This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft File: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft (raw, json) Hash identifier: mktvDXgXUsy8ez7cLU44TdTPdQSrojdZZSn7ImKYVHU= Subject key identifier: 02:88:BF:2D:01:C5:66:92:08:0F:BE:5B:D3:D6:3A:20:48:3C:3F:FC Authority key identifier: 16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 Certificate issuer: /CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Certificate serial: 019AF3F745BE111B48E99598456227B3728F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft Manifest number: 1548 Signing time: Sat 06 Dec 2025 14:00:59 +0000 Manifest this update: Sat 06 Dec 2025 14:00:59 +0000 Manifest next update: Sun 07 Dec 2025 14:00:59 +0000 Files and hashes: 1: Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl (hash: BEiPoq3HvVhoLhKgjGxT+E0q44x+Gb5+x83Ek0eO6Ws=) 2: M6kd2OZVwbLsznfkTpr9P9tvc9U.roa (hash: Jp9yH5OnFSN9zDtKINo+7/MzPgxLUFZmRYughYu+MLQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f3:f7:45:be:11:1b:48:e9:95:98:45:62:27:b3:72:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16f9f928b0ac67731991f374b8e194eb6542ac24 Validity Not Before: Dec 6 14:00:59 2025 GMT Not After : Dec 7 14:00:59 2025 GMT Subject: CN=0288bf2d01c56692080fbe5bd3d63a20483c3ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:e7:3e:5d:40:e3:7a:ac:e2:88:3f:b5:6f:6f: d0:64:eb:a9:cf:6c:9c:f9:f3:19:f5:a2:c3:10:06: 7f:1a:d7:0b:6a:2a:ef:67:68:46:4e:87:a0:6b:3c: f8:1c:4d:b0:58:9c:fe:d7:4b:c4:c7:5a:16:dd:1c: 86:7d:c0:f2:ed:f1:8d:21:2e:94:24:79:ad:33:8e: 67:be:80:10:b9:d1:9d:4b:88:ab:df:6c:e5:22:f3: 0e:bd:ec:3e:5a:16:4a:d2:42:29:8c:70:f3:69:12: 2c:6d:46:0a:99:79:14:b2:6d:de:9d:98:84:a3:80: 32:87:a4:d5:1d:f2:a6:6c:1d:a1:c5:1a:ce:b1:0c: bc:b3:42:9f:d9:99:79:7c:44:00:ec:17:94:a8:96: 57:43:f2:ba:7c:21:cf:d1:e1:c9:49:a9:67:4e:21: 68:77:95:06:f4:28:ef:e2:68:2e:e4:12:98:cd:02: 61:be:93:8e:1a:a4:bb:c1:08:74:6f:dd:74:26:58: 2d:94:52:f7:bd:55:3c:1b:57:af:59:09:5d:1b:0c: ab:80:7a:1f:3d:01:44:77:a6:a7:60:bd:fd:ee:0b: 1d:b7:20:ac:7b:c3:0a:07:ad:aa:cf:fc:57:e1:35: 0f:9d:5d:b1:88:e8:d1:55:43:f7:aa:39:22:c4:46: d3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:88:BF:2D:01:C5:66:92:08:0F:BE:5B:D3:D6:3A:20:48:3C:3F:FC X509v3 Authority Key Identifier: keyid:16:F9:F9:28:B0:AC:67:73:19:91:F3:74:B8:E1:94:EB:65:42:AC:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d5c042-5b4d-4b10-bc76-42eaabbfbfd2/1/Fvn5KLCsZ3MZkfN0uOGU62VCrCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:10:4b:98:a7:3f:50:da:e2:f5:c5:2c:2e:3a:ee:32:dc:09: b2:c1:60:59:b6:79:c4:ae:e3:1e:d6:a1:15:12:b6:70:1b:fc: 54:76:ec:46:1f:47:c2:ae:31:c0:3c:39:44:1c:f8:1a:ad:a6: 1c:c8:8c:b1:30:70:5c:0f:2e:14:d3:d6:90:5a:b0:bc:3e:f7: bf:81:27:95:60:01:a1:de:f9:f4:d6:1f:94:63:a8:47:c4:af: d2:c6:56:0c:22:02:9a:32:be:a3:25:4a:29:97:1a:36:9b:34: 67:5a:c7:1f:d9:aa:aa:dd:4a:83:50:0e:aa:82:8e:2c:38:b5: b1:fd:27:9b:85:d8:2b:9a:f1:63:7a:f5:d7:27:e3:18:4a:4a: f3:72:13:b5:22:b7:e6:92:74:fb:03:e3:3c:49:34:9f:41:aa: 78:e8:24:9a:90:9c:c0:54:2a:50:66:e2:1b:a1:59:6a:7e:b9: 53:e8:15:ff:db:62:a1:cc:26:16:70:50:f2:e5:5e:1a:7c:42: 84:3b:51:89:5c:b7:18:ec:f2:58:b1:a6:0f:1c:9e:8c:67:5d: 3d:5e:5e:47:62:db:f6:4e:57:58:39:af:d8:e7:01:e5:bf:b8: 71:12:57:ef:41:85:e3:1d:f8:2f:8f:34:74:e6:ff:62:9c:fc: bc:e5:ff:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrz90W+ERtI6ZWYRWIns3KPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZjlmOTI4YjBhYzY3NzMxOTkxZjM3NGI4ZTE5NGViNjU0 MmFjMjQwHhcNMjUxMjA2MTQwMDU5WhcNMjUxMjA3MTQwMDU5WjAzMTEwLwYDVQQD EygwMjg4YmYyZDAxYzU2NjkyMDgwZmJlNWJkM2Q2M2EyMDQ4M2MzZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+c+XUDjeqziiD+1b2/QZOupz2yc +fMZ9aLDEAZ/GtcLairvZ2hGToegazz4HE2wWJz+10vEx1oW3RyGfcDy7fGNIS6U JHmtM45nvoAQudGdS4ir32zlIvMOvew+WhZK0kIpjHDzaRIsbUYKmXkUsm3enZiE o4Ayh6TVHfKmbB2hxRrOsQy8s0Kf2Zl5fEQA7BeUqJZXQ/K6fCHP0eHJSalnTiFo d5UG9Cjv4mgu5BKYzQJhvpOOGqS7wQh0b910JlgtlFL3vVU8G1evWQldGwyrgHof PQFEd6anYL397gsdtyCse8MKB62qz/xX4TUPnV2xiOjRVUP3qjkixEbTbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKIvy0BxWaSCA++W9PWOiBIPD/8MB8GA1UdIwQY MBaAFBb5+SiwrGdzGZHzdLjhlOtlQqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYt NDJlYWFiYmZiZmQyLzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9kNWMwNDItNWI0ZC00YjEwLWJjNzYtNDJlYWFiYmZiZmQy LzEvRnZuNUtMQ3NaM01aa2ZOMHVPR1U2MlZDckNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAphBLmKc/ UNri9cUsLjruMtwJssFgWbZ5xK7jHtahFRK2cBv8VHbsRh9Hwq4xwDw5RBz4Gq2m HMiMsTBwXA8uFNPWkFqwvD73v4EnlWABod759NYflGOoR8Sv0sZWDCICmjK+oyVK KZcaNps0Z1rHH9mqqt1Kg1AOqoKOLDi1sf0nm4XYK5rxY3r11yfjGEpK83ITtSK3 5pJ0+wPjPEk0n0GqeOgkmpCcwFQqUGbiG6FZan65U+gV/9tiocwmFnBQ8uVeGnxC hDtRiVy3GOzyWLGmDxyejGddPV5eR2Lb9k5XWDmv2OcB5b+4cRJX70GF4x34L480 dOb/Ypz8vOX/gA== -----END CERTIFICATE-----Generated at Sat Dec 6 23:34:27 2025 by rpki-client