This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft File: FZjXXo4y1ehH30qho1wpNEyXbiY.mft (raw, json) Hash identifier: 3VdRlEbWtVrC3C5sOw2f1ZaTXCnZrlk9oln0C3Qtnd0= Subject key identifier: 39:55:6E:DD:C5:E8:12:F0:FB:44:1F:C8:33:B1:44:0F:85:8C:C3:7F Authority key identifier: 15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 Certificate issuer: /CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Certificate serial: 019B2106F535BE6B23B819C9D1B4E375D88F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft Manifest number: 114C Signing time: Mon 15 Dec 2025 08:01:02 +0000 Manifest this update: Mon 15 Dec 2025 08:01:02 +0000 Manifest next update: Tue 16 Dec 2025 08:01:02 +0000 Files and hashes: 1: AIRZFXDpY9mQ7Mvu8kYb8OBEtUo.roa (hash: d5gxdyXpVK75f5B2dssNKeXHA5IUThR6PGmkaU8utQY=) 2: FZjXXo4y1ehH30qho1wpNEyXbiY.crl (hash: c5wxPOADKR8n+l+CqFqkOWVqr01g7h6GhzQ28i4hPwI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:21:06:f5:35:be:6b:23:b8:19:c9:d1:b4:e3:75:d8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1598d75e8e32d5e847df4aa1a35c29344c976e26 Validity Not Before: Dec 15 08:01:02 2025 GMT Not After : Dec 16 08:01:02 2025 GMT Subject: CN=39556eddc5e812f0fb441fc833b1440f858cc37f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e3:d6:cc:a3:71:1a:71:9f:8a:df:9d:35:12: 5b:98:45:fc:be:7e:21:a4:01:e1:b5:c1:d6:5a:d1: 79:5a:1b:23:7d:3d:a9:94:da:bd:ab:2e:e7:09:95: a5:74:bb:5e:b7:a3:07:d0:a1:8f:1a:a4:cb:4b:85: 26:f4:42:a6:95:de:4a:7f:1d:af:19:02:d6:71:7c: b6:68:96:e6:9b:d0:88:32:e7:fb:15:b9:e5:ca:d7: 43:52:57:ad:36:61:ff:4c:24:58:8a:d0:58:23:16: 00:f8:d3:82:7e:da:85:d4:a6:f6:f0:04:79:29:46: 1a:9c:61:d3:29:ed:d8:04:48:5e:ba:cb:6f:58:01: bd:19:46:63:a5:c2:8f:33:b5:63:79:d8:8f:67:c9: 32:88:f2:9f:3b:18:0b:80:c4:a4:1a:38:84:06:0f: 5c:ea:6c:e9:4e:b0:27:7e:83:1a:48:18:e0:33:61: 0a:4c:d4:57:67:f4:b3:c5:ed:71:5f:a4:58:b4:59: f0:0d:5c:5b:e3:50:44:10:8f:13:3a:a1:82:75:25: 87:3e:f0:e0:c1:69:b1:8d:03:c0:90:a9:39:61:1c: 37:95:78:dc:91:33:ff:eb:c7:d3:fb:e9:fc:3b:42: 25:14:f7:b3:b2:df:76:32:e4:a6:54:98:c2:9b:ef: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:55:6E:DD:C5:E8:12:F0:FB:44:1F:C8:33:B1:44:0F:85:8C:C3:7F X509v3 Authority Key Identifier: keyid:15:98:D7:5E:8E:32:D5:E8:47:DF:4A:A1:A3:5C:29:34:4C:97:6E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZjXXo4y1ehH30qho1wpNEyXbiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/826a5b-638f-461b-a24b-3bc6bc306f89/1/FZjXXo4y1ehH30qho1wpNEyXbiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a5:1c:71:19:33:ec:92:b7:fa:1e:56:f5:c2:b1:4f:06:bd: 25:4a:23:5f:1c:41:d6:c4:6a:30:41:9b:c3:14:66:1d:8f:67: 7f:67:5d:b1:d6:7a:e6:67:65:11:c2:5d:b5:af:55:26:d6:83: 2d:44:47:4d:90:42:36:65:27:11:b3:fa:c1:a2:67:bf:9b:5d: b0:55:0c:1e:ee:b0:e0:b2:b6:e7:4f:09:cd:b2:b9:da:ce:b5: 9b:53:ac:7a:56:4c:64:14:87:b2:ea:1b:c3:70:6c:01:ab:92: 89:28:a8:72:2a:d9:53:a5:2d:d5:7c:8b:f7:f9:7c:ab:ea:d8: e4:5e:1e:9b:0e:32:f9:b7:3a:be:b3:0f:41:b0:7f:03:a2:d7: 9b:e8:05:b2:8b:60:b6:75:f6:11:fb:a1:cf:ef:c7:b9:54:69: 12:c5:c0:0f:68:ff:ac:8b:5b:9c:26:49:30:fa:4e:41:41:4a: 11:54:53:29:e6:6b:a9:77:8f:6e:c2:57:7b:d7:a3:61:44:9c: 86:67:12:af:23:d6:66:26:8f:ae:e5:e9:28:3f:fb:e2:8a:80: eb:bb:9d:75:b3:9c:2a:a5:a5:5d:03:c2:ba:d5:52:ea:41:6f: bf:4d:9b:12:e4:fa:3a:2e:61:43:bc:97:f6:51:c5:f5:b5:3d: 96:0e:54:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZshBvU1vmsjuBnJ0bTjddiPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1OThkNzVlOGUzMmQ1ZTg0N2RmNGFhMWEzNWMyOTM0NGM5 NzZlMjYwHhcNMjUxMjE1MDgwMTAyWhcNMjUxMjE2MDgwMTAyWjAzMTEwLwYDVQQD EygzOTU1NmVkZGM1ZTgxMmYwZmI0NDFmYzgzM2IxNDQwZjg1OGNjMzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+PWzKNxGnGfit+dNRJbmEX8vn4h pAHhtcHWWtF5WhsjfT2plNq9qy7nCZWldLtet6MH0KGPGqTLS4Um9EKmld5Kfx2v GQLWcXy2aJbmm9CIMuf7FbnlytdDUletNmH/TCRYitBYIxYA+NOCftqF1Kb28AR5 KUYanGHTKe3YBEheustvWAG9GUZjpcKPM7VjediPZ8kyiPKfOxgLgMSkGjiEBg9c 6mzpTrAnfoMaSBjgM2EKTNRXZ/Szxe1xX6RYtFnwDVxb41BEEI8TOqGCdSWHPvDg wWmxjQPAkKk5YRw3lXjckTP/68fT++n8O0IlFPezst92MuSmVJjCm+8N8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDlVbt3F6BLw+0QfyDOxRA+FjMN/MB8GA1UdIwQY MBaAFBWY116OMtXoR99KoaNcKTRMl24mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGIt M2JjNmJjMzA2Zjg5LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MjZhNWItNjM4Zi00NjFiLWEyNGItM2JjNmJjMzA2Zjg5 LzEvRlpqWFhvNHkxZWhIMzBxaG8xd3BORXlYYmlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZqUccRkz 7JK3+h5W9cKxTwa9JUojXxxB1sRqMEGbwxRmHY9nf2ddsdZ65mdlEcJdta9VJtaD LURHTZBCNmUnEbP6waJnv5tdsFUMHu6w4LK2508JzbK52s61m1OselZMZBSHsuob w3BsAauSiSiocirZU6Ut1XyL9/l8q+rY5F4emw4y+bc6vrMPQbB/A6LXm+gFsotg tnX2Efuhz+/HuVRpEsXAD2j/rItbnCZJMPpOQUFKEVRTKeZrqXePbsJXe9ejYUSc hmcSryPWZiaPruXpKD/74oqA67uddbOcKqWlXQPCutVS6kFvv02bEuT6Oi5hQ7yX 9lHF9bU9lg5UPg== -----END CERTIFICATE-----Generated at Mon Dec 15 13:14:59 2025 by rpki-client