This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft File: FgRPZYu8kicHhfe7ByrJNolfSTM.mft (raw, json) Hash identifier: cAzsAu276hyFSYonIW0MBQH6habTlJ0fGg8JM4ea2+4= Subject key identifier: AD:D4:A3:D5:80:01:25:F0:6B:DB:E1:59:5D:1F:D8:C6:98:29:75:54 Authority key identifier: 16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 Certificate issuer: /CN=16044f658bbc92270785f7bb072ac936895f4933 Certificate serial: 019B59AC8195328D30FE83E9020C35B1BE29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft Manifest number: 2B Signing time: Fri 26 Dec 2025 08:00:36 +0000 Manifest this update: Fri 26 Dec 2025 08:00:36 +0000 Manifest next update: Sat 27 Dec 2025 08:00:36 +0000 Files and hashes: 1: FgRPZYu8kicHhfe7ByrJNolfSTM.crl (hash: 6IlcXz2BBB4Dx5iWclUTiSX36XCgHsvDiwZZv8t3IxA=) 2: oyJa9c3yIWG6yoefC-Dl8q7v_4k.roa (hash: L8bXnJKZCUNQajwd4Sh21RwsiqjWxpRpS53i7yxKKJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:59:ac:81:95:32:8d:30:fe:83:e9:02:0c:35:b1:be:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16044f658bbc92270785f7bb072ac936895f4933 Validity Not Before: Dec 26 08:00:36 2025 GMT Not After : Dec 27 08:00:36 2025 GMT Subject: CN=add4a3d5800125f06bdbe1595d1fd8c698297554 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b3:02:c7:fd:6a:d0:54:c8:8f:83:02:3a:32: 3e:df:08:95:7f:40:f5:8e:93:24:59:5d:06:d2:bf: 8e:af:f5:c9:01:26:78:9e:b8:ee:4d:8e:34:70:d2: 74:bb:ed:65:e5:d2:30:33:86:24:72:a8:a5:cc:26: c0:c0:71:55:7b:f7:b0:ba:1e:6c:5c:c8:04:c8:67: 16:ec:17:45:8e:12:bf:80:33:08:aa:e8:5e:cb:84: 2b:a7:ea:7f:e5:38:34:19:8f:04:67:d9:0f:3a:e8: 62:3d:41:ef:18:f6:d0:37:e4:3d:66:ef:bc:19:81: 8a:00:91:c7:33:d5:c4:cb:45:fd:c9:c5:f8:db:0e: 68:44:f8:64:8b:90:ba:eb:85:0b:b9:9e:19:af:d2: 75:ad:fc:62:21:fa:3b:31:85:9e:3f:53:ce:17:cc: 78:57:66:dc:60:7c:8c:f6:d0:03:f4:b5:e8:78:8b: e4:e1:e1:35:28:b4:b0:ac:2e:a1:f4:6b:27:c5:2f: b2:f2:7a:ae:5c:4b:83:82:0f:22:8e:39:f9:50:d9: c9:b7:4d:60:9f:31:c7:d0:ca:99:66:99:a1:5c:de: f1:e8:58:2b:01:ed:2a:de:5f:07:a3:0d:d8:40:09: 83:a4:94:46:c3:8d:c6:0b:c1:55:22:63:14:d7:e4: dd:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:A3:D5:80:01:25:F0:6B:DB:E1:59:5D:1F:D8:C6:98:29:75:54 X509v3 Authority Key Identifier: keyid:16:04:4F:65:8B:BC:92:27:07:85:F7:BB:07:2A:C9:36:89:5F:49:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgRPZYu8kicHhfe7ByrJNolfSTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/db503c-d654-4b46-9b8b-822b255538fe/1/FgRPZYu8kicHhfe7ByrJNolfSTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:bf:49:62:5b:5f:9d:eb:e9:4e:5b:70:f1:61:c5:b3:ee:42: 40:e4:d0:8f:a7:2e:af:7c:34:a7:46:cc:99:dd:d6:cd:c1:bc: 75:1e:8d:a9:97:bd:e0:01:ef:a0:b0:8f:85:67:e8:03:97:6f: e7:77:75:28:80:90:86:5c:7b:ec:1a:fd:29:0c:19:49:28:35: cd:a7:12:e6:9c:4e:6b:36:5d:34:3b:c0:d2:47:b6:15:ed:62: e9:6c:2f:e2:72:20:52:a9:aa:9c:8a:24:2c:db:d0:5f:78:b8: 39:df:68:06:d9:ca:8c:e8:aa:93:42:23:75:14:28:42:b0:b1: ab:d5:e2:60:ad:94:7d:be:8b:d4:20:6c:04:d0:a6:c1:0d:30: c0:2c:17:37:16:05:e5:69:4e:a6:aa:d4:72:6c:37:6e:03:1d: 0e:e1:92:ed:95:47:ae:78:10:c7:2f:e0:8e:a1:19:df:a0:c1: af:d4:68:e7:92:f3:4e:0b:cc:ec:06:fe:40:24:82:89:d8:d0: b8:f1:7b:98:86:94:a2:6c:73:28:a4:9f:dc:e1:51:22:06:33: da:1d:46:98:7e:76:df:37:f2:4b:69:cf:2a:5c:3b:6f:7b:0e: 78:5f:1a:e5:fa:15:9d:c9:08:b5:dc:49:c2:cf:c8:75:13:5a: 82:c7:67:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtZrIGVMo0w/oPpAgw1sb4pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDQ0ZjY1OGJiYzkyMjcwNzg1ZjdiYjA3MmFjOTM2ODk1 ZjQ5MzMwHhcNMjUxMjI2MDgwMDM2WhcNMjUxMjI3MDgwMDM2WjAzMTEwLwYDVQQD EyhhZGQ0YTNkNTgwMDEyNWYwNmJkYmUxNTk1ZDFmZDhjNjk4Mjk3NTU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7MCx/1q0FTIj4MCOjI+3wiVf0D1 jpMkWV0G0r+Or/XJASZ4nrjuTY40cNJ0u+1l5dIwM4YkcqilzCbAwHFVe/ewuh5s XMgEyGcW7BdFjhK/gDMIquhey4Qrp+p/5Tg0GY8EZ9kPOuhiPUHvGPbQN+Q9Zu+8 GYGKAJHHM9XEy0X9ycX42w5oRPhki5C664ULuZ4Zr9J1rfxiIfo7MYWeP1POF8x4 V2bcYHyM9tAD9LXoeIvk4eE1KLSwrC6h9GsnxS+y8nquXEuDgg8ijjn5UNnJt01g nzHH0MqZZpmhXN7x6FgrAe0q3l8How3YQAmDpJRGw43GC8FVImMU1+TdawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK3Uo9WAASXwa9vhWV0f2MaYKXVUMB8GA1UdIwQY MBaAFBYET2WLvJInB4X3uwcqyTaJX0kzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGIt ODIyYjI1NTUzOGZlLzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9kYjUwM2MtZDY1NC00YjQ2LTliOGItODIyYjI1NTUzOGZl LzEvRmdSUFpZdThraWNIaGZlN0J5ckpOb2xmU1RNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeL9JYltf nevpTltw8WHFs+5CQOTQj6cur3w0p0bMmd3WzcG8dR6NqZe94AHvoLCPhWfoA5dv 53d1KICQhlx77Br9KQwZSSg1zacS5pxOazZdNDvA0ke2Fe1i6Wwv4nIgUqmqnIok LNvQX3i4Od9oBtnKjOiqk0IjdRQoQrCxq9XiYK2Ufb6L1CBsBNCmwQ0wwCwXNxYF 5WlOpqrUcmw3bgMdDuGS7ZVHrngQxy/gjqEZ36DBr9Ro55LzTgvM7Ab+QCSCidjQ uPF7mIaUomxzKKSf3OFRIgYz2h1GmH523zfyS2nPKlw7b3sOeF8a5foVnckItdxJ ws/IdRNagsdnxg== -----END CERTIFICATE-----Generated at Fri Dec 26 15:42:23 2025 by rpki-client