This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft File: FPwSEe469lf8lPkvoDCd5sbJQG4.mft (raw, json) Hash identifier: 0k/oJaxXFC25BqSa7xft7sri4NuWEuMenXvMxeuz5TQ= Subject key identifier: 2C:35:41:31:C2:B7:E3:6F:CA:C3:D3:D5:00:51:90:EE:85:6E:8E:69 Authority key identifier: 14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E Certificate issuer: /CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e Certificate serial: 019B19BC8C1505C104C6809700E056A7A9E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft Manifest number: 0E2B Signing time: Sat 13 Dec 2025 22:02:25 +0000 Manifest this update: Sat 13 Dec 2025 22:02:25 +0000 Manifest next update: Sun 14 Dec 2025 22:02:25 +0000 Files and hashes: 1: FPwSEe469lf8lPkvoDCd5sbJQG4.crl (hash: B6RhNhUuBOoGJS1pia+8q3cfcpvt8QyCdRKj7x70/QU=) 2: aJypmqoFfKbNLA7QelNPg-kxzbw.roa (hash: AlnIanfnH1GwrGuXXqK+U4eJyego+t2Sw5napesUvxE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 22:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:bc:8c:15:05:c1:04:c6:80:97:00:e0:56:a7:a9:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14fc1211ee3af657fc94f92fa0309de6c6c9406e Validity Not Before: Dec 13 22:02:25 2025 GMT Not After : Dec 14 22:02:25 2025 GMT Subject: CN=2c354131c2b7e36fcac3d3d5005190ee856e8e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:31:4a:11:fc:d0:95:dc:ad:0f:f4:fe:0a:c9: cf:32:3d:6a:5b:ce:0f:50:21:c4:ea:f0:e2:ba:51: 0d:30:84:6f:60:31:8d:a5:a1:ca:c6:a4:a9:ff:ff: ea:ae:2e:b6:bd:73:e2:cb:2d:6a:f1:3a:29:4e:1a: 95:1a:d8:33:da:2a:28:f1:6a:83:73:0a:f0:b2:ae: 87:81:83:52:6a:18:20:b9:a1:d1:9a:a3:9a:41:ca: 17:7e:3a:df:86:cd:db:9b:ed:79:d7:b1:5c:a6:06: b9:17:cd:75:71:94:53:6e:40:7c:fd:19:7d:88:ac: 9c:52:99:08:d8:e5:ca:59:48:ef:e7:44:9a:f4:e3: 52:7c:8d:53:51:42:6d:02:68:b2:90:c1:c7:30:3b: 73:67:7b:ba:bf:15:35:70:43:7c:b1:81:f5:68:e1: f1:d0:c3:15:89:4f:2e:c9:1c:1e:6a:c5:3a:6d:45: 11:ed:a6:48:45:1d:10:f8:64:9a:84:f9:75:82:f8: 9e:db:d1:ec:2f:bd:9f:b7:74:36:0c:8a:c6:d7:93: 98:c7:31:45:88:43:b7:00:8f:b2:1d:ed:af:05:c8: 11:de:07:ef:70:2d:44:5e:5d:a1:ac:7e:db:35:9e: 14:dc:c4:4d:ec:31:8d:f4:b8:6d:7a:ab:57:eb:62: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:35:41:31:C2:B7:E3:6F:CA:C3:D3:D5:00:51:90:EE:85:6E:8E:69 X509v3 Authority Key Identifier: keyid:14:FC:12:11:EE:3A:F6:57:FC:94:F9:2F:A0:30:9D:E6:C6:C9:40:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FPwSEe469lf8lPkvoDCd5sbJQG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/4ef496-45e5-4397-a914-5989a4902d1a/1/FPwSEe469lf8lPkvoDCd5sbJQG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:f9:63:6f:2b:64:46:09:87:84:12:ca:34:50:a9:a4:ad:29: cc:18:69:32:12:ae:04:3a:33:51:ba:4c:44:6d:d0:14:44:be: 79:cc:aa:f7:ba:08:33:11:b7:e9:41:bf:2a:6a:b8:d2:f2:78: c3:b2:98:45:db:27:70:f7:92:ae:4b:b3:42:7b:1b:85:43:14: e7:27:0b:b8:dc:c4:aa:7f:f8:53:f9:ac:a9:18:7c:92:d5:ae: 4f:18:0b:14:44:b2:a2:a8:9d:11:1e:36:e6:46:6e:3f:f2:5d: a4:60:91:fd:26:bd:0f:23:9c:f6:33:6c:4f:63:44:d2:1a:7c: b7:8a:52:ce:7d:a3:83:0d:1e:c6:61:31:f0:d8:40:ca:20:65: 4d:60:55:19:67:45:8e:92:b2:b8:70:3b:06:26:b1:52:b0:2d: b3:43:b9:b9:c4:82:a2:7d:0d:5f:15:8b:cb:3c:2b:0c:06:81: 8e:13:ad:ca:43:9f:4c:a2:67:58:fd:d0:46:07:9d:56:84:fa: 89:a3:bf:b3:52:ac:03:c3:ec:80:00:5c:b8:32:d7:4d:1b:fb: 75:04:09:9a:55:98:26:ee:3b:ae:d5:b6:25:02:39:e1:bb:92: 29:16:cd:51:22:17:ce:e4:b7:9e:a6:a5:d1:12:9e:cf:b2:22: f7:97:82:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZvIwVBcEExoCXAOBWp6nlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZmMxMjExZWUzYWY2NTdmYzk0ZjkyZmEwMzA5ZGU2YzZj OTQwNmUwHhcNMjUxMjEzMjIwMjI1WhcNMjUxMjE0MjIwMjI1WjAzMTEwLwYDVQQD EygyYzM1NDEzMWMyYjdlMzZmY2FjM2QzZDUwMDUxOTBlZTg1NmU4ZTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszFKEfzQldytD/T+CsnPMj1qW84P UCHE6vDiulENMIRvYDGNpaHKxqSp///qri62vXPiyy1q8TopThqVGtgz2ioo8WqD cwrwsq6HgYNSahgguaHRmqOaQcoXfjrfhs3bm+1517Fcpga5F811cZRTbkB8/Rl9 iKycUpkI2OXKWUjv50Sa9ONSfI1TUUJtAmiykMHHMDtzZ3u6vxU1cEN8sYH1aOHx 0MMViU8uyRweasU6bUUR7aZIRR0Q+GSahPl1gvie29HsL72ft3Q2DIrG15OYxzFF iEO3AI+yHe2vBcgR3gfvcC1EXl2hrH7bNZ4U3MRN7DGN9LhteqtX62LwOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCw1QTHCt+NvysPT1QBRkO6Fbo5pMB8GA1UdIwQY MBaAFBT8EhHuOvZX/JT5L6AwnebGyUBuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQt NTk4OWE0OTAyZDFhLzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy80ZWY0OTYtNDVlNS00Mzk3LWE5MTQtNTk4OWE0OTAyZDFh LzEvRlB3U0VlNDY5bGY4bFBrdm9EQ2Q1c2JKUUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi/ljbytk RgmHhBLKNFCppK0pzBhpMhKuBDozUbpMRG3QFES+ecyq97oIMxG36UG/Kmq40vJ4 w7KYRdsncPeSrkuzQnsbhUMU5ycLuNzEqn/4U/msqRh8ktWuTxgLFESyoqidER42 5kZuP/JdpGCR/Sa9DyOc9jNsT2NE0hp8t4pSzn2jgw0exmEx8NhAyiBlTWBVGWdF jpKyuHA7BiaxUrAts0O5ucSCon0NXxWLyzwrDAaBjhOtykOfTKJnWP3QRgedVoT6 iaO/s1KsA8PsgABcuDLXTRv7dQQJmlWYJu47rtW2JQI54buSKRbNUSIXzuS3nqal 0RKez7Ii95eC1Q== -----END CERTIFICATE-----Generated at Sun Dec 14 07:43:01 2025 by rpki-client