This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft File: Fc4GtE2NxD3HQsQN472oqjdE4r0.mft (raw, json) Hash identifier: YUslFO1iGdQz3X2BcCEF474NWLcIYQ3dIJE40OaNllY= Subject key identifier: FF:9C:5C:42:9E:BA:15:55:E0:FA:F8:8F:BB:3B:17:4E:42:88:21:85 Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Certificate serial: 019B11CA5974A1DDF190D4E3B2B64DCBC300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft Manifest number: 1406 Signing time: Fri 12 Dec 2025 09:00:32 +0000 Manifest this update: Fri 12 Dec 2025 09:00:32 +0000 Manifest next update: Sat 13 Dec 2025 09:00:32 +0000 Files and hashes: 1: 52KUDdFP_rD3RmJYr6LMpUPEMmM.roa (hash: usibkDt6eCnub+7x6EZqrdrQgsmz6UQ+udh3uzbsAi0=) 2: Fc4GtE2NxD3HQsQN472oqjdE4r0.crl (hash: U29AnLN4AdembK78KZvpLXTbeLE1pxVVkkg7n72i57I=) 3: NjP1-VxcjUYnG6zS7LVSKs7x9vY.roa (hash: SBm121KuisZ5EZTIvc68c0K3yTgGq/5rmdZ6mqu0hNg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Dec 2025 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:ca:59:74:a1:dd:f1:90:d4:e3:b2:b6:4d:cb:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd Validity Not Before: Dec 12 09:00:32 2025 GMT Not After : Dec 13 09:00:32 2025 GMT Subject: CN=ff9c5c429eba1555e0faf88fbb3b174e42882185 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:73:8f:af:3d:00:0f:17:f5:d7:f7:ff:9a:8f: 4b:46:4d:d0:45:1f:b4:50:d9:03:76:18:a9:e6:a6: 69:e7:2b:cc:b9:33:7e:bf:d5:96:76:7d:c9:0a:ed: b4:cc:4f:2d:f3:40:89:ea:77:a8:6c:ef:44:35:09: b7:51:42:43:73:ce:26:53:45:32:7d:e6:7f:90:91: 72:29:d3:2d:6d:ad:df:09:28:a6:38:4e:1e:2d:06: 94:23:6e:10:65:22:e7:25:f0:f7:ea:0a:37:cf:fd: 60:cf:d6:38:de:78:6f:15:71:8e:36:f2:88:20:e6: 5d:fa:89:0c:67:5c:73:23:23:e8:81:51:bb:e4:1e: 45:3b:11:59:fb:9e:6e:99:3d:d4:fb:00:69:0a:de: 84:e0:22:97:b0:8a:3e:a9:6c:e9:5b:bd:df:c4:aa: 9a:41:5a:87:c1:e3:3d:fe:cf:d7:bc:37:9a:ab:3c: 57:00:77:a3:6e:6c:de:67:56:29:bf:fe:86:d2:88: a6:69:59:16:c7:88:38:18:e3:b2:77:01:26:bf:6a: 2c:ec:4e:ac:0d:3c:ad:10:3d:ce:88:f4:3c:6c:43: 7c:57:47:0a:f8:ba:7c:07:88:e7:d3:ee:a0:ea:2e: d4:23:f3:53:9f:30:cf:ea:b5:43:1c:d6:21:5a:cd: 49:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:9C:5C:42:9E:BA:15:55:E0:FA:F8:8F:BB:3B:17:4E:42:88:21:85 X509v3 Authority Key Identifier: keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a5:44:ef:4d:3c:f3:f1:c3:be:06:3a:47:77:ca:f9:b6:e6: 65:b9:13:b1:2a:6a:73:e4:ab:e1:44:5f:8e:ea:6c:c2:05:fc: d1:be:7d:18:99:76:f4:c1:17:f7:a7:0f:18:a9:e6:5f:37:f8: 1b:21:c0:cd:36:33:ed:52:eb:d8:d6:a0:55:d8:bb:e3:51:1d: f8:af:eb:b9:f9:cc:ab:0a:c6:1d:bc:a3:f9:91:1d:52:79:ea: 90:91:90:4e:68:28:b0:2f:53:3d:9c:02:53:2c:81:0c:ec:7b: bd:04:5d:cd:ee:4d:b0:3d:35:4a:14:6b:cf:05:72:5a:a5:e2: 06:ea:86:96:2d:ed:9e:0c:a7:2d:98:52:79:52:57:e7:09:ee: d9:5b:5e:24:11:2e:d3:01:fc:76:22:62:70:5a:b8:fd:51:22: 40:a6:3c:cb:2d:a8:f1:df:15:43:d4:f8:2e:bf:a2:a9:af:3c: e1:c0:47:47:0d:13:2d:00:4e:f0:27:d0:20:46:e7:2a:34:f2: d6:47:69:2e:e5:f3:94:d9:46:b3:87:97:09:f8:48:58:06:3a: 8b:42:bc:6a:52:26:e9:f4:3e:91:a0:97:62:d1:04:1a:35:97: e2:5a:f5:65:2c:9e:fa:27:06:8a:1c:c2:5d:63:25:46:9b:1d: 54:b7:f4:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsRyll0od3xkNTjsrZNy8MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0 NGUyYmQwHhcNMjUxMjEyMDkwMDMyWhcNMjUxMjEzMDkwMDMyWjAzMTEwLwYDVQQD EyhmZjljNWM0MjllYmExNTU1ZTBmYWY4OGZiYjNiMTc0ZTQyODgyMTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXOPrz0ADxf11/f/mo9LRk3QRR+0 UNkDdhip5qZp5yvMuTN+v9WWdn3JCu20zE8t80CJ6neobO9ENQm3UUJDc84mU0Uy feZ/kJFyKdMtba3fCSimOE4eLQaUI24QZSLnJfD36go3z/1gz9Y43nhvFXGONvKI IOZd+okMZ1xzIyPogVG75B5FOxFZ+55umT3U+wBpCt6E4CKXsIo+qWzpW73fxKqa QVqHweM9/s/XvDeaqzxXAHejbmzeZ1Ypv/6G0oimaVkWx4g4GOOydwEmv2os7E6s DTytED3OiPQ8bEN8V0cK+Lp8B4jn0+6g6i7UI/NTnzDP6rVDHNYhWs1JtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+cXEKeuhVV4Pr4j7s7F05CiCGFMB8GA1UdIwQY MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt ZGVlNDMxN2Y1YjE0LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0 LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6VE7008 8/HDvgY6R3fK+bbmZbkTsSpqc+Sr4URfjupswgX80b59GJl29MEX96cPGKnmXzf4 GyHAzTYz7VLr2NagVdi741Ed+K/rufnMqwrGHbyj+ZEdUnnqkJGQTmgosC9TPZwC UyyBDOx7vQRdze5NsD01ShRrzwVyWqXiBuqGli3tngynLZhSeVJX5wnu2VteJBEu 0wH8diJicFq4/VEiQKY8yy2o8d8VQ9T4Lr+iqa884cBHRw0TLQBO8CfQIEbnKjTy 1kdpLuXzlNlGs4eXCfhIWAY6i0K8alIm6fQ+kaCXYtEEGjWX4lr1ZSye+icGihzC XWMlRpsdVLf05g== -----END CERTIFICATE-----Generated at Fri Dec 12 13:08:24 2025 by rpki-client