This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft File: FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json) Hash identifier: BEdPFmhfW6aOzCX3Y9acMzUdNWFwsAyY+WCjLhJHlL8= Subject key identifier: E2:98:81:87:91:77:F6:A4:F5:4D:C9:02:C2:16:06:37:8C:20:A7:D6 Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85 Certificate issuer: /CN=16d15539c01121066eafe95be3401dfa44407785 Certificate serial: 019B24E3F7444AA468180124372C7D67A85B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft Manifest number: 089B Signing time: Tue 16 Dec 2025 02:01:18 +0000 Manifest this update: Tue 16 Dec 2025 02:01:18 +0000 Manifest next update: Wed 17 Dec 2025 02:01:18 +0000 Files and hashes: 1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: 7XQ7yI58Awzik7r9C+rDFEbnwVg1TFnVwJJzU8etfrc=) 2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 02:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:24:e3:f7:44:4a:a4:68:18:01:24:37:2c:7d:67:a8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d15539c01121066eafe95be3401dfa44407785 Validity Not Before: Dec 16 02:01:18 2025 GMT Not After : Dec 17 02:01:18 2025 GMT Subject: CN=e29881879177f6a4f54dc902c21606378c20a7d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:73:40:07:7d:c4:18:03:01:75:80:d8:13:04: 92:4a:e1:cf:bf:60:2e:04:c4:b5:53:43:46:0c:20: 9b:db:1a:cf:ec:75:80:df:ee:a9:59:6d:44:1a:bd: e6:97:47:b5:89:d3:79:83:af:99:6f:15:8e:82:cb: c3:ce:86:63:2b:54:95:5f:42:3c:2d:dd:75:3b:97: 1b:62:2c:d0:1b:89:57:22:03:49:2a:8f:22:d7:11: a3:f3:e3:22:da:64:81:20:bc:66:e2:53:6c:dc:eb: c6:95:37:f1:2a:89:0d:90:f8:ce:e1:c7:d6:8f:05: 33:ff:77:d8:a3:86:dc:bd:40:e7:6b:1d:7f:80:7b: f8:37:fb:9d:a1:20:90:fd:f0:f6:f3:09:e6:13:86: e0:1b:82:93:ba:92:0a:fd:dc:7b:47:c6:d1:32:6e: 26:b1:d4:6d:9d:4a:ba:0a:20:37:8c:03:a4:2a:75: 36:39:1e:8c:84:ee:c9:04:1b:b3:76:77:0b:9e:33: 5a:49:99:e5:e3:97:4f:51:23:79:03:0e:ea:eb:04: 1a:4e:fd:af:eb:93:04:74:d7:ed:ff:0a:02:47:e9: 78:80:60:dd:51:bc:11:b2:64:12:c9:02:1c:29:67: 20:2e:d6:2b:bb:f8:c0:2e:a7:44:32:66:91:a5:52: 3f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:98:81:87:91:77:F6:A4:F5:4D:C9:02:C2:16:06:37:8C:20:A7:D6 X509v3 Authority Key Identifier: keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:97:25:40:17:ed:18:ac:d7:1a:1d:28:d7:90:90:8c:97:ef: 78:5c:57:85:c0:cb:a2:09:3e:b2:23:34:ef:8d:7f:bb:c0:0c: b8:20:0d:0f:34:e9:f2:dc:76:a0:c4:0b:c7:1b:0c:5f:d2:69: bf:50:38:d8:96:87:39:d0:8a:c8:a4:7d:c6:1f:04:22:0f:c3: de:9c:00:44:b6:e1:2e:f8:71:b8:6c:60:b5:4e:fd:8f:63:b3: dd:97:18:34:5b:78:1c:f1:0f:95:08:e0:16:f1:8f:34:93:d5: 30:ee:25:b6:90:3b:af:43:6d:41:52:db:05:53:4f:d3:38:87: 76:1e:d9:ef:81:0a:3a:df:c0:0b:d1:72:25:d7:17:39:2d:bf: 01:07:6c:7f:8c:1b:70:3d:1d:04:08:3d:d4:80:f4:f2:27:9c: 4b:81:c5:76:cf:f4:12:59:c0:8a:43:30:7e:4b:1d:08:a0:1f: e8:26:10:35:be:77:aa:bb:76:ef:54:12:cd:19:49:cb:56:5b: 23:a1:f2:9c:b7:0b:fc:7d:2a:40:7f:fa:a6:b8:ab:07:29:f1: 01:97:dd:79:80:3e:42:67:98:6d:b5:65:94:a4:1a:47:4e:c6: d5:ed:71:74:ed:1c:38:04:07:b6:13:0a:5d:2e:4d:0b:55:97: 83:8d:e9:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsk4/dESqRoGAEkNyx9Z6hbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDE1NTM5YzAxMTIxMDY2ZWFmZTk1YmUzNDAxZGZhNDQ0 MDc3ODUwHhcNMjUxMjE2MDIwMTE4WhcNMjUxMjE3MDIwMTE4WjAzMTEwLwYDVQQD EyhlMjk4ODE4NzkxNzdmNmE0ZjU0ZGM5MDJjMjE2MDYzNzhjMjBhN2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknNAB33EGAMBdYDYEwSSSuHPv2Au BMS1U0NGDCCb2xrP7HWA3+6pWW1EGr3ml0e1idN5g6+ZbxWOgsvDzoZjK1SVX0I8 Ld11O5cbYizQG4lXIgNJKo8i1xGj8+Mi2mSBILxm4lNs3OvGlTfxKokNkPjO4cfW jwUz/3fYo4bcvUDnax1/gHv4N/udoSCQ/fD28wnmE4bgG4KTupIK/dx7R8bRMm4m sdRtnUq6CiA3jAOkKnU2OR6MhO7JBBuzdncLnjNaSZnl45dPUSN5Aw7q6wQaTv2v 65MEdNft/woCR+l4gGDdUbwRsmQSyQIcKWcgLtYru/jALqdEMmaRpVI/aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOKYgYeRd/ak9U3JAsIWBjeMIKfWMB8GA1UdIwQY MBaAFBbRVTnAESEGbq/pW+NAHfpEQHeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUt ZTg2ZmZmOTNmNDVkLzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC85MWI5OTQtMjE4Ni00ZDJiLWIwNjUtZTg2ZmZmOTNmNDVk LzEvRnRGVk9jQVJJUVp1ci1sYjQwQWQta1JBZDRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu5clQBft GKzXGh0o15CQjJfveFxXhcDLogk+siM0741/u8AMuCANDzTp8tx2oMQLxxsMX9Jp v1A42JaHOdCKyKR9xh8EIg/D3pwARLbhLvhxuGxgtU79j2Oz3ZcYNFt4HPEPlQjg FvGPNJPVMO4ltpA7r0NtQVLbBVNP0ziHdh7Z74EKOt/AC9FyJdcXOS2/AQdsf4wb cD0dBAg91ID08iecS4HFds/0ElnAikMwfksdCKAf6CYQNb53qrt271QSzRlJy1Zb I6HynLcL/H0qQH/6prirBynxAZfdeYA+QmeYbbVllKQaR07G1e1xdO0cOAQHthMK XS5NC1WXg43p+w== -----END CERTIFICATE-----Generated at Tue Dec 16 12:50:43 2025 by rpki-client