This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft File: FjPymeqaLbgrAENdSz0WDsQ8QtY.mft (raw, json) Hash identifier: Zl+2wjBeaR61rc/pzkN9DszO97SXRJ6n4UCt2buCd24= Subject key identifier: D3:F4:4E:A4:C8:A3:1E:2F:69:8B:2D:65:1D:A0:9D:06:EA:74:A3:DA Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Certificate serial: 019B202B03AC2791C1BD56300A843B4A57F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft Manifest number: 0A1D Signing time: Mon 15 Dec 2025 04:00:48 +0000 Manifest this update: Mon 15 Dec 2025 04:00:48 +0000 Manifest next update: Tue 16 Dec 2025 04:00:48 +0000 Files and hashes: 1: CRew1yNG5xJSLzpzwmoLp-zhTwY.roa (hash: 93BHoq8vptXxPswONjpJ7IKNz5731MnLBO2O3H4KKvY=) 2: FjPymeqaLbgrAENdSz0WDsQ8QtY.crl (hash: pzXtct3MVXmk8GCZr4qW6hCtfpapah8jjvaE/Ju6gjE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 04:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:20:2b:03:ac:27:91:c1:bd:56:30:0a:84:3b:4a:57:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6 Validity Not Before: Dec 15 04:00:48 2025 GMT Not After : Dec 16 04:00:48 2025 GMT Subject: CN=d3f44ea4c8a31e2f698b2d651da09d06ea74a3da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:48:58:57:c0:6a:df:1d:c8:6e:89:80:34:41: 30:4c:10:92:89:77:f5:15:82:36:7c:d1:38:f1:bf: 2a:be:81:ff:01:50:af:e4:98:d1:30:b4:ef:cb:ae: f1:0a:c7:31:ef:b1:d6:a5:42:f8:4e:99:79:7a:db: 77:2e:29:a6:dc:82:8c:f3:ea:34:29:33:b5:34:ab: 97:a4:06:cc:d8:ee:2e:25:6b:f3:dc:9a:2a:15:06: 82:f9:27:6b:6d:94:c5:32:17:89:9f:07:ba:a1:d6: 2c:e4:f6:44:c0:bd:ae:d1:22:23:17:ab:3c:1f:f1: 57:42:3a:fc:1e:2d:3d:3b:b2:2e:38:31:bb:eb:81: 24:0a:ed:0b:8e:a2:73:b8:ab:55:5d:f1:75:ce:ac: a1:19:ee:dd:ba:3c:e8:0a:42:3a:cb:fe:c3:e0:af: 0f:2e:f3:67:34:db:73:31:b5:3c:04:5f:7d:5d:0c: 02:c4:cb:71:ba:f0:2d:44:77:8a:61:af:53:b1:04: 96:87:e0:fd:3a:5e:cc:ba:d3:9a:de:82:35:51:15: 23:0d:3a:05:5a:5e:32:b5:71:52:c5:06:a1:4f:0f: 54:b7:37:2e:ee:63:69:9b:d9:0c:d9:11:1c:02:01: 64:15:39:31:a7:28:74:6a:c3:f7:65:20:05:03:a5: 42:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:F4:4E:A4:C8:A3:1E:2F:69:8B:2D:65:1D:A0:9D:06:EA:74:A3:DA X509v3 Authority Key Identifier: keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cf:d0:e8:b1:e0:ae:1b:99:1d:10:f5:55:de:ce:52:a3:85: f8:47:0c:be:5c:d2:50:88:c6:39:74:5f:e1:6b:ed:5a:2c:7f: 10:b9:f6:0b:4d:ad:43:16:02:32:65:03:91:f1:b2:d0:83:b9: 74:ac:63:26:f1:a6:e0:77:27:37:0c:fe:bd:a0:eb:0b:59:be: 0b:79:c1:2a:93:b9:68:82:a8:20:6e:c5:e1:a3:1e:63:57:11: 17:76:80:bc:29:e6:08:1a:a7:40:fd:06:cb:9d:52:b9:20:e5: 5d:5b:e5:71:81:14:81:49:1e:f1:ca:3c:cf:12:f6:bc:a5:1a: fd:25:3a:5b:8c:fc:3f:f7:15:61:64:31:11:72:51:cd:72:d7: 39:15:94:ee:cb:d5:15:51:1a:17:cf:7a:ce:0e:c8:42:e1:04: 8b:4f:74:45:fd:c2:3e:b6:ea:2a:99:c1:10:ff:98:c4:c8:aa: b8:fe:3b:2c:e8:88:ae:2d:36:29:e0:34:6f:58:26:4f:60:f1: c4:e0:91:f9:fd:0a:ff:a1:65:87:82:9d:4c:e6:ba:83:01:56: c9:3e:a7:01:c1:9a:9d:83:d7:ef:16:f6:9f:56:2d:8e:65:87: 15:26:f9:45:78:2e:88:47:85:64:cb:8e:ab:6b:c9:6f:ee:60: 38:7f:f4:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsgKwOsJ5HBvVYwCoQ7Slf4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz YzQyZDYwHhcNMjUxMjE1MDQwMDQ4WhcNMjUxMjE2MDQwMDQ4WjAzMTEwLwYDVQQD EyhkM2Y0NGVhNGM4YTMxZTJmNjk4YjJkNjUxZGEwOWQwNmVhNzRhM2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkhYV8Bq3x3IbomANEEwTBCSiXf1 FYI2fNE48b8qvoH/AVCv5JjRMLTvy67xCscx77HWpUL4Tpl5ett3Limm3IKM8+o0 KTO1NKuXpAbM2O4uJWvz3JoqFQaC+SdrbZTFMheJnwe6odYs5PZEwL2u0SIjF6s8 H/FXQjr8Hi09O7IuODG764EkCu0LjqJzuKtVXfF1zqyhGe7dujzoCkI6y/7D4K8P LvNnNNtzMbU8BF99XQwCxMtxuvAtRHeKYa9TsQSWh+D9Ol7MutOa3oI1URUjDToF Wl4ytXFSxQahTw9Utzcu7mNpm9kM2REcAgFkFTkxpyh0asP3ZSAFA6VC+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNP0TqTIox4vaYstZR2gnQbqdKPaMB8GA1UdIwQY MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt NzlhODI5MWIxNTdmLzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8/Q6LHg rhuZHRD1Vd7OUqOF+EcMvlzSUIjGOXRf4WvtWix/ELn2C02tQxYCMmUDkfGy0IO5 dKxjJvGm4HcnNwz+vaDrC1m+C3nBKpO5aIKoIG7F4aMeY1cRF3aAvCnmCBqnQP0G y51SuSDlXVvlcYEUgUke8co8zxL2vKUa/SU6W4z8P/cVYWQxEXJRzXLXORWU7svV FVEaF896zg7IQuEEi090Rf3CPrbqKpnBEP+YxMiquP47LOiIri02KeA0b1gmT2Dx xOCR+f0K/6Flh4KdTOa6gwFWyT6nAcGanYPX7xb2n1YtjmWHFSb5RXguiEeFZMuO q2vJb+5gOH/0iw== -----END CERTIFICATE-----Generated at Mon Dec 15 12:12:27 2025 by rpki-client