This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json) Hash identifier: p5tYdWFFBjhXFoR67+74JeqZ6Ee7x+xNs4SpNbpjb+0= Subject key identifier: FC:15:54:69:16:D4:CF:C6:8A:5D:DF:F9:C7:7A:68:41:3D:D7:7A:BB Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Certificate serial: 019B3B34D49988A14531D738C4A87075431A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 10:01:16 +0000 Manifest this update: Sat 20 Dec 2025 10:01:16 +0000 Manifest next update: Sun 21 Dec 2025 10:01:16 +0000 Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: XruY2AE3CmgWkpajvDQQZkA6zYa6iqXAwmEe58ZeTEU=) 2: nS2kJA0lLglIc5uOUfZiV3eL6YA.roa (hash: K783Zb7wLmRXQmApgLlixVva89VTJc2nsPVxHEGUGTo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3b:34:d4:99:88:a1:45:31:d7:38:c4:a8:70:75:43:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4 Validity Not Before: Dec 20 10:01:16 2025 GMT Not After : Dec 21 10:01:16 2025 GMT Subject: CN=fc15546916d4cfc68a5ddff9c77a68413dd77abb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:cb:dd:1b:1d:07:36:ec:49:bf:7f:60:e1:7f: fd:b1:f4:0f:de:0d:ee:67:b1:1c:da:7e:47:ea:14: fb:e4:e1:9f:55:b7:b6:64:9b:89:19:da:6f:8c:ce: cc:e3:a3:0e:0c:90:10:ac:8c:b9:ca:fc:89:07:3a: 22:d3:37:89:fa:98:e3:91:a4:23:2c:18:b1:c7:80: b9:94:f5:16:1a:0d:b6:b7:b2:1f:1c:f0:71:d2:4d: 2c:73:19:02:c8:c1:bc:03:90:f7:10:93:f9:82:f8: 1f:38:70:86:ec:60:07:9c:a7:03:57:f8:4f:3c:30: 5c:2c:cc:64:d4:ca:bd:80:ec:32:ce:b2:9c:18:02: 24:a1:a2:9c:ca:65:d4:b7:da:c9:4d:4c:6e:06:72: c3:e2:8e:c1:ca:98:f7:5b:75:6e:cb:81:a5:c0:e9: 75:62:70:aa:e7:2b:40:d9:f1:a8:69:2e:79:b4:6a: d9:db:74:b2:da:63:6b:ea:f5:c4:f7:ed:0a:76:eb: 1c:9f:bb:ac:42:a4:4b:8f:47:da:7e:fa:07:db:0b: 15:dd:27:c8:20:c4:14:7e:80:bc:44:b5:65:54:31: 02:2b:7e:25:db:31:0d:de:db:a5:ca:b5:07:49:09: cb:4f:0b:92:d1:cd:74:ae:05:ea:04:c1:1d:02:7f: f1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:15:54:69:16:D4:CF:C6:8A:5D:DF:F9:C7:7A:68:41:3D:D7:7A:BB X509v3 Authority Key Identifier: keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3c:14:1b:5a:38:60:6a:e1:f1:31:bc:11:4e:1e:91:08:93: 8f:60:c9:15:f2:f0:99:0b:99:5f:af:07:da:00:f1:3f:67:b3: f6:6a:7a:83:f5:77:d5:35:8b:76:7f:ae:9b:8c:d4:a4:4d:dc: 0b:f3:09:8b:aa:46:e2:96:c3:52:64:d6:f5:fd:36:a2:a7:e3: ca:bc:49:ac:25:c4:88:93:eb:d4:7a:71:21:5f:87:fe:70:19: f3:f1:7b:d3:69:14:87:bf:24:52:0e:6b:20:90:76:a3:ec:f3: 88:b8:63:21:31:65:5b:5d:42:4e:18:f9:b8:35:fa:58:f4:5a: d8:63:d4:43:fb:09:74:d9:00:a6:c8:30:92:16:f0:b3:2f:db: 8e:3e:07:55:5b:6a:5c:33:e6:4e:8c:36:19:0f:8a:b3:a0:65: fe:50:fe:40:27:e7:b5:9b:3b:6e:e5:0d:53:ea:da:ce:92:c5: 11:f5:58:ff:2d:55:4d:13:f4:b3:cc:be:57:96:32:25:93:ee: 24:c2:10:68:29:fe:7d:a6:8b:75:21:78:1d:2d:d9:b1:44:c1: 01:d5:76:81:00:1e:94:fa:4f:f8:fc:91:c5:3d:37:00:c8:49: fa:f8:75:2c:36:e7:c5:3c:97:14:66:a3:a1:b0:97:0e:c5:f1: 14:18:54:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs7NNSZiKFFMdc4xKhwdUMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjQxZGQ4M2Q4YWMwODBiNjY1MDRiZjkzNzQ1OWZmY2Vj NGNjYzQwHhcNMjUxMjIwMTAwMTE2WhcNMjUxMjIxMTAwMTE2WjAzMTEwLwYDVQQD EyhmYzE1NTQ2OTE2ZDRjZmM2OGE1ZGRmZjljNzdhNjg0MTNkZDc3YWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMvdGx0HNuxJv39g4X/9sfQP3g3u Z7Ec2n5H6hT75OGfVbe2ZJuJGdpvjM7M46MODJAQrIy5yvyJBzoi0zeJ+pjjkaQj LBixx4C5lPUWGg22t7IfHPBx0k0scxkCyMG8A5D3EJP5gvgfOHCG7GAHnKcDV/hP PDBcLMxk1Mq9gOwyzrKcGAIkoaKcymXUt9rJTUxuBnLD4o7Bypj3W3Vuy4GlwOl1 YnCq5ytA2fGoaS55tGrZ23Sy2mNr6vXE9+0Kduscn7usQqRLj0fafvoH2wsV3SfI IMQUfoC8RLVlVDECK34l2zEN3tulyrUHSQnLTwuS0c10rgXqBMEdAn/xOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPwVVGkW1M/Gil3f+cd6aEE913q7MB8GA1UdIwQY MBaAFBYkHdg9isCAtmUEv5N0Wf/OxMzEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWIt NWU3NDlmNDM0MWE0LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9iOTAwNjAtNWFhYS00M2VhLWJjZWItNWU3NDlmNDM0MWE0 LzEvRmlRZDJEMkt3SUMyWlFTX2szUlpfODdFek1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjwUG1o4 YGrh8TG8EU4ekQiTj2DJFfLwmQuZX68H2gDxP2ez9mp6g/V31TWLdn+um4zUpE3c C/MJi6pG4pbDUmTW9f02oqfjyrxJrCXEiJPr1HpxIV+H/nAZ8/F702kUh78kUg5r IJB2o+zziLhjITFlW11CThj5uDX6WPRa2GPUQ/sJdNkApsgwkhbwsy/bjj4HVVtq XDPmTow2GQ+Ks6Bl/lD+QCfntZs7buUNU+razpLFEfVY/y1VTRP0s8y+V5YyJZPu JMIQaCn+faaLdSF4HS3ZsUTBAdV2gQAelPpP+PyRxT03AMhJ+vh1LDbnxTyXFGaj obCXDsXxFBhUOw== -----END CERTIFICATE-----Generated at Sat Dec 20 19:59:05 2025 by rpki-client