This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft File: FnhcBIzz1bIYafSUNPLTu0fUO6E.mft (raw, json) Hash identifier: yWsyyjHRXgTgfhS90MPy1WouSG8VOPN6SYZ5+ZbiMKA= Subject key identifier: 10:AA:C6:07:18:0C:CD:78:43:61:E3:D9:2C:62:1A:09:F2:3C:14:77 Authority key identifier: 16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1 Certificate issuer: /CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1 Certificate serial: 019B19163278B7F60DD520F9C4ED781CF3BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft Manifest number: 1676 Signing time: Sat 13 Dec 2025 19:00:43 +0000 Manifest this update: Sat 13 Dec 2025 19:00:43 +0000 Manifest next update: Sun 14 Dec 2025 19:00:43 +0000 Files and hashes: 1: FnhcBIzz1bIYafSUNPLTu0fUO6E.crl (hash: rhA2V8Jhmhl5N0mFiFWqZntjyNMnxk61JJhIKaaOhXU=) 2: lvXJyQy3nWKTfzu8oFBAWTYMtuo.roa (hash: s4PZbf+hjf3iDmNtbUCQUPc0IiLibPsLSs4quWHg7C4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 17:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:16:32:78:b7:f6:0d:d5:20:f9:c4:ed:78:1c:f3:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16785c048cf3d5b21869f49434f2d3bb47d43ba1 Validity Not Before: Dec 13 19:00:43 2025 GMT Not After : Dec 14 19:00:43 2025 GMT Subject: CN=10aac607180ccd784361e3d92c621a09f23c1477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:ea:50:49:fc:a6:9a:3c:de:6e:3f:58:50: b7:ff:08:a2:3a:b6:80:97:39:6c:51:c6:07:7e:f2: 79:06:7b:70:f1:ca:9f:fb:18:a9:c9:22:34:a1:da: a3:ac:8e:98:dd:54:4b:79:e2:61:60:19:1e:22:06: da:66:dc:70:4b:d4:de:fa:c3:39:22:4e:d6:89:31: 33:65:76:f7:bb:da:f5:1c:3c:61:07:05:2c:52:4b: f1:e5:03:1f:1a:36:47:7b:5a:d8:ca:10:6b:5a:fa: 69:bb:c3:62:c3:61:f8:6e:f4:e3:71:a2:d1:3e:1c: da:e8:62:df:76:9a:36:9a:a5:ed:1e:94:00:a6:00: f9:f0:33:0d:bc:1e:78:ca:72:1f:f0:bc:34:b7:8b: c9:75:7d:c3:10:ba:16:42:9d:e1:0f:91:3c:49:4b: a2:55:52:af:a5:e5:f2:bd:a3:a2:ad:03:2a:36:03: 36:f1:b5:84:fa:91:37:0f:13:23:d8:16:9b:c5:6c: 9e:01:23:6c:61:ac:85:3c:e7:af:a6:80:01:72:f3: ab:1d:a2:82:3f:93:10:05:0a:a9:79:2b:d9:1c:00: c2:f1:e7:77:d4:68:ce:0c:a6:fe:f8:45:b7:4a:a9: 60:5a:f7:7e:2f:51:0b:01:cc:7e:f9:16:7e:48:1a: fa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AA:C6:07:18:0C:CD:78:43:61:E3:D9:2C:62:1A:09:F2:3C:14:77 X509v3 Authority Key Identifier: keyid:16:78:5C:04:8C:F3:D5:B2:18:69:F4:94:34:F2:D3:BB:47:D4:3B:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnhcBIzz1bIYafSUNPLTu0fUO6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d4a00f-c73f-4014-ade0-ab37fed52a4d/1/FnhcBIzz1bIYafSUNPLTu0fUO6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:bb:2d:36:a2:7d:00:64:bf:58:62:48:80:08:59:61:db:4f: a8:ff:31:cb:b7:a8:78:76:64:50:6f:1a:3a:08:fa:37:58:62: 65:cb:63:80:47:f8:0c:2f:11:c1:32:56:2f:7d:65:12:83:7d: cf:91:5d:bb:bb:6d:99:6b:2a:01:88:e3:3d:ad:82:21:1e:c0: 11:c5:1e:8c:0c:ee:6a:91:0c:f1:8f:8e:4b:de:f5:3e:39:f3: 73:86:6e:c4:9c:10:b7:73:40:f8:02:83:04:4c:55:ee:03:75: 00:b6:89:fc:7f:c3:11:cb:b0:07:93:1a:1f:79:44:c8:a0:bc: 0f:ab:e4:9b:64:3c:27:5b:23:fe:08:21:3d:10:62:06:c5:d3: 70:0b:86:90:17:1f:0d:65:53:a4:90:d3:d6:51:ca:4a:f0:d8: 56:14:a6:5e:fc:ca:79:4c:ad:0a:c3:c6:4b:9b:85:c5:43:ed: 8b:98:44:e2:c6:dc:1e:2e:a3:6b:6b:23:ba:f4:4b:49:18:b1: 7e:ac:ec:e0:21:c5:cc:82:9e:f5:0b:de:50:1b:bd:38:bb:ca: 8a:ba:30:cd:68:45:14:11:5a:05:62:72:f6:62:49:cb:fc:61: 6d:4c:0d:12:08:62:39:3f:4c:4f:42:1e:a3:28:1b:d8:2d:00: 48:b0:e2:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZFjJ4t/YN1SD5xO14HPO6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2Nzg1YzA0OGNmM2Q1YjIxODY5ZjQ5NDM0ZjJkM2JiNDdk NDNiYTEwHhcNMjUxMjEzMTkwMDQzWhcNMjUxMjE0MTkwMDQzWjAzMTEwLwYDVQQD EygxMGFhYzYwNzE4MGNjZDc4NDM2MWUzZDkyYzYyMWEwOWYyM2MxNDc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BHqUEn8ppo83m4/WFC3/wiiOraA lzlsUcYHfvJ5Bntw8cqf+xipySI0odqjrI6Y3VRLeeJhYBkeIgbaZtxwS9Te+sM5 Ik7WiTEzZXb3u9r1HDxhBwUsUkvx5QMfGjZHe1rYyhBrWvppu8Niw2H4bvTjcaLR Phza6GLfdpo2mqXtHpQApgD58DMNvB54ynIf8Lw0t4vJdX3DELoWQp3hD5E8SUui VVKvpeXyvaOirQMqNgM28bWE+pE3DxMj2BabxWyeASNsYayFPOevpoABcvOrHaKC P5MQBQqpeSvZHADC8ed31GjODKb++EW3SqlgWvd+L1ELAcx++RZ+SBr6KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCqxgcYDM14Q2Hj2SxiGgnyPBR3MB8GA1UdIwQY MBaAFBZ4XASM89WyGGn0lDTy07tH1DuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAt YWIzN2ZlZDUyYTRkLzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9kNGEwMGYtYzczZi00MDE0LWFkZTAtYWIzN2ZlZDUyYTRk LzEvRm5oY0JJenoxYklZYWZTVU5QTFR1MGZVTzZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7stNqJ9 AGS/WGJIgAhZYdtPqP8xy7eoeHZkUG8aOgj6N1hiZctjgEf4DC8RwTJWL31lEoN9 z5Fdu7ttmWsqAYjjPa2CIR7AEcUejAzuapEM8Y+OS971Pjnzc4ZuxJwQt3NA+AKD BExV7gN1ALaJ/H/DEcuwB5MaH3lEyKC8D6vkm2Q8J1sj/gghPRBiBsXTcAuGkBcf DWVTpJDT1lHKSvDYVhSmXvzKeUytCsPGS5uFxUPti5hE4sbcHi6ja2sjuvRLSRix fqzs4CHFzIKe9QveUBu9OLvKirowzWhFFBFaBWJy9mJJy/xhbUwNEghiOT9MT0Ie oygb2C0ASLDiTg== -----END CERTIFICATE-----Generated at Sun Dec 14 03:28:51 2025 by rpki-client