This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft File: Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft (raw, json) Hash identifier: kKuIvOs+lSFDIJKeapIzZtOn15q64q3Kub3bGUnBW/k= Subject key identifier: 19:C1:36:48:9A:53:DC:47:B0:5C:59:7C:05:BE:CE:6F:04:3C:1A:48 Authority key identifier: 16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E Certificate issuer: /CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Certificate serial: 019B3C7E2106B50F3AD8A85E5B1F1F3D742D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft Manifest number: 0453 Signing time: Sat 20 Dec 2025 16:00:57 +0000 Manifest this update: Sat 20 Dec 2025 16:00:57 +0000 Manifest next update: Sun 21 Dec 2025 16:00:57 +0000 Files and hashes: 1: Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl (hash: aU23uJHwJhsN3AldI/85JNVOF6qim05yWu646/+uyYo=) 2: slKuYhirMr_9AdtUijDzLipBRL0.roa (hash: /qHjp8kupLORl1OCxD3SUcgezP/zyet0u8Wb2x+yJAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7e:21:06:b5:0f:3a:d8:a8:5e:5b:1f:1f:3d:74:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163abc4f3165c6fa1eecfdd004f45e52e00a500e Validity Not Before: Dec 20 16:00:57 2025 GMT Not After : Dec 21 16:00:57 2025 GMT Subject: CN=19c136489a53dc47b05c597c05bece6f043c1a48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0f:7d:2b:19:ee:9a:91:c4:e6:b4:4b:9a:ce: 0d:10:cf:96:d3:02:6d:a5:82:a0:bd:69:60:99:1a: a2:b1:48:0b:c3:10:8d:09:60:74:e9:ef:b8:f0:e3: 16:4e:f9:1b:b2:57:56:81:3c:16:d2:95:8e:33:c0: 59:2d:dd:e1:77:9e:21:50:16:16:23:70:96:f9:9b: 7f:a8:85:b9:ec:60:f1:80:6f:33:1f:2c:e8:12:e0: ec:3f:70:c9:80:f8:53:41:60:45:9d:de:a8:b0:f7: e3:68:42:c8:db:d6:d0:4d:0c:1f:9d:6a:e7:1f:32: b1:a5:85:49:cb:ab:67:91:75:fc:73:42:72:68:83: e2:d3:da:e7:22:cf:e4:e7:d0:51:c5:5b:b2:8f:89: 29:3e:32:28:88:e0:43:78:c1:62:60:8b:55:7b:e8: f5:f1:af:fe:69:01:b2:7d:7a:b9:b4:be:f3:8d:0d: cf:af:09:dd:c0:9e:e6:ed:bd:8d:20:41:4f:00:75: 7b:39:d3:f2:73:46:be:ea:f3:34:e3:55:d9:cf:74: 8c:13:6e:9d:29:d9:b0:55:eb:e7:da:d1:a2:f4:62: 43:86:a4:75:cf:56:e3:b3:ab:04:ac:79:f6:e0:89: 87:77:8b:db:b8:66:fc:04:02:43:0b:e6:80:50:40: 57:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C1:36:48:9A:53:DC:47:B0:5C:59:7C:05:BE:CE:6F:04:3C:1A:48 X509v3 Authority Key Identifier: keyid:16:3A:BC:4F:31:65:C6:FA:1E:EC:FD:D0:04:F4:5E:52:E0:0A:50:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjq8TzFlxvoe7P3QBPReUuAKUA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/28f41c-ec82-4968-b566-2712f71bc674/1/Fjq8TzFlxvoe7P3QBPReUuAKUA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:6b:a1:d9:e1:a0:cf:7c:3a:92:bf:c0:33:a6:1d:98:13:3b: ae:ac:37:04:5c:e8:53:58:c7:57:cd:82:82:a7:63:2d:b2:50: f2:51:9c:2a:7a:79:55:86:2e:c0:c9:80:fa:c5:55:74:1a:cb: e2:24:dd:4b:d7:a1:37:b5:49:82:e0:d1:b7:60:2a:30:e7:ec: 7a:26:af:fd:53:27:9c:0e:6e:fb:96:58:0a:75:df:c8:92:4a: 5c:9d:8a:2a:5c:67:6e:bd:e8:21:b7:1e:f9:2d:3f:ea:9e:45: 6c:bc:59:d0:b7:87:4a:fd:33:f6:97:b5:06:21:dd:87:59:6b: e5:54:40:1d:0d:67:a3:8f:7a:5c:5f:0c:e8:5d:91:29:3f:d0: 76:80:0f:c4:2a:3d:9f:70:a7:76:af:7f:b4:c2:a6:8e:7b:8a: 85:ef:47:6e:00:e6:c4:5d:e7:e4:f9:53:49:30:56:02:21:9e: 4c:a9:81:41:55:ce:99:f4:23:ed:d8:06:38:11:fb:01:b5:1a: f8:47:09:58:bd:90:76:d9:47:e6:6c:b3:f7:ec:91:52:75:58: 4c:78:9a:f5:ce:80:1b:ee:15:b1:04:32:f0:b2:dd:0a:b4:e3: bd:76:0a:c2:37:f8:f7:da:ab:7e:36:d9:05:d4:40:8d:be:25: e5:83:55:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8fiEGtQ862KheWx8fPXQtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2FiYzRmMzE2NWM2ZmExZWVjZmRkMDA0ZjQ1ZTUyZTAw YTUwMGUwHhcNMjUxMjIwMTYwMDU3WhcNMjUxMjIxMTYwMDU3WjAzMTEwLwYDVQQD EygxOWMxMzY0ODlhNTNkYzQ3YjA1YzU5N2MwNWJlY2U2ZjA0M2MxYTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog99KxnumpHE5rRLms4NEM+W0wJt pYKgvWlgmRqisUgLwxCNCWB06e+48OMWTvkbsldWgTwW0pWOM8BZLd3hd54hUBYW I3CW+Zt/qIW57GDxgG8zHyzoEuDsP3DJgPhTQWBFnd6osPfjaELI29bQTQwfnWrn HzKxpYVJy6tnkXX8c0JyaIPi09rnIs/k59BRxVuyj4kpPjIoiOBDeMFiYItVe+j1 8a/+aQGyfXq5tL7zjQ3PrwndwJ7m7b2NIEFPAHV7OdPyc0a+6vM041XZz3SME26d KdmwVevn2tGi9GJDhqR1z1bjs6sErHn24ImHd4vbuGb8BAJDC+aAUEBX0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnBNkiaU9xHsFxZfAW+zm8EPBpIMB8GA1UdIwQY MBaAFBY6vE8xZcb6Huz90AT0XlLgClAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYt MjcxMmY3MWJjNjc0LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOGY0MWMtZWM4Mi00OTY4LWI1NjYtMjcxMmY3MWJjNjc0 LzEvRmpxOFR6Rmx4dm9lN1AzUUJQUmVVdUFLVUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnGuh2eGg z3w6kr/AM6YdmBM7rqw3BFzoU1jHV82CgqdjLbJQ8lGcKnp5VYYuwMmA+sVVdBrL 4iTdS9ehN7VJguDRt2AqMOfseiav/VMnnA5u+5ZYCnXfyJJKXJ2KKlxnbr3oIbce +S0/6p5FbLxZ0LeHSv0z9pe1BiHdh1lr5VRAHQ1no496XF8M6F2RKT/QdoAPxCo9 n3Cndq9/tMKmjnuKhe9HbgDmxF3n5PlTSTBWAiGeTKmBQVXOmfQj7dgGOBH7AbUa +EcJWL2QdtlH5myz9+yRUnVYTHia9c6AG+4VsQQy8LLdCrTjvXYKwjf499qrfjbZ BdRAjb4l5YNVWQ== -----END CERTIFICATE-----Generated at Sat Dec 20 18:12:45 2025 by rpki-client