This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft File: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft (raw, json) Hash identifier: 0aVYkbxCUqdiKNUN2ccOc6UWqhVDzuuqIhmmPDGnEKc= Subject key identifier: 6D:EC:8B:A7:50:9C:1C:B9:84:C2:B2:BA:14:A8:F3:E9:91:B7:02:BB Authority key identifier: 15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF Certificate issuer: /CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Certificate serial: 019B488277C852979430570AC1C09C0AB242 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft Manifest number: 16AA Signing time: Tue 23 Dec 2025 00:01:08 +0000 Manifest this update: Tue 23 Dec 2025 00:01:08 +0000 Manifest next update: Wed 24 Dec 2025 00:01:08 +0000 Files and hashes: 1: CJUlJDy-56wu6zeQ3niPJdV4COg.roa (hash: L4zbh11FM5FRXP4RaQH2Hk+P+CwUeKC3KbUfcsAdfU4=) 2: FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl (hash: eMVntKgG8Cen9lJsb3VHuDsso8+MpkZP/mr8/cBpAAM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:48:82:77:c8:52:97:94:30:57:0a:c1:c0:9c:0a:b2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15c4c8a9d2c1d0e0a6f5166e3ea74367863dcebf Validity Not Before: Dec 23 00:01:08 2025 GMT Not After : Dec 24 00:01:08 2025 GMT Subject: CN=6dec8ba7509c1cb984c2b2ba14a8f3e991b702bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:25:52:f2:d8:4d:15:b4:aa:21:32:70:4f: a9:3d:07:b6:49:d3:87:96:23:d8:d1:4a:51:71:f7: 05:cb:6b:70:06:9c:d7:97:52:d6:87:f6:e4:77:eb: 05:41:b4:be:49:de:fd:db:46:f8:91:a6:96:79:9b: 1e:f5:71:86:f2:a7:99:be:6d:1e:57:0c:5b:44:39: ad:01:dc:34:70:59:e8:b7:98:75:bf:8a:11:de:82: 7c:f5:84:eb:ab:57:68:96:36:5e:cc:80:8d:5a:86: 16:52:7b:80:cf:96:fe:24:dd:de:e4:6c:c3:e4:1b: c6:bf:61:e4:d0:ac:31:fa:05:df:09:52:32:1a:2d: 84:6a:61:bd:e3:6c:64:ae:98:d1:6e:d8:89:c5:b1: 89:9c:32:4b:bb:2a:92:b9:12:98:10:ae:b5:c8:fe: 95:b8:61:a5:f3:c2:23:b3:e8:8e:74:ff:51:e0:dd: 10:8d:ba:a0:6c:9f:37:52:d1:a7:07:18:41:1c:be: 80:ba:0e:34:9d:86:2c:9a:41:bf:fd:d5:09:a0:34: a8:28:34:85:7f:a3:8b:a8:3d:a3:db:a5:ca:2d:d1: 89:1b:9e:11:8b:5a:77:59:21:54:02:85:30:4d:31: b7:19:f7:2e:b6:3e:6e:59:44:a2:49:48:d5:26:54: 87:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:EC:8B:A7:50:9C:1C:B9:84:C2:B2:BA:14:A8:F3:E9:91:B7:02:BB X509v3 Authority Key Identifier: keyid:15:C4:C8:A9:D2:C1:D0:E0:A6:F5:16:6E:3E:A7:43:67:86:3D:CE:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b55522-0b89-400b-92cc-7b3cc228271d/1/FcTIqdLB0OCm9RZuPqdDZ4Y9zr8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:b3:4c:25:13:59:13:de:9a:66:5e:16:fa:cc:0c:a3:4b:58: 91:87:80:1d:2f:a4:d5:7c:2b:a1:3f:3e:49:fa:4a:f7:1b:64: 9b:34:28:af:da:e3:6c:54:ff:91:58:45:33:4c:9d:bb:3b:c3: 9d:e5:71:79:31:d8:2b:65:43:75:33:61:e7:6b:df:35:56:73: 29:c0:2b:fe:4d:42:bc:e1:3f:53:95:be:e4:4e:af:bd:f8:ce: 48:d0:1a:fa:91:79:5e:ff:f4:07:f0:29:f7:18:53:e9:34:35: 07:a7:3f:8c:20:b0:81:9c:2c:cb:43:3b:ba:b2:47:c0:d4:f4: d6:47:39:cc:3d:8b:64:29:0b:c3:39:f0:2a:6b:29:12:c4:8d: 64:29:50:5e:8f:22:80:b3:b2:6e:8f:55:c3:1d:90:12:0f:2d: 9e:c8:fe:6e:59:3e:23:5d:8c:f1:92:fa:32:42:0a:44:22:79: 19:a1:31:5f:29:8a:f7:e0:ed:5e:9e:13:40:2b:c5:ce:ee:03: dd:5c:0b:d8:6c:e6:87:dc:23:79:9e:e2:9c:7b:f6:4d:26:b7: 62:67:7e:ba:80:ee:c9:ee:20:04:fa:c7:1a:67:a8:94:b9:96: 60:b9:cb:af:f2:19:df:40:1c:dd:e0:da:0f:f6:a7:d5:7a:f1: b8:79:22:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtIgnfIUpeUMFcKwcCcCrJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YzRjOGE5ZDJjMWQwZTBhNmY1MTY2ZTNlYTc0MzY3ODYz ZGNlYmYwHhcNMjUxMjIzMDAwMTA4WhcNMjUxMjI0MDAwMTA4WjAzMTEwLwYDVQQD Eyg2ZGVjOGJhNzUwOWMxY2I5ODRjMmIyYmExNGE4ZjNlOTkxYjcwMmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysclUvLYTRW0qiEycE+pPQe2SdOH liPY0UpRcfcFy2twBpzXl1LWh/bkd+sFQbS+Sd7920b4kaaWeZse9XGG8qeZvm0e VwxbRDmtAdw0cFnot5h1v4oR3oJ89YTrq1doljZezICNWoYWUnuAz5b+JN3e5GzD 5BvGv2Hk0Kwx+gXfCVIyGi2EamG942xkrpjRbtiJxbGJnDJLuyqSuRKYEK61yP6V uGGl88Ijs+iOdP9R4N0QjbqgbJ83UtGnBxhBHL6Aug40nYYsmkG//dUJoDSoKDSF f6OLqD2j26XKLdGJG54Ri1p3WSFUAoUwTTG3Gfcutj5uWUSiSUjVJlSHEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3si6dQnBy5hMKyuhSo8+mRtwK7MB8GA1UdIwQY MBaAFBXEyKnSwdDgpvUWbj6nQ2eGPc6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2Mt N2IzY2MyMjgyNzFkLzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9iNTU1MjItMGI4OS00MDBiLTkyY2MtN2IzY2MyMjgyNzFk LzEvRmNUSXFkTEIwT0NtOVJadVBxZERaNFk5enI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLNMJRNZ E96aZl4W+swMo0tYkYeAHS+k1XwroT8+SfpK9xtkmzQor9rjbFT/kVhFM0yduzvD neVxeTHYK2VDdTNh52vfNVZzKcAr/k1CvOE/U5W+5E6vvfjOSNAa+pF5Xv/0B/Ap 9xhT6TQ1B6c/jCCwgZwsy0M7urJHwNT01kc5zD2LZCkLwznwKmspEsSNZClQXo8i gLOybo9Vwx2QEg8tnsj+blk+I12M8ZL6MkIKRCJ5GaExXymK9+DtXp4TQCvFzu4D 3VwL2Gzmh9wjeZ7inHv2TSa3Ymd+uoDuye4gBPrHGmeolLmWYLnLr/IZ30Ac3eDa D/an1XrxuHki7w== -----END CERTIFICATE-----Generated at Tue Dec 23 06:53:59 2025 by rpki-client