This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft File: FNlKazCSDR96LRUXG1CPkiZkduM.mft (raw, json) Hash identifier: aZ1ZArhSJBhKzYNCmbAcQg2iEp2xEn8d2ZUkEpiYhu8= Subject key identifier: DA:CA:FE:AF:DF:6B:19:7C:83:4A:AC:3C:8F:49:97:38:76:38:B5:E9 Authority key identifier: 14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 Certificate issuer: /CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Certificate serial: 019B07B5888A172CD67AA2128A819BB33FA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft Manifest number: 16FD Signing time: Wed 10 Dec 2025 10:01:35 +0000 Manifest this update: Wed 10 Dec 2025 10:01:35 +0000 Manifest next update: Thu 11 Dec 2025 10:01:35 +0000 Files and hashes: 1: FNlKazCSDR96LRUXG1CPkiZkduM.crl (hash: FWia1bx6TqwAn4MxHkIHVFdm78RPecLqYYbv1+cbkyY=) 2: Zlb5bVUIDERXo4xdSGjVMQ8TdNA.roa (hash: stdZJ0N6TnO5P8nlAhBGBijPlJ/mbcLMM3mJJx7zrV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:07:b5:88:8a:17:2c:d6:7a:a2:12:8a:81:9b:b3:3f:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14d94a6b30920d1f7a2d15171b508f92266476e3 Validity Not Before: Dec 10 10:01:35 2025 GMT Not After : Dec 11 10:01:35 2025 GMT Subject: CN=dacafeafdf6b197c834aac3c8f4997387638b5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3f:6f:3b:a3:fa:2e:4b:73:dd:2a:99:37:01: 3e:25:27:64:8e:35:c2:c0:bf:ae:c6:7b:bd:1d:81: 0b:b5:7c:81:aa:5a:4f:6d:b7:10:53:0d:48:c6:b5: 97:0e:12:0e:2c:2e:c9:91:61:b0:d6:eb:fa:54:f1: f5:42:e2:4e:8c:55:d9:cf:53:f9:3e:dd:c4:d8:51: db:cd:8e:e3:1c:24:f3:ed:ae:41:c0:11:90:ba:49: 66:f4:78:6a:12:af:b6:99:d8:9c:8a:48:21:a7:13: a9:23:6c:c6:91:15:11:65:97:09:be:ad:4b:6a:d6: bc:b1:87:1a:c8:33:ce:85:c0:85:ab:04:9f:ee:a7: 11:88:d4:5c:ff:53:6b:a1:bb:cb:09:69:4e:e3:50: 1c:31:b2:2c:a7:46:98:f7:0b:ad:ca:76:2a:8f:4d: 2b:bb:ea:64:be:b5:1d:55:7e:4f:92:b4:49:b8:9a: c0:f9:61:d2:76:28:4a:e8:c7:15:94:6e:b1:03:f3: c6:cb:44:2d:0a:42:f8:cb:c0:32:30:dd:b9:72:ed: 6b:93:ec:9c:0c:51:94:0a:bf:aa:df:31:c9:64:42: 29:a0:c6:3f:0b:15:1c:02:4a:f8:42:62:65:53:e1: 3c:1f:88:c7:ea:87:da:49:bf:73:65:9e:ff:73:65: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CA:FE:AF:DF:6B:19:7C:83:4A:AC:3C:8F:49:97:38:76:38:B5:E9 X509v3 Authority Key Identifier: keyid:14:D9:4A:6B:30:92:0D:1F:7A:2D:15:17:1B:50:8F:92:26:64:76:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNlKazCSDR96LRUXG1CPkiZkduM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e5d5eb-ada0-4d5c-8664-f2b22c69d5fc/1/FNlKazCSDR96LRUXG1CPkiZkduM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:5e:ce:9f:2e:3c:26:ba:ae:e6:aa:6e:37:21:8b:fd:36:6d: fc:7b:74:a1:e4:4f:7b:1f:63:c0:13:d4:c4:7c:a3:34:89:c0: ed:a3:63:f7:ed:0b:44:c0:ea:94:60:37:2b:83:b6:4a:4c:e4: 67:cc:0a:31:73:cb:89:17:39:06:a8:56:88:5e:ee:bc:b4:6f: b7:70:0b:c1:8c:0c:dd:71:54:45:ba:35:ae:c2:41:c9:36:49: 77:f3:7f:b1:05:f0:df:8b:b4:46:4d:85:aa:05:6d:e8:0c:1a: 91:b5:eb:f2:13:f9:53:76:ac:71:c5:8f:9b:34:80:ee:65:7a: 0b:1e:ac:c6:56:71:89:2b:00:e3:38:38:d7:5a:1a:bb:71:56: 0d:8f:d6:ed:02:f4:07:0f:00:09:55:e3:04:c5:49:99:90:81: 8e:f6:b5:cf:6e:27:92:9f:46:ea:71:0c:40:2e:1e:c9:4d:03: cd:f5:ad:4f:11:e3:32:35:c1:94:4b:26:c3:4a:7a:9c:31:6c: aa:27:ed:e0:41:4a:d8:ef:4d:dc:05:7a:4d:1c:8c:1b:27:e7: 9b:4a:5d:4c:69:f0:99:e9:dc:ed:10:42:02:f8:2f:13:e6:93: bc:33:fe:69:fc:05:cd:65:20:a3:d5:2f:a6:1d:10:90:88:e7: d9:61:38:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsHtYiKFyzWeqISioGbsz+kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZDk0YTZiMzA5MjBkMWY3YTJkMTUxNzFiNTA4ZjkyMjY2 NDc2ZTMwHhcNMjUxMjEwMTAwMTM1WhcNMjUxMjExMTAwMTM1WjAzMTEwLwYDVQQD EyhkYWNhZmVhZmRmNmIxOTdjODM0YWFjM2M4ZjQ5OTczODc2MzhiNWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz9vO6P6Lktz3SqZNwE+JSdkjjXC wL+uxnu9HYELtXyBqlpPbbcQUw1IxrWXDhIOLC7JkWGw1uv6VPH1QuJOjFXZz1P5 Pt3E2FHbzY7jHCTz7a5BwBGQuklm9HhqEq+2mdicikghpxOpI2zGkRURZZcJvq1L ata8sYcayDPOhcCFqwSf7qcRiNRc/1NrobvLCWlO41AcMbIsp0aY9wutynYqj00r u+pkvrUdVX5PkrRJuJrA+WHSdihK6McVlG6xA/PGy0QtCkL4y8AyMN25cu1rk+yc DFGUCr+q3zHJZEIpoMY/CxUcAkr4QmJlU+E8H4jH6ofaSb9zZZ7/c2WD1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrK/q/faxl8g0qsPI9Jlzh2OLXpMB8GA1UdIwQY MBaAFBTZSmswkg0fei0VFxtQj5ImZHbjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQt ZjJiMjJjNjlkNWZjLzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS9lNWQ1ZWItYWRhMC00ZDVjLTg2NjQtZjJiMjJjNjlkNWZj LzEvRk5sS2F6Q1NEUjk2TFJVWEcxQ1BraVprZHVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPF7Ony48 Jrqu5qpuNyGL/TZt/Ht0oeRPex9jwBPUxHyjNInA7aNj9+0LRMDqlGA3K4O2Skzk Z8wKMXPLiRc5BqhWiF7uvLRvt3ALwYwM3XFURbo1rsJByTZJd/N/sQXw34u0Rk2F qgVt6AwakbXr8hP5U3asccWPmzSA7mV6Cx6sxlZxiSsA4zg411oau3FWDY/W7QL0 Bw8ACVXjBMVJmZCBjva1z24nkp9G6nEMQC4eyU0DzfWtTxHjMjXBlEsmw0p6nDFs qift4EFK2O9N3AV6TRyMGyfnm0pdTGnwmenc7RBCAvgvE+aTvDP+afwFzWUgo9Uv ph0QkIjn2WE4JA== -----END CERTIFICATE-----Generated at Wed Dec 10 18:43:39 2025 by rpki-client