This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json) Hash identifier: 3rkbKJsLD7f9qc22s57x/FMUKHnKezz/TTdQO5qmjKI= Subject key identifier: F2:39:8B:39:D2:F3:E2:35:90:C9:D1:21:E4:93:42:0C:FA:23:13:80 Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e Certificate serial: 019B59ACEEAF58027B717AA1F6DC4AA9305B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft Manifest number: 0C10 Signing time: Fri 26 Dec 2025 08:01:04 +0000 Manifest this update: Fri 26 Dec 2025 08:01:04 +0000 Manifest next update: Sat 27 Dec 2025 08:01:04 +0000 Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: +GOkCywXds5A85KJ0sHqv0Jf248mh5ZKwcqdtsphMno=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:ee:af:58:02:7b:71:7a:a1:f6:dc:4a:a9:30:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e Validity Not Before: Dec 26 08:01:04 2025 GMT Not After : Dec 27 08:01:04 2025 GMT Subject: CN=f2398b39d2f3e23590c9d121e493420cfa231380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9b:ba:7f:93:ef:85:3d:23:80:09:f1:a5:77: fd:68:5c:dd:5e:8c:fb:87:37:c9:7e:42:4f:a8:ef: 68:b6:19:cb:81:3c:20:29:18:46:68:99:aa:7a:6a: ac:b8:d8:06:3b:82:30:c1:ee:0e:01:c2:ae:d3:ab: 93:3d:56:bc:92:71:de:6d:8f:50:f9:e5:b9:0d:2f: b4:4a:62:f8:f7:09:f9:9d:6b:a9:a3:d4:4c:b5:12: 01:a7:75:7b:89:93:65:a4:91:99:b9:44:8d:e7:44: d9:ad:7d:e5:1a:44:75:78:aa:8d:39:19:8a:26:68: 5a:86:15:80:43:7b:e8:19:7c:65:ec:4f:99:f0:97: b4:e0:53:da:70:c2:06:cd:1b:42:77:c3:55:ac:06: fe:e1:c5:4e:ce:c2:bf:8e:fa:48:c2:2c:00:10:a4: db:df:91:85:71:c2:a9:b2:5b:f4:27:b3:90:67:42: 2e:04:4a:f9:03:3c:eb:ec:49:a7:4c:b7:23:0b:fe: e6:17:42:f8:03:5f:52:f2:c1:94:67:45:25:3f:34: f8:84:9c:8d:03:62:5b:2f:24:68:d3:ed:7e:b6:34: 19:7c:dc:fb:6a:34:5e:5c:ad:a6:4d:0e:85:7c:45: 36:ea:80:ad:35:ba:29:06:46:18:05:05:bf:4d:be: ac:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:8B:39:D2:F3:E2:35:90:C9:D1:21:E4:93:42:0C:FA:23:13:80 X509v3 Authority Key Identifier: keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:2e:89:a8:87:0d:ef:ec:cc:15:a4:61:ed:e2:e3:d5:c5:15: 95:2a:fa:0f:4d:ba:6d:f4:cb:8a:c7:95:99:87:d3:34:83:2f: 53:a2:1b:c7:71:a7:68:44:a6:b3:22:e0:d2:2a:ec:55:dd:3d: 15:96:08:00:54:da:10:46:eb:59:0d:b0:81:09:93:91:b0:8b: 83:93:11:8a:c3:76:65:be:6e:66:33:d8:28:f8:75:fd:1d:bd: a4:64:64:8a:af:5d:48:c2:d1:04:0c:da:e8:5f:22:9a:c0:6d: 69:cf:18:43:71:38:6f:0e:ed:1e:ce:57:05:b5:88:b7:97:58: 85:f6:1b:2e:c5:4a:d1:72:bc:c9:d1:a9:41:9c:c9:62:e9:73: 75:7d:b8:93:83:ec:e2:d2:41:bd:a2:dd:91:5f:d2:cc:50:d3: f0:38:55:c9:71:ca:2e:b2:cd:be:e7:a1:92:3a:fe:0d:81:06: 18:55:67:64:c1:c6:42:c9:50:e8:6a:5e:42:24:7d:6b:3a:6b: f8:f0:d0:77:58:b1:45:57:6c:a3:37:34:d0:55:da:b0:30:dc: 4b:56:d4:ca:f8:b0:f5:35:d8:df:63:7c:91:d4:c9:41:8c:24: a4:96:06:90:f3:1a:01:40:7d:73:0f:cb:99:97:55:6f:53:e4: 87:a5:d2:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrO6vWAJ7cXqh9txKqTBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YzE0Mzg4ZjI4NjJkN2UyN2E4N2ZlNmY2MDFlMzRmMzQ1 NzIzNGUwHhcNMjUxMjI2MDgwMTA0WhcNMjUxMjI3MDgwMTA0WjAzMTEwLwYDVQQD EyhmMjM5OGIzOWQyZjNlMjM1OTBjOWQxMjFlNDkzNDIwY2ZhMjMxMzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ju6f5PvhT0jgAnxpXf9aFzdXoz7 hzfJfkJPqO9othnLgTwgKRhGaJmqemqsuNgGO4Iwwe4OAcKu06uTPVa8knHebY9Q +eW5DS+0SmL49wn5nWupo9RMtRIBp3V7iZNlpJGZuUSN50TZrX3lGkR1eKqNORmK JmhahhWAQ3voGXxl7E+Z8Je04FPacMIGzRtCd8NVrAb+4cVOzsK/jvpIwiwAEKTb 35GFccKpslv0J7OQZ0IuBEr5Azzr7EmnTLcjC/7mF0L4A19S8sGUZ0UlPzT4hJyN A2JbLyRo0+1+tjQZfNz7ajReXK2mTQ6FfEU26oCtNbopBkYYBQW/Tb6sJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPI5iznS8+I1kMnRIeSTQgz6IxOAMB8GA1UdIwQY MBaAFBTBQ4jyhi1+J6h/5vYB4080VyNOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2Mt ODhhNGJlN2E0Y2IzLzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYTZhMGYtYjljNy00ZjQwLTllM2MtODhhNGJlN2E0Y2Iz LzEvRk1GRGlQS0dMWDRucUhfbTlnSGpUelJYSTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXy6JqIcN 7+zMFaRh7eLj1cUVlSr6D026bfTLiseVmYfTNIMvU6Ibx3GnaESmsyLg0irsVd09 FZYIAFTaEEbrWQ2wgQmTkbCLg5MRisN2Zb5uZjPYKPh1/R29pGRkiq9dSMLRBAza 6F8imsBtac8YQ3E4bw7tHs5XBbWIt5dYhfYbLsVK0XK8ydGpQZzJYulzdX24k4Ps 4tJBvaLdkV/SzFDT8DhVyXHKLrLNvuehkjr+DYEGGFVnZMHGQslQ6GpeQiR9azpr +PDQd1ixRVdsozc00FXasDDcS1bUyviw9TXY32N8kdTJQYwkpJYGkPMaAUB9cw/L mZdVb1Pkh6XSuA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:16:52 2025 by rpki-client