This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft File: FrGYtu469o3rwjR6Xpj3Efsw8os.mft (raw, json) Hash identifier: 7Giy/mtgcsz7vE+gT/6hd/6lQwsRL80koOPfO9P9gwk= Subject key identifier: 1D:89:B1:FA:04:1A:CC:8D:32:D2:A9:F2:B9:2B:65:01:8B:49:63:7D Authority key identifier: 16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B Certificate issuer: /CN=16b198b6ee3af68debc2347a5e98f711fb30f28b Certificate serial: 019B1F4F10AECEA02C55A15C9D80AAFF8024 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft Manifest number: 047D Signing time: Mon 15 Dec 2025 00:00:33 +0000 Manifest this update: Mon 15 Dec 2025 00:00:33 +0000 Manifest next update: Tue 16 Dec 2025 00:00:33 +0000 Files and hashes: 1: DUJUsf_8aEBJyZgSgmV9Vwhne5k.roa (hash: 8XNyxo7dqU3caZB7WQMnNM1LcvoL0TWuICCANY2KZkk=) 2: FrGYtu469o3rwjR6Xpj3Efsw8os.crl (hash: ZA8AJovbYSrgDmHzJtPXbWQuAa+bPhWmycxwk74Wu68=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1f:4f:10:ae:ce:a0:2c:55:a1:5c:9d:80:aa:ff:80:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16b198b6ee3af68debc2347a5e98f711fb30f28b Validity Not Before: Dec 15 00:00:33 2025 GMT Not After : Dec 16 00:00:33 2025 GMT Subject: CN=1d89b1fa041acc8d32d2a9f2b92b65018b49637d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:e2:74:ac:4c:ed:30:eb:76:f4:cc:a5:89: 2d:21:18:67:1b:87:fe:3c:f4:b1:25:f9:47:72:90: 0c:14:0a:6f:4e:7c:3f:0a:71:94:2f:c0:cc:30:be: 2a:0d:34:a2:cb:9a:aa:2c:70:b4:f9:4f:5c:10:23: f8:13:de:ef:7c:6d:84:52:00:47:fd:b7:bd:c2:07: fe:02:c7:83:1f:48:71:ae:68:b1:9a:d9:c9:ad:12: a8:05:82:17:7e:2d:11:3f:69:6f:ae:b0:40:10:31: b8:05:bb:2f:60:2c:65:64:d9:8c:93:01:7f:e6:b0: 80:82:79:53:a3:16:48:8b:1f:6c:ba:00:c2:72:ec: 12:9c:54:2c:59:f4:34:71:11:f1:a6:28:5a:c0:39: 41:f9:b7:d6:80:75:00:79:61:6e:70:74:f9:71:ec: 23:4a:f4:49:f2:45:ba:aa:56:ef:cd:7d:42:4a:37: 1e:5c:66:e4:bb:9f:71:9e:a8:7f:a8:b4:7a:0e:c0: 86:43:8c:be:55:ca:08:43:01:87:99:07:4d:43:7d: 8e:7f:e0:20:07:ef:2a:ac:cb:49:57:3e:22:7b:55: be:c9:e1:4f:db:32:41:9b:06:b8:88:34:02:02:57: 84:d2:ea:a3:5a:b9:84:03:5c:c2:a5:8f:77:ee:85: 35:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:89:B1:FA:04:1A:CC:8D:32:D2:A9:F2:B9:2B:65:01:8B:49:63:7D X509v3 Authority Key Identifier: keyid:16:B1:98:B6:EE:3A:F6:8D:EB:C2:34:7A:5E:98:F7:11:FB:30:F2:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FrGYtu469o3rwjR6Xpj3Efsw8os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/22ae14-e45e-4eee-bd07-4482ada232e3/1/FrGYtu469o3rwjR6Xpj3Efsw8os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:03:74:97:a0:d7:b2:38:10:9b:41:a8:cc:c9:6f:51:18:98: e1:18:4a:89:b7:33:1d:14:90:35:33:65:6c:e2:a1:3a:3d:3b: 89:11:61:92:df:eb:69:2b:c7:39:a9:17:df:17:9e:d5:29:68: ff:1d:16:7a:c8:38:78:e1:fc:0a:51:e7:03:98:76:e0:dd:98: 61:64:a9:5f:5c:ea:0a:f2:b3:2a:4a:33:02:f6:7c:64:85:0f: b3:0d:96:11:57:cb:3b:e4:57:70:84:5e:fd:0b:d8:a8:89:07: 40:42:ba:89:e5:b1:75:51:7d:29:ca:02:8c:a2:48:2e:a5:ef: 65:11:80:07:77:dd:8d:3e:09:4e:e7:f9:9b:7e:14:92:c2:1a: 18:10:48:1f:3c:cf:0e:98:cf:d9:15:2c:fb:f6:59:b2:3b:34: 6a:3d:b6:58:9c:31:63:1d:f7:62:bd:9d:85:83:ed:50:ae:77: b7:b9:65:bf:09:2a:26:88:4a:de:c6:c8:41:54:c6:a6:ef:3d: 3b:25:40:9c:a5:c4:76:d7:fc:00:fb:c1:d7:bb:87:7a:de:75: e0:8c:82:5b:60:4e:f6:77:89:ce:f7:63:00:8e:e7:9a:d7:38: 4a:6a:79:88:71:ba:3b:d1:bf:b2:31:4b:4e:6b:e9:5b:ef:f2: 95:b2:a3:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsfTxCuzqAsVaFcnYCq/4AkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YjE5OGI2ZWUzYWY2OGRlYmMyMzQ3YTVlOThmNzExZmIz MGYyOGIwHhcNMjUxMjE1MDAwMDMzWhcNMjUxMjE2MDAwMDMzWjAzMTEwLwYDVQQD EygxZDg5YjFmYTA0MWFjYzhkMzJkMmE5ZjJiOTJiNjUwMThiNDk2MzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAognidKxM7TDrdvTMpYktIRhnG4f+ PPSxJflHcpAMFApvTnw/CnGUL8DMML4qDTSiy5qqLHC0+U9cECP4E97vfG2EUgBH /be9wgf+AseDH0hxrmixmtnJrRKoBYIXfi0RP2lvrrBAEDG4BbsvYCxlZNmMkwF/ 5rCAgnlToxZIix9sugDCcuwSnFQsWfQ0cRHxpihawDlB+bfWgHUAeWFucHT5cewj SvRJ8kW6qlbvzX1CSjceXGbku59xnqh/qLR6DsCGQ4y+VcoIQwGHmQdNQ32Of+Ag B+8qrMtJVz4ie1W+yeFP2zJBmwa4iDQCAleE0uqjWrmEA1zCpY937oU1lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB2JsfoEGsyNMtKp8rkrZQGLSWN9MB8GA1UdIwQY MBaAFBaxmLbuOvaN68I0el6Y9xH7MPKLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDct NDQ4MmFkYTIzMmUzLzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yMmFlMTQtZTQ1ZS00ZWVlLWJkMDctNDQ4MmFkYTIzMmUz LzEvRnJHWXR1NDY5bzNyd2pSNlhwajNFZnN3OG9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgN0l6DX sjgQm0GozMlvURiY4RhKibczHRSQNTNlbOKhOj07iRFhkt/raSvHOakX3xee1Slo /x0Wesg4eOH8ClHnA5h24N2YYWSpX1zqCvKzKkozAvZ8ZIUPsw2WEVfLO+RXcIRe /QvYqIkHQEK6ieWxdVF9KcoCjKJILqXvZRGAB3fdjT4JTuf5m34UksIaGBBIHzzP DpjP2RUs+/ZZsjs0aj22WJwxYx33Yr2dhYPtUK53t7llvwkqJohK3sbIQVTGpu89 OyVAnKXEdtf8APvB17uHet514IyCW2BO9neJzvdjAI7nmtc4Smp5iHG6O9G/sjFL TmvpW+/ylbKjIA== -----END CERTIFICATE-----Generated at Mon Dec 15 05:00:11 2025 by rpki-client