This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft File: FsbhUuwA0rDjB9YZ5388HRQm7vA.mft (raw, json) Hash identifier: iJntClkHAablUxGCfnk+tMx5AEx66cUqPO9dZefze/U= Subject key identifier: 95:D3:0A:16:65:47:60:BB:DD:65:E1:30:3F:5F:91:8A:AA:E0:2E:B6 Authority key identifier: 16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 Certificate issuer: /CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Certificate serial: 019B53062CA55DE1C1DE3280B08098166D0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft Manifest number: 01BB Signing time: Thu 25 Dec 2025 01:01:12 +0000 Manifest this update: Thu 25 Dec 2025 01:01:12 +0000 Manifest next update: Fri 26 Dec 2025 01:01:12 +0000 Files and hashes: 1: FsbhUuwA0rDjB9YZ5388HRQm7vA.crl (hash: PqDgv40qe4pzf93chnK9s/MSin2I1/dDqUm+32ofMC4=) 2: RyU-tKT6g5iQNEPXbzsjbHBM1_k.roa (hash: 2sFbg6PGW25XBrpSEBIs6U3UJCsY2lOFHoiV3xMg67c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Dec 2025 01:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:53:06:2c:a5:5d:e1:c1:de:32:80:b0:80:98:16:6d:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16c6e152ec00d2b0e307d619e77f3c1d1426eef0 Validity Not Before: Dec 25 01:01:12 2025 GMT Not After : Dec 26 01:01:12 2025 GMT Subject: CN=95d30a16654760bbdd65e1303f5f918aaae02eb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:5d:38:49:f4:74:19:44:35:4b:d5:1e:81:f2: bf:c2:b0:01:ea:57:55:e3:e0:e9:0d:e1:51:14:8b: b2:ba:ce:88:cb:df:81:f0:38:79:88:c1:96:ce:f2: a3:01:9b:84:01:8e:a3:2e:52:9d:c7:83:a5:3f:ee: 05:af:b1:1b:be:fb:a5:dc:ee:17:ae:79:f1:5b:0d: 7c:ff:60:fc:2c:27:f6:31:dd:7f:82:4b:1a:30:51: 24:a7:66:22:82:64:c6:ee:47:d2:f2:b3:20:b0:5c: f2:1d:6b:63:ed:14:73:6e:9c:2a:28:08:29:44:2d: b0:0b:3c:85:6b:e1:54:d0:5a:47:2f:47:e0:72:da: da:15:63:4d:25:d2:86:77:c6:92:3c:5d:8a:16:4e: b3:79:e7:f7:18:ec:99:58:18:71:be:74:00:d1:85: ef:e3:a9:d3:69:d2:16:aa:e1:fe:8d:c2:e3:47:59: 88:37:99:04:9b:4d:0a:db:70:ae:94:ba:6e:cd:57: c9:ac:69:7e:04:dc:4d:dc:6f:39:e5:93:42:6a:17: e6:7b:97:ac:26:da:01:7b:cd:21:49:8b:c1:2a:b5: 99:bc:11:b0:29:c3:5e:3a:b9:7e:1b:7c:76:fc:ee: 44:3c:66:77:d1:ae:be:4b:86:8c:22:39:64:93:b1: a8:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D3:0A:16:65:47:60:BB:DD:65:E1:30:3F:5F:91:8A:AA:E0:2E:B6 X509v3 Authority Key Identifier: keyid:16:C6:E1:52:EC:00:D2:B0:E3:07:D6:19:E7:7F:3C:1D:14:26:EE:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FsbhUuwA0rDjB9YZ5388HRQm7vA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c3dd8e-38fd-4398-bae7-49f4e3edd875/1/FsbhUuwA0rDjB9YZ5388HRQm7vA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:3a:10:e9:6f:e6:08:2c:14:55:86:e6:60:6a:83:63:30:cc: b2:b8:dc:88:3b:f4:1b:d6:5c:9f:2d:75:0d:27:67:31:a2:6a: 50:4f:31:48:52:fb:82:09:11:19:ac:fe:fe:bf:a6:6c:0f:13: d8:a0:7e:50:00:87:cc:93:a0:d1:f8:40:32:f4:df:c5:f4:28: fb:73:d7:44:b5:2a:f5:ee:a3:9a:ab:3e:be:1d:23:77:7e:a4: 4a:83:4e:81:75:d4:f2:98:fb:40:45:1c:80:ba:1b:60:e3:13: e7:e5:2c:b2:35:dc:99:11:6e:e1:f3:df:57:c8:9c:8d:fc:87: ce:55:01:b2:c4:6c:6e:a3:51:4a:db:c4:c0:d5:59:e7:f2:17: 7f:f5:83:b2:04:b8:66:ee:9a:94:f0:6a:a0:8b:03:da:6d:d8: 70:81:a0:41:79:b1:3b:2d:a0:c3:dd:c6:b0:d7:fd:f6:35:c6: 1c:6f:41:d8:64:7d:80:32:eb:c6:db:41:8c:be:e0:8d:2b:30: 4b:7e:bb:21:a7:30:5d:f7:05:3f:3b:1b:3d:03:df:1c:a0:97: 3f:82:2a:11:f6:1c:4b:42:03:68:ac:42:44:dc:d0:e4:da:2d: 59:87:9c:d6:f4:b5:3f:86:c0:ba:88:37:62:1a:77:f8:4d:f9: 44:57:d4:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtTBiylXeHB3jKAsICYFm0KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YzZlMTUyZWMwMGQyYjBlMzA3ZDYxOWU3N2YzYzFkMTQy NmVlZjAwHhcNMjUxMjI1MDEwMTEyWhcNMjUxMjI2MDEwMTEyWjAzMTEwLwYDVQQD Eyg5NWQzMGExNjY1NDc2MGJiZGQ2NWUxMzAzZjVmOTE4YWFhZTAyZWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnV04SfR0GUQ1S9UegfK/wrAB6ldV 4+DpDeFRFIuyus6Iy9+B8Dh5iMGWzvKjAZuEAY6jLlKdx4OlP+4Fr7Ebvvul3O4X rnnxWw18/2D8LCf2Md1/gksaMFEkp2YigmTG7kfS8rMgsFzyHWtj7RRzbpwqKAgp RC2wCzyFa+FU0FpHL0fgctraFWNNJdKGd8aSPF2KFk6zeef3GOyZWBhxvnQA0YXv 46nTadIWquH+jcLjR1mIN5kEm00K23CulLpuzVfJrGl+BNxN3G855ZNCahfme5es JtoBe80hSYvBKrWZvBGwKcNeOrl+G3x2/O5EPGZ30a6+S4aMIjlkk7GodQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJXTChZlR2C73WXhMD9fkYqq4C62MB8GA1UdIwQY MBaAFBbG4VLsANKw4wfWGed/PB0UJu7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTct NDlmNGUzZWRkODc1LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jM2RkOGUtMzhmZC00Mzk4LWJhZTctNDlmNGUzZWRkODc1 LzEvRnNiaFV1d0EwckRqQjlZWjUzODhIUlFtN3ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASzoQ6W/m CCwUVYbmYGqDYzDMsrjciDv0G9Zcny11DSdnMaJqUE8xSFL7ggkRGaz+/r+mbA8T 2KB+UACHzJOg0fhAMvTfxfQo+3PXRLUq9e6jmqs+vh0jd36kSoNOgXXU8pj7QEUc gLobYOMT5+UssjXcmRFu4fPfV8icjfyHzlUBssRsbqNRStvEwNVZ5/IXf/WDsgS4 Zu6alPBqoIsD2m3YcIGgQXmxOy2gw93GsNf99jXGHG9B2GR9gDLrxttBjL7gjSsw S367IacwXfcFPzsbPQPfHKCXP4IqEfYcS0IDaKxCRNzQ5NotWYec1vS1P4bAuog3 Yhp3+E35RFfU9w== -----END CERTIFICATE-----Generated at Thu Dec 25 09:04:26 2025 by rpki-client