This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft File: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft (raw, json) Hash identifier: 3pjbuJ40u6Oc8EdUgRvO30Ikb79frHzRE+/6q7taN3A= Subject key identifier: 8E:1F:D3:8E:EE:F7:59:8C:14:F3:16:BA:FF:40:F0:6D:CA:80:73:C3 Authority key identifier: 16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A Certificate issuer: /CN=1683805319d8485584dc39cf5381583fb6431d7a Certificate serial: 019B59E425B85F9BD5C4117E01B92C6397FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft Manifest number: 0970 Signing time: Fri 26 Dec 2025 09:01:22 +0000 Manifest this update: Fri 26 Dec 2025 09:01:22 +0000 Manifest next update: Sat 27 Dec 2025 09:01:22 +0000 Files and hashes: 1: FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl (hash: 8tMKPrNbNrmOBMoFHBuziRux5zfSHiUl1re4B6MUpEU=) 2: TF7nAj58d6ltPhTUNcDwpZ4Ncic.roa (hash: bLmXSoYJumVpK9YJA9L+Jf2+aVCyzGG5sj4lmj+Mw7M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:25:b8:5f:9b:d5:c4:11:7e:01:b9:2c:63:97:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1683805319d8485584dc39cf5381583fb6431d7a Validity Not Before: Dec 26 09:01:22 2025 GMT Not After : Dec 27 09:01:22 2025 GMT Subject: CN=8e1fd38eeef7598c14f316baff40f06dca8073c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:93:99:6a:ac:26:ec:04:36:2e:a3:5e:7c:16: e7:3e:8d:62:58:cf:c6:b6:95:b4:40:30:87:fb:4f: a6:52:e8:18:77:ec:35:8e:6d:28:8a:ef:a4:bf:42: ef:a3:4d:34:85:33:a7:58:00:9d:5d:d7:f1:17:64: 3f:23:a0:ec:e3:39:97:08:87:5c:12:12:ab:dd:87: e2:1a:a6:fc:9f:1d:5d:9e:16:45:25:09:c6:2a:f0: 56:b6:92:79:db:c1:84:cf:4c:dd:07:53:15:2e:16: 67:8a:0a:d6:5f:c3:64:a7:27:50:e6:a1:20:55:e8: 7e:e1:ce:78:54:a6:64:1e:f6:f8:0a:43:b6:fa:23: 32:7b:1e:f4:c3:bc:4b:81:b0:1c:a8:a8:3d:14:28: 9a:9d:ba:55:3a:5e:60:a9:d0:00:47:68:0f:2e:d3: 43:e4:5f:33:6d:3c:ee:9a:82:02:e4:c7:be:32:e8: cb:78:72:b6:f0:7b:36:0e:93:b4:12:91:a1:18:be: 7a:bf:e1:ea:cb:3c:33:9b:0d:7c:66:fa:a3:fd:d3: 74:fe:07:35:65:d7:16:81:14:09:9e:eb:5b:d5:b0: 86:94:90:b7:75:dd:ee:53:96:86:80:9d:c5:cd:52: c6:1d:85:18:a4:1d:00:43:cf:06:65:3f:30:99:0b: 46:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1F:D3:8E:EE:F7:59:8C:14:F3:16:BA:FF:40:F0:6D:CA:80:73:C3 X509v3 Authority Key Identifier: keyid:16:83:80:53:19:D8:48:55:84:DC:39:CF:53:81:58:3F:B6:43:1D:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/b25cf4-0a35-4bdb-9dcd-ee16086cfc72/1/FoOAUxnYSFWE3DnPU4FYP7ZDHXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:48:99:00:fa:54:2b:bf:e1:d1:91:c4:e0:c4:d9:45:2b:0e: 8f:b5:03:ff:fb:5a:24:97:c3:14:fd:42:a3:db:b9:25:dc:33: 79:63:27:52:e9:a3:f8:8b:91:8c:0a:45:1a:d9:62:0d:3b:94: 21:28:52:fe:c3:6f:cb:2b:fc:cb:bf:aa:e8:93:90:17:87:b1: 65:be:c9:00:84:bc:46:43:03:ee:21:50:0b:57:a1:4a:09:92: 26:c1:8e:0f:c7:1b:71:2a:a0:a8:27:3b:9b:c9:a2:86:f0:72: 9a:a0:a4:18:ee:5d:c1:6f:0a:d8:1a:00:9a:26:23:45:7a:06: e9:f0:00:c7:0e:10:51:bf:4e:97:99:5d:aa:74:ff:c7:1e:1d: ba:c9:39:f0:f4:13:21:0c:32:d9:63:b9:78:57:37:91:03:7b: 81:0c:01:ac:77:57:57:af:aa:fc:22:73:34:29:94:60:4d:91: 3c:68:ee:fd:3c:2c:34:a9:3c:2e:7d:d7:c8:50:8d:77:f3:04: 9c:99:74:0d:9f:e2:51:b5:d8:7f:01:ff:fb:40:6f:a7:56:6e: 8c:57:89:47:8b:80:f1:26:32:28:11:e9:0b:21:fc:ae:b3:50: e6:f1:6e:84:a1:3e:25:60:b6:a1:37:77:96:7c:0f:46:7b:fb: a2:47:3c:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5CW4X5vVxBF+AbksY5f8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ODM4MDUzMTlkODQ4NTU4NGRjMzljZjUzODE1ODNmYjY0 MzFkN2EwHhcNMjUxMjI2MDkwMTIyWhcNMjUxMjI3MDkwMTIyWjAzMTEwLwYDVQQD Eyg4ZTFmZDM4ZWVlZjc1OThjMTRmMzE2YmFmZjQwZjA2ZGNhODA3M2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpOZaqwm7AQ2LqNefBbnPo1iWM/G tpW0QDCH+0+mUugYd+w1jm0oiu+kv0Lvo000hTOnWACdXdfxF2Q/I6Ds4zmXCIdc EhKr3YfiGqb8nx1dnhZFJQnGKvBWtpJ528GEz0zdB1MVLhZnigrWX8NkpydQ5qEg Veh+4c54VKZkHvb4CkO2+iMyex70w7xLgbAcqKg9FCianbpVOl5gqdAAR2gPLtND 5F8zbTzumoIC5Me+MujLeHK28Hs2DpO0EpGhGL56v+Hqyzwzmw18Zvqj/dN0/gc1 ZdcWgRQJnutb1bCGlJC3dd3uU5aGgJ3FzVLGHYUYpB0AQ88GZT8wmQtGZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4f047u91mMFPMWuv9A8G3KgHPDMB8GA1UdIwQY MBaAFBaDgFMZ2EhVhNw5z1OBWD+2Qx16MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2Qt ZWUxNjA4NmNmYzcyLzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9iMjVjZjQtMGEzNS00YmRiLTlkY2QtZWUxNjA4NmNmYzcy LzEvRm9PQVV4bllTRldFM0RuUFU0RllQN1pESFhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0iZAPpU K7/h0ZHE4MTZRSsOj7UD//taJJfDFP1Co9u5JdwzeWMnUumj+IuRjApFGtliDTuU IShS/sNvyyv8y7+q6JOQF4exZb7JAIS8RkMD7iFQC1ehSgmSJsGOD8cbcSqgqCc7 m8mihvBymqCkGO5dwW8K2BoAmiYjRXoG6fAAxw4QUb9Ol5ldqnT/xx4dusk58PQT IQwy2WO5eFc3kQN7gQwBrHdXV6+q/CJzNCmUYE2RPGju/TwsNKk8Ln3XyFCNd/ME nJl0DZ/iUbXYfwH/+0Bvp1ZujFeJR4uA8SYyKBHpCyH8rrNQ5vFuhKE+JWC2oTd3 lnwPRnv7okc8/Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:19:48 2025 by rpki-client