This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft File: FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft (raw, json) Hash identifier: 9/8ZR89DLvB1BRWyes3MZQq2d87U3zUak1uhTJQnxxk= Subject key identifier: 3F:43:61:6D:D2:ED:FC:90:5C:AF:16:14:B1:1B:B2:E2:FE:8D:B9:39 Authority key identifier: 14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 Certificate issuer: /CN=1492a20754c9a7650b8279b9390689c469d73595 Certificate serial: 019AF1D2014E4F4C1F30F6FEA76350D1F58D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft Manifest number: 1764 Signing time: Sat 06 Dec 2025 04:01:03 +0000 Manifest this update: Sat 06 Dec 2025 04:01:03 +0000 Manifest next update: Sun 07 Dec 2025 04:01:03 +0000 Files and hashes: 1: FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl (hash: 1/7J747UkNIflWheLWf5FoK2OOiAezgkovDbLGvqlSg=) 2: wFxMftMrQqOgNqLanUvVrEPuk0E.roa (hash: Kt7E8p9gxrWDn7h3MqNJ+mao+upazAnAmbSkQF2stto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 02:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f1:d2:01:4e:4f:4c:1f:30:f6:fe:a7:63:50:d1:f5:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1492a20754c9a7650b8279b9390689c469d73595 Validity Not Before: Dec 6 04:01:03 2025 GMT Not After : Dec 7 04:01:03 2025 GMT Subject: CN=3f43616dd2edfc905caf1614b11bb2e2fe8db939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:5e:e0:36:05:fb:35:7a:29:79:07:27:5e: 6c:1a:d6:9a:91:02:82:a2:00:67:3c:62:a4:1e:94: c1:85:fa:ee:10:77:15:fd:91:0e:3b:02:f4:52:3d: cf:6c:55:f2:f0:97:51:8c:58:01:3f:4a:24:61:51: f7:fa:84:48:8b:a3:0a:48:d4:e0:5e:a5:2c:94:77: ba:e1:ed:d0:e9:a5:8d:e8:29:8b:87:c9:7b:b7:47: 8a:4d:b4:47:f4:4c:ed:fa:65:0c:01:32:a0:f8:35: 74:db:17:3f:00:4e:07:f1:fa:50:98:4a:0e:c6:8e: cb:e6:fe:64:91:a6:ab:d2:20:4f:55:ba:13:50:bf: ad:97:ef:55:79:71:d0:df:9b:ff:cd:16:c0:c2:26: a8:ea:a0:ca:d9:73:5c:6d:ef:4f:1d:13:e7:b2:4a: 91:51:44:ec:16:b7:0a:11:47:65:f9:f9:29:b2:0d: 07:94:18:be:64:88:f0:f6:79:b6:c9:ed:cc:e1:00: fb:d9:42:72:75:7a:41:2f:9e:f3:c9:c3:d4:16:4c: a6:c8:a9:15:6c:dd:0b:63:8c:b7:fe:10:cd:b9:d4: 74:28:65:6a:d4:c5:f2:2d:1e:d0:1f:32:b8:92:3c: 08:14:bf:ea:25:38:ae:0d:11:41:7d:73:46:50:68: aa:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:43:61:6D:D2:ED:FC:90:5C:AF:16:14:B1:1B:B2:E2:FE:8D:B9:39 X509v3 Authority Key Identifier: keyid:14:92:A2:07:54:C9:A7:65:0B:82:79:B9:39:06:89:C4:69:D7:35:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FJKiB1TJp2ULgnm5OQaJxGnXNZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/631e6a-7d06-4fa1-bfd9-ca74a067febf/1/FJKiB1TJp2ULgnm5OQaJxGnXNZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:68:18:64:20:26:78:2c:25:c0:5b:ef:6f:b4:47:2b:10:26: 01:37:dc:02:5f:f9:3e:4d:b9:f1:a6:10:fe:2b:67:f3:c4:8f: 67:5d:c0:42:e2:08:0b:db:09:d4:30:af:b0:e1:b3:d9:7a:10: a5:ce:a5:9d:58:7e:8f:3f:b5:8b:6f:91:e8:e0:2f:2f:60:3c: 00:3f:89:85:d9:e7:fb:d7:b4:a9:45:9d:a1:5c:91:01:f6:f7: d3:5b:a5:19:76:ab:02:8e:77:8c:a3:fc:98:94:7f:6b:f9:13: 3b:1f:d5:7b:9b:e0:20:e6:1d:d7:e0:57:74:83:99:8b:4f:fe: 65:e0:83:6e:68:a6:0a:9f:6d:46:8d:a8:46:8b:f1:c2:23:6d: 26:4d:1a:f1:5e:ab:a8:31:08:8c:46:ad:48:24:7b:cc:35:eb: ca:ed:90:f4:5d:4f:fd:79:08:75:8d:6a:de:00:61:2c:65:20: 59:66:ff:36:03:50:3b:fd:cb:9a:76:08:12:97:fd:c2:22:20: 18:55:41:ed:ed:f4:42:cb:cf:67:75:c0:ad:cb:41:98:f4:ca: 89:90:38:84:16:d4:71:b7:fc:ce:06:18:ad:6c:36:23:aa:30: 55:13:e6:f5:4b:4c:fb:bf:c6:e5:16:04:c7:a2:84:0e:3c:38: a7:36:9f:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrx0gFOT0wfMPb+p2NQ0fWNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0OTJhMjA3NTRjOWE3NjUwYjgyNzliOTM5MDY4OWM0Njlk NzM1OTUwHhcNMjUxMjA2MDQwMTAzWhcNMjUxMjA3MDQwMTAzWjAzMTEwLwYDVQQD EygzZjQzNjE2ZGQyZWRmYzkwNWNhZjE2MTRiMTFiYjJlMmZlOGRiOTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshVe4DYF+zV6KXkHJ15sGtaakQKC ogBnPGKkHpTBhfruEHcV/ZEOOwL0Uj3PbFXy8JdRjFgBP0okYVH3+oRIi6MKSNTg XqUslHe64e3Q6aWN6CmLh8l7t0eKTbRH9Ezt+mUMATKg+DV02xc/AE4H8fpQmEoO xo7L5v5kkaar0iBPVboTUL+tl+9VeXHQ35v/zRbAwiao6qDK2XNcbe9PHRPnskqR UUTsFrcKEUdl+fkpsg0HlBi+ZIjw9nm2ye3M4QD72UJydXpBL57zycPUFkymyKkV bN0LY4y3/hDNudR0KGVq1MXyLR7QHzK4kjwIFL/qJTiuDRFBfXNGUGiq2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9DYW3S7fyQXK8WFLEbsuL+jbk5MB8GA1UdIwQY MBaAFBSSogdUyadlC4J5uTkGicRp1zWVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDkt Y2E3NGEwNjdmZWJmLzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS82MzFlNmEtN2QwNi00ZmExLWJmZDktY2E3NGEwNjdmZWJm LzEvRkpLaUIxVEpwMlVMZ25tNU9RYUp4R25YTlpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmgYZCAm eCwlwFvvb7RHKxAmATfcAl/5Pk258aYQ/itn88SPZ13AQuIIC9sJ1DCvsOGz2XoQ pc6lnVh+jz+1i2+R6OAvL2A8AD+Jhdnn+9e0qUWdoVyRAfb301ulGXarAo53jKP8 mJR/a/kTOx/Ve5vgIOYd1+BXdIOZi0/+ZeCDbmimCp9tRo2oRovxwiNtJk0a8V6r qDEIjEatSCR7zDXryu2Q9F1P/XkIdY1q3gBhLGUgWWb/NgNQO/3LmnYIEpf9wiIg GFVB7e30QsvPZ3XArctBmPTKiZA4hBbUcbf8zgYYrWw2I6owVRPm9UtM+7/G5RYE x6KEDjw4pzafyg== -----END CERTIFICATE-----Generated at Sat Dec 6 07:07:22 2025 by rpki-client