This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json) Hash identifier: sP72OWo4ZC0O4mUJoXurZcmEAd5S956pkJlDaH/lrII= Subject key identifier: 00:3B:9E:B8:F5:DB:90:A5:C3:2B:D7:76:1E:32:9C:A4:C9:DF:D9:B0 Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019B36E97B128041C2CE4E45591BD51B389A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft Manifest number: 16C4 Signing time: Fri 19 Dec 2025 14:00:29 +0000 Manifest this update: Fri 19 Dec 2025 14:00:29 +0000 Manifest next update: Sat 20 Dec 2025 14:00:29 +0000 Files and hashes: 1: 1-hG6m2b1-771ZXFUCad6-Q0HqS0.roa (hash: iRlAMEhmdJkdMf5CTvW6WMLAwT23DftwTFfnt2+39Po=) 2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: 5PZ2dnVE4tQ4cjQcDg/ebV96+6efia4bsJA2vJHR7cM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:36:e9:7b:12:80:41:c2:ce:4e:45:59:1b:d5:1b:38:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Dec 19 14:00:29 2025 GMT Not After : Dec 20 14:00:29 2025 GMT Subject: CN=003b9eb8f5db90a5c32bd7761e329ca4c9dfd9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1e:b3:dd:b7:2c:96:07:86:bf:f4:43:52:c4: 03:76:1d:1f:70:ec:52:a6:3c:5a:a6:7e:56:be:44: 81:1d:2c:ed:68:62:01:82:a6:c0:af:05:c1:5b:b2: 8d:e4:7b:1d:d8:00:f3:69:ee:d0:0e:47:35:52:a8: 7c:a7:f0:e4:f9:9c:bd:f7:77:2a:4f:70:43:20:cf: c0:df:ec:f6:7d:82:dc:0c:16:21:36:59:d2:93:81: f7:10:99:ea:d1:58:3f:26:85:91:c8:90:dd:b4:e5: 39:6b:1a:ef:4a:6e:fa:a2:67:0c:72:dc:db:e0:4b: 24:41:d5:0b:02:7e:d7:fb:5d:60:7b:da:1e:97:4d: a8:79:02:34:cf:25:a7:88:47:11:54:d1:4e:14:e0: fb:5c:66:7d:2b:e5:f1:d1:ec:6d:92:ec:0b:b8:7c: 8b:65:e6:20:34:e6:4c:e9:b8:43:ee:25:4e:41:f0: fc:66:8d:dd:ca:9e:2f:f1:3b:68:dc:85:ff:23:ef: 1c:e9:a8:09:d1:c0:6c:11:cd:a6:54:50:79:71:25: 99:26:69:67:ba:00:d9:d4:bc:15:79:a8:92:ce:43: 9c:d1:56:16:84:bf:2a:7f:a0:9c:23:ca:f5:e0:97: 09:fd:06:d4:b9:2a:0c:cc:58:7d:7c:54:4f:98:b5: 93:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:9E:B8:F5:DB:90:A5:C3:2B:D7:76:1E:32:9C:A4:C9:DF:D9:B0 X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:d9:de:5d:8a:67:87:5f:62:29:05:80:6e:ea:6f:30:60:79: 3c:e7:53:79:b2:3f:33:9a:a4:20:ac:fb:41:cb:7b:0b:da:ab: f5:fd:0d:81:22:d0:5c:74:be:a6:ad:83:01:d1:bb:22:7c:f9: 22:57:9a:64:f5:30:ce:91:9e:ce:18:b7:8d:ee:ae:4b:51:58: 20:9d:44:22:68:02:dd:1d:29:91:1a:04:11:ff:64:ed:e3:9d: 74:86:e6:ba:45:d4:16:0b:4a:6e:d1:d6:45:d0:2e:2e:05:a9: f7:27:40:36:7b:1e:23:1a:d9:63:d1:89:cf:c4:d8:a8:11:8c: 03:91:eb:5c:66:8a:58:48:06:75:c8:6c:4d:20:75:39:65:79: f4:c9:76:8f:10:04:f7:5c:3a:27:f0:60:b8:26:e4:e9:9b:81: a5:fb:c3:66:95:42:cd:c2:5a:57:b2:a4:9d:90:3c:9b:20:26: 21:b0:7e:c5:b1:df:b6:68:b9:34:78:42:d9:da:0e:13:b9:ec: 28:52:20:90:6a:87:d8:e2:e9:18:7c:02:bd:f1:6a:3f:5f:7a: f1:61:23:05:0d:1f:92:91:d2:f2:f6:34:58:17:51:e3:04:42: 10:9d:06:97:0b:86:01:4d:9c:85:51:9d:e1:1f:04:92:af:41: f4:c7:32:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs26XsSgEHCzk5FWRvVGziaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjUxMjE5MTQwMDI5WhcNMjUxMjIwMTQwMDI5WjAzMTEwLwYDVQQD EygwMDNiOWViOGY1ZGI5MGE1YzMyYmQ3NzYxZTMyOWNhNGM5ZGZkOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzx6z3bcslgeGv/RDUsQDdh0fcOxS pjxapn5WvkSBHSztaGIBgqbArwXBW7KN5Hsd2ADzae7QDkc1Uqh8p/Dk+Zy993cq T3BDIM/A3+z2fYLcDBYhNlnSk4H3EJnq0Vg/JoWRyJDdtOU5axrvSm76omcMctzb 4EskQdULAn7X+11ge9oel02oeQI0zyWniEcRVNFOFOD7XGZ9K+Xx0extkuwLuHyL ZeYgNOZM6bhD7iVOQfD8Zo3dyp4v8Tto3IX/I+8c6agJ0cBsEc2mVFB5cSWZJmln ugDZ1LwVeaiSzkOc0VYWhL8qf6CcI8r14JcJ/QbUuSoMzFh9fFRPmLWTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA7nrj125ClwyvXdh4ynKTJ39mwMB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmNneXYpn h19iKQWAbupvMGB5POdTebI/M5qkIKz7Qct7C9qr9f0NgSLQXHS+pq2DAdG7Inz5 IleaZPUwzpGezhi3je6uS1FYIJ1EImgC3R0pkRoEEf9k7eOddIbmukXUFgtKbtHW RdAuLgWp9ydANnseIxrZY9GJz8TYqBGMA5HrXGaKWEgGdchsTSB1OWV59Ml2jxAE 91w6J/BguCbk6ZuBpfvDZpVCzcJaV7KknZA8myAmIbB+xbHftmi5NHhC2doOE7ns KFIgkGqH2OLpGHwCvfFqP1968WEjBQ0fkpHS8vY0WBdR4wRCEJ0GlwuGAU2chVGd 4R8Ekq9B9McyJw== -----END CERTIFICATE-----Generated at Fri Dec 19 22:37:49 2025 by rpki-client