This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft File: FOKCz2FihLWPhexD5UyQv5WU5Jw.mft (raw, json) Hash identifier: CtFIMeqFMpiPfgzC5b98Bj2RR49wC7m3Iy/GY7QspMI= Subject key identifier: DB:AA:C6:76:24:8F:6A:0A:76:9E:3E:6C:EE:8C:E7:F4:80:46:8E:65 Authority key identifier: 14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C Certificate issuer: /CN=14e282cf616284b58f85ec43e54c90bf9594e49c Certificate serial: 019AF27674F04C75E3018A6FE1C441EE2714 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft Manifest number: 16CD Signing time: Sat 06 Dec 2025 07:00:40 +0000 Manifest this update: Sat 06 Dec 2025 07:00:40 +0000 Manifest next update: Sun 07 Dec 2025 07:00:40 +0000 Files and hashes: 1: FOKCz2FihLWPhexD5UyQv5WU5Jw.crl (hash: EMhF99FbJCBs4Ff1KO+cBIbBwCP/OngoWCoBH4T55qw=) 2: kh6Y6l5pM_4l1e06rKEm1LbTzj8.roa (hash: K3F9IA4gy3lGNBan+gMrBm2P+dEVmz4mQ6ObmV/2TV8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:74:f0:4c:75:e3:01:8a:6f:e1:c4:41:ee:27:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e282cf616284b58f85ec43e54c90bf9594e49c Validity Not Before: Dec 6 07:00:40 2025 GMT Not After : Dec 7 07:00:40 2025 GMT Subject: CN=dbaac676248f6a0a769e3e6cee8ce7f480468e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a7:d7:62:d7:69:3b:5d:36:77:48:bb:d1:6e: 59:d8:cb:8a:bd:8b:69:a2:b2:0a:8a:55:1c:6b:b8: ea:1a:5e:bb:2c:fb:06:6b:5d:fd:e5:ac:d1:5c:ea: 08:b7:08:a0:9c:e1:2d:7b:37:cb:3c:7b:3b:3b:eb: 9c:54:89:3c:7a:78:b3:c4:26:5a:75:7b:ea:a0:a0: d4:04:b1:cd:e5:06:3c:e9:fe:0a:05:7a:2e:77:6f: 06:cf:90:6b:c3:50:c9:a4:ee:13:41:a0:b5:78:f1: 9a:65:97:dd:93:27:52:a0:cc:70:45:ce:85:f5:cf: a9:a1:40:c1:d3:1a:94:9c:f1:68:c5:fb:65:4f:38: a2:c0:ee:b7:35:04:b4:20:fd:4e:f5:83:97:62:1f: e1:27:7c:ae:ef:5a:8d:b6:1f:12:ff:53:1f:85:22: a1:3f:46:57:91:43:60:5f:3b:5f:a5:25:fd:dd:b5: e1:9b:ad:70:67:f6:4f:54:bd:f5:ee:98:cc:0f:e2: 47:8b:0e:c2:c6:44:fb:af:e6:a7:5f:73:42:2e:e7: 06:74:f4:a4:b4:a1:a9:4e:3e:05:89:02:c7:da:9b: 8a:0d:28:20:63:a1:dd:13:28:10:8c:db:d9:a5:50: f0:46:9c:6a:8e:13:bd:35:fa:2c:6d:32:0d:ee:f9: e7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:AA:C6:76:24:8F:6A:0A:76:9E:3E:6C:EE:8C:E7:F4:80:46:8E:65 X509v3 Authority Key Identifier: keyid:14:E2:82:CF:61:62:84:B5:8F:85:EC:43:E5:4C:90:BF:95:94:E4:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOKCz2FihLWPhexD5UyQv5WU5Jw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c8d8ad-cd72-419b-973f-56094fd6cc6c/1/FOKCz2FihLWPhexD5UyQv5WU5Jw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b3:68:7e:a2:6e:bd:c6:ad:bc:27:1d:8d:26:5f:b2:0d:23: c0:ba:75:0b:50:67:65:94:42:6f:64:f9:d0:74:7e:ab:c8:e3: 72:46:6f:9e:df:7f:15:c8:5b:92:47:dd:c5:07:34:fa:9e:e0: 44:87:6d:14:09:e8:fd:84:38:d2:92:20:99:9b:f3:5c:68:29: c8:72:29:e5:e2:6b:e3:89:34:93:16:98:ba:f3:c2:2e:f4:eb: 87:53:2d:8c:ff:04:48:81:11:75:a0:1d:b8:a9:4d:ea:92:a6: 88:14:60:f7:16:af:69:5f:1d:97:55:10:b4:33:b9:34:b9:70: e9:7b:76:d5:c2:f1:ad:66:c9:01:44:05:4c:1d:7f:7c:ce:60: 7d:28:65:a9:db:9b:a0:4c:68:8d:c3:81:84:79:dd:c6:e4:1a: db:bf:03:d2:1b:25:7b:79:e5:d1:14:6a:af:31:9f:bc:70:12: c0:c2:d4:0b:c0:91:e7:4b:d8:43:37:ff:fd:cf:66:4c:71:c0: cc:cf:dc:be:eb:d9:cb:3c:88:b4:57:f4:13:3a:12:cb:57:dc: 56:05:b1:3b:41:cc:f9:39:92:28:38:af:df:21:49:f7:09:25: 85:97:4c:1b:21:d0:93:0d:33:05:00:51:24:9d:f7:dd:f9:63: b9:df:e8:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydnTwTHXjAYpv4cRB7icUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTI4MmNmNjE2Mjg0YjU4Zjg1ZWM0M2U1NGM5MGJmOTU5 NGU0OWMwHhcNMjUxMjA2MDcwMDQwWhcNMjUxMjA3MDcwMDQwWjAzMTEwLwYDVQQD EyhkYmFhYzY3NjI0OGY2YTBhNzY5ZTNlNmNlZThjZTdmNDgwNDY4ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqfXYtdpO102d0i70W5Z2MuKvYtp orIKilUca7jqGl67LPsGa1395azRXOoItwignOEtezfLPHs7O+ucVIk8enizxCZa dXvqoKDUBLHN5QY86f4KBXoud28Gz5Brw1DJpO4TQaC1ePGaZZfdkydSoMxwRc6F 9c+poUDB0xqUnPFoxftlTziiwO63NQS0IP1O9YOXYh/hJ3yu71qNth8S/1MfhSKh P0ZXkUNgXztfpSX93bXhm61wZ/ZPVL317pjMD+JHiw7CxkT7r+anX3NCLucGdPSk tKGpTj4FiQLH2puKDSggY6HdEygQjNvZpVDwRpxqjhO9NfosbTIN7vnn9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuqxnYkj2oKdp4+bO6M5/SARo5lMB8GA1UdIwQY MBaAFBTigs9hYoS1j4XsQ+VMkL+VlOScMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2Yt NTYwOTRmZDZjYzZjLzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9jOGQ4YWQtY2Q3Mi00MTliLTk3M2YtNTYwOTRmZDZjYzZj LzEvRk9LQ3oyRmloTFdQaGV4RDVVeVF2NVdVNUp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLNofqJu vcatvCcdjSZfsg0jwLp1C1BnZZRCb2T50HR+q8jjckZvnt9/FchbkkfdxQc0+p7g RIdtFAno/YQ40pIgmZvzXGgpyHIp5eJr44k0kxaYuvPCLvTrh1MtjP8ESIERdaAd uKlN6pKmiBRg9xavaV8dl1UQtDO5NLlw6Xt21cLxrWbJAUQFTB1/fM5gfShlqdub oExojcOBhHndxuQa278D0hsle3nl0RRqrzGfvHASwMLUC8CR50vYQzf//c9mTHHA zM/cvuvZyzyItFf0EzoSy1fcVgWxO0HM+TmSKDiv3yFJ9wklhZdMGyHQkw0zBQBR JJ333fljud/o5Q== -----END CERTIFICATE-----Generated at Sat Dec 6 13:46:00 2025 by rpki-client