This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft File: FDNseNUrqBFXQQArawcNEXrpv80.mft (raw, json) Hash identifier: 1PrLzl9htZFURwKyICErOcyWAdyzFbcyoxBfIXciXhI= Subject key identifier: 69:D4:05:47:C2:75:3A:AF:6C:18:3F:46:3B:62:98:AF:09:71:DB:DE Authority key identifier: 14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD Certificate issuer: /CN=14336c78d52ba8115741002b6b070d117ae9bfcd Certificate serial: 019AF208B651954D2E75DFCD17C7F43A7B2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft Manifest number: 12FD Signing time: Sat 06 Dec 2025 05:00:48 +0000 Manifest this update: Sat 06 Dec 2025 05:00:48 +0000 Manifest next update: Sun 07 Dec 2025 05:00:48 +0000 Files and hashes: 1: E3L5dg5X3rqNLqYU8O9X1WsszW4.roa (hash: OcbMuDrIfD/A7RNsLFSYw+FRN5f4hK+YArdJTnwQdlk=) 2: FDNseNUrqBFXQQArawcNEXrpv80.crl (hash: qkconU28Zq270MOYeFvStpNPdeM1sd4/OPGHTfgBhco=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:08:b6:51:95:4d:2e:75:df:cd:17:c7:f4:3a:7b:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14336c78d52ba8115741002b6b070d117ae9bfcd Validity Not Before: Dec 6 05:00:48 2025 GMT Not After : Dec 7 05:00:48 2025 GMT Subject: CN=69d40547c2753aaf6c183f463b6298af0971dbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:03:4d:d5:17:8c:61:ed:d3:63:09:da:51:44: 65:c0:6e:4c:50:0a:92:02:ca:3f:79:2e:2c:57:2d: f9:16:1a:c0:62:1c:c8:5b:12:35:92:69:f5:2b:c6: 92:5c:f0:fb:e7:70:0a:79:68:0f:ad:ff:23:72:cf: cb:f7:59:26:cb:83:71:6d:dd:33:07:6a:d1:43:11: 6c:fb:77:ff:52:56:0a:7f:52:a2:84:2f:40:37:2d: 77:d8:32:f8:e7:d4:f4:2b:f5:6b:38:e0:8d:b0:0d: a0:b5:15:ad:78:17:70:ce:52:6f:77:01:9c:2b:30: a7:87:54:23:b0:db:b9:06:0f:41:d6:2d:f9:ea:aa: ac:c4:3c:d1:ec:48:3a:4c:7c:5e:fb:92:e0:71:b5: 63:5d:53:eb:2a:90:48:0d:54:91:b5:5d:82:f5:d5: c3:f5:da:93:80:63:46:1e:d5:c0:21:9c:9b:17:f2: 6d:37:33:b4:2f:c4:23:fb:78:0f:08:44:1f:d1:08: 3d:45:07:77:55:89:6b:2d:40:a2:16:0d:2d:24:23: fc:25:e4:8d:28:32:36:77:0a:88:bb:43:d7:c5:91: 46:f3:56:92:03:74:b8:69:9f:25:bc:36:bf:ba:3c: e9:d0:64:ab:9d:86:60:c8:a6:20:a7:ff:c4:47:3f: 2e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:05:47:C2:75:3A:AF:6C:18:3F:46:3B:62:98:AF:09:71:DB:DE X509v3 Authority Key Identifier: keyid:14:33:6C:78:D5:2B:A8:11:57:41:00:2B:6B:07:0D:11:7A:E9:BF:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDNseNUrqBFXQQArawcNEXrpv80.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/7183af-67b8-4a6c-ba1a-adaefbdefac9/1/FDNseNUrqBFXQQArawcNEXrpv80.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:90:7b:19:6c:27:1a:b4:0e:cc:50:98:dc:fb:67:d9:82:af: 12:5f:d9:23:4b:9a:d8:f2:01:b5:91:90:69:38:29:5a:9b:c7: 17:f3:0e:a2:15:3a:6d:13:45:67:fb:f2:98:92:92:16:7e:e6: 69:fa:dd:a4:9f:e6:9a:7b:4b:8a:2a:b5:97:01:c3:62:62:70: 5f:ed:c1:98:18:b9:76:c7:6b:56:06:73:82:af:8a:d3:77:c8: 80:6a:b1:74:e8:96:06:a7:e1:f5:4f:cb:3b:9c:38:d2:00:02: 1a:b0:9c:ac:98:8d:b2:39:cb:8c:19:1e:29:7d:82:0f:41:35: ea:47:ee:b3:a1:bc:1c:90:50:6d:6c:51:15:10:f5:2d:ec:2f: 18:fe:d0:2d:7c:9a:a8:de:73:ad:6e:8f:a9:1b:8f:be:30:df: a9:9a:34:df:07:5a:00:d0:dc:f2:66:9c:32:49:82:63:b3:cd: 7c:c3:9b:86:d5:49:c3:e0:6a:78:8b:56:80:6f:e8:ca:1b:55: b6:7e:3e:1d:3c:3d:e5:c2:0b:c9:23:3f:30:8b:64:dd:08:cd: 20:06:9a:cf:22:95:64:f8:50:b5:21:4a:64:87:c0:f9:cf:57: 3d:ca:ad:53:c6:58:ab:b0:4d:9f:67:38:9e:b1:6f:ab:e9:e8: 07:d9:f5:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZryCLZRlU0udd/NF8f0OnsuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MzM2Yzc4ZDUyYmE4MTE1NzQxMDAyYjZiMDcwZDExN2Fl OWJmY2QwHhcNMjUxMjA2MDUwMDQ4WhcNMjUxMjA3MDUwMDQ4WjAzMTEwLwYDVQQD Eyg2OWQ0MDU0N2MyNzUzYWFmNmMxODNmNDYzYjYyOThhZjA5NzFkYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgNN1ReMYe3TYwnaUURlwG5MUAqS Aso/eS4sVy35FhrAYhzIWxI1kmn1K8aSXPD753AKeWgPrf8jcs/L91kmy4Nxbd0z B2rRQxFs+3f/UlYKf1KihC9ANy132DL459T0K/VrOOCNsA2gtRWteBdwzlJvdwGc KzCnh1QjsNu5Bg9B1i356qqsxDzR7Eg6THxe+5LgcbVjXVPrKpBIDVSRtV2C9dXD 9dqTgGNGHtXAIZybF/JtNzO0L8Qj+3gPCEQf0Qg9RQd3VYlrLUCiFg0tJCP8JeSN KDI2dwqIu0PXxZFG81aSA3S4aZ8lvDa/ujzp0GSrnYZgyKYgp//ERz8upQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnUBUfCdTqvbBg/RjtimK8JcdveMB8GA1UdIwQY MBaAFBQzbHjVK6gRV0EAK2sHDRF66b/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEt YWRhZWZiZGVmYWM5LzEvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83MTgzYWYtNjdiOC00YTZjLWJhMWEtYWRhZWZiZGVmYWM5 LzEvRkROc2VOVXJxQkZYUVFBcmF3Y05FWHJwdjgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZB7GWwn GrQOzFCY3Ptn2YKvEl/ZI0ua2PIBtZGQaTgpWpvHF/MOohU6bRNFZ/vymJKSFn7m afrdpJ/mmntLiiq1lwHDYmJwX+3BmBi5dsdrVgZzgq+K03fIgGqxdOiWBqfh9U/L O5w40gACGrCcrJiNsjnLjBkeKX2CD0E16kfus6G8HJBQbWxRFRD1LewvGP7QLXya qN5zrW6PqRuPvjDfqZo03wdaANDc8macMkmCY7PNfMObhtVJw+BqeItWgG/oyhtV tn4+HTw95cILySM/MItk3QjNIAaazyKVZPhQtSFKZIfA+c9XPcqtU8ZYq7BNn2c4 nrFvq+noB9n1vA== -----END CERTIFICATE-----Generated at Sat Dec 6 08:25:59 2025 by rpki-client