This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft File: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft (raw, json) Hash identifier: g9UR/Ab5gJm90ThiwQQ6saz+qwJ5loKsDVN+d4a5AIg= Subject key identifier: 95:2B:E2:9D:15:BB:23:28:A4:3B:B2:3D:5A:4A:66:74:25:E9:5D:5E Authority key identifier: 16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED Certificate issuer: /CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed Certificate serial: 019B5A516DA58CBDFD9A66E65D5DCA08E75D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft Manifest number: 1796 Signing time: Fri 26 Dec 2025 11:00:44 +0000 Manifest this update: Fri 26 Dec 2025 11:00:44 +0000 Manifest next update: Sat 27 Dec 2025 11:00:44 +0000 Files and hashes: 1: FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl (hash: yz95sJ40I2wmQS3O3SpIv1JtVDH23MLbtq4hYw/GApE=) 2: Tz0-GH9GTxNnsSYKPK-Ng0bqHFU.roa (hash: 6KAfAR9FK4FJFxLsDkhMRqDlSfVSMvMOJuzMsurfhN0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 06:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:5a:51:6d:a5:8c:bd:fd:9a:66:e6:5d:5d:ca:08:e7:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16092063a2a7dc609e2b6f9cc0daf04f1e98b9ed Validity Not Before: Dec 26 11:00:44 2025 GMT Not After : Dec 27 11:00:44 2025 GMT Subject: CN=952be29d15bb2328a43bb23d5a4a667425e95d5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e2:b0:58:7e:3b:55:bf:cb:f3:f0:10:06:4b: 34:58:6b:71:96:42:fe:55:9d:73:d1:7c:00:67:69: 12:2a:07:c1:2a:f2:f5:04:97:de:b8:58:39:dd:8c: 4a:6b:b2:eb:9c:4d:5a:cc:c5:bf:f3:67:6b:cd:8f: 60:af:e8:bf:fd:76:1a:3f:db:c4:91:67:d5:f0:04: fd:a5:cf:fb:d5:2a:3c:20:dd:3a:85:20:d0:4e:39: 45:09:1b:6f:d2:75:95:e8:2f:b1:e2:44:01:65:29: 9c:4b:bd:a0:b2:da:fa:de:31:92:2b:c1:1d:d0:26: 75:8d:55:1d:a2:f6:b0:f6:a7:b1:6f:35:71:18:61: 1f:96:ec:23:2a:27:a9:00:d7:9a:e9:03:95:af:ac: 28:f5:4d:37:f7:b1:24:a3:23:a3:b7:37:25:17:37: bb:eb:0a:6e:ad:c3:bf:6b:31:50:b4:49:a8:ca:33: 56:42:98:f3:66:ac:19:83:17:33:fc:64:b9:02:34: 25:71:7f:69:4f:d0:2e:fa:81:d9:e4:15:d8:65:f8: 0d:65:2a:c2:94:9f:6c:89:30:1b:fc:31:6b:1b:e3: 15:52:8e:03:a0:49:98:b8:05:92:ba:4c:29:9e:0f: ea:f6:e8:29:ee:d5:c5:33:46:b1:ad:d5:b3:10:21: 7a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:2B:E2:9D:15:BB:23:28:A4:3B:B2:3D:5A:4A:66:74:25:E9:5D:5E X509v3 Authority Key Identifier: keyid:16:09:20:63:A2:A7:DC:60:9E:2B:6F:9C:C0:DA:F0:4F:1E:98:B9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7c363a-9ba7-4d45-83b7-60d3fe19c3bc/1/FgkgY6Kn3GCeK2-cwNrwTx6Yue0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6e:f0:76:0c:d1:bd:d7:6a:8c:f5:f3:11:9f:f7:20:69:71: dc:98:05:9c:49:5d:a8:08:2c:a9:2c:fe:c8:6f:eb:9b:a4:e6: a5:2d:49:7e:ee:76:4d:ca:6b:30:70:b8:95:48:02:0c:2c:c6: a0:b7:75:d5:9e:bd:ed:47:9a:38:b1:8a:cc:d6:ff:91:67:30: 41:40:3c:16:ec:42:8e:12:39:ce:f4:61:0d:73:ea:e3:23:1c: 47:2b:05:bd:be:50:51:e8:87:91:98:97:df:a0:ec:0b:dd:c3: 88:02:98:9b:88:a1:4b:9f:f2:c6:89:a8:b6:3a:75:16:e0:5d: 7d:ac:d1:50:5a:c5:87:86:52:67:68:b5:0f:8e:bb:85:ea:4c: 15:a0:e4:c2:a2:85:98:a4:1a:6a:e7:5a:7a:6e:26:7a:95:16: b1:bd:49:6f:79:38:fe:df:70:0b:c3:b1:e5:07:9c:b3:32:db: f9:42:44:ed:2b:b3:d7:9b:68:77:ec:8a:64:4a:3d:f1:48:61: fa:93:cc:44:1f:2f:3d:48:bc:ba:ed:1b:a1:49:19:8a:88:09: b5:12:b1:dc:11:f6:33:bd:79:32:2a:13:ab:25:58:00:f8:56: a2:ff:fa:dc:e4:dd:53:03:db:1d:46:2b:30:59:ac:a2:be:4f: 2b:37:51:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtaUW2ljL39mmbmXV3KCOddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MDkyMDYzYTJhN2RjNjA5ZTJiNmY5Y2MwZGFmMDRmMWU5 OGI5ZWQwHhcNMjUxMjI2MTEwMDQ0WhcNMjUxMjI3MTEwMDQ0WjAzMTEwLwYDVQQD Eyg5NTJiZTI5ZDE1YmIyMzI4YTQzYmIyM2Q1YTRhNjY3NDI1ZTk1ZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+KwWH47Vb/L8/AQBks0WGtxlkL+ VZ1z0XwAZ2kSKgfBKvL1BJfeuFg53YxKa7LrnE1azMW/82drzY9gr+i//XYaP9vE kWfV8AT9pc/71So8IN06hSDQTjlFCRtv0nWV6C+x4kQBZSmcS72gstr63jGSK8Ed 0CZ1jVUdovaw9qexbzVxGGEfluwjKiepANea6QOVr6wo9U0397EkoyOjtzclFze7 6wpurcO/azFQtEmoyjNWQpjzZqwZgxcz/GS5AjQlcX9pT9Au+oHZ5BXYZfgNZSrC lJ9siTAb/DFrG+MVUo4DoEmYuAWSukwpng/q9ugp7tXFM0axrdWzECF6bwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUr4p0VuyMopDuyPVpKZnQl6V1eMB8GA1UdIwQY MBaAFBYJIGOip9xgnitvnMDa8E8emLntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjct NjBkM2ZlMTljM2JjLzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy83YzM2M2EtOWJhNy00ZDQ1LTgzYjctNjBkM2ZlMTljM2Jj LzEvRmdrZ1k2S24zR0NlSzItY3dOcndUeDZZdWUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm7wdgzR vddqjPXzEZ/3IGlx3JgFnEldqAgsqSz+yG/rm6TmpS1Jfu52TcprMHC4lUgCDCzG oLd11Z697UeaOLGKzNb/kWcwQUA8FuxCjhI5zvRhDXPq4yMcRysFvb5QUeiHkZiX 36DsC93DiAKYm4ihS5/yxomotjp1FuBdfazRUFrFh4ZSZ2i1D467hepMFaDkwqKF mKQaaudaem4mepUWsb1Jb3k4/t9wC8Ox5QecszLb+UJE7Suz15tod+yKZEo98Uhh +pPMRB8vPUi8uu0boUkZiogJtRKx3BH2M715MioTqyVYAPhWov/63OTdUwPbHUYr MFmsor5PKzdRUA== -----END CERTIFICATE-----Generated at Fri Dec 26 14:17:05 2025 by rpki-client