865ZE4O3V6QLv3XHgtmr1ZCAkSlXdxjuLuP6DmOd7 zeHsgz02bMnGZe77TMA4bEJUsjk/E9nBlxHQsB3lAKtteOUA8S0wWf8bHs5ft7us 7VXTWHmMgXIOmcvFu0ON5Uhi7/0w/RXuAjEJBt3CDwsm0kDrvIsPSmyqpN/b/+HO iConP7tG0gTmkw0dtrvJZu2kfa86PeZrM4V9Ga6TF1q5ZBCTDSUjOoxgpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJW8jOgOHX4bAoKJkoquRlXTdTS8MB8GA1UdIwQY MBaAFBYuSDKci+jvIJ6ZWNpmqwJAFF4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2Ut NjlmMzNmZTFiNTMwLzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi84ZTIwNjctMjgzYi00ZTRlLWI2N2UtNjlmMzNmZTFiNTMw LzEvRmk1SU1weUw2TzhnbnBsWTJtYXJBa0FVWGhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyjyJ5Dw oRdEkrwogZMJmnzuVL+HbutOELkeMyJx/hK8/yrGS4USO0TRPkad50/4sklDPCcb Xv0uIb42UPLLiFaDJG3gvkw1WCR5a80iueVkFKzCEuupIPrbWFgDURgjXOyGg7B6 F+8wbY3h9jTNCHrA1wdBoQuqy6HKv22Vdlsn7jzrRGbAxr/QIljuQohsVDVUnbMm LMWzErsTqfOMm2bvNxDGaqEJu8Lo/8Ef6c1xmJg8cUGDx7ltpc00BJsuBHVGvvlO 24ucyYJJ2O3YA8dvtp5RAfcqJWcunP81d9vR5ZVfS9evZRVXbg6r5fZl16okb8AZ WIscyE74Y/5m/g== -----END CERTIFICATE-----Generated at Wed Dec 17 18:36:48 2025 by rpki-client