This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft File: FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft (raw, json) Hash identifier: WbCl8lfwgjFSHHWlcDwwKGWjj2gRs+Tc1CaF5nCw0k0= Subject key identifier: 76:DF:B6:39:B0:F0:29:7D:C1:95:D4:10:7B:19:2B:EE:AA:76:FB:37 Authority key identifier: 14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 Certificate issuer: /CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Certificate serial: 019B44DC833486BD8E6688D18A55122FF652 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft Manifest number: 1508 Signing time: Mon 22 Dec 2025 07:01:00 +0000 Manifest this update: Mon 22 Dec 2025 07:01:00 +0000 Manifest next update: Tue 23 Dec 2025 07:01:00 +0000 Files and hashes: 1: FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl (hash: vVWEeacT9DdhtAXSfZfmOwjfL8lgdchxpZg/gf01gEQ=) 2: _0Ovr-P6Apyo_tveovy4IKn6bqU.roa (hash: ocYJ6sP+UnlpINi5qB4yLeRqouA2cf9W4NHegtvwt7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:44:dc:83:34:86:bd:8e:66:88:d1:8a:55:12:2f:f6:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=147341d30575144be32cd7c8e3ebd4c6329a3141 Validity Not Before: Dec 22 07:01:00 2025 GMT Not After : Dec 23 07:01:00 2025 GMT Subject: CN=76dfb639b0f0297dc195d4107b192beeaa76fb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e4:ae:53:be:ae:be:b8:37:3d:49:c6:48:8c: bd:a8:c0:1b:dc:a1:a5:0e:63:ee:74:2b:98:ab:df: 14:8d:97:ee:00:cc:ee:cb:a9:46:70:0f:9a:6e:26: 9c:25:01:ca:c6:96:dd:f9:a4:1f:70:61:b6:c0:ce: f1:d9:88:ec:3e:c0:0a:9f:4e:3e:ee:1d:4b:a1:61: e9:a9:dd:c6:4b:be:11:43:21:1b:af:33:74:f6:c9: 1c:84:ef:07:b5:90:96:fc:79:42:5f:7d:52:88:01: b4:80:d3:09:a6:06:d3:e8:0c:ef:09:e9:71:7c:a3: d7:42:69:15:c4:b5:a1:5f:80:5e:d0:26:0d:da:1a: 5d:6c:a9:28:04:10:d5:5a:44:a2:54:a2:e6:5c:f5: 57:b3:d4:6b:43:49:29:ed:f2:ba:d3:45:f4:43:e2: 3f:f6:a4:6d:b6:de:39:55:4c:c0:b6:4f:91:37:3e: 14:c3:2e:fe:41:65:41:ac:fd:86:17:46:6a:7a:8f: fe:0f:3f:27:4c:39:ca:0d:a7:11:8d:ee:4a:17:78: aa:bf:55:95:ed:b8:2a:0d:17:c2:27:07:99:65:42: ed:2d:35:62:0c:a9:32:0c:84:bf:9f:b5:83:65:77: 60:04:1c:51:2f:8d:aa:64:6d:1b:af:dd:1e:b8:21: d5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DF:B6:39:B0:F0:29:7D:C1:95:D4:10:7B:19:2B:EE:AA:76:FB:37 X509v3 Authority Key Identifier: keyid:14:73:41:D3:05:75:14:4B:E3:2C:D7:C8:E3:EB:D4:C6:32:9A:31:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHNB0wV1FEvjLNfI4-vUxjKaMUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/662070-3677-4712-a4cf-a2b7b0396bd6/1/FHNB0wV1FEvjLNfI4-vUxjKaMUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:c0:95:ed:92:b4:dd:89:3f:2f:f1:39:de:77:c2:51:70: 4f:88:94:d1:86:54:1e:43:e6:dd:18:34:d1:49:c6:2b:8d:1b: ff:94:6a:39:35:58:04:d9:1c:92:eb:b1:05:13:41:a1:e7:fd: 44:85:f3:9b:9c:33:dd:41:0e:6a:86:6b:99:5c:9c:cd:4f:cb: 2b:1e:4d:03:2b:1b:1f:2c:bd:84:93:27:fc:23:a3:a9:aa:b1: 0d:ba:6c:e0:8f:56:b9:4f:ac:99:3b:65:c1:d0:87:1f:c5:e2: 13:41:9f:49:8f:8d:7f:54:37:f7:1d:6a:21:47:c5:d3:67:b0: f1:32:e9:53:bf:e2:52:0d:e2:2f:d5:35:58:30:ba:9b:14:39: 32:38:5e:8e:7e:86:53:4a:a1:5c:a6:1f:72:ae:93:9f:41:ed: 69:38:b2:20:99:25:ca:0f:f3:3f:c0:53:81:ed:bb:87:ea:8a: ba:ab:69:c3:89:1c:6b:86:8a:2c:e5:25:b6:5d:33:7a:f1:95: b7:ec:89:1a:28:09:18:59:8b:8b:24:2b:48:50:ec:21:dd:bf: f0:9b:e7:53:fa:18:b0:28:25:98:fc:4e:8e:bb:40:c6:24:bd: 40:f8:af:40:79:de:09:3e:10:7d:4c:bb:92:62:a2:5f:50:5b: 67:1d:df:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtE3IM0hr2OZojRilUSL/ZSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NzM0MWQzMDU3NTE0NGJlMzJjZDdjOGUzZWJkNGM2MzI5 YTMxNDEwHhcNMjUxMjIyMDcwMTAwWhcNMjUxMjIzMDcwMTAwWjAzMTEwLwYDVQQD Eyg3NmRmYjYzOWIwZjAyOTdkYzE5NWQ0MTA3YjE5MmJlZWFhNzZmYjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uSuU76uvrg3PUnGSIy9qMAb3KGl DmPudCuYq98UjZfuAMzuy6lGcA+abiacJQHKxpbd+aQfcGG2wM7x2YjsPsAKn04+ 7h1LoWHpqd3GS74RQyEbrzN09skchO8HtZCW/HlCX31SiAG0gNMJpgbT6AzvCelx fKPXQmkVxLWhX4Be0CYN2hpdbKkoBBDVWkSiVKLmXPVXs9RrQ0kp7fK600X0Q+I/ 9qRttt45VUzAtk+RNz4Uwy7+QWVBrP2GF0Zqeo/+Dz8nTDnKDacRje5KF3iqv1WV 7bgqDRfCJweZZULtLTViDKkyDIS/n7WDZXdgBBxRL42qZG0br90euCHVdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHbftjmw8Cl9wZXUEHsZK+6qdvs3MB8GA1UdIwQY MBaAFBRzQdMFdRRL4yzXyOPr1MYymjFBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2Yt YTJiN2IwMzk2YmQ2LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi82NjIwNzAtMzY3Ny00NzEyLWE0Y2YtYTJiN2IwMzk2YmQ2 LzEvRkhOQjB3VjFGRXZqTE5mSTQtdlV4akthTVVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHIbAle2S tN2JPy/xOd53wlFwT4iU0YZUHkPm3Rg00UnGK40b/5RqOTVYBNkckuuxBRNBoef9 RIXzm5wz3UEOaoZrmVyczU/LKx5NAysbHyy9hJMn/COjqaqxDbps4I9WuU+smTtl wdCHH8XiE0GfSY+Nf1Q39x1qIUfF02ew8TLpU7/iUg3iL9U1WDC6mxQ5Mjhejn6G U0qhXKYfcq6Tn0HtaTiyIJklyg/zP8BTge27h+qKuqtpw4kca4aKLOUltl0zevGV t+yJGigJGFmLiyQrSFDsId2/8JvnU/oYsCglmPxOjrtAxiS9QPivQHneCT4QfUy7 kmKiX1BbZx3f3w== -----END CERTIFICATE-----Generated at Mon Dec 22 09:45:16 2025 by rpki-client