This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft File: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft (raw, json) Hash identifier: fdKa7MnaHlcJhlGh+RVg7i9tMag70zKiYnnyThqEmgo= Subject key identifier: 83:F3:3A:FB:74:F0:BA:C6:93:F2:B4:B5:87:6C:03:35:1A:E2:68:36 Authority key identifier: 14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 Certificate issuer: /CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Certificate serial: 019B3DC7E5DE7C124B9642B685F5EF4DD377 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft Manifest number: 0727 Signing time: Sat 20 Dec 2025 22:01:09 +0000 Manifest this update: Sat 20 Dec 2025 22:01:09 +0000 Manifest next update: Sun 21 Dec 2025 22:01:09 +0000 Files and hashes: 1: FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl (hash: joKLaEURsbY+FGd0p534FrHhy1PT57/Yi539BF8DDbU=) 2: RvOaflHrUbGbCGM86DjNMJAz4Rw.roa (hash: 3Nyo7ThzTtGgNw1pACQDePiv05YOigx9XCdhwJe3hKs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:c7:e5:de:7c:12:4b:96:42:b6:85:f5:ef:4d:d3:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a4ba50b468fceeac194627e98ba1f57deb4fc0 Validity Not Before: Dec 20 22:01:09 2025 GMT Not After : Dec 21 22:01:09 2025 GMT Subject: CN=83f33afb74f0bac693f2b4b5876c03351ae26836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ce:70:4a:e4:05:71:69:b6:57:e1:da:60:aa: ee:6b:36:97:c4:12:f2:c9:bc:13:6d:65:12:99:8d: f0:c6:58:89:c6:94:6f:0b:85:7d:e1:b2:48:fc:f8: aa:55:8f:cb:44:bb:30:94:fa:a3:4c:6e:05:8d:3d: 84:d1:29:31:4f:45:0d:74:ec:d0:5f:09:72:45:de: 33:0c:f4:b7:11:68:ae:0d:2e:7f:49:aa:71:ea:30: 2a:45:76:23:a8:f1:72:14:de:3b:fc:b2:52:7a:05: 56:fb:f8:78:f3:50:29:b8:cd:08:b1:d4:69:66:d2: b3:32:b4:b9:09:2a:b3:0c:76:93:1d:42:bd:bb:22: b1:9f:b7:c7:ca:0d:c3:71:27:48:18:7c:bf:46:ad: d0:33:48:7c:57:d5:dd:00:ac:4d:3f:a8:f1:72:84: 49:2c:0d:80:e2:c5:ed:7c:4e:2e:8f:60:78:0c:73: ab:d4:1f:15:c5:f0:87:95:57:02:09:a9:d7:af:31: 41:9f:d1:59:56:e2:f8:fa:05:c3:af:ec:1f:5c:fa: 4d:2f:c1:2e:60:10:69:c0:61:16:5a:ce:72:43:89: 82:ab:41:92:a3:e4:22:7d:f7:11:29:9d:63:61:86: 58:5a:b5:fb:4e:d3:33:25:5b:58:73:02:ac:42:2a: c7:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F3:3A:FB:74:F0:BA:C6:93:F2:B4:B5:87:6C:03:35:1A:E2:68:36 X509v3 Authority Key Identifier: keyid:14:A4:BA:50:B4:68:FC:EE:AC:19:46:27:E9:8B:A1:F5:7D:EB:4F:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/a8d4ab-dc96-4c9c-af48-a0d48d0d7461/1/FKS6ULRo_O6sGUYn6Yuh9X3rT8A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:03:44:8e:89:78:0c:1a:af:52:fb:c5:70:7f:48:ed:26:82: 1c:8d:83:22:ad:b3:3a:54:26:9e:78:db:c9:0c:7d:6b:df:0d: e3:bc:41:21:88:92:21:a0:64:5d:71:9a:f2:02:fe:0e:e4:a3: 7a:22:97:67:2a:b8:06:cd:ad:2a:ba:fa:1c:ac:22:c0:18:1e: 5f:f7:dc:29:0e:f2:f3:44:0f:9f:61:5a:15:6f:61:7c:5c:2b: 4c:cb:9d:3b:c2:f4:1c:7b:aa:e8:4b:77:fc:ef:ee:f8:58:97: e3:15:fe:27:5d:43:83:43:cb:d1:3e:e4:e3:02:40:71:39:f8: 8a:75:ae:b0:6c:a5:2a:50:a3:4a:1d:39:3c:49:5d:a1:4a:4f: 34:c7:93:07:10:e7:12:07:a3:84:58:a8:dd:57:1d:48:18:ff: ec:b9:3d:76:41:e7:a7:24:46:14:23:35:76:d7:78:a5:5f:c4: f3:a1:09:57:57:60:1b:94:20:8f:ce:ed:91:f7:a7:b8:ba:75: 7f:de:81:16:c5:d1:63:9b:56:4f:ca:ba:f2:ac:2d:a9:8d:1c: 85:b4:42:80:9f:d9:85:3d:fe:ee:c3:e7:c2:4c:7a:44:af:5b: a4:73:a1:84:35:8f:cd:94:a2:a9:db:5e:0e:3b:8e:04:c7:36: e4:7f:a1:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9x+XefBJLlkK2hfXvTdN3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTRiYTUwYjQ2OGZjZWVhYzE5NDYyN2U5OGJhMWY1N2Rl YjRmYzAwHhcNMjUxMjIwMjIwMTA5WhcNMjUxMjIxMjIwMTA5WjAzMTEwLwYDVQQD Eyg4M2YzM2FmYjc0ZjBiYWM2OTNmMmI0YjU4NzZjMDMzNTFhZTI2ODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2M5wSuQFcWm2V+HaYKruazaXxBLy ybwTbWUSmY3wxliJxpRvC4V94bJI/PiqVY/LRLswlPqjTG4FjT2E0SkxT0UNdOzQ XwlyRd4zDPS3EWiuDS5/Sapx6jAqRXYjqPFyFN47/LJSegVW+/h481ApuM0IsdRp ZtKzMrS5CSqzDHaTHUK9uyKxn7fHyg3DcSdIGHy/Rq3QM0h8V9XdAKxNP6jxcoRJ LA2A4sXtfE4uj2B4DHOr1B8VxfCHlVcCCanXrzFBn9FZVuL4+gXDr+wfXPpNL8Eu YBBpwGEWWs5yQ4mCq0GSo+QiffcRKZ1jYYZYWrX7TtMzJVtYcwKsQirHjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIPzOvt08LrGk/K0tYdsAzUa4mg2MB8GA1UdIwQY MBaAFBSkulC0aPzurBlGJ+mLofV960/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgt YTBkNDhkMGQ3NDYxLzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9hOGQ0YWItZGM5Ni00YzljLWFmNDgtYTBkNDhkMGQ3NDYx LzEvRktTNlVMUm9fTzZzR1VZbjZZdWg5WDNyVDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgANEjol4 DBqvUvvFcH9I7SaCHI2DIq2zOlQmnnjbyQx9a98N47xBIYiSIaBkXXGa8gL+DuSj eiKXZyq4Bs2tKrr6HKwiwBgeX/fcKQ7y80QPn2FaFW9hfFwrTMudO8L0HHuq6Et3 /O/u+FiX4xX+J11Dg0PL0T7k4wJAcTn4inWusGylKlCjSh05PEldoUpPNMeTBxDn EgejhFio3VcdSBj/7Lk9dkHnpyRGFCM1dtd4pV/E86EJV1dgG5Qgj87tkfenuLp1 f96BFsXRY5tWT8q68qwtqY0chbRCgJ/ZhT3+7sPnwkx6RK9bpHOhhDWPzZSiqdte DjuOBMc25H+hiQ== -----END CERTIFICATE-----Generated at Sat Dec 20 23:12:26 2025 by rpki-client