This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft File: Fvz0hmtshesMt2iO3UODD0GdZqI.mft (raw, json) Hash identifier: Jew9i0EofOopHf9O0RRCKqY9e80w8hi4/Y3r1R2quiU= Subject key identifier: 40:74:C5:C6:3C:F0:D9:17:D0:B1:F7:48:02:C3:78:67:86:90:E0:AE Authority key identifier: 16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 Certificate issuer: /CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Certificate serial: 019B5A1A9F2474C6015280F08CACF89E4839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft Manifest number: 14AB Signing time: Fri 26 Dec 2025 10:00:52 +0000 Manifest this update: Fri 26 Dec 2025 10:00:52 +0000 Manifest next update: Sat 27 Dec 2025 10:00:52 +0000 Files and hashes: 1: Fvz0hmtshesMt2iO3UODD0GdZqI.crl (hash: Xt4U3ugoZBi6d1KJ6jBX5ma7E1drutpKnlW6f9yNjYY=) 2: a5UnemfayVAdbbDqB5jidjgbSJ8.roa (hash: FqrPLPAJKzFu5i1kf8q3fsGuwgt9nQGlLWvvqh/+z7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:1a:9f:24:74:c6:01:52:80:f0:8c:ac:f8:9e:48:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16fcf4866b6c85eb0cb7688edd43830f419d66a2 Validity Not Before: Dec 26 10:00:52 2025 GMT Not After : Dec 27 10:00:52 2025 GMT Subject: CN=4074c5c63cf0d917d0b1f74802c378678690e0ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:4a:81:73:3c:77:72:d4:d1:73:45:14:6d:ce: 00:4c:c7:70:a6:81:9b:9c:ef:28:86:49:0b:74:8d: 22:d6:58:dd:5f:6b:f1:73:b0:e5:07:64:41:dd:b3: a5:4e:17:ec:98:5f:c5:3d:6d:6e:66:17:c7:1a:a5: 81:68:63:8c:0f:36:9a:6d:65:31:1d:05:d3:71:71: 21:8d:ec:95:88:14:5b:41:b5:72:eb:8b:c2:be:55: f0:00:55:6a:8a:3b:39:71:1d:4c:22:a8:c4:3e:cc: c9:ae:63:c1:bb:b6:7a:88:58:48:a9:70:1a:65:32: d7:8e:af:ee:5e:c9:67:a2:12:b7:55:8a:84:40:2c: 79:14:10:f1:64:a2:db:78:ab:2f:85:7a:35:90:4f: 3d:09:a0:49:ab:ea:c4:e5:68:05:26:9d:52:d4:c1: 19:0f:ec:6d:45:42:d0:bc:69:da:43:13:c0:4f:5b: 25:6e:01:15:13:bd:b4:0f:3f:32:da:64:48:d3:69: 33:65:c3:b8:a6:e5:c7:9f:8b:a3:b7:5f:7a:51:ca: 71:d6:a3:5e:a6:81:92:7a:3c:5c:82:74:86:19:9f: 07:60:ae:4f:43:33:76:a6:11:93:7f:b5:14:b6:bb: 19:b3:c7:7b:e7:31:2f:65:25:53:0e:7f:53:b4:f0: 90:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:74:C5:C6:3C:F0:D9:17:D0:B1:F7:48:02:C3:78:67:86:90:E0:AE X509v3 Authority Key Identifier: keyid:16:FC:F4:86:6B:6C:85:EB:0C:B7:68:8E:DD:43:83:0F:41:9D:66:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fvz0hmtshesMt2iO3UODD0GdZqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fc8883-aad2-418b-9b87-ea216ba2594d/1/Fvz0hmtshesMt2iO3UODD0GdZqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:f5:06:23:f8:ce:7e:48:ff:9d:ac:72:e0:0e:d4:9f:d5:bb: f9:ca:6c:2f:5e:4c:73:5e:eb:de:1e:ca:ee:4f:ba:89:be:9a: 44:da:8a:73:a8:ed:37:db:5f:8a:d5:ee:bd:7c:50:91:67:da: 98:3d:29:49:8f:96:43:6a:a5:93:e1:be:e3:ca:02:e5:20:74: fd:6b:4d:65:cc:e6:31:8e:1a:a6:be:5f:49:81:c1:54:9b:46: 3c:a6:72:94:8d:20:11:84:68:9b:11:fc:07:3a:ac:34:26:6c: 89:64:8d:08:5d:ba:96:52:d2:6d:7e:c3:87:fa:4c:63:f7:bb: 31:51:7d:af:d6:59:2e:1f:eb:1c:92:a9:57:64:05:44:1d:23: 9a:ea:a7:b3:9b:26:de:72:e5:0c:85:d8:61:65:d0:13:35:9f: e9:17:e3:35:31:b9:2f:c6:25:6d:ce:ed:62:9c:ab:33:9e:b6: 2c:6d:72:54:64:12:a9:ca:e8:3c:f6:00:54:f2:20:24:13:10: 4f:5b:81:9f:ed:23:db:d9:90:fc:e7:dd:e0:31:f7:d0:be:d8: 49:5d:55:74:e0:0b:18:4a:57:e2:87:f5:30:60:ac:87:6d:44: da:67:4f:6a:72:9e:07:8b:f0:05:a1:63:84:36:8b:81:c0:0f: aa:69:a6:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaGp8kdMYBUoDwjKz4nkg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZmNmNDg2NmI2Yzg1ZWIwY2I3Njg4ZWRkNDM4MzBmNDE5 ZDY2YTIwHhcNMjUxMjI2MTAwMDUyWhcNMjUxMjI3MTAwMDUyWjAzMTEwLwYDVQQD Eyg0MDc0YzVjNjNjZjBkOTE3ZDBiMWY3NDgwMmMzNzg2Nzg2OTBlMGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9EqBczx3ctTRc0UUbc4ATMdwpoGb nO8ohkkLdI0i1ljdX2vxc7DlB2RB3bOlThfsmF/FPW1uZhfHGqWBaGOMDzaabWUx HQXTcXEhjeyViBRbQbVy64vCvlXwAFVqijs5cR1MIqjEPszJrmPBu7Z6iFhIqXAa ZTLXjq/uXslnohK3VYqEQCx5FBDxZKLbeKsvhXo1kE89CaBJq+rE5WgFJp1S1MEZ D+xtRULQvGnaQxPAT1slbgEVE720Dz8y2mRI02kzZcO4puXHn4ujt196Ucpx1qNe poGSejxcgnSGGZ8HYK5PQzN2phGTf7UUtrsZs8d75zEvZSVTDn9TtPCQ0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEB0xcY88NkX0LH3SALDeGeGkOCuMB8GA1UdIwQY MBaAFBb89IZrbIXrDLdojt1Dgw9BnWaiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODct ZWEyMTZiYTI1OTRkLzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi9mYzg4ODMtYWFkMi00MThiLTliODctZWEyMTZiYTI1OTRk LzEvRnZ6MGhtdHNoZXNNdDJpTzNVT0REMEdkWnFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/UGI/jO fkj/naxy4A7Un9W7+cpsL15Mc17r3h7K7k+6ib6aRNqKc6jtN9tfitXuvXxQkWfa mD0pSY+WQ2qlk+G+48oC5SB0/WtNZczmMY4apr5fSYHBVJtGPKZylI0gEYRomxH8 BzqsNCZsiWSNCF26llLSbX7Dh/pMY/e7MVF9r9ZZLh/rHJKpV2QFRB0jmuqns5sm 3nLlDIXYYWXQEzWf6RfjNTG5L8Ylbc7tYpyrM562LG1yVGQSqcroPPYAVPIgJBMQ T1uBn+0j29mQ/Ofd4DH30L7YSV1VdOALGEpX4of1MGCsh21E2mdPanKeB4vwBaFj hDaLgcAPqmmm7Q== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:27 2025 by rpki-client