This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json) Hash identifier: Lz7DzkpSsIy6JRZOYWRmQecY/TzfPadlrezqUoUvPYg= Subject key identifier: A5:27:D2:13:DD:C1:F1:1F:30:C4:12:6A:C9:FB:B0:E1:BC:9B:24:C3 Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Certificate serial: 019B37580FD3D113985A769BAF794DB67D33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft Manifest number: 1786 Signing time: Fri 19 Dec 2025 16:01:16 +0000 Manifest this update: Fri 19 Dec 2025 16:01:16 +0000 Manifest next update: Sat 20 Dec 2025 16:01:16 +0000 Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=) 2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: 2VaL99e1x1CXr/jPITzih0wG/eUVi2GkIFnOEremygQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:37:58:0f:d3:d1:13:98:5a:76:9b:af:79:4d:b6:7d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f Validity Not Before: Dec 19 16:01:16 2025 GMT Not After : Dec 20 16:01:16 2025 GMT Subject: CN=a527d213ddc1f11f30c4126ac9fbb0e1bc9b24c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b5:62:7c:17:83:44:c0:9a:94:d0:61:98:db: d7:16:6c:28:e4:2c:c0:4d:32:23:0d:e9:72:56:5b: 20:85:93:e7:3c:07:58:b7:b1:6d:3d:a7:20:ad:6c: 0a:47:46:b4:3e:d6:62:c2:56:33:51:93:70:2d:99: e0:a8:95:46:fc:8b:53:bf:20:1c:ad:bd:58:e6:ad: e5:c4:57:b3:a9:0c:fa:c2:51:87:2a:f4:37:67:a6: 55:53:87:68:c2:a8:51:a5:ef:34:4d:46:ad:9a:0b: 3a:5b:d7:0d:41:4b:8d:7a:2e:5e:70:54:3c:c0:43: 00:4e:2a:80:05:90:a3:7f:d0:d1:6d:44:88:2e:ae: 6c:fe:4b:df:42:97:f2:7e:7b:b9:f6:34:1f:49:a3: a7:30:fa:bd:51:d8:53:ca:1c:4e:34:42:0c:f3:cf: c5:c1:0c:06:bb:36:74:f9:1a:ad:8b:4c:b3:94:59: fd:75:7e:38:16:bd:98:a4:5d:43:87:87:4b:b3:a7: 17:c8:81:91:e5:ad:4d:87:67:4b:55:e1:a6:7a:60: bc:99:ed:cc:90:b1:30:b0:ce:3f:94:08:49:8c:05: e6:39:99:fc:03:02:c4:f1:42:dc:50:54:5f:d4:14: 6e:d9:57:9a:67:b9:86:24:b7:8a:f6:33:c8:13:48: b2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:27:D2:13:DD:C1:F1:1F:30:C4:12:6A:C9:FB:B0:E1:BC:9B:24:C3 X509v3 Authority Key Identifier: keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:97:31:4e:6a:13:09:2b:7e:9f:78:68:3a:bb:70:f0:38:7c: f6:f6:45:da:61:95:fe:9c:4f:de:b5:f4:a2:68:63:59:85:fa: 02:f4:c7:56:e7:44:7d:2b:13:9b:a0:29:d6:35:e6:24:0e:3a: f8:3d:de:93:3c:94:fc:fb:1c:8e:10:ad:d5:43:56:c9:ff:81: 6e:18:25:3c:ca:cb:ae:e2:e6:7d:58:24:50:f1:c3:3c:f0:fc: 27:3b:f8:c3:d5:64:96:dd:bf:b8:98:a8:ed:a6:3d:41:90:a9: 80:2b:10:d7:f8:e4:0e:e8:90:ea:a3:bf:46:7d:a9:07:7e:26: 03:2f:77:c9:43:a9:3c:52:c7:85:0e:93:18:3d:eb:cc:4f:45: 49:a3:ea:6f:61:91:28:47:44:40:c7:48:57:40:02:27:75:28: 02:c6:d2:f8:0d:6f:68:f9:08:f5:0e:1c:a4:f9:c5:01:37:29: 7d:b0:00:ab:15:fa:6c:aa:e3:00:c8:39:68:d3:dc:88:b5:2f: 65:c0:ff:dd:39:02:18:de:98:28:37:06:2f:22:78:c2:b5:1e: f3:5a:3d:33:36:54:e3:ad:5f:3a:1f:2f:39:a3:6d:29:a2:4c: 09:85:21:6b:6f:9f:de:71:30:a6:51:ce:95:6b:99:7b:1d:bd: c2:87:9f:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs3WA/T0ROYWnabr3lNtn0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNTdkN2EyZDU3NjYxZjZjM2M2ZWE3NjM2Y2EwZmYyMzAw YzE0NmYwHhcNMjUxMjE5MTYwMTE2WhcNMjUxMjIwMTYwMTE2WjAzMTEwLwYDVQQD EyhhNTI3ZDIxM2RkYzFmMTFmMzBjNDEyNmFjOWZiYjBlMWJjOWIyNGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8LVifBeDRMCalNBhmNvXFmwo5CzA TTIjDelyVlsghZPnPAdYt7FtPacgrWwKR0a0PtZiwlYzUZNwLZngqJVG/ItTvyAc rb1Y5q3lxFezqQz6wlGHKvQ3Z6ZVU4dowqhRpe80TUatmgs6W9cNQUuNei5ecFQ8 wEMATiqABZCjf9DRbUSILq5s/kvfQpfyfnu59jQfSaOnMPq9UdhTyhxONEIM88/F wQwGuzZ0+Rqti0yzlFn9dX44Fr2YpF1Dh4dLs6cXyIGR5a1Nh2dLVeGmemC8me3M kLEwsM4/lAhJjAXmOZn8AwLE8ULcUFRf1BRu2VeaZ7mGJLeK9jPIE0iyjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUn0hPdwfEfMMQSasn7sOG8myTDMB8GA1UdIwQY MBaAFPxX16LVdmH2w8bqdjbKD/IwDBRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMt NzMxZjQ3ODIwYjIwLzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC9iMjRiODgtMjJmMC00OWI4LWIyZTMtNzMxZjQ3ODIwYjIw LzEvX0ZmWG90VjJZZmJEeHVwMk5zb1A4akFNRkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW5cxTmoT CSt+n3hoOrtw8Dh89vZF2mGV/pxP3rX0omhjWYX6AvTHVudEfSsTm6Ap1jXmJA46 +D3ekzyU/PscjhCt1UNWyf+BbhglPMrLruLmfVgkUPHDPPD8Jzv4w9Vklt2/uJio 7aY9QZCpgCsQ1/jkDuiQ6qO/Rn2pB34mAy93yUOpPFLHhQ6TGD3rzE9FSaPqb2GR KEdEQMdIV0ACJ3UoAsbS+A1vaPkI9Q4cpPnFATcpfbAAqxX6bKrjAMg5aNPciLUv ZcD/3TkCGN6YKDcGLyJ4wrUe81o9MzZU461fOh8vOaNtKaJMCYUha2+f3nEwplHO lWuZex29woefVw== -----END CERTIFICATE-----Generated at Fri Dec 19 20:49:45 2025 by rpki-client