This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft File: FbWVJg9ywiJUesPjZ_LIh644o_w.mft (raw, json) Hash identifier: 5QlRxc3ou49r4MWmkkDeL5qg4h56pwKyNFyqPr9t/lE= Subject key identifier: 04:53:7D:02:B1:E5:E0:A8:D8:6E:C9:A1:DE:90:7C:64:3E:FB:BC:11 Authority key identifier: 15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC Certificate issuer: /CN=15b595260f72c222547ac3e367f2c887ae38a3fc Certificate serial: 019B5A883DA4EF885BC37ABB42B52A3EBB9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft Manifest number: 1541 Signing time: Fri 26 Dec 2025 12:00:36 +0000 Manifest this update: Fri 26 Dec 2025 12:00:36 +0000 Manifest next update: Sat 27 Dec 2025 12:00:36 +0000 Files and hashes: 1: FbWVJg9ywiJUesPjZ_LIh644o_w.crl (hash: 58fnbvHKr52lx29DY0HOMi+H7hDW/WscKeOzV3c9yEw=) 2: gEUoWtci9gDrlWD7_2HBRPHc3Kk.roa (hash: m0n0mKFLG+q3BgRaxr/RvXon3zAIOWdnRruNeP120aw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:88:3d:a4:ef:88:5b:c3:7a:bb:42:b5:2a:3e:bb:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15b595260f72c222547ac3e367f2c887ae38a3fc Validity Not Before: Dec 26 12:00:36 2025 GMT Not After : Dec 27 12:00:36 2025 GMT Subject: CN=04537d02b1e5e0a8d86ec9a1de907c643efbbc11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:c9:8f:d9:a0:45:6c:79:1f:4f:2f:21:48: 9c:b4:38:9d:5f:3e:b1:28:f1:3f:fa:a5:79:cc:3f: 6e:10:8b:15:3d:5b:46:a0:30:4c:c1:d6:24:ad:e1: 85:24:79:2e:e3:ce:98:72:b7:87:53:6e:a7:18:dc: 13:a3:1e:66:7a:52:b8:ab:6a:73:17:33:73:fa:b1: 13:33:d1:32:da:f8:b9:f3:e4:11:2a:ad:89:bc:49: 91:54:98:fd:4c:e3:62:e4:f0:22:e4:30:14:16:72: 5d:63:8b:4b:9e:04:88:15:bd:0e:18:39:bf:9d:85: ad:75:c7:1b:5f:19:9f:27:8f:61:6c:11:ac:ad:f5: d9:9f:59:f0:07:6f:c9:6a:cd:f7:f3:36:34:7a:5d: 23:ff:0f:88:f9:7c:75:bd:01:22:c2:2c:33:ec:8b: 26:60:d7:65:2b:23:c9:d2:33:35:9d:fa:28:49:da: 56:2b:7d:15:72:17:ae:4b:dd:52:dd:d7:95:0b:33: e1:64:a7:86:5f:d2:67:86:67:ad:fb:38:05:9c:93: 24:47:7d:c1:15:e6:b7:10:da:9a:44:4e:49:05:c6: ea:0d:c4:31:4e:d5:b1:82:d2:37:fe:c9:cf:d5:cc: 45:80:d2:b1:59:9a:43:d3:d1:ce:30:96:d3:20:dd: f2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:53:7D:02:B1:E5:E0:A8:D8:6E:C9:A1:DE:90:7C:64:3E:FB:BC:11 X509v3 Authority Key Identifier: keyid:15:B5:95:26:0F:72:C2:22:54:7A:C3:E3:67:F2:C8:87:AE:38:A3:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FbWVJg9ywiJUesPjZ_LIh644o_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/614d64-37d3-4bbc-8f3d-b43cd4d97c8e/1/FbWVJg9ywiJUesPjZ_LIh644o_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9d:13:72:12:0b:e7:e6:5b:58:ac:af:17:95:5b:10:be:a8: 3c:6a:25:19:af:3a:ea:f0:bf:dc:10:89:b0:90:ca:55:56:0a: 07:51:97:fa:01:70:dd:63:34:2a:08:6b:d5:e9:1a:bc:73:f1: 78:43:04:66:ea:b2:d2:67:92:ac:b9:57:f8:7e:22:5c:4c:59: 5d:42:39:86:4a:c6:98:be:e2:8d:45:63:ea:32:94:c1:a8:a4: 83:6f:07:0f:8f:9a:ab:82:48:2c:9c:d2:3b:79:62:ef:f2:e5: 78:fc:a6:f7:c3:11:6c:84:42:52:58:3a:f6:29:44:31:dc:aa: a1:1f:86:6c:ca:dc:3c:89:99:21:f4:76:54:32:db:32:a1:19: 62:7c:66:db:a3:1d:f7:b3:f2:63:c9:71:13:7c:f0:9a:99:91: 36:01:ef:f3:6d:5c:9f:20:d4:24:02:18:11:52:2e:29:da:c9: 43:de:ae:02:db:d2:b3:6b:5b:09:a5:67:21:9b:3c:c8:a4:6a: fa:a9:eb:7b:40:73:f2:0d:7d:88:f5:68:eb:d3:56:79:09:eb: 8e:2c:b2:93:81:27:95:fe:e5:5a:30:28:8d:1e:38:60:8f:cc: 41:22:1b:f3:b5:b2:39:a1:70:a7:c2:85:82:aa:eb:dd:87:c9: 49:ae:25:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaiD2k74hbw3q7QrUqPrudMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YjU5NTI2MGY3MmMyMjI1NDdhYzNlMzY3ZjJjODg3YWUz OGEzZmMwHhcNMjUxMjI2MTIwMDM2WhcNMjUxMjI3MTIwMDM2WjAzMTEwLwYDVQQD EygwNDUzN2QwMmIxZTVlMGE4ZDg2ZWM5YTFkZTkwN2M2NDNlZmJiYzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTnJj9mgRWx5H08vIUictDidXz6x KPE/+qV5zD9uEIsVPVtGoDBMwdYkreGFJHku486YcreHU26nGNwTox5melK4q2pz FzNz+rETM9Ey2vi58+QRKq2JvEmRVJj9TONi5PAi5DAUFnJdY4tLngSIFb0OGDm/ nYWtdccbXxmfJ49hbBGsrfXZn1nwB2/Jas338zY0el0j/w+I+Xx1vQEiwiwz7Ism YNdlKyPJ0jM1nfooSdpWK30VcheuS91S3deVCzPhZKeGX9Jnhmet+zgFnJMkR33B Fea3ENqaRE5JBcbqDcQxTtWxgtI3/snP1cxFgNKxWZpD09HOMJbTIN3yKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARTfQKx5eCo2G7Jod6QfGQ++7wRMB8GA1UdIwQY MBaAFBW1lSYPcsIiVHrD42fyyIeuOKP8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2Qt YjQzY2Q0ZDk3YzhlLzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi82MTRkNjQtMzdkMy00YmJjLThmM2QtYjQzY2Q0ZDk3Yzhl LzEvRmJXVkpnOXl3aUpVZXNQalpfTEloNjQ0b193LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj50TchIL 5+ZbWKyvF5VbEL6oPGolGa866vC/3BCJsJDKVVYKB1GX+gFw3WM0Kghr1ekavHPx eEMEZuqy0meSrLlX+H4iXExZXUI5hkrGmL7ijUVj6jKUwaikg28HD4+aq4JILJzS O3li7/LlePym98MRbIRCUlg69ilEMdyqoR+GbMrcPImZIfR2VDLbMqEZYnxm26Md 97PyY8lxE3zwmpmRNgHv821cnyDUJAIYEVIuKdrJQ96uAtvSs2tbCaVnIZs8yKRq +qnre0Bz8g19iPVo69NWeQnrjiyyk4Enlf7lWjAojR44YI/MQSIb87WyOaFwp8KF gqrr3YfJSa4lTg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:45:06 2025 by rpki-client