This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft File: FNQhCjRMmZST5hz53XNWd9OLwF0.mft (raw, json) Hash identifier: gzJSDX3Ew4dgT4TnM01i15ayMUUQgUND4lzQczJAjMM= Subject key identifier: 92:AE:04:79:3C:8C:43:CE:5C:BA:07:DD:1A:0C:7B:05:15:04:CE:34 Authority key identifier: 14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D Certificate issuer: /CN=14d4210a344c999493e61cf9dd735677d38bc05d Certificate serial: 019B3A21FE6A46E0B73FB868EAC3EE8DE2CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft Manifest number: 090A Signing time: Sat 20 Dec 2025 05:01:04 +0000 Manifest this update: Sat 20 Dec 2025 05:01:04 +0000 Manifest next update: Sun 21 Dec 2025 05:01:04 +0000 Files and hashes: 1: 2MEo2jMoegCH1A6pe5270kRxVBU.roa (hash: YgKMo8+McPuffH8rbU6912C5wY/cPyLb0wIwXbLwGqw=) 2: FNQhCjRMmZST5hz53XNWd9OLwF0.crl (hash: 4BcT7sxn0D5Tfn6eaxM8G2liaD7J1s3+K6/gcNbTcpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 01:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:21:fe:6a:46:e0:b7:3f:b8:68:ea:c3:ee:8d:e2:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d4210a344c999493e61cf9dd735677d38bc05d Validity Not Before: Dec 20 05:01:04 2025 GMT Not After : Dec 21 05:01:04 2025 GMT Subject: CN=92ae04793c8c43ce5cba07dd1a0c7b051504ce34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e1:b5:2e:91:f6:5c:cb:8c:1b:ec:7f:bd:29: 38:59:f1:23:c5:af:e6:b9:47:26:ce:d1:5e:a5:6f: 68:4e:1e:92:82:7e:6b:bf:6e:0a:48:b1:f1:86:f6: 5a:05:10:e2:59:c3:09:19:f5:56:c1:53:e6:17:9e: e6:74:2b:57:82:38:ed:33:99:52:05:c3:77:21:14: 00:14:c6:7a:a9:23:b6:a5:11:8a:a6:d0:96:dc:d4: 28:4e:34:0b:5a:5c:d2:ce:82:4f:41:70:32:aa:8c: 79:7c:5a:f5:90:5d:7a:b7:ca:7b:e3:df:b9:4f:14: 0c:05:29:ef:94:96:11:80:43:a3:39:c9:c6:ab:9b: f0:16:30:3a:b0:63:de:06:e5:5a:dc:1f:d4:c3:d8: 1b:b8:b5:82:04:4a:8e:1f:f9:cc:48:74:c5:6e:97: 45:b0:93:67:aa:a4:96:85:c4:f0:1a:64:bf:f0:93: ad:fa:52:41:55:e0:5f:1d:cb:6f:87:c6:65:15:c6: 4b:d2:76:7c:51:5c:f0:f7:27:de:1f:17:00:6e:42: 67:0c:f6:fb:21:fe:bb:65:23:2b:01:d9:77:89:73: 78:cf:02:81:50:43:60:b2:e9:71:81:36:4c:a5:b2: 42:b9:23:2b:c8:d4:f0:93:8d:6a:70:f5:67:11:94: 39:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AE:04:79:3C:8C:43:CE:5C:BA:07:DD:1A:0C:7B:05:15:04:CE:34 X509v3 Authority Key Identifier: keyid:14:D4:21:0A:34:4C:99:94:93:E6:1C:F9:DD:73:56:77:D3:8B:C0:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNQhCjRMmZST5hz53XNWd9OLwF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c3ef54-67fa-4939-b658-38544c2a87bb/1/FNQhCjRMmZST5hz53XNWd9OLwF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ff:a9:3a:c4:96:7c:b5:18:f3:5b:83:fe:74:23:e8:0a:02: 63:ce:8d:e9:ed:3c:4f:df:2e:d4:ac:1b:ba:10:88:ba:c0:ff: 93:cc:07:c2:0f:f0:b1:44:fd:eb:30:21:a9:ec:59:44:5a:10: 74:83:59:21:91:47:ec:f6:87:8c:38:8d:98:fb:87:16:07:f9: f8:46:21:07:9e:a8:81:cc:31:1a:91:3e:c5:b3:9a:fd:a0:34: 84:86:b8:1c:97:98:2c:8a:ab:12:d4:a2:c7:b2:8b:59:48:8a: 4e:e9:2c:66:78:a0:e6:16:d3:0c:39:a1:03:1f:86:14:d0:08: 20:76:3a:c7:b4:a3:d8:6c:39:27:72:2f:f4:11:8e:eb:b8:5d: fa:80:f1:0d:31:56:8c:01:41:7c:84:a7:7b:64:ca:38:fe:3d: 8c:10:6d:cf:d7:19:ea:06:e9:3a:8d:68:d8:24:c2:90:ea:cd: a2:91:1d:27:2f:53:c9:14:94:db:f3:f8:5c:f1:ca:ba:27:de: f4:9c:f0:0c:28:07:09:d5:f4:c5:b8:6a:fc:2c:5e:f7:65:df: 72:d4:c0:1b:3b:6b:83:c9:51:28:ce:34:00:74:fb:24:fe:d5: 1a:18:94:84:e2:74:30:55:68:0f:b4:a1:a8:4b:c0:82:96:53: fb:41:d9:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6If5qRuC3P7ho6sPujeLLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDQyMTBhMzQ0Yzk5OTQ5M2U2MWNmOWRkNzM1Njc3ZDM4 YmMwNWQwHhcNMjUxMjIwMDUwMTA0WhcNMjUxMjIxMDUwMTA0WjAzMTEwLwYDVQQD Eyg5MmFlMDQ3OTNjOGM0M2NlNWNiYTA3ZGQxYTBjN2IwNTE1MDRjZTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneG1LpH2XMuMG+x/vSk4WfEjxa/m uUcmztFepW9oTh6Sgn5rv24KSLHxhvZaBRDiWcMJGfVWwVPmF57mdCtXgjjtM5lS BcN3IRQAFMZ6qSO2pRGKptCW3NQoTjQLWlzSzoJPQXAyqox5fFr1kF16t8p749+5 TxQMBSnvlJYRgEOjOcnGq5vwFjA6sGPeBuVa3B/Uw9gbuLWCBEqOH/nMSHTFbpdF sJNnqqSWhcTwGmS/8JOt+lJBVeBfHctvh8ZlFcZL0nZ8UVzw9yfeHxcAbkJnDPb7 If67ZSMrAdl3iXN4zwKBUENgsulxgTZMpbJCuSMryNTwk41qcPVnEZQ5pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKuBHk8jEPOXLoH3RoMewUVBM40MB8GA1UdIwQY MBaAFBTUIQo0TJmUk+Yc+d1zVnfTi8BdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgt Mzg1NDRjMmE4N2JiLzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9jM2VmNTQtNjdmYS00OTM5LWI2NTgtMzg1NDRjMmE4N2Ji LzEvRk5RaENqUk1tWlNUNWh6NTNYTldkOU9Md0YwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf+pOsSW fLUY81uD/nQj6AoCY86N6e08T98u1KwbuhCIusD/k8wHwg/wsUT96zAhqexZRFoQ dINZIZFH7PaHjDiNmPuHFgf5+EYhB56ogcwxGpE+xbOa/aA0hIa4HJeYLIqrEtSi x7KLWUiKTuksZnig5hbTDDmhAx+GFNAIIHY6x7Sj2Gw5J3Iv9BGO67hd+oDxDTFW jAFBfISne2TKOP49jBBtz9cZ6gbpOo1o2CTCkOrNopEdJy9TyRSU2/P4XPHKuife 9JzwDCgHCdX0xbhq/Cxe92XfctTAGztrg8lRKM40AHT7JP7VGhiUhOJ0MFVoD7Sh qEvAgpZT+0HZeQ== -----END CERTIFICATE-----Generated at Sat Dec 20 09:09:03 2025 by rpki-client