This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft File: Fo_q-FM_haWBITrWyAHjn0pCC1k.mft (raw, json) Hash identifier: h+pGF8oDjnVKMP9/KgJHNq1RwVM2QdaxEFSSwTekymU= Subject key identifier: 9C:39:7E:9C:C6:DF:82:21:8C:55:97:C9:79:EA:31:6E:38:58:8C:F1 Authority key identifier: 16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59 Certificate issuer: /CN=168feaf8533f85a581213ad6c801e39f4a420b59 Certificate serial: 019B5ABFC281D0F2FC85316FBCDFE1D3D334 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft Manifest number: 16 Signing time: Fri 26 Dec 2025 13:01:15 +0000 Manifest this update: Fri 26 Dec 2025 13:01:15 +0000 Manifest next update: Sat 27 Dec 2025 13:01:15 +0000 Files and hashes: 1: Fo_q-FM_haWBITrWyAHjn0pCC1k.crl (hash: sMkCWNAyMRlg21rpKvDKmYhKKgDrfHc+JlJOWN+ICTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:bf:c2:81:d0:f2:fc:85:31:6f:bc:df:e1:d3:d3:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=168feaf8533f85a581213ad6c801e39f4a420b59 Validity Not Before: Dec 26 13:01:15 2025 GMT Not After : Dec 27 13:01:15 2025 GMT Subject: CN=9c397e9cc6df82218c5597c979ea316e38588cf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:18:3a:10:49:b4:ef:39:c0:1a:23:04:e8:e3: fc:4b:21:a4:8f:6e:88:2d:6e:5d:a3:f3:a4:32:3f: 7c:e1:9a:ca:87:b3:f0:2b:e9:9b:7c:6c:55:a1:48: 3f:3e:81:cb:be:bd:30:91:6b:84:48:a0:60:d0:64: 5d:50:3b:56:cb:3d:d9:d4:ff:8f:19:1f:29:62:31: 20:de:40:c7:79:45:4b:63:f8:81:1e:46:c8:e6:7d: c1:15:ba:65:03:39:2a:a3:f3:0a:c7:6a:e0:39:09: ff:e2:1a:b0:08:cc:f7:6b:47:c2:00:72:80:e2:b7: af:62:d3:9a:66:87:d3:ae:5d:c7:01:42:2a:40:72: c1:2b:24:85:56:8e:78:8d:9a:72:6a:19:d5:7e:63: e5:50:92:8e:5e:60:41:8c:ef:ef:7d:76:a2:90:6c: 15:5f:c9:20:9a:5a:3b:39:a4:c9:5f:ea:e7:12:16: 0a:8a:e0:c6:45:dd:27:03:cc:0d:de:24:2d:81:bf: 99:00:e1:ae:c1:4a:03:33:c1:42:81:3e:dd:fc:6d: 60:88:a2:88:77:4d:a2:e5:d8:9a:06:d4:1d:4f:b0: 10:d5:e9:5c:78:c1:5d:9e:60:22:3c:3e:dc:b2:5c: 41:61:d7:0b:09:98:fc:b0:06:83:5a:de:dc:33:d5: ca:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:39:7E:9C:C6:DF:82:21:8C:55:97:C9:79:EA:31:6E:38:58:8C:F1 X509v3 Authority Key Identifier: keyid:16:8F:EA:F8:53:3F:85:A5:81:21:3A:D6:C8:01:E3:9F:4A:42:0B:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fo_q-FM_haWBITrWyAHjn0pCC1k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/272694-22b3-4827-8b2a-13da385134f0/1/Fo_q-FM_haWBITrWyAHjn0pCC1k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2a:47:92:8d:a7:e9:28:46:c9:3b:03:a4:c7:f9:28:35:48: e4:f7:31:af:cf:d2:7d:94:78:8a:f6:a8:c5:87:a2:c7:b4:dc: 74:e9:c9:76:99:11:2b:88:10:5f:c2:6a:d7:d0:db:b3:c9:5d: 6a:01:5b:23:fd:32:a8:c1:3b:82:b1:fb:01:0b:d7:08:10:f7: e7:1b:93:bf:7c:5a:54:4d:a8:2a:e2:30:b3:70:2e:e2:58:3f: 32:2e:23:4e:35:47:58:cf:ce:41:24:a0:7a:85:96:31:12:a2: 0e:77:d2:8c:dd:31:9a:97:a5:1f:f6:57:1e:be:5e:e2:8a:bd: d2:73:3b:3e:db:6d:2b:e2:1e:e8:c5:1f:53:1c:87:f5:e9:6f: fc:78:88:59:7d:45:ec:ae:6f:84:f4:a9:3e:b4:e9:02:d5:6e: e6:7e:ed:ba:c7:da:7b:07:6a:f6:80:64:86:d0:a7:8c:a5:4d: 1e:1f:40:ed:19:2b:1e:39:9d:d7:2c:e4:66:68:3e:0f:26:2a: d1:79:40:2d:36:78:9f:d6:ff:42:74:f5:4a:1e:a8:07:0f:4d: db:00:1c:23:39:ee:07:d1:58:d5:40:e5:02:66:de:59:fc:05: e5:c5:21:28:28:a8:d2:10:42:7f:35:4c:85:c6:c0:dd:5c:0c: 08:81:d7:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtav8KB0PL8hTFvvN/h09M0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OGZlYWY4NTMzZjg1YTU4MTIxM2FkNmM4MDFlMzlmNGE0 MjBiNTkwHhcNMjUxMjI2MTMwMTE1WhcNMjUxMjI3MTMwMTE1WjAzMTEwLwYDVQQD Eyg5YzM5N2U5Y2M2ZGY4MjIxOGM1NTk3Yzk3OWVhMzE2ZTM4NTg4Y2YxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxg6EEm07znAGiME6OP8SyGkj26I LW5do/OkMj984ZrKh7PwK+mbfGxVoUg/PoHLvr0wkWuESKBg0GRdUDtWyz3Z1P+P GR8pYjEg3kDHeUVLY/iBHkbI5n3BFbplAzkqo/MKx2rgOQn/4hqwCMz3a0fCAHKA 4revYtOaZofTrl3HAUIqQHLBKySFVo54jZpyahnVfmPlUJKOXmBBjO/vfXaikGwV X8kgmlo7OaTJX+rnEhYKiuDGRd0nA8wN3iQtgb+ZAOGuwUoDM8FCgT7d/G1giKKI d02i5diaBtQdT7AQ1elceMFdnmAiPD7cslxBYdcLCZj8sAaDWt7cM9XK6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJw5fpzG34IhjFWXyXnqMW44WIzxMB8GA1UdIwQY MBaAFBaP6vhTP4WlgSE61sgB459KQgtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8yNzI2OTQtMjJiMy00ODI3LThiMmEt MTNkYTM4NTEzNGYwLzEvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi8yNzI2OTQtMjJiMy00ODI3LThiMmEtMTNkYTM4NTEzNGYw LzEvRm9fcS1GTV9oYVdCSVRyV3lBSGpuMHBDQzFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCpHko2n 6ShGyTsDpMf5KDVI5Pcxr8/SfZR4ivaoxYeix7TcdOnJdpkRK4gQX8Jq19Dbs8ld agFbI/0yqME7grH7AQvXCBD35xuTv3xaVE2oKuIws3Au4lg/Mi4jTjVHWM/OQSSg eoWWMRKiDnfSjN0xmpelH/ZXHr5e4oq90nM7PtttK+Ie6MUfUxyH9elv/HiIWX1F 7K5vhPSpPrTpAtVu5n7tusfaewdq9oBkhtCnjKVNHh9A7RkrHjmd1yzkZmg+DyYq 0XlALTZ4n9b/QnT1Sh6oBw9N2wAcIznuB9FY1UDlAmbeWfwF5cUhKCio0hBCfzVM hcbA3VwMCIHXww== -----END CERTIFICATE-----Generated at Fri Dec 26 15:43:34 2025 by rpki-client