This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft File: FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json) Hash identifier: wANWt0aXDdwI1oPAoYEF0JZliaso1WR9nUqP9VBqqAA= Subject key identifier: 6B:D9:31:BC:ED:FC:43:D2:02:EC:1F:D3:BF:CC:DF:A8:E5:3B:4A:7D Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 Certificate issuer: /CN=16655e5595f5a3c071c12b179db9279dc7db0913 Certificate serial: 019B465D78FF3A3C7BFDA5C4714D0106F3B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft Manifest number: 10A3 Signing time: Mon 22 Dec 2025 14:01:29 +0000 Manifest this update: Mon 22 Dec 2025 14:01:29 +0000 Manifest next update: Tue 23 Dec 2025 14:01:29 +0000 Files and hashes: 1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=) 2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: CjJTkuGsF1mUqIr7q2wakRx/rjS5zLq2CnBcKJfP6hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 14:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:46:5d:78:ff:3a:3c:7b:fd:a5:c4:71:4d:01:06:f3:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913 Validity Not Before: Dec 22 14:01:29 2025 GMT Not After : Dec 23 14:01:29 2025 GMT Subject: CN=6bd931bcedfc43d202ec1fd3bfccdfa8e53b4a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:47:bb:ad:af:ca:0e:3e:5b:4f:70:25:e6:7a: b9:6f:47:fb:ad:a8:70:dd:4a:aa:84:cc:bd:e9:9e: a2:97:73:57:68:b2:ff:ac:97:a8:da:de:9b:d8:5a: 62:35:3e:98:64:b0:ab:43:f0:8a:eb:d4:3a:4c:1e: fd:f2:24:02:71:b4:5f:b2:7c:bb:da:7b:e9:76:63: 2c:27:bc:ed:66:06:53:ef:33:07:27:f4:71:24:4a: 86:0d:27:2b:2e:58:40:bf:04:fa:2e:0b:9c:97:d7: 50:07:26:b7:e3:95:84:d3:a8:9d:75:0c:6c:6a:a9: 28:06:49:75:28:08:03:89:41:cd:6f:c5:eb:a9:96: 31:22:25:cb:4f:85:c3:ea:21:10:bb:c7:11:1d:6f: e1:99:cc:92:1e:bd:82:ca:00:b4:98:77:fa:9f:66: 02:b1:98:33:f9:5f:7c:3e:e6:c4:36:9a:69:e7:ad: 72:c2:a6:22:e2:ce:8a:50:73:c9:51:de:97:6c:76: b0:dd:f6:e4:62:88:7a:cb:c9:f5:a8:19:ff:7a:8c: fb:ee:8a:53:05:ed:a6:19:3e:7e:90:2a:02:68:ab: f8:0f:32:21:fc:59:44:fb:b3:80:28:2b:e9:c9:8f: 2d:8a:85:24:27:6e:14:3d:67:e7:d7:8f:c8:78:55: 89:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:D9:31:BC:ED:FC:43:D2:02:EC:1F:D3:BF:CC:DF:A8:E5:3B:4A:7D X509v3 Authority Key Identifier: keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:1b:0c:48:d5:ae:3b:7a:df:99:14:93:1b:a2:72:c4:30:57: 62:f9:76:55:9e:b7:7e:db:98:70:4e:1d:2c:ce:24:49:1d:0c: 29:06:31:8b:ea:91:3c:e2:73:83:cf:69:89:4c:db:34:07:c6: 5a:44:a5:b9:ab:44:07:a4:4b:c3:39:31:69:cc:1d:e8:5e:d1: 1a:ca:17:4d:5b:91:08:2a:81:96:53:57:a5:fc:c7:fd:c6:65: 49:9e:42:90:28:b8:9a:33:16:1d:03:9d:72:cf:6d:ea:a1:6f: 43:e6:c5:00:64:ea:8d:49:a3:70:aa:f4:4f:b2:61:2f:c9:be: a1:20:c0:9a:20:0c:a7:37:7b:21:81:a6:98:44:3a:c0:6d:e6: 5a:a8:bf:69:0e:4f:65:3d:ef:4e:22:b6:c3:93:ca:35:a5:98: e0:14:6e:6d:05:ae:41:cd:7e:07:fc:f4:e1:82:12:85:b3:75: d5:cd:5f:6b:9e:c0:2d:5e:bd:68:dc:59:63:83:a8:c4:df:e1: e2:c2:67:c1:95:f8:ac:b2:91:f4:d7:ca:92:36:f0:e6:a4:82: 43:20:dd:64:d3:4f:69:8c:bd:98:11:6a:c1:6c:f0:9b:1a:a3: ae:9e:ed:58:dd:46:f9:60:f1:f1:f8:7a:02:d2:f0:a3:09:3c: 59:86:3b:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtGXXj/Ojx7/aXEcU0BBvO2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk YjA5MTMwHhcNMjUxMjIyMTQwMTI5WhcNMjUxMjIzMTQwMTI5WjAzMTEwLwYDVQQD Eyg2YmQ5MzFiY2VkZmM0M2QyMDJlYzFmZDNiZmNjZGZhOGU1M2I0YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80e7ra/KDj5bT3Al5nq5b0f7rahw 3UqqhMy96Z6il3NXaLL/rJeo2t6b2FpiNT6YZLCrQ/CK69Q6TB798iQCcbRfsny7 2nvpdmMsJ7ztZgZT7zMHJ/RxJEqGDScrLlhAvwT6Lgucl9dQBya345WE06iddQxs aqkoBkl1KAgDiUHNb8XrqZYxIiXLT4XD6iEQu8cRHW/hmcySHr2CygC0mHf6n2YC sZgz+V98PubENppp561ywqYi4s6KUHPJUd6XbHaw3fbkYoh6y8n1qBn/eoz77opT Be2mGT5+kCoCaKv4DzIh/FlE+7OAKCvpyY8tioUkJ24UPWfn14/IeFWJUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvZMbzt/EPSAuwf07/M36jlO0p9MB8GA1UdIwQY MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2 LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRsMSNWu O3rfmRSTG6JyxDBXYvl2VZ63ftuYcE4dLM4kSR0MKQYxi+qRPOJzg89piUzbNAfG WkSluatEB6RLwzkxacwd6F7RGsoXTVuRCCqBllNXpfzH/cZlSZ5CkCi4mjMWHQOd cs9t6qFvQ+bFAGTqjUmjcKr0T7JhL8m+oSDAmiAMpzd7IYGmmEQ6wG3mWqi/aQ5P ZT3vTiK2w5PKNaWY4BRubQWuQc1+B/z04YIShbN11c1fa57ALV69aNxZY4OoxN/h 4sJnwZX4rLKR9NfKkjbw5qSCQyDdZNNPaYy9mBFqwWzwmxqjrp7tWN1G+WDx8fh6 AtLwowk8WYY7YA== -----END CERTIFICATE-----Generated at Mon Dec 22 20:35:06 2025 by rpki-client