This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft File: FAThjoYWcF7A8pDlfKgpqC9flsI.mft (raw, json) Hash identifier: dg/wlKbad6nqAlVxCfdDkiuC2vhu/fNMCFlY1+uuwDU= Subject key identifier: 14:D4:1F:E7:92:18:C5:81:1D:E4:E8:34:C7:69:BE:EC:99:D0:5C:3D Authority key identifier: 14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 Certificate issuer: /CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Certificate serial: 019B0DB726247A7052B6AD3FAAA837FD66A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft Manifest number: 1770 Signing time: Thu 11 Dec 2025 14:01:05 +0000 Manifest this update: Thu 11 Dec 2025 14:01:05 +0000 Manifest next update: Fri 12 Dec 2025 14:01:05 +0000 Files and hashes: 1: FAThjoYWcF7A8pDlfKgpqC9flsI.crl (hash: XSwkurpZ/6v8boSlvHLV9AO3TQauKmn7AhQjNx2CXG4=) 2: tsrNBESAlUjzygDHgS7gEuqfQn0.roa (hash: 6Jn0pVJqrN6B9jn7fLfe3kxST0CupCM2snjZV9wb1no=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 14:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:0d:b7:26:24:7a:70:52:b6:ad:3f:aa:a8:37:fd:66:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1404e18e8616705ec0f290e57ca829a82f5f96c2 Validity Not Before: Dec 11 14:01:05 2025 GMT Not After : Dec 12 14:01:05 2025 GMT Subject: CN=14d41fe79218c5811de4e834c769beec99d05c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0b:59:af:5c:06:a4:47:66:86:9c:79:5e:ce: c4:5c:b0:95:9a:82:3b:a0:40:d7:6d:3f:f6:82:6d: 16:52:86:af:c6:ce:68:69:87:d8:29:34:f4:7f:c9: 08:8a:f8:ad:e6:1e:d5:f8:9a:61:f0:91:00:6d:04: 7e:e5:5f:f5:2d:8d:c7:67:6f:12:69:7d:9b:ed:f3: ae:a3:b4:3d:7a:8d:c6:28:88:8e:c4:6b:10:a3:41: b1:8c:04:f7:59:07:c3:37:36:a2:10:55:5b:32:cf: 6a:24:14:ad:07:ce:e8:68:76:8f:25:ae:8e:78:66: 9b:1c:55:a6:21:23:34:02:27:e4:0e:b2:1f:e8:7e: 1f:d2:c9:90:2a:a1:bd:0a:c3:76:a1:27:8a:f1:03: 08:8c:f4:5b:36:a7:a3:f6:0c:8c:db:6e:a5:74:7a: a5:d2:3f:cc:fb:6c:ce:d1:5c:a1:cc:26:9a:ea:15: d0:c7:b3:8a:8d:4e:70:1e:81:8c:b3:b2:13:fd:87: 3d:95:83:6f:f0:64:d3:f0:30:b0:dc:4d:f2:d3:0b: 66:5f:9a:be:87:04:36:73:ff:5f:bb:fd:2b:2a:91: 80:c1:5d:f2:50:74:8e:b7:69:05:a7:8f:f2:92:dd: 74:b2:be:90:01:8d:4c:4b:48:49:18:9c:94:02:a0: ce:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:1F:E7:92:18:C5:81:1D:E4:E8:34:C7:69:BE:EC:99:D0:5C:3D X509v3 Authority Key Identifier: keyid:14:04:E1:8E:86:16:70:5E:C0:F2:90:E5:7C:A8:29:A8:2F:5F:96:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAThjoYWcF7A8pDlfKgpqC9flsI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cbbedc-b7bc-4255-bc41-e36e8d293ae0/1/FAThjoYWcF7A8pDlfKgpqC9flsI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:51:12:fa:fc:8e:4f:97:3e:18:8f:56:e0:5d:2e:92:74:02: 14:41:92:3a:f7:dc:1f:c2:5c:e4:13:60:01:e2:64:9c:0b:e3: 79:75:ed:26:60:a3:fa:1e:ea:ad:50:a0:4e:19:5a:3a:91:d9: 44:2d:b5:72:7e:53:a3:0b:85:a6:ec:38:34:0a:c5:12:f4:ee: 44:90:96:ad:e5:cb:1e:50:b8:4b:a4:5b:10:73:cd:3f:84:29: dc:95:bb:3e:cc:91:c8:cc:f1:3b:a2:21:34:60:9e:22:6a:c0: ac:6d:b0:37:b0:67:7d:73:b8:06:19:6b:a8:70:e2:7e:eb:bd: 9d:62:e0:a0:d8:46:61:25:53:fd:e0:00:32:0c:cd:b0:86:93: 79:16:b7:bf:b3:5b:50:8a:18:63:b7:f1:d7:8a:c8:cf:cd:dd: 1c:7c:5b:f7:d0:0b:74:21:7a:5a:0f:ab:8d:c9:95:36:43:fc: 25:ca:a5:f3:21:45:93:2c:9c:5c:a1:94:ae:dc:9b:59:c2:93: 68:fa:9f:df:d8:04:58:93:d0:9e:99:08:c8:ac:2b:01:aa:3c: 13:d3:a8:ae:90:6a:a5:4a:18:e5:44:fd:de:7c:6e:5e:76:ae: 04:02:fd:8e:51:1f:24:2d:2e:3a:ac:3b:6c:9e:6e:40:8d:87: 7f:c5:cb:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsNtyYkenBStq0/qqg3/WaiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MDRlMThlODYxNjcwNWVjMGYyOTBlNTdjYTgyOWE4MmY1 Zjk2YzIwHhcNMjUxMjExMTQwMTA1WhcNMjUxMjEyMTQwMTA1WjAzMTEwLwYDVQQD EygxNGQ0MWZlNzkyMThjNTgxMWRlNGU4MzRjNzY5YmVlYzk5ZDA1YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wtZr1wGpEdmhpx5Xs7EXLCVmoI7 oEDXbT/2gm0WUoavxs5oaYfYKTT0f8kIivit5h7V+Jph8JEAbQR+5V/1LY3HZ28S aX2b7fOuo7Q9eo3GKIiOxGsQo0GxjAT3WQfDNzaiEFVbMs9qJBStB87oaHaPJa6O eGabHFWmISM0AifkDrIf6H4f0smQKqG9CsN2oSeK8QMIjPRbNqej9gyM226ldHql 0j/M+2zO0VyhzCaa6hXQx7OKjU5wHoGMs7IT/Yc9lYNv8GTT8DCw3E3y0wtmX5q+ hwQ2c/9fu/0rKpGAwV3yUHSOt2kFp4/ykt10sr6QAY1MS0hJGJyUAqDOUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTUH+eSGMWBHeToNMdpvuyZ0Fw9MB8GA1UdIwQY MBaAFBQE4Y6GFnBewPKQ5XyoKagvX5bCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEt ZTM2ZThkMjkzYWUwLzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9jYmJlZGMtYjdiYy00MjU1LWJjNDEtZTM2ZThkMjkzYWUw LzEvRkFUaGpvWVdjRjdBOHBEbGZLZ3BxQzlmbHNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlES+vyO T5c+GI9W4F0uknQCFEGSOvfcH8Jc5BNgAeJknAvjeXXtJmCj+h7qrVCgThlaOpHZ RC21cn5TowuFpuw4NArFEvTuRJCWreXLHlC4S6RbEHPNP4Qp3JW7PsyRyMzxO6Ih NGCeImrArG2wN7BnfXO4BhlrqHDifuu9nWLgoNhGYSVT/eAAMgzNsIaTeRa3v7Nb UIoYY7fx14rIz83dHHxb99ALdCF6Wg+rjcmVNkP8Jcql8yFFkyycXKGUrtybWcKT aPqf39gEWJPQnpkIyKwrAao8E9OorpBqpUoY5UT93nxuXnauBAL9jlEfJC0uOqw7 bJ5uQI2Hf8XLVQ== -----END CERTIFICATE-----Generated at Fri Dec 12 00:08:50 2025 by rpki-client