This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft File: FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft (raw, json) Hash identifier: mDVgb0uSTy42Flh07Zf5wzGxy/cN6MGCksO1gxTE55M= Subject key identifier: 02:F1:18:31:A0:1C:3F:8F:BB:18:0C:A4:AA:20:37:A3:B1:45:4A:01 Authority key identifier: 14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A Certificate issuer: /CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Certificate serial: 019B10147BDC2765CC1E9B12624ACAAB1A71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft Manifest number: 1772 Signing time: Fri 12 Dec 2025 01:02:16 +0000 Manifest this update: Fri 12 Dec 2025 01:02:16 +0000 Manifest next update: Sat 13 Dec 2025 01:02:16 +0000 Files and hashes: 1: FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl (hash: rgz9q8CMov8zAfAtbtnDOakAOcHBDc/eM3+yzio6l1M=) 2: rEnYgfgJaCjn_qIROc2RziotFd8.roa (hash: tyTMLNN1BSIUG9pwd6OlkaqCcb+yNG9RgWzpF+pWE60=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 19:27:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:7b:dc:27:65:cc:1e:9b:12:62:4a:ca:ab:1a:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14db04f9c92317ecc7a2aaff2ca4d7098d1bd26a Validity Not Before: Dec 12 01:02:16 2025 GMT Not After : Dec 13 01:02:16 2025 GMT Subject: CN=02f11831a01c3f8fbb180ca4aa2037a3b1454a01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e3:56:ff:4b:76:4a:1a:06:2c:1e:ee:d8:0e: f6:8d:b4:58:45:ba:b0:72:4b:51:67:a0:39:e1:27: e0:45:f1:d5:43:e9:56:3a:9d:a4:aa:d3:95:de:72: b3:25:c2:26:38:9e:f8:aa:0f:89:b6:9f:c3:70:a0: 73:7f:b6:a5:d1:fb:7d:67:a3:32:96:3e:72:c9:7c: 68:93:9f:f1:ed:b3:60:fc:94:ca:10:c0:5c:0a:18: 75:c1:6b:d6:6a:8f:96:ae:32:bd:99:ce:25:fd:60: f0:67:e8:0c:f0:3a:22:ec:68:ae:9c:ec:39:35:73: fe:b2:a6:db:20:4c:10:46:0c:cc:58:a7:3e:11:6e: 33:45:fc:fe:91:80:01:45:cc:da:6d:e7:88:69:1d: 36:88:58:22:b0:50:b0:84:d7:a2:33:e9:48:94:5f: a1:8f:96:d3:22:b4:c3:a2:1e:be:e5:ca:a3:d6:06: 1b:11:0b:4e:25:bc:89:a9:94:da:fa:85:33:87:87: 68:b4:97:b4:7c:e6:45:cc:6b:c6:d8:74:1d:7b:35: 29:d2:eb:6c:6c:15:2a:89:79:e7:b7:20:e3:0e:3c: 2f:ad:68:58:48:30:5b:52:03:6b:e4:38:9a:e4:dd: b3:24:d6:67:c4:77:b5:de:4b:97:73:5a:08:18:34: e0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F1:18:31:A0:1C:3F:8F:BB:18:0C:A4:AA:20:37:A3:B1:45:4A:01 X509v3 Authority Key Identifier: keyid:14:DB:04:F9:C9:23:17:EC:C7:A2:AA:FF:2C:A4:D7:09:8D:1B:D2:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNsE-ckjF-zHoqr_LKTXCY0b0mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/591a46-1e21-4590-874c-58c7bfcdcfdf/1/FNsE-ckjF-zHoqr_LKTXCY0b0mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:56:7f:67:dd:3c:d3:82:b8:3f:75:47:9c:a9:89:61:2b:bf: eb:1e:aa:58:f7:35:a4:96:db:6f:6d:8e:4b:cd:00:1d:02:9c: dc:53:69:e5:7e:77:3c:5a:0c:60:a5:2e:3f:00:c3:4c:75:db: db:cc:f7:be:97:d1:06:62:31:0e:56:6c:e2:10:6c:f1:8a:45: 76:c9:31:96:7a:81:4d:44:f6:8b:35:f3:f0:24:45:7a:0f:50: c5:a6:8c:00:33:9d:9d:90:08:df:db:61:1f:76:02:74:99:68: 17:80:a8:64:42:99:d6:ef:c4:8e:3d:0c:8f:ad:b6:6d:29:f4: 7b:38:23:ef:34:c7:05:89:e2:06:94:07:01:b2:1f:ed:95:8a: 11:29:c8:d4:f9:fb:f1:dc:68:9a:4a:65:da:e7:48:fd:80:3d: e9:c9:47:6a:4b:07:37:86:9e:58:a8:fb:00:48:61:ba:b6:41: 27:40:86:38:60:ff:8c:d9:fb:1a:e4:25:a5:b6:8d:30:ed:0c: 95:ce:91:53:eb:b2:35:91:3c:67:74:78:0c:9f:c7:5e:63:ea: 86:50:2d:75:44:c4:06:51:f0:8e:9f:14:ef:90:fc:c9:7d:46: 3c:81:d4:55:4e:f9:dc:68:a3:c2:f4:55:ec:a0:94:87:05:bd: 62:36:d4:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFHvcJ2XMHpsSYkrKqxpxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGIwNGY5YzkyMzE3ZWNjN2EyYWFmZjJjYTRkNzA5OGQx YmQyNmEwHhcNMjUxMjEyMDEwMjE2WhcNMjUxMjEzMDEwMjE2WjAzMTEwLwYDVQQD EygwMmYxMTgzMWEwMWMzZjhmYmIxODBjYTRhYTIwMzdhM2IxNDU0YTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvONW/0t2ShoGLB7u2A72jbRYRbqw cktRZ6A54SfgRfHVQ+lWOp2kqtOV3nKzJcImOJ74qg+Jtp/DcKBzf7al0ft9Z6My lj5yyXxok5/x7bNg/JTKEMBcChh1wWvWao+WrjK9mc4l/WDwZ+gM8Doi7GiunOw5 NXP+sqbbIEwQRgzMWKc+EW4zRfz+kYABRczabeeIaR02iFgisFCwhNeiM+lIlF+h j5bTIrTDoh6+5cqj1gYbEQtOJbyJqZTa+oUzh4dotJe0fOZFzGvG2HQdezUp0uts bBUqiXnntyDjDjwvrWhYSDBbUgNr5Dia5N2zJNZnxHe13kuXc1oIGDTgyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALxGDGgHD+PuxgMpKogN6OxRUoBMB8GA1UdIwQY MBaAFBTbBPnJIxfsx6Kq/yyk1wmNG9JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMt NThjN2JmY2RjZmRmLzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy81OTFhNDYtMWUyMS00NTkwLTg3NGMtNThjN2JmY2RjZmRm LzEvRk5zRS1ja2pGLXpIb3FyX0xLVFhDWTBiMG1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArFZ/Z908 04K4P3VHnKmJYSu/6x6qWPc1pJbbb22OS80AHQKc3FNp5X53PFoMYKUuPwDDTHXb 28z3vpfRBmIxDlZs4hBs8YpFdskxlnqBTUT2izXz8CRFeg9QxaaMADOdnZAI39th H3YCdJloF4CoZEKZ1u/Ejj0Mj622bSn0ezgj7zTHBYniBpQHAbIf7ZWKESnI1Pn7 8dxomkpl2udI/YA96clHaksHN4aeWKj7AEhhurZBJ0CGOGD/jNn7GuQlpbaNMO0M lc6RU+uyNZE8Z3R4DJ/HXmPqhlAtdUTEBlHwjp8U75D8yX1GPIHUVU753GijwvRV 7KCUhwW9YjbUCQ== -----END CERTIFICATE-----Generated at Fri Dec 12 04:01:49 2025 by rpki-client