This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft File: FNwR7RqdntVr8Z2n8heDCoCZxCk.mft (raw, json) Hash identifier: 39hu2w7c4nDYNdMkMC0AHNUGDDYRpxv4kqNG79Vs0Ig= Subject key identifier: 81:3B:FE:A7:B5:BA:E5:A7:0B:0A:F9:A8:96:A8:51:3F:AC:EB:3A:24 Authority key identifier: 14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 Certificate issuer: /CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Certificate serial: 019B2B8AA99A8CFA09DE6C01B6920FE7614C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft Manifest number: 1285 Signing time: Wed 17 Dec 2025 09:01:06 +0000 Manifest this update: Wed 17 Dec 2025 09:01:06 +0000 Manifest next update: Thu 18 Dec 2025 09:01:06 +0000 Files and hashes: 1: FNwR7RqdntVr8Z2n8heDCoCZxCk.crl (hash: 8jYOxV0lTgI/H/UyyfjSCiMTX5vPC1rHcaMpH9xj2Jc=) 2: HD1uPet-iIu7hW_120IFu9su76s.roa (hash: vFNL8ghAlqPTrA8jGEs+I7hRSyNODsDNbh5CwQDUvI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 09:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:8a:a9:9a:8c:fa:09:de:6c:01:b6:92:0f:e7:61:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14dc11ed1a9d9ed56bf19da7f217830a8099c429 Validity Not Before: Dec 17 09:01:06 2025 GMT Not After : Dec 18 09:01:06 2025 GMT Subject: CN=813bfea7b5bae5a70b0af9a896a8513faceb3a24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:b2:57:db:9e:d4:b2:d2:b9:cd:9d:25:51: 5e:23:4e:7c:c1:c4:2c:81:f2:85:ed:88:a5:31:f5: 99:33:2b:12:8a:75:5f:a1:07:85:05:43:52:e7:74: 00:17:8c:4f:03:08:58:27:5b:93:05:81:8b:b3:f6: 82:98:5f:fc:3a:92:25:97:cf:56:c0:95:26:24:b9: 75:60:52:8e:4f:b9:89:85:c7:12:ed:f8:dd:94:9e: 7e:33:9e:a0:b0:03:d6:74:3f:7f:63:87:f2:72:62: 97:23:28:5a:98:53:a8:6b:49:10:4d:7a:7d:5a:19: 4a:37:db:07:37:49:6e:aa:35:d3:c9:d0:f8:f3:a0: ea:44:52:46:a9:a3:3b:bf:61:55:ff:d6:8c:e7:88: 03:d7:79:22:43:5d:70:a1:e2:8e:8e:08:b4:af:97: 90:f3:53:e0:4a:39:03:9b:78:c6:b4:8d:b1:90:03: c9:e8:fc:e2:f2:60:fd:8b:42:ea:d1:02:8f:c6:6a: 99:ce:75:1a:c2:6e:59:86:26:63:d7:6e:8e:be:ba: fd:28:73:d9:0c:d2:ae:80:be:6b:10:93:29:92:74: 76:51:af:7b:17:2b:0e:24:31:1e:98:9f:8d:b2:90: 02:71:12:7b:fb:ab:73:3e:cf:e0:64:2b:87:6b:7e: 99:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:3B:FE:A7:B5:BA:E5:A7:0B:0A:F9:A8:96:A8:51:3F:AC:EB:3A:24 X509v3 Authority Key Identifier: keyid:14:DC:11:ED:1A:9D:9E:D5:6B:F1:9D:A7:F2:17:83:0A:80:99:C4:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNwR7RqdntVr8Z2n8heDCoCZxCk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ef7bd3-24b2-4284-97fe-c71db718970e/1/FNwR7RqdntVr8Z2n8heDCoCZxCk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:70:e1:c5:00:72:51:6c:0b:f2:48:3d:85:96:80:0c:52: e4:d8:2c:15:57:c3:6d:f9:3b:8d:f6:2c:86:53:a8:24:ee:4c: 59:92:3d:e0:3b:82:06:b6:b2:81:b1:ec:8a:08:b6:72:52:5c: 7e:ff:ac:c7:5b:72:f8:6a:42:65:55:3e:c6:05:15:f7:e5:b6: 21:a2:ee:82:b7:ff:4e:73:f1:d3:15:82:64:9a:02:e0:d0:ef: 7f:f9:a6:5d:79:b3:a6:59:23:4d:fb:26:b4:e4:f0:c4:22:0c: 71:70:fb:49:2f:78:d5:71:58:fc:73:f1:e6:3e:52:37:64:9d: 5c:7b:91:e7:77:ab:dd:3e:7f:2c:d8:a3:79:67:07:e1:90:ed: d0:ee:ee:a6:7a:d4:c4:aa:5b:a5:2e:ad:80:fa:63:15:8f:51: 25:c5:86:7f:b7:31:b3:f0:6b:5b:33:37:ff:9e:d5:eb:24:9f: 3d:9b:cf:3b:03:88:ec:9f:39:0c:bb:0a:b5:e6:c1:b4:4c:aa: 9f:7a:cf:58:73:5e:e8:1c:7f:62:e6:00:4f:40:e3:7f:2b:73: 00:2d:d4:0c:b8:09:08:6b:c7:47:d6:d4:19:c5:10:90:09:a6: 1b:09:ee:cc:53:59:99:cc:0b:dd:25:dd:74:44:31:b1:56:4d: fc:66:b3:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsriqmajPoJ3mwBtpIP52FMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZGMxMWVkMWE5ZDllZDU2YmYxOWRhN2YyMTc4MzBhODA5 OWM0MjkwHhcNMjUxMjE3MDkwMTA2WhcNMjUxMjE4MDkwMTA2WjAzMTEwLwYDVQQD Eyg4MTNiZmVhN2I1YmFlNWE3MGIwYWY5YTg5NmE4NTEzZmFjZWIzYTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gayV9ue1LLSuc2dJVFeI058wcQs gfKF7YilMfWZMysSinVfoQeFBUNS53QAF4xPAwhYJ1uTBYGLs/aCmF/8OpIll89W wJUmJLl1YFKOT7mJhccS7fjdlJ5+M56gsAPWdD9/Y4fycmKXIyhamFOoa0kQTXp9 WhlKN9sHN0luqjXTydD486DqRFJGqaM7v2FV/9aM54gD13kiQ11woeKOjgi0r5eQ 81PgSjkDm3jGtI2xkAPJ6Pzi8mD9i0Lq0QKPxmqZznUawm5ZhiZj126Ovrr9KHPZ DNKugL5rEJMpknR2Ua97FysOJDEemJ+NspACcRJ7+6tzPs/gZCuHa36ZJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIE7/qe1uuWnCwr5qJaoUT+s6zokMB8GA1UdIwQY MBaAFBTcEe0anZ7Va/Gdp/IXgwqAmcQpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUt YzcxZGI3MTg5NzBlLzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9lZjdiZDMtMjRiMi00Mjg0LTk3ZmUtYzcxZGI3MTg5NzBl LzEvRk53UjdScWRudFZyOFoybjhoZURDb0NaeENrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAavFw4cUA clFsC/JIPYWWgAxS5NgsFVfDbfk7jfYshlOoJO5MWZI94DuCBraygbHsigi2clJc fv+sx1ty+GpCZVU+xgUV9+W2IaLugrf/TnPx0xWCZJoC4NDvf/mmXXmzplkjTfsm tOTwxCIMcXD7SS941XFY/HPx5j5SN2SdXHuR53er3T5/LNijeWcH4ZDt0O7upnrU xKpbpS6tgPpjFY9RJcWGf7cxs/BrWzM3/57V6ySfPZvPOwOI7J85DLsKtebBtEyq n3rPWHNe6Bx/YuYAT0DjfytzAC3UDLgJCGvHR9bUGcUQkAmmGwnuzFNZmcwL3SXd dEQxsVZN/Gaz/A== -----END CERTIFICATE-----Generated at Wed Dec 17 19:12:54 2025 by rpki-client