This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json) Hash identifier: 28SJP+36+0tc3Bzc4/g587KJrhzj2XuUi8qp5RZt1mY= Subject key identifier: FD:DD:AC:18:EE:78:FF:65:4E:31:B8:DE:B3:1C:54:01:CB:71:E3:75 Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Certificate serial: 019B59E418634B30BC9D62F73AF3425965CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft Manifest number: 05DE Signing time: Fri 26 Dec 2025 09:01:19 +0000 Manifest this update: Fri 26 Dec 2025 09:01:19 +0000 Manifest next update: Sat 27 Dec 2025 09:01:19 +0000 Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: YcyZKWfIn0I1/cSEqU/n+SowoYX5bonPikCjdbq0Oxo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:e4:18:63:4b:30:bc:9d:62:f7:3a:f3:42:59:65:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88 Validity Not Before: Dec 26 09:01:19 2025 GMT Not After : Dec 27 09:01:19 2025 GMT Subject: CN=fdddac18ee78ff654e31b8deb31c5401cb71e375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c5:93:8c:d4:5e:1f:b3:59:29:09:72:01:b5: ab:bd:5c:96:d9:ff:2e:7c:78:cc:e7:c6:0c:1e:8a: 68:e1:0e:1c:94:c4:f7:da:41:98:b7:94:2d:90:6e: 61:bc:8f:4f:a1:50:66:b0:46:63:49:04:21:6c:bd: 7e:a1:70:9c:38:88:82:98:5d:7b:91:29:7e:46:17: 5d:59:c4:47:6c:89:91:cb:8f:38:cb:ae:89:71:9a: fa:4c:df:bd:ca:be:34:61:b7:48:72:98:63:23:8a: 34:1d:19:26:73:6c:98:e1:d2:7a:cf:57:e0:6b:ae: 25:c4:49:08:5a:de:9e:24:72:35:ef:9f:6a:f8:55: 9c:96:d8:ac:86:b7:00:8c:da:7d:bf:06:5e:56:8b: 8b:7f:68:d9:fa:43:b1:3a:86:ad:22:96:5b:d5:9d: ca:c3:b1:16:e5:4d:59:38:5d:a1:92:b4:bc:c1:8f: 87:3f:ef:e5:94:ce:73:ff:c0:58:f9:fc:13:0c:1d: 2e:13:ae:e2:22:88:ec:27:7f:ce:6e:0a:09:bf:cf: ba:25:02:8c:80:6a:90:70:3e:d0:4a:17:17:73:f9: e1:8e:1c:ab:5f:1e:1d:55:a1:c7:95:4e:e8:91:7e: ad:04:36:ea:e4:d9:fe:1a:6a:25:bd:dc:d6:36:81: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:AC:18:EE:78:FF:65:4E:31:B8:DE:B3:1C:54:01:CB:71:E3:75 X509v3 Authority Key Identifier: keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:03:b3:e0:16:70:3f:da:fc:c0:b0:ed:a7:e9:3c:93:dd:f8: 54:46:78:1d:a5:16:11:8e:96:75:06:65:83:4e:c8:a3:34:9e: e5:c3:9c:d7:8f:36:c3:06:22:38:8d:e0:06:51:ad:0d:4d:ab: b5:56:c5:28:e1:5e:25:33:7a:52:dc:8f:54:89:54:d9:b1:63: 02:f9:fe:e8:40:09:48:2a:ac:ab:f6:a7:78:a1:7a:6c:a9:1c: 1b:0c:62:b1:14:74:64:23:57:a8:2b:6d:2f:99:fb:5f:9c:62: a8:04:af:6c:91:cc:e2:97:ce:91:cc:38:31:c3:c2:46:d1:45: b2:b4:21:1a:03:73:98:c8:c2:47:42:52:97:f5:ea:3d:18:28: ab:4c:cb:ac:ed:46:29:86:52:1d:93:48:8c:87:31:11:9c:e8: 32:0f:b1:7a:22:7a:44:51:86:c0:8e:eb:04:02:bb:0a:c5:0a: 49:0b:66:43:07:69:22:e9:5a:fa:93:97:ba:b0:ea:f3:c6:98: 2e:63:41:5a:18:82:53:55:d2:1c:e6:2f:10:d6:2b:27:67:88: 4f:87:3f:d3:09:3a:df:9e:fb:8d:30:59:cc:93:6c:dc:31:e1: 76:30:d0:ae:f4:4a:7c:6e:5d:d5:5a:8d:5a:03:af:16:6c:0d: 3f:c4:6a:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZ5BhjSzC8nWL3OvNCWWXOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YTVmZjdlN2UxYWFmMzhlNTk5NjlkNjA5ODA0YTNiM2Yw NWJlODgwHhcNMjUxMjI2MDkwMTE5WhcNMjUxMjI3MDkwMTE5WjAzMTEwLwYDVQQD EyhmZGRkYWMxOGVlNzhmZjY1NGUzMWI4ZGViMzFjNTQwMWNiNzFlMzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MWTjNReH7NZKQlyAbWrvVyW2f8u fHjM58YMHopo4Q4clMT32kGYt5QtkG5hvI9PoVBmsEZjSQQhbL1+oXCcOIiCmF17 kSl+RhddWcRHbImRy484y66JcZr6TN+9yr40YbdIcphjI4o0HRkmc2yY4dJ6z1fg a64lxEkIWt6eJHI1759q+FWcltishrcAjNp9vwZeVouLf2jZ+kOxOoatIpZb1Z3K w7EW5U1ZOF2hkrS8wY+HP+/llM5z/8BY+fwTDB0uE67iIojsJ3/ObgoJv8+6JQKM gGqQcD7QShcXc/nhjhyrXx4dVaHHlU7okX6tBDbq5Nn+GmolvdzWNoHxSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3drBjueP9lTjG43rMcVAHLceN1MB8GA1UdIwQY MBaAFBal/35+Gq845Zlp1gmASjs/Bb6IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2It NjZkYWRlYTI5YzRhLzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8wZmVjZDUtZWU2Mi00MDFhLWE1N2ItNjZkYWRlYTI5YzRh LzEvRnFYX2ZuNGFyempsbVduV0NZQktPejhGdm9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAegOz4BZw P9r8wLDtp+k8k934VEZ4HaUWEY6WdQZlg07IozSe5cOc1482wwYiOI3gBlGtDU2r tVbFKOFeJTN6UtyPVIlU2bFjAvn+6EAJSCqsq/aneKF6bKkcGwxisRR0ZCNXqCtt L5n7X5xiqASvbJHM4pfOkcw4McPCRtFFsrQhGgNzmMjCR0JSl/XqPRgoq0zLrO1G KYZSHZNIjIcxEZzoMg+xeiJ6RFGGwI7rBAK7CsUKSQtmQwdpIula+pOXurDq88aY LmNBWhiCU1XSHOYvENYrJ2eIT4c/0wk63577jTBZzJNs3DHhdjDQrvRKfG5d1VqN WgOvFmwNP8RqpA== -----END CERTIFICATE-----Generated at Fri Dec 26 16:03:52 2025 by rpki-client