This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft File: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json) Hash identifier: g6TvztbHsr5F+Fl09C/5PGT5P7w26KEh4Bu43I/QryU= Subject key identifier: 9B:98:25:DA:C3:82:F1:A8:ED:04:CD:28:18:AD:39:8A:D0:B9:4D:EA Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 Certificate issuer: /CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Certificate serial: 019B3DC81CBA3798FF15AA8749CD817824B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft Manifest number: 094E Signing time: Sat 20 Dec 2025 22:01:23 +0000 Manifest this update: Sat 20 Dec 2025 22:01:23 +0000 Manifest next update: Sun 21 Dec 2025 22:01:23 +0000 Files and hashes: 1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=) 2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: 3ENKKn/iyyPTSzFXlG6H13TIjxSgmAkD5O+kL45kt5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 22:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c8:1c:ba:37:98:ff:15:aa:87:49:cd:81:78:24:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959 Validity Not Before: Dec 20 22:01:23 2025 GMT Not After : Dec 21 22:01:23 2025 GMT Subject: CN=9b9825dac382f1a8ed04cd2818ad398ad0b94dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ce:bb:45:a8:99:6c:8d:67:41:7f:a6:39:9e: af:62:cb:7f:f2:7d:a6:e2:00:ac:f4:2c:ec:9c:48: 62:31:df:78:fd:9b:36:44:d4:c9:25:43:aa:57:4a: 0b:cd:76:1b:d7:61:1d:36:ff:1f:75:1b:a1:2f:e0: 46:a0:75:93:f8:c3:9e:ed:c7:73:5a:5d:c3:1e:57: bb:0f:21:33:f6:38:39:c0:16:cb:dc:c5:62:9f:63: 11:39:3a:93:f8:78:29:80:26:e4:71:f4:81:75:6d: c8:4e:83:ca:9e:dc:55:46:08:29:e6:3d:e9:b4:d0: 9c:36:74:7c:9f:36:7c:cb:c6:da:2e:3b:5a:f1:ba: ca:a9:85:eb:39:ab:d2:6d:12:e2:87:ba:45:5e:20: 89:b8:8d:2f:65:59:b2:92:44:19:f4:ce:9f:1c:6c: 56:1f:84:d4:49:a7:20:d1:52:0e:82:56:c9:50:42: 6a:e9:7f:04:18:40:d5:fb:10:fa:c7:b2:f6:03:17: ae:d8:8c:44:dd:d9:19:1f:52:26:78:c1:34:dc:04: 41:c2:73:09:bb:4a:19:34:25:80:ab:75:b1:d4:fc: 35:6f:ca:b1:04:a8:2d:0e:9a:e6:de:8b:ce:0d:fd: 26:8c:30:c4:52:b3:a9:6a:29:e2:ae:d6:c3:d3:28: ac:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:98:25:DA:C3:82:F1:A8:ED:04:CD:28:18:AD:39:8A:D0:B9:4D:EA X509v3 Authority Key Identifier: keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:0f:be:5f:08:76:25:17:98:72:72:57:1b:e3:3c:92:b0:fb: 5d:f7:c5:3e:8b:50:e0:fc:b1:dc:10:f7:31:ad:85:1f:3e:e4: 20:4e:54:05:52:69:b2:9e:db:f0:3d:b5:b9:b3:d4:0d:7b:85: 11:e6:bb:93:14:56:fe:29:eb:3d:fb:1f:4e:1f:43:65:e5:bf: 95:8a:9e:86:cb:3d:71:6b:2a:68:e9:72:4e:ae:ca:68:3e:e4: 4d:1b:38:ff:33:a5:09:2f:5a:2e:cc:c3:86:2f:c0:ea:34:0b: 04:8f:23:2a:ee:23:3f:42:a5:2d:f6:3f:50:dd:9f:9d:39:9f: d3:a2:55:51:14:01:5a:b6:38:c1:a4:fb:11:d2:3a:92:91:e9: ed:d8:e2:17:55:be:6c:27:86:0c:98:d5:eb:da:15:75:3e:d4: d7:3b:0e:fa:6d:06:70:54:9a:16:fd:53:5d:07:54:b2:5d:71: fe:16:c1:2c:9d:9d:24:58:ad:b3:3b:9e:a8:4e:bf:6f:b8:20: c1:40:75:dc:59:2d:20:54:91:ac:12:33:a1:a6:b1:67:be:74: a6:43:bf:b9:a4:fb:a8:31:2b:b5:6b:c7:3b:fb:a2:8f:d3:75: ec:7b:ba:23:f4:a6:30:6f:cc:dc:d8:05:87:91:ae:35:4a:b9: f2:06:29:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9yBy6N5j/FaqHSc2BeCS4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OWQzMGI3MGI5YTgzY2I4ZWQ1NTAxZjU1NGE3ZmVjYTM4 MmY5NTkwHhcNMjUxMjIwMjIwMTIzWhcNMjUxMjIxMjIwMTIzWjAzMTEwLwYDVQQD Eyg5Yjk4MjVkYWMzODJmMWE4ZWQwNGNkMjgxOGFkMzk4YWQwYjk0ZGVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu867RaiZbI1nQX+mOZ6vYst/8n2m 4gCs9CzsnEhiMd94/Zs2RNTJJUOqV0oLzXYb12EdNv8fdRuhL+BGoHWT+MOe7cdz Wl3DHle7DyEz9jg5wBbL3MVin2MROTqT+HgpgCbkcfSBdW3IToPKntxVRggp5j3p tNCcNnR8nzZ8y8baLjta8brKqYXrOavSbRLih7pFXiCJuI0vZVmykkQZ9M6fHGxW H4TUSacg0VIOglbJUEJq6X8EGEDV+xD6x7L2Axeu2IxE3dkZH1ImeME03ARBwnMJ u0oZNCWAq3Wx1Pw1b8qxBKgtDprm3ovODf0mjDDEUrOpainirtbD0yisywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuYJdrDgvGo7QTNKBitOYrQuU3qMB8GA1UdIwQY MBaAFBWdMLcLmoPLjtVQH1VKf+yjgvlZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAt NjVkNzIyODM3MTIxLzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85NTZjMzctOTkzYS00MWRlLWFiZTAtNjVkNzIyODM3MTIx LzEvRlowd3R3dWFnOHVPMVZBZlZVcF83S09DLVZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASw++Xwh2 JReYcnJXG+M8krD7XffFPotQ4Pyx3BD3Ma2FHz7kIE5UBVJpsp7b8D21ubPUDXuF Eea7kxRW/inrPfsfTh9DZeW/lYqehss9cWsqaOlyTq7KaD7kTRs4/zOlCS9aLszD hi/A6jQLBI8jKu4jP0KlLfY/UN2fnTmf06JVURQBWrY4waT7EdI6kpHp7djiF1W+ bCeGDJjV69oVdT7U1zsO+m0GcFSaFv1TXQdUsl1x/hbBLJ2dJFitszueqE6/b7gg wUB13FktIFSRrBIzoaaxZ750pkO/uaT7qDErtWvHO/uij9N17Hu6I/SmMG/M3NgF h5GuNUq58gYpEw== -----END CERTIFICATE-----Generated at Sun Dec 21 06:22:15 2025 by rpki-client