This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json) Hash identifier: +q5pIxRmeKKnEN22IwdNYQLe6tt7LEIHtXBxDQJt7M8= Subject key identifier: 19:32:A5:87:13:53:27:D3:86:9E:78:AB:8E:2B:1E:05:9C:FD:D4:B3 Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c Certificate serial: 019B3DC75B93E517861F06A91502B093FEE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft Manifest number: 0740 Signing time: Sat 20 Dec 2025 22:00:33 +0000 Manifest this update: Sat 20 Dec 2025 22:00:33 +0000 Manifest next update: Sun 21 Dec 2025 22:00:33 +0000 Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: JF/8j4usPpod0cY5VWlwIf5gJO1odNrrNGcm88vZqb8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:5b:93:e5:17:86:1f:06:a9:15:02:b0:93:fe:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c Validity Not Before: Dec 20 22:00:33 2025 GMT Not After : Dec 21 22:00:33 2025 GMT Subject: CN=1932a587135327d3869e78ab8e2b1e059cfdd4b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:24:e7:66:56:42:bb:9a:41:1b:b2:52:53: de:b4:e6:5c:80:f8:28:9c:bb:87:36:8f:7d:99:b2: 7c:39:b8:64:64:4d:39:e2:0a:42:a5:0d:88:39:5a: 12:52:f8:75:f5:fc:05:9a:f8:b0:e0:50:7b:85:58: 62:1e:fc:6f:41:d2:79:17:b3:97:2b:31:40:2c:0e: 8c:07:32:29:29:97:13:0b:ec:82:9f:ce:09:80:ea: 09:1d:9e:a2:34:56:c6:b7:bd:0d:29:69:ca:e5:c1: 25:cf:eb:6b:80:1d:8b:ad:65:c4:52:c6:c0:fb:44: 0d:59:68:08:54:20:13:15:40:b7:ca:33:90:ac:fa: 2d:e4:1e:03:22:7f:d2:58:ca:50:46:b0:62:ae:a0: d2:6b:8f:13:db:c4:6b:34:8e:80:ae:59:7c:4e:7e: dc:3c:32:8d:8e:bd:c7:a4:ed:bf:5e:90:db:aa:57: f7:5d:ec:24:ec:f9:4d:e1:f1:60:b6:cb:a6:15:0e: e4:79:5e:74:dc:4a:78:91:bd:4c:3a:93:8a:16:dd: b0:78:1c:a6:86:9c:8d:f1:37:71:55:29:25:c0:4b: a2:a1:43:34:27:6a:48:24:85:22:07:f7:b8:d9:53: 6a:7d:a3:33:83:97:35:63:6a:ff:98:3b:c2:50:29: ff:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:32:A5:87:13:53:27:D3:86:9E:78:AB:8E:2B:1E:05:9C:FD:D4:B3 X509v3 Authority Key Identifier: keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:47:68:cf:74:8c:b3:66:9e:9d:90:66:d2:69:e0:8b:ab:45: a4:41:c0:98:12:26:7a:fc:e4:83:f0:d2:52:3d:21:c9:84:05: 3b:25:0f:d2:49:94:cd:c7:71:6c:55:10:9a:42:35:c5:3c:bd: 3a:1d:c7:1b:f2:2e:28:d7:1e:19:a8:85:3a:44:2d:27:a9:52: d1:02:4f:04:ae:5e:14:ec:e6:c3:a7:04:82:02:f0:93:85:e4: cd:44:60:bb:10:59:e9:31:f0:cf:c4:74:6f:99:a9:a3:22:1a: 17:d0:df:ee:04:7a:07:dd:10:a7:b7:2d:a1:d6:fa:b5:42:51: 8d:b1:84:34:77:79:bd:0a:7c:6d:f6:d9:b2:a7:00:80:97:db: 85:a8:4c:9c:e3:d6:64:67:32:cb:81:58:da:ab:b4:19:21:93: 85:9d:4b:df:e1:05:29:03:11:31:b1:08:55:0b:6f:ef:07:6a: eb:50:22:39:0c:85:a8:9e:a9:73:0d:95:71:d4:2d:64:e6:6f: f7:e6:dc:bf:66:7a:f8:72:d3:61:47:db:11:52:39:a2:e7:d1: 41:94:86:f0:06:6a:5e:db:77:a8:83:74:0e:e5:dc:21:5a:c4: 1e:35:f6:29:8d:98:40:03:fc:37:5c:b5:18:c7:a8:1c:f1:ef: 10:78:7b:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x1uT5ReGHwapFQKwk/7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MDI2ODViMWE0ZWY2Y2QzMTM5ODBhNDJmZmQ5NWVlZDEz OTc3MmMwHhcNMjUxMjIwMjIwMDMzWhcNMjUxMjIxMjIwMDMzWjAzMTEwLwYDVQQD EygxOTMyYTU4NzEzNTMyN2QzODY5ZTc4YWI4ZTJiMWUwNTljZmRkNGIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaQk52ZWQruaQRuyUlPetOZcgPgo nLuHNo99mbJ8ObhkZE054gpCpQ2IOVoSUvh19fwFmviw4FB7hVhiHvxvQdJ5F7OX KzFALA6MBzIpKZcTC+yCn84JgOoJHZ6iNFbGt70NKWnK5cElz+trgB2LrWXEUsbA +0QNWWgIVCATFUC3yjOQrPot5B4DIn/SWMpQRrBirqDSa48T28RrNI6Arll8Tn7c PDKNjr3HpO2/XpDbqlf3Xewk7PlN4fFgtsumFQ7keV503Ep4kb1MOpOKFt2weBym hpyN8TdxVSklwEuioUM0J2pIJIUiB/e42VNqfaMzg5c1Y2r/mDvCUCn/CQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkypYcTUyfThp54q44rHgWc/dSzMB8GA1UdIwQY MBaAFBcCaFsaTvbNMTmApC/9le7ROXcsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9jYThmMmYtMTZjNC00Zjk0LWFmNDkt NjllMWZmYWZiMTZlLzEvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC9jYThmMmYtMTZjNC00Zjk0LWFmNDktNjllMWZmYWZiMTZl LzEvRndKb1d4cE85czB4T1lDa0xfMlY3dEU1ZHl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUdoz3SM s2aenZBm0mngi6tFpEHAmBImevzkg/DSUj0hyYQFOyUP0kmUzcdxbFUQmkI1xTy9 Oh3HG/IuKNceGaiFOkQtJ6lS0QJPBK5eFOzmw6cEggLwk4XkzURguxBZ6THwz8R0 b5mpoyIaF9Df7gR6B90Qp7ctodb6tUJRjbGENHd5vQp8bfbZsqcAgJfbhahMnOPW ZGcyy4FY2qu0GSGThZ1L3+EFKQMRMbEIVQtv7wdq61AiOQyFqJ6pcw2VcdQtZOZv 9+bcv2Z6+HLTYUfbEVI5oufRQZSG8AZqXtt3qIN0DuXcIVrEHjX2KY2YQAP8N1y1 GMeoHPHvEHh7NA== -----END CERTIFICATE-----Generated at Sun Dec 21 05:27:44 2025 by rpki-client