This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft File: FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft (raw, json) Hash identifier: os6xxhlh9EajicX+hMwix8al8KyAGM4VZ4LsMMHWMco= Subject key identifier: 50:9C:20:CF:8C:41:1D:EF:E0:2D:7A:89:A1:CB:FC:87:3C:1D:F1:25 Authority key identifier: 16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E Certificate issuer: /CN=16914c51d031411c1340171593603163c3d4a08e Certificate serial: 019B194D5C89D894F1062917F539055553F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft Manifest number: 0428 Signing time: Sat 13 Dec 2025 20:00:58 +0000 Manifest this update: Sat 13 Dec 2025 20:00:58 +0000 Manifest next update: Sun 14 Dec 2025 20:00:58 +0000 Files and hashes: 1: 8ERPvpxKfVBfAUigys2-PiTFfqA.roa (hash: KAiZ9xkRQ32j6xO0jLEnhDznPnUl1zJBNWjMk46qfE0=) 2: FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl (hash: SO+Pew6pm2PA/JJF8cJNHzJR0Ar78GrsHoR5vzDZNBI=) 3: gJVc1ED6fXAztZrZVaBt7sRVw7s.roa (hash: NuxZCt7HFtHNaqj3vrIg4m4RXf+ibNz9HPakUOz5CxM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Dec 2025 20:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:19:4d:5c:89:d8:94:f1:06:29:17:f5:39:05:55:53:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16914c51d031411c1340171593603163c3d4a08e Validity Not Before: Dec 13 20:00:58 2025 GMT Not After : Dec 14 20:00:58 2025 GMT Subject: CN=509c20cf8c411defe02d7a89a1cbfc873c1df125 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:51:c2:15:e8:1c:17:a6:fd:a0:a2:ca:7c:8c: 93:36:b3:e1:92:2d:f5:b2:fa:8f:d6:d9:ba:29:ce: 01:8d:b1:6a:0d:78:92:17:06:57:63:cc:3b:53:18: 95:74:4e:8d:c5:b0:17:7e:95:bf:0c:ce:6b:74:b0: e8:39:d2:94:ff:6e:ed:7f:5d:5f:44:84:f1:da:c2: 73:d6:d7:a8:d9:69:46:8b:35:7a:8b:ec:ef:38:16: c9:3b:48:c0:df:0b:9c:5e:2e:27:5e:e0:a3:80:99: 28:ac:29:43:ef:7a:14:eb:b0:72:5e:34:c2:a1:7e: eb:d9:61:60:23:af:90:aa:8f:0c:95:a0:28:18:81: f8:0f:6c:2a:33:e7:a6:92:28:35:45:1a:73:22:bd: 1d:ff:6b:27:dd:2c:0d:18:ea:6e:f7:4a:77:e3:aa: 38:05:2d:80:c0:2e:5b:54:4d:f8:1d:1b:be:9a:42: 75:52:e4:7a:4f:bb:3f:80:7a:e1:61:50:39:d2:97: 9d:7d:e3:06:79:04:e8:c1:a1:64:e8:dd:65:25:f9: 6b:36:67:a9:42:e7:30:b8:18:6f:3b:e4:64:56:c2: c1:6a:a8:2f:50:93:4b:90:2d:ae:49:b5:f7:70:b9: 19:19:a8:41:09:2c:70:77:22:79:38:03:f0:4d:7c: bb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:9C:20:CF:8C:41:1D:EF:E0:2D:7A:89:A1:CB:FC:87:3C:1D:F1:25 X509v3 Authority Key Identifier: keyid:16:91:4C:51:D0:31:41:1C:13:40:17:15:93:60:31:63:C3:D4:A0:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpFMUdAxQRwTQBcVk2AxY8PUoI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f90a7d-8a05-4755-b66b-09f19c6e51b2/1/FpFMUdAxQRwTQBcVk2AxY8PUoI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:91:b3:51:90:f0:67:41:77:ec:40:04:95:92:ac:f5:8a:97: d9:02:47:83:1c:4c:e0:46:39:af:06:d0:6b:75:d5:1c:69:ae: 09:b3:d1:28:67:7f:75:c8:ae:38:1c:36:d0:03:46:b2:11:3e: c3:42:67:7c:02:bb:ea:97:21:1e:04:6b:76:b6:7c:67:b9:3d: e6:15:f8:63:63:42:5f:56:5f:8a:29:87:83:cb:25:15:bd:47: 6a:39:98:82:17:f4:e3:89:ec:5b:fb:4d:56:a6:7d:55:ee:2a: 95:36:00:94:25:de:90:db:6b:f5:de:68:81:86:2f:3f:ab:0a: 61:bb:7e:90:2e:3b:95:fe:ee:5b:96:9c:e9:6e:97:44:8f:c9: ed:29:3e:15:c3:9e:53:87:23:e2:50:66:17:6a:5f:1b:8b:e2: 02:7c:2c:bf:46:a7:5c:34:03:85:f6:61:37:9c:13:9a:d6:14: 73:1b:7b:18:9f:d3:b4:34:cd:ca:43:1c:1a:d5:c8:64:c8:b6: 74:a5:f3:9b:c2:e6:ba:a6:1c:71:9b:88:f5:c3:8e:ca:a4:64: 2b:6c:59:11:35:16:9f:51:d6:3c:40:13:3b:df:e8:a1:b2:4a: a3:1e:5f:00:bb:3d:98:fb:48:56:62:13:ef:e5:51:2a:b6:66: 1a:e4:46:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsZTVyJ2JTxBikX9TkFVVPxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2OTE0YzUxZDAzMTQxMWMxMzQwMTcxNTkzNjAzMTYzYzNk NGEwOGUwHhcNMjUxMjEzMjAwMDU4WhcNMjUxMjE0MjAwMDU4WjAzMTEwLwYDVQQD Eyg1MDljMjBjZjhjNDExZGVmZTAyZDdhODlhMWNiZmM4NzNjMWRmMTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FHCFegcF6b9oKLKfIyTNrPhki31 svqP1tm6Kc4BjbFqDXiSFwZXY8w7UxiVdE6NxbAXfpW/DM5rdLDoOdKU/27tf11f RITx2sJz1teo2WlGizV6i+zvOBbJO0jA3wucXi4nXuCjgJkorClD73oU67ByXjTC oX7r2WFgI6+Qqo8MlaAoGIH4D2wqM+emkig1RRpzIr0d/2sn3SwNGOpu90p346o4 BS2AwC5bVE34HRu+mkJ1UuR6T7s/gHrhYVA50pedfeMGeQTowaFk6N1lJflrNmep QucwuBhvO+RkVsLBaqgvUJNLkC2uSbX3cLkZGahBCSxwdyJ5OAPwTXy7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFCcIM+MQR3v4C16iaHL/Ic8HfElMB8GA1UdIwQY MBaAFBaRTFHQMUEcE0AXFZNgMWPD1KCOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmIt MDlmMTljNmU1MWIyLzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mOTBhN2QtOGEwNS00NzU1LWI2NmItMDlmMTljNmU1MWIy LzEvRnBGTVVkQXhRUndUUUJjVmsyQXhZOFBVb0k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdpGzUZDw Z0F37EAElZKs9YqX2QJHgxxM4EY5rwbQa3XVHGmuCbPRKGd/dciuOBw20ANGshE+ w0JnfAK76pchHgRrdrZ8Z7k95hX4Y2NCX1ZfiimHg8slFb1HajmYghf044nsW/tN VqZ9Ve4qlTYAlCXekNtr9d5ogYYvP6sKYbt+kC47lf7uW5ac6W6XRI/J7Sk+FcOe U4cj4lBmF2pfG4viAnwsv0anXDQDhfZhN5wTmtYUcxt7GJ/TtDTNykMcGtXIZMi2 dKXzm8LmuqYccZuI9cOOyqRkK2xZETUWn1HWPEATO9/oobJKox5fALs9mPtIVmIT 7+VRKrZmGuRGAA== -----END CERTIFICATE-----Generated at Sun Dec 14 06:03:02 2025 by rpki-client