This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft File: FmqYZpgAXVfnuS96ONIZu7gP4f8.mft (raw, json) Hash identifier: ySQSafL9i06HswLzYezy4EoH9mrDgcfMho6JKwt7BpY= Subject key identifier: FC:C2:EE:A9:7D:7E:53:CE:1F:C8:A9:63:90:B4:29:FC:E5:71:30:05 Authority key identifier: 16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF Certificate issuer: /CN=166a986698005d57e7b92f7a38d219bbb80fe1ff Certificate serial: 019B405C1661F13B2261A063F1113A1EABF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft Manifest number: 1212 Signing time: Sun 21 Dec 2025 10:02:15 +0000 Manifest this update: Sun 21 Dec 2025 10:02:15 +0000 Manifest next update: Mon 22 Dec 2025 10:02:15 +0000 Files and hashes: 1: FmqYZpgAXVfnuS96ONIZu7gP4f8.crl (hash: ErH2NxowmE//b5O4c7dqZEFtbwy506ySffCQXPcd+iA=) 2: c4nEiNEeJD2vFf8wumBi1yYvs6E.roa (hash: aF0QKy6JcPOas0fgNBBJCKQQxMBB/xZccd3mvICIadY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Dec 2025 10:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:40:5c:16:61:f1:3b:22:61:a0:63:f1:11:3a:1e:ab:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=166a986698005d57e7b92f7a38d219bbb80fe1ff Validity Not Before: Dec 21 10:02:15 2025 GMT Not After : Dec 22 10:02:15 2025 GMT Subject: CN=fcc2eea97d7e53ce1fc8a96390b429fce5713005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c0:aa:04:ef:52:45:95:41:b7:9b:83:f3:a0: d5:63:9b:b0:49:83:88:88:76:72:68:a2:13:fd:20: 01:cf:69:87:a8:57:83:07:eb:79:d1:8d:00:5a:f5: de:2e:0e:44:2d:39:1a:7b:96:f3:96:f6:40:18:5c: a7:e0:a3:d6:fb:e5:e4:2e:f6:8c:07:ae:3e:3d:c5: b3:36:12:18:9a:c1:2a:45:0c:ab:c1:06:b8:f6:09: 6d:c7:e1:b2:fc:00:ae:02:04:6f:20:43:a8:94:ce: 1e:86:77:92:4b:8f:52:49:06:9e:34:1e:4d:47:27: 52:c1:8c:12:3a:1f:f8:7f:e7:80:9d:8a:1f:c8:ba: 45:04:68:52:38:c5:df:d6:c7:18:d0:f9:21:02:9a: 3f:a2:31:35:47:3d:f1:16:f8:54:cf:b3:6f:c6:0b: c8:5b:17:f0:f7:48:cf:c9:e2:57:04:91:6d:dd:fa: 3b:6b:3f:5d:56:16:0f:3a:da:a7:2c:f5:55:65:4c: d7:15:cc:63:93:d0:7f:30:a3:0a:22:f2:31:70:25: 52:4b:44:39:d0:14:50:bd:3d:a5:ea:a4:ba:f0:0d: e5:c4:fc:e5:63:6a:5c:17:23:bc:2d:fb:c7:63:45: c8:55:7c:64:92:17:aa:82:9c:a7:da:cd:a2:e5:11: 42:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:C2:EE:A9:7D:7E:53:CE:1F:C8:A9:63:90:B4:29:FC:E5:71:30:05 X509v3 Authority Key Identifier: keyid:16:6A:98:66:98:00:5D:57:E7:B9:2F:7A:38:D2:19:BB:B8:0F:E1:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmqYZpgAXVfnuS96ONIZu7gP4f8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d7dee6-c743-42d7-9060-dc776254cbf6/1/FmqYZpgAXVfnuS96ONIZu7gP4f8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ac:82:0c:b2:a7:87:20:d6:18:f7:1c:d2:e5:87:6b:2a:14: 5e:30:d3:ed:7d:3f:83:95:16:5d:c6:2c:1e:a5:8e:ad:58:da: 8a:cb:04:74:79:65:61:f0:e0:95:0b:07:67:32:52:54:4d:cb: 7b:3f:eb:b2:5f:ef:37:bc:a9:5f:9b:c6:e8:96:d2:2d:d7:58: f1:07:d9:3d:a0:77:09:e8:c2:c4:c8:c4:58:3f:c2:e1:96:e1: f7:5e:3d:aa:4e:85:4f:ed:4e:c9:07:cd:7e:4b:dc:18:fc:cd: 2b:47:20:ad:10:ab:ff:13:dc:ac:b8:c3:79:09:28:b9:d9:cb: 21:d8:9c:5e:ef:c5:b0:29:c6:57:19:5f:2c:f7:4d:16:b8:d9: 49:e8:4f:c0:10:6c:64:6a:e3:d7:b1:b0:d0:9e:9d:5a:a5:3a: 23:66:e3:7d:55:b8:f1:c5:39:66:5e:4e:55:8c:ed:a1:96:9c: b8:2b:4a:23:3e:37:e2:c8:96:90:42:0f:48:89:36:c0:ef:92: 4f:a4:69:f4:18:a3:7c:74:6b:7f:80:6c:71:bc:a3:47:f5:31: 59:8e:2c:c7:4c:4b:35:f4:e2:48:35:54:5a:0e:a4:4a:84:22: 82:81:8b:10:66:18:90:78:50:9b:55:9d:1a:3e:50:fa:d9:62: a6:99:c8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtAXBZh8TsiYaBj8RE6HqvwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2NmE5ODY2OTgwMDVkNTdlN2I5MmY3YTM4ZDIxOWJiYjgw ZmUxZmYwHhcNMjUxMjIxMTAwMjE1WhcNMjUxMjIyMTAwMjE1WjAzMTEwLwYDVQQD EyhmY2MyZWVhOTdkN2U1M2NlMWZjOGE5NjM5MGI0MjlmY2U1NzEzMDA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8CqBO9SRZVBt5uD86DVY5uwSYOI iHZyaKIT/SABz2mHqFeDB+t50Y0AWvXeLg5ELTkae5bzlvZAGFyn4KPW++XkLvaM B64+PcWzNhIYmsEqRQyrwQa49gltx+Gy/ACuAgRvIEOolM4ehneSS49SSQaeNB5N RydSwYwSOh/4f+eAnYofyLpFBGhSOMXf1scY0PkhApo/ojE1Rz3xFvhUz7NvxgvI Wxfw90jPyeJXBJFt3fo7az9dVhYPOtqnLPVVZUzXFcxjk9B/MKMKIvIxcCVSS0Q5 0BRQvT2l6qS68A3lxPzlY2pcFyO8LfvHY0XIVXxkkheqgpyn2s2i5RFC0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPzC7ql9flPOH8ipY5C0KfzlcTAFMB8GA1UdIwQY MBaAFBZqmGaYAF1X57kvejjSGbu4D+H/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAt ZGM3NzYyNTRjYmY2LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9kN2RlZTYtYzc0My00MmQ3LTkwNjAtZGM3NzYyNTRjYmY2 LzEvRm1xWVpwZ0FYVmZudVM5Nk9OSVp1N2dQNGY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFayCDLKn hyDWGPcc0uWHayoUXjDT7X0/g5UWXcYsHqWOrVjaissEdHllYfDglQsHZzJSVE3L ez/rsl/vN7ypX5vG6JbSLddY8QfZPaB3CejCxMjEWD/C4Zbh9149qk6FT+1OyQfN fkvcGPzNK0cgrRCr/xPcrLjDeQkoudnLIdicXu/FsCnGVxlfLPdNFrjZSehPwBBs ZGrj17Gw0J6dWqU6I2bjfVW48cU5Zl5OVYztoZacuCtKIz434siWkEIPSIk2wO+S T6Rp9BijfHRrf4BscbyjR/UxWY4sx0xLNfTiSDVUWg6kSoQigoGLEGYYkHhQm1Wd Gj5Q+tlippnIGQ== -----END CERTIFICATE-----Generated at Sun Dec 21 19:27:20 2025 by rpki-client